last executing test programs: 14m40.035763049s ago: executing program 1 (id=4412): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) 14m39.934616811s ago: executing program 1 (id=4413): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x503942, 0x32) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000180)={0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x1000004, 0xfffffffd, 0x49, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000240)=0xf1ff) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d15, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x60441, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e008d2a00000004000000000a000000", @ANYRES32=0x0, @ANYBLOB="590f0000"], 0x1c}}, 0x0) recvmsg$kcm(r2, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x22102) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 14m38.77058189s ago: executing program 1 (id=4416): set_mempolicy(0x3, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000140)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@bh}, {@norecovery}, {@noauto_da_alloc}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nogrpid}, {@dioread_lock}, {@test_dummy_encryption}, {@noquota}]}, 0x3, 0x474, &(0x7f00000006c0)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 14m38.530664856s ago: executing program 1 (id=4418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xa, 0x2, 0x2, 0x700000000000000, 0xb, 0xffff, 0x5, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0xfff, 0x20000000009, 0x9, 0x1fd, 0x8, 0x7, 0x7, 0x5, 0x20005, 0x2, 0x4ff, 0x40, 0xfffffffffffffff9, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x8, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x2, 0x94f, 0x150b0000, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0xe, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0xdc8c, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa8, 0xba00, 0x4, 0x5, 0x0, 0x1, 0x100, 0x5, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0x5, 0xfffffffffffffffe, 0x401, 0x9, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xffe, 0x80, 0x10000003, 0xd, 0x44, 0x6, 0xffff, 0x1, 0x401, 0x4, 0x2, 0x8000000007, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 14m38.268529703s ago: executing program 1 (id=4420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x4000000000001a2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 14m35.045022241s ago: executing program 1 (id=4430): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') 14m19.932840051s ago: executing program 32 (id=4430): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') 7.142229836s ago: executing program 2 (id=7498): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0xa, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 5.7384807s ago: executing program 2 (id=7503): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) unshare(0x24020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(r5, r0) 3.790476528s ago: executing program 3 (id=7514): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118c", 0x3, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.643795411s ago: executing program 0 (id=7516): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 3.570217673s ago: executing program 3 (id=7518): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251300000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.370329298s ago: executing program 0 (id=7520): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x8, 0x400, 0x800, 0x800}) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0x0, [[0x3, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0xfffffffd], [0x2, 0xffffffff, 0x3, 0xffffffff, 0x6, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffbfffff, 0x80000003, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000900)="87a6a2d15b4ed8dbeadc3dcfa828bd1d1c000062f669d9b493765b3adfb93b35cd9e97fe90499622812cc9fc4426a35171bd2779c6e7c5431e1f99fad0f08b11ca7ebb77f6b226384e00000000000000d0b1c7597cdab403686331bfccdc63c435cb00df1a089a977afee6300969321c73712beb92b043b345d887ac374db7cb2c61a0a700d119c45d8fe1bf18cff8a18fea7683aac1d4bdea3238d080c53b2015a31b8342b2eecb29f7b3c8ac7b0ebe4f2a107c23aef2a6822d3a698df87e093846e608be06f893c95eeb4fe5d81f5188a394b36f7733", 0xd7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x31, 0xffffffffffffffff, 0x400000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.321827539s ago: executing program 3 (id=7521): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r3, &(0x7f0000003080)=""/4096, 0x1000) getdents(r3, 0x0, 0x0) 2.327092193s ago: executing program 0 (id=7522): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) setregid(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x80, &(0x7f0000000080)={[{@gid}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x3c, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r5, &(0x7f0000000080)='common_pid > 0', 0xe) 1.744553098s ago: executing program 4 (id=7524): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000000c0)="84f5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001c80)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002740)='C', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002980)="ff", 0x1}], 0x1}}], 0x5, 0x4040801) 1.294630178s ago: executing program 0 (id=7525): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) write(r1, 0x0, 0x0) 1.23137626s ago: executing program 2 (id=7526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 1.2251772s ago: executing program 4 (id=7527): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118c", 0x3, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.084458683s ago: executing program 2 (id=7528): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000003740)={0x2, 0x1, 0x5, 0xff81, 0x0, 0x81, 0x0}) 1.083605894s ago: executing program 0 (id=7529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251300000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.046047284s ago: executing program 4 (id=7530): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000f00)=[{@none}]}) 936.201167ms ago: executing program 0 (id=7531): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) 862.598059ms ago: executing program 4 (id=7532): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0xa, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 852.78998ms ago: executing program 2 (id=7533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a29bd7000fbdbdf253700000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900010800570062"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 617.532475ms ago: executing program 4 (id=7534): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 430.49197ms ago: executing program 2 (id=7535): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) unshare(0x24020400) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(r5, r0) 430.241799ms ago: executing program 3 (id=7536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 401.729361ms ago: executing program 4 (id=7537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) 303.340143ms ago: executing program 3 (id=7538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, 0xa, @in=@remote, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@broadcast, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=7539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251300000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) kernel console output (not intermixed with test programs): yspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1627.892512][ T5775] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1627.905742][ T5775] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1627.917040][ T5775] keyspan 3-1:1.0: device disconnected [ 1627.995248][T10356] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1628.190846][T10356] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1628.263676][T10356] usb 4-1: Using ep0 maxpacket: 8 [ 1628.291386][T10356] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1628.323449][T10356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1628.356603][T10356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1628.401489][T10356] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1628.442832][T10356] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1628.483710][T10356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.362224][T10356] usb 4-1: GET_CAPABILITIES returned 0 [ 1629.370830][T10356] usbtmc 4-1:16.0: can't read capabilities [ 1629.571803][T10356] usb 4-1: USB disconnect, device number 10 [ 1629.650868][ T5775] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1629.800675][ T5775] usb 3-1: device descriptor read/64, error -71 [ 1630.070692][ T5775] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1630.312016][ T5775] usb 3-1: device descriptor read/64, error -71 [ 1630.505291][ T5775] usb usb3-port1: attempt power cycle [ 1631.814425][ T5775] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1631.862703][ T5775] usb 3-1: device descriptor read/8, error -71 [ 1633.141050][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1633.640860][ T5775] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1634.230906][ T5775] usb 3-1: no configurations [ 1634.235570][ T5775] usb 3-1: can't read configurations, error -22 [ 1634.290831][ T5775] usb usb3-port1: unable to enumerate USB device [ 1634.371847][T28602] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1634.920736][T26104] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1635.113373][T26104] usb 4-1: not running at top speed; connect to a high speed hub [ 1635.124974][T26104] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1635.134480][T26104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.144750][T26104] usb 4-1: Product: syz [ 1635.148948][T26104] usb 4-1: Manufacturer: syz [ 1635.153891][T26104] usb 4-1: SerialNumber: syz [ 1635.165726][T26104] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1635.179342][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1635.193747][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1635.207247][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1635.221793][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1635.599846][ T172] usb 4-1: USB disconnect, device number 11 [ 1635.615520][ T172] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1635.631121][ T172] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1635.644479][ T172] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1635.666733][ T172] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1635.678228][ T172] keyspan 4-1:1.0: device disconnected [ 1636.149330][T28625] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1636.203443][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1637.323780][T28644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7002'. [ 1637.349469][T28644] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1637.398483][T28644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1637.407900][T28644] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1637.493812][T28648] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1637.580735][T26104] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1637.804436][T26104] usb 4-1: not running at top speed; connect to a high speed hub [ 1637.830701][T21774] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1637.834053][T26104] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1637.860556][T26104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.879067][T26104] usb 4-1: Product: syz [ 1637.888909][T26104] usb 4-1: Manufacturer: syz [ 1637.899019][T26104] usb 4-1: SerialNumber: syz [ 1637.925661][T26104] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1637.951817][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1637.981016][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1638.011896][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1638.021472][T21774] usb 3-1: no configurations [ 1638.033328][T21774] usb 3-1: can't read configurations, error -22 [ 1638.040741][T26104] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1638.214888][T21774] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1638.269095][T28657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1638.283780][T28657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1638.316078][T28657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1638.324543][T28657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1638.333981][T28657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1638.344216][T28657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1638.425196][T21774] usb 3-1: no configurations [ 1638.429848][T21774] usb 3-1: can't read configurations, error -22 [ 1638.449796][ T172] usb 4-1: USB disconnect, device number 12 [ 1638.459012][T21774] usb usb3-port1: attempt power cycle [ 1638.485332][ T172] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1638.527249][ T172] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1638.549538][ T172] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1638.578549][ T172] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1638.599418][ T172] keyspan 4-1:1.0: device disconnected [ 1638.677001][T22637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.840338][T22637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.860070][T28655] chnl_net:caif_netlink_parms(): no params data found [ 1638.880697][T21774] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1638.922792][T21774] usb 3-1: no configurations [ 1638.928769][T21774] usb 3-1: can't read configurations, error -22 [ 1638.997283][T22637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.114748][T22637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.131006][T21774] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1639.202678][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1639.211889][T28675] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1639.279442][T21774] usb 3-1: no configurations [ 1639.284278][T21774] usb 3-1: can't read configurations, error -22 [ 1639.296552][T21774] usb usb3-port1: unable to enumerate USB device [ 1639.332204][T28671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1639.415119][T28678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1639.423826][T28678] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1639.521625][T28655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.554843][T28655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.565033][T28655] bridge_slave_0: entered allmulticast mode [ 1639.575024][T28655] bridge_slave_0: entered promiscuous mode [ 1639.592136][T28655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.609614][T28655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.623513][T28655] bridge_slave_1: entered allmulticast mode [ 1639.631552][T28655] bridge_slave_1: entered promiscuous mode [ 1639.714878][T28655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.742694][T28655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.871217][T28655] team0: Port device team_slave_0 added [ 1639.890342][T28655] team0: Port device team_slave_1 added [ 1639.950033][T28655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.959442][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.000845][T28655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.045802][T28655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.053751][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.108441][T28655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.252776][T26104] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1640.351764][T28701] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1640.423753][ T5782] Bluetooth: hci0: command tx timeout [ 1640.450985][T26104] usb 4-1: Using ep0 maxpacket: 32 [ 1640.463917][T26104] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1640.499545][T26104] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1640.529858][T26104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.560483][T28655] hsr_slave_0: entered promiscuous mode [ 1640.570402][T26104] usb 4-1: Product: syz [ 1640.578687][T26104] usb 4-1: SerialNumber: syz [ 1640.612574][T28655] hsr_slave_1: entered promiscuous mode [ 1640.671454][T28655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.679098][T28655] Cannot create hsr debugfs directory [ 1640.789883][T28712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7023'. [ 1640.866276][T28712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1640.914191][T28720] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1640.976868][T28717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1640.987195][T28717] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1642.431793][T28694] futex_wake_op: syz.3.7019 tries to shift op by 144; fix this program [ 1642.468910][T28694] futex_wake_op: syz.3.7019 tries to shift op by 144; fix this program [ 1642.490233][T26104] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1642.494918][ T5782] Bluetooth: hci0: command tx timeout [ 1642.501094][T26104] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1642.582262][T26104] usb 4-1: USB disconnect, device number 13 [ 1642.640634][T10356] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1642.854290][T10356] usb 3-1: no configurations [ 1642.858911][T10356] usb 3-1: can't read configurations, error -22 [ 1642.948736][T28744] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1643.070864][T10356] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1643.265700][T22637] hsr_slave_0: left promiscuous mode [ 1643.274901][T10356] usb 3-1: no configurations [ 1643.279530][T10356] usb 3-1: can't read configurations, error -22 [ 1643.296457][T10356] usb usb3-port1: attempt power cycle [ 1643.316002][T22637] hsr_slave_1: left promiscuous mode [ 1643.325926][T22637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.340766][T22637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.358257][T22637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.365872][T22637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.391495][T22637] bridge_slave_1: left allmulticast mode [ 1643.397185][T22637] bridge_slave_1: left promiscuous mode [ 1643.410893][T22637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.452690][T22637] bridge_slave_0: left allmulticast mode [ 1643.458407][T22637] bridge_slave_0: left promiscuous mode [ 1643.479623][T22637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.607443][T22637] veth1_macvtap: left promiscuous mode [ 1643.625328][T22637] veth0_macvtap: left promiscuous mode [ 1643.638335][T22637] veth1_vlan: left promiscuous mode [ 1643.652095][T22637] veth0_vlan: left promiscuous mode [ 1643.721379][T10356] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1643.784034][T10356] usb 3-1: no configurations [ 1643.789071][T10356] usb 3-1: can't read configurations, error -22 [ 1643.950904][T10356] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1643.991225][T10356] usb 3-1: no configurations [ 1643.995882][T10356] usb 3-1: can't read configurations, error -22 [ 1644.002813][T10356] usb usb3-port1: unable to enumerate USB device [ 1644.183788][T22637] bond1 (unregistering): Released all slaves [ 1644.430318][T28778] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1644.581249][ T5782] Bluetooth: hci0: command tx timeout [ 1645.118516][T28781] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1646.398394][T22637] team0 (unregistering): Port device team_slave_1 removed [ 1646.484979][T22637] team0 (unregistering): Port device team_slave_0 removed [ 1646.652238][T22637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.661112][ T5782] Bluetooth: hci0: command tx timeout [ 1646.825094][T22637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.867766][T28803] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1647.268303][ T5761] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1647.367825][T22637] bond0 (unregistering): Released all slaves [ 1647.456881][T28763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1647.467188][T28763] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1647.483091][T28766] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1647.520857][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.598063][ T5761] usb 3-1: config 0 has no interfaces? [ 1647.615601][ T5761] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1647.639929][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.659556][ T5761] usb 3-1: config 0 descriptor?? [ 1648.605711][T10356] usb 3-1: USB disconnect, device number 51 [ 1649.078476][T28826] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7054'. [ 1649.219718][T22637] IPVS: stop unused estimator thread 0... [ 1649.353712][T21774] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1649.424647][T28655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1649.465529][T28835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1649.560693][T28835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1649.643151][T28837] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1649.667263][T28837] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1649.681058][T28655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1649.726569][T28655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1649.748665][T28655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1649.770916][T21774] usb 4-1: Using ep0 maxpacket: 16 [ 1649.817994][T21774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.863995][T21774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.901813][T21774] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1649.962800][T21774] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1650.007102][T21774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.087635][T21774] usb 4-1: config 0 descriptor?? [ 1650.090420][T28655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.204528][T28854] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1650.795109][T28655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.875039][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.882250][T15567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.954558][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.961746][T17143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.447114][T28655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.510765][ T5761] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1651.732941][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.761045][ T5761] usb 3-1: config 0 has no interfaces? [ 1651.774345][ T5761] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1651.800493][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.832042][ T5761] usb 3-1: config 0 descriptor?? [ 1652.051851][ T5761] usb 3-1: USB disconnect, device number 52 [ 1652.116257][T28655] veth0_vlan: entered promiscuous mode [ 1652.165544][T28655] veth1_vlan: entered promiscuous mode [ 1652.216805][T21774] usbhid 4-1:0.0: can't add hid device: -71 [ 1652.248584][T21774] usbhid: probe of 4-1:0.0 failed with error -71 [ 1652.264736][T21774] usb 4-1: USB disconnect, device number 14 [ 1652.276167][T28655] veth0_macvtap: entered promiscuous mode [ 1652.295812][T28655] veth1_macvtap: entered promiscuous mode [ 1652.324211][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.464092][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.486824][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.508525][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.523842][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.177630][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.248531][T28655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.282954][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.304871][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.335626][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.350495][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.360342][T28655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.390471][T28655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.498918][T28655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.576404][T28655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.616238][T28655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.636553][T28655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.645910][T28655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.660881][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7067'. [ 1654.132050][T17143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.162182][T17143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.331951][T17143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.351700][T17143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.350615][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1656.427173][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.476376][ T42] usb 4-1: config 0 has no interfaces? [ 1656.483434][T28657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1656.542386][T28657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1656.551979][T28657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1656.561344][T28657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1656.570344][T28657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1656.577863][T28657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.669837][ T42] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1656.691362][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.711884][ T42] usb 4-1: config 0 descriptor?? [ 1656.940278][ T42] usb 4-1: USB disconnect, device number 15 [ 1657.057358][T28960] chnl_net:caif_netlink_parms(): no params data found [ 1657.189000][T28960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.196600][T28960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.204077][T28960] bridge_slave_0: entered allmulticast mode [ 1657.211667][T28960] bridge_slave_0: entered promiscuous mode [ 1657.223695][T28960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.241917][T28960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.249252][T28960] bridge_slave_1: entered allmulticast mode [ 1657.259253][T28960] bridge_slave_1: entered promiscuous mode [ 1657.601559][T28960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.642191][T28960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.769318][T28960] team0: Port device team_slave_0 added [ 1657.779751][T28960] team0: Port device team_slave_1 added [ 1657.842919][T28960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.854050][T28960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.888061][T28960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.996409][T28960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.021480][T28960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.131545][T28960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.229930][T28960] hsr_slave_0: entered promiscuous mode [ 1658.236952][T28960] hsr_slave_1: entered promiscuous mode [ 1658.243424][T28960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.252153][T28960] Cannot create hsr debugfs directory [ 1658.353783][T29004] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1658.481285][T28960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.498678][T28960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.605618][T28960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.617762][T28960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.781071][T28960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.803634][T28960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.974286][T28960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.997387][T28960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.601814][T28960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1659.681678][T28960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1659.731054][T28960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1659.771137][T28960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1659.946453][T28960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.036049][T28960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.049560][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.056785][T15567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.366507][T28960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1660.377516][T28960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1660.808482][T15567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.815718][T15567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.198561][T28960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.385150][T28960] veth0_vlan: entered promiscuous mode [ 1661.419828][T28960] veth1_vlan: entered promiscuous mode [ 1661.562756][T28960] veth0_macvtap: entered promiscuous mode [ 1661.617427][T28960] veth1_macvtap: entered promiscuous mode [ 1661.717359][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.727982][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.738015][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.748731][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.758820][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.769945][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.780337][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.791025][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.803380][T28960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.818471][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.839441][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.858811][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.880541][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.900686][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.920633][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.940624][T28960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.004084][T28960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.056379][T28960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.084125][T28960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.097684][T28960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.107255][T28960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.117387][T28960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.704766][T29079] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1662.906172][T21642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.941902][T21642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.992458][T17144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.020752][T17144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.293809][T29094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.306279][T29094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.459038][T29099] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1665.164112][T29121] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1667.577166][T29152] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1668.454688][ T5775] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1668.507909][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.971329][ T5775] usb 3-1: Using ep0 maxpacket: 16 [ 1668.982804][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.000563][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.011435][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1669.024922][ T5775] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1669.035529][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.051437][ T5775] usb 3-1: config 0 descriptor?? [ 1669.313837][T29184] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1671.137065][ T5775] usbhid 3-1:0.0: can't add hid device: -71 [ 1671.149470][ T5775] usbhid: probe of 3-1:0.0 failed with error -71 [ 1671.164215][ T5775] usb 3-1: USB disconnect, device number 53 [ 1671.770768][T29207] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1672.043048][T29215] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1672.155046][T29220] FAULT_INJECTION: forcing a failure. [ 1672.155046][T29220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1672.179157][T29220] CPU: 1 PID: 29220 Comm: syz.3.7156 Not tainted syzkaller #0 [ 1672.186687][T29220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1672.196771][T29220] Call Trace: [ 1672.200078][T29220] [ 1672.203035][T29220] dump_stack_lvl+0x18c/0x250 [ 1672.207775][T29220] ? show_regs_print_info+0x20/0x20 [ 1672.213017][T29220] ? load_image+0x420/0x420 [ 1672.217563][T29220] ? __might_fault+0xaa/0x120 [ 1672.222274][T29220] ? __lock_acquire+0x7eb0/0x7eb0 [ 1672.227331][T29220] should_fail_ex+0x394/0x4c0 [ 1672.232050][T29220] _copy_from_user+0x2f/0xe0 [ 1672.236683][T29220] __sys_bpf+0x23e/0x890 [ 1672.240961][T29220] ? bpf_link_show_fdinfo+0x560/0x560 [ 1672.246371][T29220] ? lock_chain_count+0x20/0x20 [ 1672.251255][T29220] __x64_sys_bpf+0x7c/0x90 [ 1672.255701][T29220] do_syscall_64+0x55/0xb0 [ 1672.260148][T29220] ? clear_bhb_loop+0x40/0x90 [ 1672.264841][T29220] ? clear_bhb_loop+0x40/0x90 [ 1672.269537][T29220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.275461][T29220] RIP: 0033:0x7f0ebdd9e199 [ 1672.279901][T29220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.299577][T29220] RSP: 002b:00007f0ebec56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1672.308031][T29220] RAX: ffffffffffffffda RBX: 00007f0ebe025fa0 RCX: 00007f0ebdd9e199 [ 1672.316037][T29220] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1672.324043][T29220] RBP: 00007f0ebde350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1672.332072][T29220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.340079][T29220] R13: 00007f0ebe026038 R14: 00007f0ebe025fa0 R15: 00007ffc89f62208 [ 1672.348103][T29220] [ 1672.560928][ T5761] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1672.910794][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 1673.480652][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.491741][ T5761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.503193][ T5761] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1673.516732][ T5761] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1673.526111][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.589639][ T5761] usb 3-1: config 0 descriptor?? [ 1673.721385][T29242] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1673.941213][T29253] FAULT_INJECTION: forcing a failure. [ 1673.941213][T29253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1673.970843][T29253] CPU: 1 PID: 29253 Comm: syz.4.7168 Not tainted syzkaller #0 [ 1673.978365][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1673.988430][T29253] Call Trace: [ 1673.991716][T29253] [ 1673.994649][T29253] dump_stack_lvl+0x18c/0x250 [ 1673.999343][T29253] ? show_regs_print_info+0x20/0x20 [ 1674.004550][T29253] ? load_image+0x420/0x420 [ 1674.009085][T29253] ? rcu_is_watching+0x15/0xb0 [ 1674.013865][T29253] ? trace_pelt_se_tp+0x39/0x100 [ 1674.018818][T29253] should_fail_ex+0x394/0x4c0 [ 1674.023512][T29253] get_futex_key+0x136/0x1030 [ 1674.028194][T29253] ? futex_setup_timer+0xc0/0xc0 [ 1674.033133][T29253] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1674.039124][T29253] ? __lock_acquire+0x7eb0/0x7eb0 [ 1674.044156][T29253] ? lock_chain_count+0x20/0x20 [ 1674.049021][T29253] futex_wait_setup+0xbc/0x270 [ 1674.053791][T29253] ? futex_wait_multiple+0x920/0x920 [ 1674.059084][T29253] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1674.064981][T29253] ? _raw_spin_unlock+0x40/0x40 [ 1674.069839][T29253] futex_wait+0x1bc/0x5c0 [ 1674.074177][T29253] ? futex_wait_setup+0x270/0x270 [ 1674.079224][T29253] ? file_end_write+0x159/0x250 [ 1674.084090][T29253] ? vfs_write+0x5de/0x9a0 [ 1674.088513][T29253] do_futex+0x2ff/0x3e0 [ 1674.092672][T29253] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1674.098575][T29253] __se_sys_futex+0x3a9/0x440 [ 1674.103267][T29253] ? __x64_sys_futex+0xf0/0xf0 [ 1674.108036][T29253] ? __x64_sys_futex+0x21/0xf0 [ 1674.112813][T29253] do_syscall_64+0x55/0xb0 [ 1674.117240][T29253] ? clear_bhb_loop+0x40/0x90 [ 1674.121921][T29253] ? clear_bhb_loop+0x40/0x90 [ 1674.126593][T29253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1674.132494][T29253] RIP: 0033:0x7f2bb9b9e199 [ 1674.136915][T29253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.156528][T29253] RSP: 002b:00007f2bbab540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1674.164952][T29253] RAX: ffffffffffffffda RBX: 00007f2bb9e25fa8 RCX: 00007f2bb9b9e199 [ 1674.172927][T29253] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bb9e25fa8 [ 1674.180900][T29253] RBP: 00007f2bb9e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.188867][T29253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.196832][T29253] R13: 00007f2bb9e26038 R14: 00007ffe44356140 R15: 00007ffe44356228 [ 1674.204813][T29253] [ 1674.291053][T29082] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1674.652522][T29082] usb 4-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 1674.663329][T29082] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1674.852468][T29082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.974510][T29266] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1675.075796][T21774] usb 4-1: USB disconnect, device number 16 [ 1675.393408][ T5761] usbhid 3-1:0.0: can't add hid device: -71 [ 1675.401766][ T5761] usbhid: probe of 3-1:0.0 failed with error -71 [ 1675.444487][ T5761] usb 3-1: USB disconnect, device number 54 [ 1676.020631][T15712] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1676.128961][T29291] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1676.196089][T29294] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1676.212805][T15712] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1676.230754][T15712] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1676.253176][T15712] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1676.270571][T15712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.288909][T15712] usb 3-1: Product: syz [ 1676.293772][T15712] usb 3-1: Manufacturer: syz [ 1676.298402][T15712] usb 3-1: SerialNumber: syz [ 1676.319870][T15712] rtl8150 3-1:1.0: couldn't find required endpoints [ 1676.337264][T15712] rtl8150: probe of 3-1:1.0 failed with error -5 [ 1676.497416][T29302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.509715][T29302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.525887][T15712] usb 3-1: USB disconnect, device number 55 [ 1676.950974][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1677.153253][ T5761] usb 4-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 1677.175654][ T5761] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1677.185059][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.408439][ T5761] usb 4-1: USB disconnect, device number 17 [ 1678.076084][T29322] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1678.654350][T29335] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1679.000556][ T5761] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1679.220796][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 1679.238779][ T5761] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 1679.270551][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1679.280293][ T5761] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1679.297946][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.307479][ T5761] usb 3-1: Product: syz [ 1679.316462][ T5761] usb 3-1: Manufacturer: syz [ 1679.326828][ T5761] usb 3-1: SerialNumber: syz [ 1679.342180][ T5761] usb 3-1: config 0 descriptor?? [ 1679.362139][ T5761] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1679.584014][ T5761] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1679.622998][ T5761] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1679.801811][T29339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.812389][T29339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.822874][T29339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.834631][T29339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.845472][T21774] usb 3-1: USB disconnect, device number 56 [ 1679.877804][T29347] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1680.129798][ T5761] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1680.258845][T29353] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1680.919927][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1680.952980][ T5761] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1680.972474][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.981181][ T5761] usb 4-1: Product: syz [ 1680.985525][ T5761] usb 4-1: Manufacturer: syz [ 1680.990836][ T5761] usb 4-1: SerialNumber: syz [ 1681.001723][ T5761] usb 4-1: config 0 descriptor?? [ 1681.014370][ T5761] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 018 [ 1681.554884][ T5761] (null): failure reading functionality [ 1681.670742][T21774] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1681.693948][ T5761] i2c i2c-1: connected i2c-tiny-usb device [ 1681.951666][ T5761] usb 4-1: USB disconnect, device number 18 [ 1682.008014][T29359] syz.0.7206 (29359): drop_caches: 2 [ 1682.140550][T21774] usb 3-1: Using ep0 maxpacket: 16 [ 1682.150343][T21774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.164265][T21774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.558398][T29372] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1682.907279][T21774] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1682.920665][T21774] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1682.996568][T21774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.021642][T21774] usb 3-1: config 0 descriptor?? [ 1683.034661][T29376] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1683.250953][T29381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.282193][T29381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.311383][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7215'. [ 1683.327674][T29381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.351199][T29381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.383065][T29381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.431968][T29381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.833102][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1683.845671][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1683.869561][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1683.880178][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1683.896627][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1683.906036][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1684.063775][T29394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.075519][T29394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.098774][T29070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.215106][T29070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.308408][T29070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.454012][T29070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.508955][T29391] chnl_net:caif_netlink_parms(): no params data found [ 1684.642691][T21774] usbhid 3-1:0.0: can't add hid device: -71 [ 1684.649519][T21774] usbhid: probe of 3-1:0.0 failed with error -71 [ 1684.688905][T21774] usb 3-1: USB disconnect, device number 57 [ 1684.842322][T29410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1684.923062][T29391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.951239][T29391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.978663][T29391] bridge_slave_0: entered allmulticast mode [ 1685.072443][T29391] bridge_slave_0: entered promiscuous mode [ 1685.111146][T29391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.139070][T29391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.150834][T29391] bridge_slave_1: entered allmulticast mode [ 1685.163315][T29391] bridge_slave_1: entered promiscuous mode [ 1685.180050][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1685.240610][T21774] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1685.252777][T29391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.283175][T29391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.294603][T29417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.321148][T29417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.321601][T29070] tipc: Left network mode [ 1685.369778][T29417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.393837][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7225'. [ 1685.416117][T29417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.434176][T29391] team0: Port device team_slave_0 added [ 1685.437504][T21774] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1685.470857][T29417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.487943][T21774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.525229][T29417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.534335][T21774] usb 3-1: Product: syz [ 1685.550654][T21774] usb 3-1: Manufacturer: syz [ 1685.555327][T21774] usb 3-1: SerialNumber: syz [ 1685.614156][T21774] usb 3-1: config 0 descriptor?? [ 1685.634999][T21774] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1685.648721][T21774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1685.684593][T29391] team0: Port device team_slave_1 added [ 1685.691461][T21774] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1685.711444][T21774] usb 3-1: media controller created [ 1685.779940][T21774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1685.794980][T29391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.802842][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.841082][T29409] dvb-usb: bulk message failed: -22 (7/0) [ 1685.860224][T29391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.913073][T29391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.920074][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.968052][T21774] DVB: Unable to find symbol mt352_attach() [ 1685.988197][T29391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.011206][T28657] Bluetooth: hci3: command tx timeout [ 1686.023524][T21774] DVB: Unable to find symbol nxt6000_attach() [ 1686.041680][T21774] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1686.073082][T21774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 1686.138205][T21774] dvb-usb: schedule remote query interval to 1000 msecs. [ 1686.161550][T21774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1686.214608][T21774] dvb-usb: bulk message failed: -22 (7/0) [ 1686.220405][T21774] dvb-usb: bulk message failed: -22 (7/0) [ 1686.256451][T29439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.265255][T21774] usb 3-1: USB disconnect, device number 58 [ 1686.308140][T29439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.386200][T29391] hsr_slave_0: entered promiscuous mode [ 1686.404641][T21774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1686.427492][T29391] hsr_slave_1: entered promiscuous mode [ 1686.480825][T29391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1686.485483][T29444] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1686.510799][T29391] Cannot create hsr debugfs directory [ 1686.986573][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1687.509599][T29070] hsr_slave_0: left promiscuous mode [ 1687.519265][T29070] hsr_slave_1: left promiscuous mode [ 1687.526184][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1687.536583][T29070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.545499][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1687.553555][T29070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1687.562040][T29070] bridge_slave_1: left allmulticast mode [ 1687.568188][T29070] bridge_slave_1: left promiscuous mode [ 1687.574696][T29070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.584501][T29070] bridge_slave_0: left allmulticast mode [ 1687.590251][T29070] bridge_slave_0: left promiscuous mode [ 1687.596544][T29070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.658025][T29070] veth1_macvtap: left promiscuous mode [ 1687.663998][T29070] veth0_macvtap: left promiscuous mode [ 1687.670048][T29070] veth1_vlan: left promiscuous mode [ 1687.675907][T29070] veth0_vlan: left promiscuous mode [ 1688.041907][T29070] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1688.056784][T29070] bond4 (unregistering): Released all slaves [ 1688.094008][T28657] Bluetooth: hci3: command tx timeout [ 1688.382161][T29070] bond3 (unregistering): Released all slaves [ 1689.160016][T29070] bond2 (unregistering): (slave lo): Releasing backup interface [ 1689.168477][T29070] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1689.180079][T29070] lo (unregistering): left promiscuous mode [ 1689.186961][T29070] bond2 (unregistering): Released all slaves [ 1689.500820][T29070] bond1 (unregistering): Released all slaves [ 1690.175318][T28657] Bluetooth: hci3: command tx timeout [ 1690.206111][T29492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7242'. [ 1690.447969][T29500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.458484][T29500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.985740][T29070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.073614][T29509] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1691.122767][T29070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.655261][T29070] bond0 (unregistering): Released all slaves [ 1692.172899][T15712] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1692.263161][T28657] Bluetooth: hci3: command tx timeout [ 1692.411934][T15712] usb 3-1: Using ep0 maxpacket: 8 [ 1692.443342][T15712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 1692.469801][T15712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1692.503142][T15712] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1692.540615][T15712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.548661][T15712] usb 3-1: Product: syz [ 1692.568655][T15712] usb 3-1: Manufacturer: syz [ 1692.580725][T15712] usb 3-1: SerialNumber: syz [ 1692.607109][T15712] usb 3-1: config 0 descriptor?? [ 1692.619936][T29070] IPVS: stop unused estimator thread 0... [ 1692.633916][T29391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1692.654970][T15712] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1692.687878][T29391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1692.726045][T29391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1692.756230][T29391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1692.883895][T15712] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1692.916796][T15712] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1692.977425][T29070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.089735][T29513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.116581][T29070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.127958][T29513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.150362][T29513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.166957][T29513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.185753][T29082] usb 3-1: USB disconnect, device number 59 [ 1693.280382][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1693.292051][T29070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.314621][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1693.323683][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1693.334250][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1693.343434][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1693.351214][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1693.421367][T29070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.514711][T29391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.640421][T29391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.665436][T29536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7252'. [ 1693.688802][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.696032][T17145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.877408][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.884632][T17145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.450743][T29528] chnl_net:caif_netlink_parms(): no params data found [ 1694.572066][T29565] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1695.174679][T29573] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1695.268074][T29577] jffs2: notice: (29577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1695.451525][ T5782] Bluetooth: hci0: command tx timeout [ 1695.621431][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1695.747145][T29391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.841138][ T42] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1695.873083][T29528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.880415][T29528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.898296][T29528] bridge_slave_0: entered allmulticast mode [ 1695.912761][T29528] bridge_slave_0: entered promiscuous mode [ 1695.931731][T29528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.949550][T29528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.963732][T29528] bridge_slave_1: entered allmulticast mode [ 1695.987488][T29528] bridge_slave_1: entered promiscuous mode [ 1696.002329][T29600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.029365][T29600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.037874][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1696.054542][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.066119][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.076343][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1696.089372][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1696.110558][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.116996][T29528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.136085][ T42] usb 3-1: config 0 descriptor?? [ 1696.139449][T29528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.358092][T29528] team0: Port device team_slave_0 added [ 1696.403398][T29528] team0: Port device team_slave_1 added [ 1696.558753][T29391] veth0_vlan: entered promiscuous mode [ 1696.618764][T29528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.638719][T29528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.689438][T29528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.729334][T29528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.754999][T29528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.806567][T29528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.852348][T29070] hsr_slave_0: left promiscuous mode [ 1696.864142][T29070] hsr_slave_1: left promiscuous mode [ 1696.880863][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.888669][T29070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.909348][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.919195][T29070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.936632][T29070] bridge_slave_1: left allmulticast mode [ 1696.951715][T29070] bridge_slave_1: left promiscuous mode [ 1696.968871][T29070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.997829][T29070] bridge_slave_0: left allmulticast mode [ 1697.028493][T29070] bridge_slave_0: left promiscuous mode [ 1697.051776][T29070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.255392][T29070] veth1_macvtap: left promiscuous mode [ 1697.305675][T29070] veth0_macvtap: left promiscuous mode [ 1697.377716][T29070] veth1_vlan: left promiscuous mode [ 1697.446473][T29070] veth0_vlan: left promiscuous mode [ 1697.532598][ T5782] Bluetooth: hci0: command tx timeout [ 1698.230831][T29636] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1698.905692][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1698.912661][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1698.921694][ T42] usb 3-1: USB disconnect, device number 60 [ 1699.615156][ T5782] Bluetooth: hci0: command tx timeout [ 1699.749295][T29646] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1699.959684][T29651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1700.600757][T10356] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1700.812294][T10356] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 1700.821556][T10356] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1700.836431][T10356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.849828][T10356] usb 3-1: config 0 has no interfaces? [ 1700.859982][T10356] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1700.869610][T10356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.889458][T10356] usb 3-1: config 0 descriptor?? [ 1701.123112][ T42] usb 3-1: USB disconnect, device number 61 [ 1701.181468][T29662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.193935][T29662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.287509][T29070] team0 (unregistering): Port device team_slave_1 removed [ 1701.351059][T29070] team0 (unregistering): Port device team_slave_0 removed [ 1701.416548][T29070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.491349][T29070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.691554][ T5782] Bluetooth: hci0: command tx timeout [ 1702.053444][T29070] bond0 (unregistering): Released all slaves [ 1702.240061][T29528] hsr_slave_0: entered promiscuous mode [ 1702.247291][T29528] hsr_slave_1: entered promiscuous mode [ 1702.255563][T29528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1702.263581][T29528] Cannot create hsr debugfs directory [ 1702.271855][T29391] veth1_vlan: entered promiscuous mode [ 1702.417666][T29673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1702.460327][T29391] veth0_macvtap: entered promiscuous mode [ 1702.525026][T29391] veth1_macvtap: entered promiscuous mode [ 1702.700373][T29678] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1703.357569][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.381136][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.400712][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.421256][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.440667][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.460288][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.487366][T29391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.563808][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.597329][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.627669][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.659975][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.675153][T29391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.714750][T29391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.728767][T29391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.764157][T29391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.206296][T29695] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1704.240787][T29391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.285235][T29391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.303803][T29391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.070323][T29701] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1705.168544][T29704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.226648][T29704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.285506][T29704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.325745][T29704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.370251][T17150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.399742][T17150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.371882][T15564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.383258][T29716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1706.399084][T15564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.709407][T29730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.758368][T29730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.799513][T29528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1706.853751][T29528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1707.411791][T29737] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1707.463768][T29528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1707.560220][T29528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1707.787266][T29528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.818752][T29528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.842199][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.849401][T17150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.879995][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.887237][T17149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.951167][T29705] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1707.976317][T29528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1708.141163][T29705] usb 4-1: Using ep0 maxpacket: 8 [ 1708.152686][T29705] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 1708.182712][T29705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1708.202265][T29705] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1708.214056][T29705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.222483][T29705] usb 4-1: Product: syz [ 1708.227165][T29705] usb 4-1: Manufacturer: syz [ 1708.232253][T29705] usb 4-1: SerialNumber: syz [ 1708.239914][T29705] usb 4-1: config 0 descriptor?? [ 1708.267362][T29705] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1708.338050][T29759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1708.375913][T29528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.478992][T29705] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1708.524610][T29705] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1708.689773][T29746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.722921][T29746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.759551][T29705] usb 4-1: USB disconnect, device number 19 [ 1708.939665][T29528] veth0_vlan: entered promiscuous mode [ 1708.958905][T29528] veth1_vlan: entered promiscuous mode [ 1708.990604][T15712] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1709.045102][T29528] veth0_macvtap: entered promiscuous mode [ 1709.077546][T29528] veth1_macvtap: entered promiscuous mode [ 1709.142231][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.163436][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.181915][T15712] usb 3-1: not running at top speed; connect to a high speed hub [ 1709.184642][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.194600][T15712] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1709.204983][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.218367][T15712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.242862][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.243865][T15712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1709.261154][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.283942][T15712] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1709.307211][T15712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.330544][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.337167][T15712] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1709.354813][T15712] usb 3-1: No valid video chain found. [ 1709.368232][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.394934][T29528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1709.435617][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.459685][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.474219][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.497332][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.510620][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.545560][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.565936][T29528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.581117][ T5812] usb 3-1: USB disconnect, device number 62 [ 1709.586773][T29528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.618373][T29528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.644435][T29528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.654784][T29528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.675018][T29528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.707541][T29528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.010591][T29803] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1711.241054][T17144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.249060][T17144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.307359][T29070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.331020][T29070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.577812][T29816] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1712.707036][T29840] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1713.525368][T29855] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28960] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[29855] [ 1714.409900][T29864] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1715.473731][T29869] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1715.870601][T10356] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1716.680581][T10356] usb 3-1: Using ep0 maxpacket: 32 [ 1717.522512][T10356] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1717.548434][T10356] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1717.730705][T10356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.131444][T29897] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1718.188974][T29899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.197603][T10356] usb 3-1: Product: syz [ 1718.199913][T29899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.209749][T10356] usb 3-1: SerialNumber: syz [ 1718.864547][T29903] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1719.052644][T10356] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1719.070715][T10356] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1719.132361][T10356] usb 3-1: USB disconnect, device number 63 [ 1719.190246][T28155] udevd[28155]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1720.032412][T29915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7337'. [ 1720.250729][ T5782] Bluetooth: hci0: command 0x0401 tx timeout [ 1720.368829][T29915] team0: Port device team_slave_0 removed [ 1721.919104][T29936] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1722.202119][T29945] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1723.221805][T29953] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1723.290616][ T5782] Bluetooth: hci0: command 0x0401 tx timeout [ 1724.674137][T29969] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1724.691113][T29970] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1725.049111][T29069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.080766][T29981] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1725.259314][T29069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.538922][T29992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1726.601969][T28657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1726.626364][T29069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.640162][T28657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1726.649329][T28657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1726.664885][T28657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1726.673282][T28657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1726.682559][T28657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1726.814766][T29069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.157583][T30003] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1727.650774][ T42] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1727.778022][T29994] chnl_net:caif_netlink_parms(): no params data found [ 1727.787117][T28657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1727.802762][T28657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1727.815064][T28657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1727.824832][T28657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1727.833010][T28657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1727.840337][T28657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1727.860699][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1727.892906][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1727.915072][ T42] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1727.936611][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.955013][ T42] usb 3-1: Product: syz [ 1727.975269][ T42] usb 3-1: SerialNumber: syz [ 1728.194562][T29994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.212504][T29994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.241177][T29994] bridge_slave_0: entered allmulticast mode [ 1728.274759][T29994] bridge_slave_0: entered promiscuous mode [ 1728.350240][T29994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.363346][T29994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.380951][T29994] bridge_slave_1: entered allmulticast mode [ 1728.412905][T29994] bridge_slave_1: entered promiscuous mode [ 1728.588674][T29994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.663520][T30011] futex_wake_op: syz.2.7369 tries to shift op by 144; fix this program [ 1728.680919][T30011] futex_wake_op: syz.2.7369 tries to shift op by 144; fix this program [ 1728.730691][ T5782] Bluetooth: hci0: command tx timeout [ 1728.735414][ T42] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1728.749010][T29994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.781006][ T42] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1728.858695][ T42] usb 3-1: USB disconnect, device number 64 [ 1728.955211][T29994] team0: Port device team_slave_0 added [ 1728.967626][T29994] team0: Port device team_slave_1 added [ 1729.200373][T29994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.230511][T29994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.266206][T29994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.283116][T29994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.309807][T29994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.492352][T29994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.948298][ T5782] Bluetooth: hci3: command tx timeout [ 1729.965133][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.233229][T29994] hsr_slave_0: entered promiscuous mode [ 1730.245430][T29994] hsr_slave_1: entered promiscuous mode [ 1730.256007][T29994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1730.398936][T29994] Cannot create hsr debugfs directory [ 1730.433532][T30054] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1730.539435][T29069] hsr_slave_0: left promiscuous mode [ 1730.772832][T29069] hsr_slave_1: left promiscuous mode [ 1730.786135][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1730.820585][T29069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.820843][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1731.582011][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.623239][T29069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.667134][T29069] bridge_slave_1: left allmulticast mode [ 1731.680914][T29069] bridge_slave_1: left promiscuous mode [ 1731.686795][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.823924][T29069] bridge_slave_0: left allmulticast mode [ 1731.840493][T29069] bridge_slave_0: left promiscuous mode [ 1731.846749][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.083144][ T5782] Bluetooth: hci3: command tx timeout [ 1732.873240][T30082] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1733.319604][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1733.417596][T30084] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1733.951014][T29069] veth1_macvtap: left promiscuous mode [ 1733.972812][T29069] veth0_macvtap: left promiscuous mode [ 1734.001408][T29069] veth1_vlan: left promiscuous mode [ 1734.048712][T29069] veth0_vlan: left promiscuous mode [ 1734.102463][ T5782] Bluetooth: hci3: command tx timeout [ 1735.371532][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1736.180914][ T5782] Bluetooth: hci3: command tx timeout [ 1736.388260][T30106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.404644][T30106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.013867][T30106] futex_wake_op: syz.0.7385 tries to shift op by 144; fix this program [ 1737.036410][T30106] futex_wake_op: syz.0.7385 tries to shift op by 144; fix this program [ 1737.429496][T29069] team0 (unregistering): Port device team_slave_1 removed [ 1737.450682][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1737.528362][T29069] team0 (unregistering): Port device team_slave_0 removed [ 1737.708226][T30117] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1738.307421][T30121] syz.2.7389 (30121): drop_caches: 2 [ 1738.749021][T29069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.171914][T29069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.475834][T10356] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1739.679518][T10356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.707863][T10356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.718120][T10356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1739.731217][T10356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1739.754719][T10356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.779665][T10356] usb 3-1: config 0 descriptor?? [ 1739.787490][T29069] bond0 (unregistering): Released all slaves [ 1740.138526][T30018] chnl_net:caif_netlink_parms(): no params data found [ 1740.227979][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.260625][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.268085][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.331153][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.338639][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.380712][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.388165][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.427138][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.450606][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.458076][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.481089][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.488550][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.520511][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.528071][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.581023][T10356] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1740.624950][T10356] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 1740.681086][T10356] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1740.735335][T10356] usb 3-1: USB disconnect, device number 65 [ 1740.860140][T30018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.889958][T30018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.917282][T30144] fido_id[30144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1740.932640][T30018] bridge_slave_0: entered allmulticast mode [ 1740.939978][T30018] bridge_slave_0: entered promiscuous mode [ 1741.274210][T30018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.318730][T30018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.340969][T30018] bridge_slave_1: entered allmulticast mode [ 1741.348381][T30018] bridge_slave_1: entered promiscuous mode [ 1741.493983][T30018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1741.555174][T30018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.699318][T30018] team0: Port device team_slave_0 added [ 1741.738243][T30018] team0: Port device team_slave_1 added [ 1741.947700][T29069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.986182][T30018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.009372][T28657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1742.023995][T30018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.030833][T28657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1742.080573][T30018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.096271][T28657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1742.106163][T30018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.116815][T30018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.144029][T30018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.161829][T28657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1742.175603][T28657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1742.187949][T28657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1742.262918][T29069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.434588][T29069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.659508][T30170] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1743.157328][T30175] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1743.365728][T29069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.446464][T30018] hsr_slave_0: entered promiscuous mode [ 1743.499197][T30018] hsr_slave_1: entered promiscuous mode [ 1743.539029][T30018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1743.568017][T30018] Cannot create hsr debugfs directory [ 1743.952030][T29994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1743.993882][T29994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1744.005313][T29994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1744.016133][T29994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1744.020656][ T5775] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1744.099432][T29069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.220659][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 1744.241550][ T5775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1744.242992][T29069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.253908][ T5775] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1744.272268][ T5782] Bluetooth: hci2: command tx timeout [ 1744.291540][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.320783][ T5775] usb 3-1: Product: syz [ 1744.325019][ T5775] usb 3-1: SerialNumber: syz [ 1744.386050][T29069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.407553][T30156] chnl_net:caif_netlink_parms(): no params data found [ 1744.510131][T29069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.791548][T30156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.811160][T30156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.839063][T30156] bridge_slave_0: entered allmulticast mode [ 1744.872150][T30156] bridge_slave_0: entered promiscuous mode [ 1744.885461][T30156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.911005][T30156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.918314][T30156] bridge_slave_1: entered allmulticast mode [ 1744.945195][T30156] bridge_slave_1: entered promiscuous mode [ 1745.124331][T30156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.205342][T30156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.407547][T30182] futex_wake_op: syz.2.7399 tries to shift op by 144; fix this program [ 1745.451190][T30182] futex_wake_op: syz.2.7399 tries to shift op by 144; fix this program [ 1745.487104][ T5775] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1745.516826][ T5775] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1745.560756][ T5775] usb 3-1: USB disconnect, device number 66 [ 1745.621933][T30130] udevd[30130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1745.753844][T30156] team0: Port device team_slave_0 added [ 1745.783316][T29994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.865467][T30156] team0: Port device team_slave_1 added [ 1746.183710][T30156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.201980][T30156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.254229][T30156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.273227][T30156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.280219][T30156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.319726][T30156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.340501][ T5782] Bluetooth: hci2: command tx timeout [ 1746.413487][T29994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.685705][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.692909][T17149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.878546][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.885773][T17139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.129883][T30156] hsr_slave_0: entered promiscuous mode [ 1747.139071][T30156] hsr_slave_1: entered promiscuous mode [ 1747.155036][T30156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1747.170682][T30156] Cannot create hsr debugfs directory [ 1747.592888][T30018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1747.639705][T30018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1747.652228][T30018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1747.678838][T30018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1748.410909][T28657] Bluetooth: hci2: command tx timeout [ 1748.411834][T21318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1748.431703][T21318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1748.441962][T21318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1748.455730][T21318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1748.465836][T21318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1748.473490][T21318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1748.602202][T29994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.795324][T29069] hsr_slave_0: left promiscuous mode [ 1748.803336][T29069] hsr_slave_1: left promiscuous mode [ 1748.809149][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.817479][T29069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.827994][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.835602][T29069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.843615][T29069] bridge_slave_1: left allmulticast mode [ 1748.849278][T29069] bridge_slave_1: left promiscuous mode [ 1748.855083][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.864879][T29069] bridge_slave_0: left allmulticast mode [ 1748.870922][T29069] bridge_slave_0: left promiscuous mode [ 1748.876599][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.891755][T29069] hsr_slave_0: left promiscuous mode [ 1748.897588][T29069] hsr_slave_1: left promiscuous mode [ 1748.907307][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.915108][T29069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.923316][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.930830][T29069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.938608][T29069] bridge_slave_1: left allmulticast mode [ 1748.944411][T29069] bridge_slave_1: left promiscuous mode [ 1748.950063][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.961487][T29069] bridge_slave_0: left allmulticast mode [ 1748.967152][T29069] bridge_slave_0: left promiscuous mode [ 1748.973390][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.039246][T29069] veth1_macvtap: left promiscuous mode [ 1749.044866][T29069] veth0_macvtap: left promiscuous mode [ 1749.050549][T29069] veth1_vlan: left promiscuous mode [ 1749.055906][T29069] veth0_vlan: left promiscuous mode [ 1749.066152][T29069] veth1_macvtap: left promiscuous mode [ 1749.071809][T29069] veth0_macvtap: left promiscuous mode [ 1749.077380][T29069] veth1_vlan: left promiscuous mode [ 1749.082737][T29069] veth0_vlan: left promiscuous mode [ 1750.075832][T29069] team0 (unregistering): Port device team_slave_1 removed [ 1750.148164][T29069] team0 (unregistering): Port device team_slave_0 removed [ 1750.209563][T29069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1750.281367][T29069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.498155][ T5782] Bluetooth: hci2: command tx timeout [ 1750.503819][T21318] Bluetooth: hci1: command tx timeout [ 1750.775659][T29069] bond0 (unregistering): Released all slaves [ 1751.596241][T29069] team0 (unregistering): Port device team_slave_1 removed [ 1751.672428][T29069] team0 (unregistering): Port device team_slave_0 removed [ 1751.749448][T29069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.835114][T29069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.400704][T29069] bond0 (unregistering): Released all slaves [ 1752.572659][ T5782] Bluetooth: hci1: command tx timeout [ 1752.754264][T30018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.878442][T30018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.015161][T29066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.022356][T29066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.269407][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.276633][T17145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.436711][T30270] chnl_net:caif_netlink_parms(): no params data found [ 1753.475177][T30156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1753.551161][T30156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1753.564477][T30156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1753.593045][T30156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1753.676510][T30270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.689518][T30270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.697133][T30270] bridge_slave_0: entered allmulticast mode [ 1753.704928][T30270] bridge_slave_0: entered promiscuous mode [ 1753.718733][T30270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.726011][T30270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.733368][T30270] bridge_slave_1: entered allmulticast mode [ 1753.740987][T30270] bridge_slave_1: entered promiscuous mode [ 1753.771165][T30270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.802223][T29994] veth0_vlan: entered promiscuous mode [ 1753.820067][T30270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.839764][T29994] veth1_vlan: entered promiscuous mode [ 1753.917198][T30270] team0: Port device team_slave_0 added [ 1753.942716][T30270] team0: Port device team_slave_1 added [ 1754.023154][T30270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.030148][T30270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.073754][T30270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.109784][T30270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.124667][T30270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.155788][T30270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.183732][T29994] veth0_macvtap: entered promiscuous mode [ 1754.263874][T30270] hsr_slave_0: entered promiscuous mode [ 1754.273927][T30270] hsr_slave_1: entered promiscuous mode [ 1754.293520][T30270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1754.310495][T30270] Cannot create hsr debugfs directory [ 1754.364644][T29069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.393272][T30156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.405541][T29994] veth1_macvtap: entered promiscuous mode [ 1754.455800][T29069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.517089][T29994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.527892][T29994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.538503][T29994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1754.549045][T29994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.560093][T29994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.597228][T29069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.651111][ T5782] Bluetooth: hci1: command tx timeout [ 1754.679070][T29069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.698063][T29994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.711878][T29994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.721929][T29994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1754.733798][T29994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.746647][T29994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.771158][T30018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.786056][T30156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.829279][T29994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.849228][T29994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.864594][T29994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.873576][T29994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.932379][T21642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.939533][T21642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.952735][T21642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.959846][T21642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.348702][T17149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.380697][T17149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.588222][T30018] veth0_vlan: entered promiscuous mode [ 1755.681228][T30018] veth1_vlan: entered promiscuous mode [ 1755.726249][T17150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.734510][T17150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.978318][T30018] veth0_macvtap: entered promiscuous mode [ 1756.093669][T30018] veth1_macvtap: entered promiscuous mode [ 1756.181233][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.195191][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.205928][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.216672][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.226911][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1756.237546][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.256635][T30018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.343191][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.354432][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.364989][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.375623][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.386763][T30018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.397783][T30018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.410252][T30018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.464224][T30156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.491979][T30018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.502803][T30018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.513511][T30018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.522712][T30018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.713361][T30270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1756.731573][ T5782] Bluetooth: hci1: command tx timeout [ 1756.757261][T30270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1756.769833][T30270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1756.782998][T30270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1757.023840][T30156] veth0_vlan: entered promiscuous mode [ 1757.046645][T29069] hsr_slave_0: left promiscuous mode [ 1757.054737][T29069] hsr_slave_1: left promiscuous mode [ 1757.061485][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1757.069087][T29069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1757.077688][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1757.085413][T29069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.094456][T29069] bridge_slave_1: left allmulticast mode [ 1757.100202][T29069] bridge_slave_1: left promiscuous mode [ 1757.107103][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.115990][T29069] bridge_slave_0: left allmulticast mode [ 1757.121923][T29069] bridge_slave_0: left promiscuous mode [ 1757.127671][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.173482][T29069] veth1_macvtap: left promiscuous mode [ 1757.179062][T29069] veth0_macvtap: left promiscuous mode [ 1757.185017][T29069] veth1_vlan: left promiscuous mode [ 1757.190462][T29069] veth0_vlan: left promiscuous mode [ 1757.501583][T29069] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1757.512720][T29069] bond7 (unregistering): Released all slaves [ 1757.690706][T29069] bond6 (unregistering): Released all slaves [ 1757.876723][T29069] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1757.887419][T29069] bond5 (unregistering): Released all slaves [ 1758.087019][T29069] bond4 (unregistering): Released all slaves [ 1758.279492][T29069] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1758.289684][T29069] bond3 (unregistering): Released all slaves [ 1758.504626][T29069] bond2 (unregistering): Released all slaves [ 1758.532095][T29069] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1758.540198][T29069] bridge1 (unregistering): left promiscuous mode [ 1758.719324][T29069] bond1 (unregistering): Released all slaves [ 1759.042859][T29069] team0 (unregistering): Port device vlan0 removed [ 1759.472720][T29069] team0 (unregistering): Port device team_slave_1 removed [ 1759.543891][T29069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.609823][T29069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.247759][T30335] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1760.687942][T29069] bond0 (unregistering): Released all slaves [ 1760.781601][T28824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.782548][T30156] veth1_vlan: entered promiscuous mode [ 1760.795411][T28824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.975306][T30339] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1761.173041][T17149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.206640][T17149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.408757][T30156] veth0_macvtap: entered promiscuous mode [ 1761.500333][T30156] veth1_macvtap: entered promiscuous mode [ 1761.656178][T30270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.700105][T29069] IPVS: stop unused estimator thread 0... [ 1761.760962][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.782439][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.819817][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.835601][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.860545][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.877013][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.915762][T30156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.928366][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.940037][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.954325][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.965958][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.979924][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.992559][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.022827][T30156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1762.049854][T30270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.097573][T30156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.120772][T30156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.129526][T30156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.151105][T30156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.206935][T28824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.214161][T28824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.858330][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1762.941437][T30355] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1763.076087][T28824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.083304][T28824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.802154][T30363] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1763.910406][T29069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.035926][T29069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.199180][T15564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.226177][T15564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.343597][T29069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.449644][T29066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.459215][T29066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.516918][T29069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.728565][T21318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1764.762640][T21318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1764.774944][T21318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1764.786856][T21318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1764.798306][T21318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1764.810711][T21318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1764.848748][T30270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1765.445203][T30381] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1765.518136][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1765.636271][T30270] veth0_vlan: entered promiscuous mode [ 1765.653553][T30270] veth1_vlan: entered promiscuous mode [ 1765.925151][T30270] veth0_macvtap: entered promiscuous mode [ 1766.001298][T30270] veth1_macvtap: entered promiscuous mode [ 1766.059896][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.111502][T30398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.120112][T30398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.128746][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.157762][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.184678][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.220722][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.231605][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.241995][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1766.252914][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.264721][T30270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.353209][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.375843][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.386518][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.412667][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.430837][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.450657][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.470910][T30270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1766.492853][T30270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1766.505170][T30270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.617077][T30398] futex_wake_op: syz.0.7422 tries to shift op by 144; fix this program [ 1766.633494][T30398] futex_wake_op: syz.0.7422 tries to shift op by 144; fix this program [ 1766.648269][T30270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.663699][T30270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.673153][T30270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.682105][T30270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.891339][ T5782] Bluetooth: hci3: command tx timeout [ 1766.983450][T30375] chnl_net:caif_netlink_parms(): no params data found [ 1767.094920][T15564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.142675][T15564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.488398][T28824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.519365][T28824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.181762][T30375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.209491][T30375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.236679][T30375] bridge_slave_0: entered allmulticast mode [ 1768.266252][T30375] bridge_slave_0: entered promiscuous mode [ 1768.288083][T30375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.463982][T30375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.858873][T30441] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1768.896085][T30375] bridge_slave_1: entered allmulticast mode [ 1768.914463][T30375] bridge_slave_1: entered promiscuous mode [ 1769.031378][T30439] FAULT_INJECTION: forcing a failure. [ 1769.031378][T30439] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.044224][ T5782] Bluetooth: hci3: command tx timeout [ 1769.102091][T29069] hsr_slave_0: left promiscuous mode [ 1769.313110][T30450] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1769.629332][T29069] hsr_slave_1: left promiscuous mode [ 1769.697978][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.810641][T29069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.820033][T29069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.837816][T29069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.851895][T29069] bridge_slave_1: left allmulticast mode [ 1769.859677][T30453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.867771][T29069] bridge_slave_1: left promiscuous mode [ 1769.877470][T30453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.880939][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.903911][T29069] bridge_slave_0: left allmulticast mode [ 1769.909604][T29069] bridge_slave_0: left promiscuous mode [ 1769.940387][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.002710][T29069] veth1_macvtap: left promiscuous mode [ 1770.008307][T29069] veth0_macvtap: left promiscuous mode [ 1770.030878][T29069] veth1_vlan: left promiscuous mode [ 1770.036330][T29069] veth0_vlan: left promiscuous mode [ 1770.338386][T30453] futex_wake_op: syz.0.7432 tries to shift op by 144; fix this program [ 1770.347296][T30453] futex_wake_op: syz.0.7432 tries to shift op by 144; fix this program [ 1770.455787][T30461] usb usb7: usbfs: process 30461 (syz.2.7435) did not claim interface 0 before use [ 1770.905039][ T5782] Bluetooth: hci0: command 0x041b tx timeout [ 1771.052279][ T5782] Bluetooth: hci3: command tx timeout [ 1771.556209][T30468] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1772.195167][T30473] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1772.364574][T29069] team0 (unregistering): Port device team_slave_1 removed [ 1772.454618][T29069] team0 (unregistering): Port device team_slave_0 removed [ 1772.705927][T29069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1772.793380][T29069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.141511][T21318] Bluetooth: hci3: command tx timeout [ 1773.434164][T29069] bond0 (unregistering): Released all slaves [ 1773.571280][T30375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.615262][T30375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.680005][T30375] team0: Port device team_slave_0 added [ 1773.700171][T30375] team0: Port device team_slave_1 added [ 1773.717527][T30493] usb 1-1: USB disconnect, device number 124 [ 1773.813119][T30375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.827981][T30375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.868596][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1773.875031][T30375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.899862][T30375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.920732][T30375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.949103][T30375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.073677][T30375] hsr_slave_0: entered promiscuous mode [ 1774.078350][T29705] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1774.116339][T30375] hsr_slave_1: entered promiscuous mode [ 1774.148327][T30375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1774.167685][T30375] Cannot create hsr debugfs directory [ 1774.285682][T29705] usb 3-1: Using ep0 maxpacket: 32 [ 1774.303100][T29705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1774.343935][T29705] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1774.359278][T29705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.370614][ T5830] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1774.389273][T29705] usb 3-1: Product: syz [ 1774.394066][T29705] usb 3-1: SerialNumber: syz [ 1774.706053][T30511] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1774.765202][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1774.773566][ T5830] usb 1-1: Dual-Role OTG device on HNP port [ 1774.781724][ T5830] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 1774.840576][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.946275][ T5830] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input82 [ 1775.861032][T30523] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1775.913569][T30496] futex_wake_op: syz.2.7444 tries to shift op by 144; fix this program [ 1775.946000][T30496] futex_wake_op: syz.2.7444 tries to shift op by 144; fix this program [ 1776.120787][T29705] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1776.137931][T29705] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1776.200757][T29705] usb 3-1: USB disconnect, device number 67 [ 1776.276887][T30310] udevd[30310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1776.801397][T30375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1776.819865][T30375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1776.858439][T30375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1776.898951][T30375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1776.984515][T30552] FAULT_INJECTION: forcing a failure. [ 1776.984515][T30552] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.043414][T30552] really_probe: driver_sysfs_add(gadget.2) failed [ 1777.070635][T30552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.110943][T30552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.142765][T30375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.188847][T30375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.229136][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.236355][T17149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.286533][T15564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.293751][T15564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.547681][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1777.965519][T30570] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1778.816996][T30588] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1779.462644][T30375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.570364][T30375] veth0_vlan: entered promiscuous mode [ 1779.618481][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1779.641947][T30375] veth1_vlan: entered promiscuous mode [ 1779.758746][T30375] veth0_macvtap: entered promiscuous mode [ 1779.928307][T30375] veth1_macvtap: entered promiscuous mode [ 1780.556470][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.646565][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.702529][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.750332][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.945677][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.311520][T30629] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1781.357600][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.380637][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.391375][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.404400][T30375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.416054][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.426888][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.454454][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.465632][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.475791][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.486566][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.496744][T30375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.513702][T30375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.528641][T30375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.553749][T30375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.562925][T30375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.572660][T30375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.657149][T30375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.691987][T30638] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1781.923992][T29070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.962578][T29070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.050175][T29070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.078456][T29070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.646801][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1782.904530][ T42] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1783.000866][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1783.106938][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.387005][ T42] usb 4-1: Product: syz [ 1783.400954][ T42] usb 4-1: Manufacturer: syz [ 1783.420942][ T42] usb 4-1: SerialNumber: syz [ 1783.458708][ T42] usb 4-1: config 0 descriptor?? [ 1783.520771][ T42] hub 4-1:0.0: bad descriptor, ignoring hub [ 1783.547182][ T42] hub: probe of 4-1:0.0 failed with error -5 [ 1783.563242][T30676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.666553][T30676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.087947][ T42] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1784.276037][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1784.344447][T30657] dib0700: tx buffer length is larger than 4. Not supported. [ 1784.381266][ T42] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1784.461717][ T42] usb 4-1: media controller created [ 1784.526780][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1785.125718][T30685] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1785.360264][ T42] DVB: Unable to find symbol dib7000p_attach() [ 1785.400659][ T42] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1785.703135][ T42] rc_core: IR keymap rc-dib0700-rc5 not found [ 1785.770134][ T42] Registered IR keymap rc-empty [ 1785.843546][ T42] dvb-usb: could not initialize remote control. [ 1785.976587][ T42] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1786.314503][ T42] usb 4-1: USB disconnect, device number 20 [ 1786.512014][ T42] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1786.838817][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1788.079280][T30736] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1789.493130][T30754] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1790.095292][T21318] Bluetooth: hci0: command 0x041b tx timeout [ 1790.553728][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7509'. [ 1791.480902][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.575917][T29705] IPVS: starting estimator thread 0... [ 1791.740726][T30793] IPVS: using max 22 ests per chain, 52800 per kthread [ 1791.861687][T30805] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1792.766648][T30827] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1793.196214][T30832] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1794.227603][T30842] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1794.700778][T30856] usb usb7: usbfs: process 30856 (syz.2.7528) did not claim interface 0 before use [ 1794.843108][T30864] syz.0.7531 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1795.134467][T29066] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1795.146621][T30867] Core dump to |äSV6gD7+"€þ¿m{mT pipe failed [ 1795.211913][T29069] Bluetooth: hci4: Frame reassembly failed (-84) [ 1795.415593][ T5775] smpboot: CPU 1 is now offline [ 1795.529190][T30886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7538'. [ 1795.724487][T30882] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1795.765600][T30876] ------------[ cut here ]------------ [ 1795.767352][T30876] [ 1795.767358][T30876] ====================================================== [ 1795.767365][T30876] WARNING: possible circular locking dependency detected [ 1795.767378][T30876] syzkaller #0 Not tainted [ 1795.767386][T30876] ------------------------------------------------------ [ 1795.767391][T30876] syz.2.7535/30876 is trying to acquire lock: [ 1795.767401][T30876] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1795.767447][T30876] [ 1795.767447][T30876] but task is already holding lock: [ 1795.767452][T30876] ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 1795.767492][T30876] [ 1795.767492][T30876] which lock already depends on the new lock. [ 1795.767492][T30876] [ 1795.767497][T30876] [ 1795.767497][T30876] the existing dependency chain (in reverse order) is: [ 1795.767503][T30876] [ 1795.767503][T30876] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1795.767523][T30876] _raw_spin_lock_nested+0x32/0x50 [ 1795.767543][T30876] raw_spin_rq_lock_nested+0x29/0x130 [ 1795.767563][T30876] task_fork_fair+0x62/0x1f0 [ 1795.767578][T30876] sched_cgroup_fork+0x352/0x3e0 [ 1795.767592][T30876] copy_process+0x21fd/0x3da0 [ 1795.767607][T30876] kernel_clone+0x24b/0x8a0 [ 1795.767622][T30876] user_mode_thread+0x111/0x180 [ 1795.767638][T30876] rest_init+0x27/0x300 [ 1795.767655][T30876] arch_call_rest_init+0xe/0x10 [ 1795.767692][T30876] start_kernel+0x461/0x4e0 [ 1795.767707][T30876] x86_64_start_reservations+0x2a/0x30 [ 1795.767726][T30876] copy_bootdata+0x0/0xd0 [ 1795.767739][T30876] secondary_startup_64_no_verify+0x179/0x17b [ 1795.767758][T30876] [ 1795.767758][T30876] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1795.767778][T30876] _raw_spin_lock_irqsave+0xb4/0x100 [ 1795.767796][T30876] try_to_wake_up+0x5b/0x10e0 [ 1795.767810][T30876] __wake_up_common+0x28e/0x4d0 [ 1795.767826][T30876] __wake_up+0x125/0x1a0 [ 1795.767841][T30876] tty_port_default_wakeup+0xa2/0xf0 [ 1795.767857][T30876] serial8250_tx_chars+0x6a2/0x8b0 [ 1795.767877][T30876] serial8250_handle_irq+0x6c3/0x8c0 [ 1795.767895][T30876] serial8250_default_handle_irq+0xb8/0x1a0 [ 1795.767916][T30876] serial8250_interrupt+0x9f/0x1c0 [ 1795.767933][T30876] __handle_irq_event_percpu+0x271/0x940 [ 1795.767954][T30876] handle_irq_event+0x8b/0x1e0 [ 1795.767974][T30876] handle_edge_irq+0x246/0xb20 [ 1795.767995][T30876] __common_interrupt+0x13b/0x230 [ 1795.768012][T30876] common_interrupt+0xb4/0xd0 [ 1795.768025][T30876] asm_common_interrupt+0x26/0x40 [ 1795.768046][T30876] unwind_next_frame+0x1602/0x2990 [ 1795.768061][T30876] arch_stack_walk+0x144/0x190 [ 1795.768075][T30876] stack_trace_save+0xaa/0x100 [ 1795.768092][T30876] kasan_set_track+0x4e/0x70 [ 1795.768109][T30876] __kasan_slab_alloc+0x6c/0x80 [ 1795.768126][T30876] slab_post_alloc_hook+0x6a/0x4d0 [ 1795.768138][T30876] kmem_cache_alloc_node+0x1af/0x310 [ 1795.768159][T30876] __alloc_skb+0x103/0x2c0 [ 1795.768176][T30876] alloc_skb_with_frags+0xcd/0x7a0 [ 1795.768191][T30876] sock_alloc_send_pskb+0x883/0x9a0 [ 1795.768206][T30876] unix_dgram_sendmsg+0x5a9/0x16e0 [ 1795.768226][T30876] sock_write_iter+0x2dc/0x420 [ 1795.768245][T30876] do_iter_write+0x747/0xc50 [ 1795.768265][T30876] do_writev+0x27f/0x480 [ 1795.768278][T30876] do_syscall_64+0x55/0xb0 [ 1795.768298][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.768318][T30876] [ 1795.768318][T30876] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 1795.768338][T30876] _raw_spin_lock_irqsave+0xb4/0x100 [ 1795.768357][T30876] __wake_up+0x10b/0x1a0 [ 1795.768371][T30876] tty_port_default_wakeup+0xa2/0xf0 [ 1795.768387][T30876] serial8250_tx_chars+0x6a2/0x8b0 [ 1795.768406][T30876] serial8250_handle_irq+0x6c3/0x8c0 [ 1795.768425][T30876] serial8250_default_handle_irq+0xb8/0x1a0 [ 1795.768445][T30876] serial8250_interrupt+0x9f/0x1c0 [ 1795.768463][T30876] __handle_irq_event_percpu+0x271/0x940 [ 1795.768484][T30876] handle_irq_event+0x8b/0x1e0 [ 1795.768503][T30876] handle_edge_irq+0x246/0xb20 [ 1795.768518][T30876] __common_interrupt+0x13b/0x230 [ 1795.768535][T30876] common_interrupt+0xb4/0xd0 [ 1795.768548][T30876] asm_common_interrupt+0x26/0x40 [ 1795.768568][T30876] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1795.768586][T30876] uart_write+0x45b/0x5d0 [ 1795.768600][T30876] n_tty_write+0xd3d/0x11e0 [ 1795.768619][T30876] file_tty_write+0x529/0x960 [ 1795.768636][T30876] vfs_write+0x474/0x9a0 [ 1795.768655][T30876] ksys_write+0x151/0x260 [ 1795.768673][T30876] do_syscall_64+0x55/0xb0 [ 1795.768692][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.768712][T30876] [ 1795.768712][T30876] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1795.768732][T30876] _raw_spin_lock_irqsave+0xb4/0x100 [ 1795.768750][T30876] serial8250_console_write+0x181/0x18b0 [ 1795.768769][T30876] console_flush_all+0x6ad/0xcf0 [ 1795.768787][T30876] console_unlock+0xad/0x350 [ 1795.768803][T30876] vprintk_emit+0x497/0x610 [ 1795.768819][T30876] _printk+0xde/0x130 [ 1795.768836][T30876] register_console+0xb96/0xf00 [ 1795.768852][T30876] univ8250_console_init+0x45/0x50 [ 1795.768874][T30876] console_init+0x17b/0x5d0 [ 1795.768898][T30876] start_kernel+0x2c8/0x4e0 [ 1795.768913][T30876] x86_64_start_reservations+0x2a/0x30 [ 1795.768927][T30876] copy_bootdata+0x0/0xd0 [ 1795.768940][T30876] secondary_startup_64_no_verify+0x179/0x17b [ 1795.768958][T30876] [ 1795.768958][T30876] -> #0 (console_owner){-.-.}-{0:0}: [ 1795.768979][T30876] __lock_acquire+0x3a07/0x7eb0 [ 1795.769001][T30876] lock_acquire+0x19e/0x420 [ 1795.769016][T30876] console_flush_all+0x676/0xcf0 [ 1795.769033][T30876] console_unlock+0xad/0x350 [ 1795.769049][T30876] vprintk_emit+0x497/0x610 [ 1795.769065][T30876] _printk+0xde/0x130 [ 1795.769081][T30876] report_bug+0x34e/0x4f0 [ 1795.769095][T30876] handle_bug+0xcf/0x120 [ 1795.769107][T30876] exc_invalid_op+0x1a/0x50 [ 1795.769120][T30876] asm_exc_invalid_op+0x1a/0x20 [ 1795.769139][T30876] update_rq_clock+0x32e/0x4b0 [ 1795.769158][T30876] __schedule+0x2c72/0x4660 [ 1795.769172][T30876] schedule+0xbd/0x170 [ 1795.769185][T30876] do_nanosleep+0x1b3/0x5e0 [ 1795.769202][T30876] hrtimer_nanosleep+0x175/0x370 [ 1795.769218][T30876] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1795.769233][T30876] do_syscall_64+0x55/0xb0 [ 1795.769252][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.769272][T30876] [ 1795.769272][T30876] other info that might help us debug this: [ 1795.769272][T30876] [ 1795.769277][T30876] Chain exists of: [ 1795.769277][T30876] console_owner --> &p->pi_lock --> &rq->__lock [ 1795.769277][T30876] [ 1795.769299][T30876] Possible unsafe locking scenario: [ 1795.769299][T30876] [ 1795.769304][T30876] CPU0 CPU1 [ 1795.769308][T30876] ---- ---- [ 1795.769312][T30876] lock(&rq->__lock); [ 1795.769321][T30876] lock(&p->pi_lock); [ 1795.769331][T30876] lock(&rq->__lock); [ 1795.769342][T30876] lock(console_owner); [ 1795.769351][T30876] [ 1795.769351][T30876] *** DEADLOCK *** [ 1795.769351][T30876] [ 1795.769354][T30876] 3 locks held by syz.2.7535/30876: [ 1795.769364][T30876] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 1795.769406][T30876] #1: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 1795.769444][T30876] #2: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1795.769483][T30876] [ 1795.769483][T30876] stack backtrace: [ 1795.769488][T30876] CPU: 0 PID: 30876 Comm: syz.2.7535 Not tainted syzkaller #0 [ 1795.769505][T30876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1795.769515][T30876] Call Trace: [ 1795.769520][T30876] [ 1795.769527][T30876] dump_stack_lvl+0x18c/0x250 [ 1795.769550][T30876] ? load_image+0x420/0x420 [ 1795.769568][T30876] ? show_regs_print_info+0x20/0x20 [ 1795.769593][T30876] ? print_circular_bug+0x12b/0x1a0 [ 1795.769613][T30876] check_noncircular+0x2fc/0x400 [ 1795.769633][T30876] ? print_deadlock_bug+0x5d0/0x5d0 [ 1795.769651][T30876] ? lockdep_lock+0xf5/0x230 [ 1795.769673][T30876] __lock_acquire+0x3a07/0x7eb0 [ 1795.769701][T30876] ? verify_lock_unused+0x140/0x140 [ 1795.769727][T30876] lock_acquire+0x19e/0x420 [ 1795.769744][T30876] ? console_flush_all+0x10b/0xcf0 [ 1795.769765][T30876] ? __lock_acquire+0x7eb0/0x7eb0 [ 1795.769782][T30876] ? do_raw_spin_lock+0x11f/0x2b0 [ 1795.769801][T30876] ? read_lock_is_recursive+0x20/0x20 [ 1795.769819][T30876] ? __rwlock_init+0x150/0x150 [ 1795.769839][T30876] ? do_raw_spin_unlock+0x121/0x230 [ 1795.769860][T30876] console_flush_all+0x676/0xcf0 [ 1795.769879][T30876] ? console_flush_all+0x10b/0xcf0 [ 1795.769898][T30876] ? console_flush_all+0x10b/0xcf0 [ 1795.769921][T30876] ? is_console_locked+0x20/0x20 [ 1795.769944][T30876] console_unlock+0xad/0x350 [ 1795.769963][T30876] ? other_cpu_in_panic+0xf0/0xf0 [ 1795.769981][T30876] ? __lock_acquire+0x1431/0x7eb0 [ 1795.770008][T30876] vprintk_emit+0x497/0x610 [ 1795.770027][T30876] ? printk_sprint+0x460/0x460 [ 1795.770046][T30876] ? verify_lock_unused+0x140/0x140 [ 1795.770067][T30876] _printk+0xde/0x130 [ 1795.770088][T30876] ? load_image+0x420/0x420 [ 1795.770108][T30876] ? find_bug+0xa5/0x3a0 [ 1795.770122][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1795.770152][T30876] report_bug+0x34e/0x4f0 [ 1795.770167][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1795.770187][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1795.770208][T30876] ? update_rq_clock+0x330/0x4b0 [ 1795.770228][T30876] handle_bug+0xcf/0x120 [ 1795.770242][T30876] exc_invalid_op+0x1a/0x50 [ 1795.770257][T30876] asm_exc_invalid_op+0x1a/0x20 [ 1795.770278][T30876] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 1795.770301][T30876] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1795.770315][T30876] RSP: 0018:ffffc9000505f9c0 EFLAGS: 00010046 [ 1795.770328][T30876] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 4e8d2af045f36a00 [ 1795.770340][T30876] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 1795.770351][T30876] RBP: ffffc9000505fc10 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 1795.770364][T30876] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 1795.770376][T30876] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 1795.770396][T30876] __schedule+0x2c72/0x4660 [ 1795.770412][T30876] ? ktime_get+0x7f/0x280 [ 1795.770434][T30876] ? ktime_get+0x7f/0x280 [ 1795.770459][T30876] ? asan.module_dtor+0x20/0x20 [ 1795.770476][T30876] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1795.770498][T30876] ? _raw_spin_unlock+0x40/0x40 [ 1795.770520][T30876] schedule+0xbd/0x170 [ 1795.770535][T30876] do_nanosleep+0x1b3/0x5e0 [ 1795.770556][T30876] ? do_nanosleep+0x80/0x5e0 [ 1795.770574][T30876] ? usleep_range_state+0x1b0/0x1b0 [ 1795.770593][T30876] ? __asan_memset+0x22/0x40 [ 1795.770613][T30876] ? __hrtimer_init+0x189/0x270 [ 1795.770631][T30876] hrtimer_nanosleep+0x175/0x370 [ 1795.770648][T30876] ? __might_fault+0xc6/0x120 [ 1795.770665][T30876] ? nanosleep_copyout+0x120/0x120 [ 1795.770684][T30876] ? __remove_hrtimer+0x470/0x470 [ 1795.770701][T30876] ? timespec64_add_safe+0x1f0/0x1f0 [ 1795.770722][T30876] ? task_work_run+0x21a/0x260 [ 1795.770746][T30876] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1795.770764][T30876] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 1795.770781][T30876] ? lockdep_hardirqs_on+0x98/0x150 [ 1795.770799][T30876] do_syscall_64+0x55/0xb0 [ 1795.770819][T30876] ? clear_bhb_loop+0x40/0x90 [ 1795.770834][T30876] ? clear_bhb_loop+0x40/0x90 [ 1795.770849][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.770871][T30876] RIP: 0033:0x7f2aa375e9ce [ 1795.770885][T30876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1795.770898][T30876] RSP: 002b:00007ffe6e1aed68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1795.770914][T30876] RAX: ffffffffffffffda RBX: 000055558da4b500 RCX: 00007f2aa375e9ce [ 1795.770926][T30876] RDX: 00007ffe6e1aedc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1795.770936][T30876] RBP: 00007f2aa3a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 1795.770946][T30876] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001b69d0 [ 1795.770957][T30876] R13: 00007f2aa3a2618c R14: 00000000001b67e0 R15: 00007f2aa3a26180 [ 1795.770974][T30876] [ 1796.990203][T30876] WARNING: CPU: 0 PID: 30876 at kernel/sched/sched.h:1370 update_rq_clock+0x32e/0x4b0 [ 1796.999800][T30876] Modules linked in: [ 1797.003717][T30876] CPU: 0 PID: 30876 Comm: syz.2.7535 Not tainted syzkaller #0 [ 1797.011219][T30876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1797.021290][T30876] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 1797.026864][T30876] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1797.046486][T30876] RSP: 0018:ffffc9000505f9c0 EFLAGS: 00010046 [ 1797.052559][T30876] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 4e8d2af045f36a00 [ 1797.060532][T30876] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 1797.068501][T30876] RBP: ffffc9000505fc10 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 1797.076472][T30876] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 1797.084442][T30876] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 1797.092414][T30876] FS: 000055558da4b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1797.101366][T30876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1797.107955][T30876] CR2: 0000200000080030 CR3: 000000002f619000 CR4: 00000000003506f0 [ 1797.115931][T30876] Call Trace: [ 1797.119208][T30876] [ 1797.122139][T30876] __schedule+0x2c72/0x4660 [ 1797.126648][T30876] ? ktime_get+0x7f/0x280 [ 1797.130988][T30876] ? ktime_get+0x7f/0x280 [ 1797.135323][T30876] ? asan.module_dtor+0x20/0x20 [ 1797.140170][T30876] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1797.146069][T30876] ? _raw_spin_unlock+0x40/0x40 [ 1797.150924][T30876] schedule+0xbd/0x170 [ 1797.154991][T30876] do_nanosleep+0x1b3/0x5e0 [ 1797.159514][T30876] ? do_nanosleep+0x80/0x5e0 [ 1797.164117][T30876] ? usleep_range_state+0x1b0/0x1b0 [ 1797.169327][T30876] ? __asan_memset+0x22/0x40 [ 1797.173924][T30876] ? __hrtimer_init+0x189/0x270 [ 1797.178777][T30876] hrtimer_nanosleep+0x175/0x370 [ 1797.183714][T30876] ? __might_fault+0xc6/0x120 [ 1797.188390][T30876] ? nanosleep_copyout+0x120/0x120 [ 1797.193501][T30876] ? __remove_hrtimer+0x470/0x470 [ 1797.198545][T30876] ? timespec64_add_safe+0x1f0/0x1f0 [ 1797.203834][T30876] ? task_work_run+0x21a/0x260 [ 1797.208604][T30876] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1797.214151][T30876] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 1797.219784][T30876] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.224984][T30876] do_syscall_64+0x55/0xb0 [ 1797.229406][T30876] ? clear_bhb_loop+0x40/0x90 [ 1797.234081][T30876] ? clear_bhb_loop+0x40/0x90 [ 1797.238754][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.244677][T30876] RIP: 0033:0x7f2aa375e9ce [ 1797.249090][T30876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1797.268693][T30876] RSP: 002b:00007ffe6e1aed68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1797.277104][T30876] RAX: ffffffffffffffda RBX: 000055558da4b500 RCX: 00007f2aa375e9ce [ 1797.285072][T30876] RDX: 00007ffe6e1aedc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1797.293039][T30876] RBP: 00007f2aa3a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.301006][T30876] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001b69d0 [ 1797.308975][T30876] R13: 00007f2aa3a2618c R14: 00000000001b67e0 R15: 00007f2aa3a26180 [ 1797.316952][T30876] [ 1797.319971][T30876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1797.327246][T30876] CPU: 0 PID: 30876 Comm: syz.2.7535 Not tainted syzkaller #0 [ 1797.334700][T30876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1797.344755][T30876] Call Trace: [ 1797.348031][T30876] [ 1797.350960][T30876] dump_stack_lvl+0x18c/0x250 [ 1797.355645][T30876] ? show_regs_print_info+0x20/0x20 [ 1797.360858][T30876] ? load_image+0x420/0x420 [ 1797.365367][T30876] panic+0x2ca/0x720 [ 1797.369261][T30876] ? bpf_jit_dump+0xd0/0xd0 [ 1797.373769][T30876] __warn+0x2e0/0x470 [ 1797.377747][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1797.382685][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1797.387622][T30876] report_bug+0x2be/0x4f0 [ 1797.391951][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1797.396889][T30876] ? update_rq_clock+0x32e/0x4b0 [ 1797.401829][T30876] ? update_rq_clock+0x330/0x4b0 [ 1797.406770][T30876] handle_bug+0xcf/0x120 [ 1797.411011][T30876] exc_invalid_op+0x1a/0x50 [ 1797.415510][T30876] asm_exc_invalid_op+0x1a/0x20 [ 1797.420364][T30876] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 1797.425912][T30876] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 2d 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1797.445517][T30876] RSP: 0018:ffffc9000505f9c0 EFLAGS: 00010046 [ 1797.451582][T30876] RAX: 0000000000000000 RBX: ffff8880b8f3c240 RCX: 4e8d2af045f36a00 [ 1797.459552][T30876] RDX: 0000000000000003 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 1797.467524][T30876] RBP: ffffc9000505fc10 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 1797.475495][T30876] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: ffffffff8caa0a38 [ 1797.483464][T30876] R13: dffffc0000000000 R14: ffff8880b8f3cf88 R15: ffff8880b8f3c240 [ 1797.491441][T30876] __schedule+0x2c72/0x4660 [ 1797.495946][T30876] ? ktime_get+0x7f/0x280 [ 1797.500272][T30876] ? ktime_get+0x7f/0x280 [ 1797.504642][T30876] ? asan.module_dtor+0x20/0x20 [ 1797.509504][T30876] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1797.515404][T30876] ? _raw_spin_unlock+0x40/0x40 [ 1797.520258][T30876] schedule+0xbd/0x170 [ 1797.524328][T30876] do_nanosleep+0x1b3/0x5e0 [ 1797.528832][T30876] ? do_nanosleep+0x80/0x5e0 [ 1797.533423][T30876] ? usleep_range_state+0x1b0/0x1b0 [ 1797.538623][T30876] ? __asan_memset+0x22/0x40 [ 1797.543219][T30876] ? __hrtimer_init+0x189/0x270 [ 1797.548081][T30876] hrtimer_nanosleep+0x175/0x370 [ 1797.553016][T30876] ? __might_fault+0xc6/0x120 [ 1797.557689][T30876] ? nanosleep_copyout+0x120/0x120 [ 1797.562800][T30876] ? __remove_hrtimer+0x470/0x470 [ 1797.567822][T30876] ? timespec64_add_safe+0x1f0/0x1f0 [ 1797.573109][T30876] ? task_work_run+0x21a/0x260 [ 1797.577876][T30876] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 1797.583422][T30876] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 1797.589054][T30876] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.594252][T30876] do_syscall_64+0x55/0xb0 [ 1797.598671][T30876] ? clear_bhb_loop+0x40/0x90 [ 1797.603354][T30876] ? clear_bhb_loop+0x40/0x90 [ 1797.608024][T30876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.613919][T30876] RIP: 0033:0x7f2aa375e9ce [ 1797.618332][T30876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1797.637938][T30876] RSP: 002b:00007ffe6e1aed68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1797.646354][T30876] RAX: ffffffffffffffda RBX: 000055558da4b500 RCX: 00007f2aa375e9ce [ 1797.654322][T30876] RDX: 00007ffe6e1aedc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1797.662293][T30876] RBP: 00007f2aa3a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.670262][T30876] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001b69d0 [ 1797.678229][T30876] R13: 00007f2aa3a2618c R14: 00000000001b67e0 R15: 00007f2aa3a26180 [ 1797.686204][T30876] [ 1797.689430][T30876] Kernel Offset: disabled [ 1797.693753][T30876] Rebooting in 86400 seconds..