last executing test programs: 2m17.06980763s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 1m55.607683765s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 1m54.386370997s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 1m35.198967389s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 1m34.841381957s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 1m3.782664996s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 1m2.286800093s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 42.256820973s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 37.09101544s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 18.771354556s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 16.794738467s ago: executing program 3 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = io_uring_setup(0x3a6c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0x206}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xae}, 0x1c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r9, &(0x7f0000000080)=""/171, 0xab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x2, 0x7, 0x5, 0x2a, 0x81}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x36fb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$EVIOCGPROP(r4, 0x10, 0x0) 6.637090288s ago: executing program 0 (id=2078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @remote}}}, 0x90) 6.480239809s ago: executing program 0 (id=2079): r0 = gettid() sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003871173b2c612704f8f8ef350a4828395b5504752c381d9924b899b546f1e84cb88dcfd666a0051a33cffdef0ee04c78e0b4f7336db0ed9c2c589bcea0893af03d505e8ea101d6c6410c402e0353956aec42cd7da081f753ab7f7057ff3d9f0bc67a9224c9c9b403c6cf639827531bc9588faf741b2fb972af481f33659d03228b04a913"], 0x24}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5a86f477512bbe340530685b8caa8e2eeff2aa"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000006c0)='\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 6.195186563s ago: executing program 1 (id=2082): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000001440)=0x40) 5.941478857s ago: executing program 1 (id=2083): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x49, "62499228be69361202229b93234429d7275a330a25e95517a418e65aa94ec078776651c2231e78efc51639a28a878774028a236007ab111157c784d0a83542662ea646cbde890d1ad9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) 5.193807259s ago: executing program 0 (id=2084): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.955365909s ago: executing program 0 (id=2087): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = userfaultfd(0x80801) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r2, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) 4.644456039s ago: executing program 0 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{}, {0x2, 0xffffff27}, 0x0, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x6, @local}, @in={0x2, 0xffff, @local}], 0x40) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x0, 0x0) io_setup(0x1ff, &(0x7f0000001140)=0x0) io_submit(r3, 0x0, 0x0) unshare(0x6a040000) unshare(0x2000400) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000140)=0x98, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) fcntl$setstatus(r5, 0x4, 0x6800) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) io_setup(0x7f, &(0x7f0000000100)) 4.561357003s ago: executing program 2 (id=2090): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) 4.276193846s ago: executing program 2 (id=2091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000100000000000c000c8004000b8004000b800800020001000000700008"], 0xa4}}, 0x0) 3.548517249s ago: executing program 2 (id=2092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, r1, 0x20}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYRESHEX=r4]) getuid() socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000580)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) r7 = syz_open_pts(r5, 0x0) r8 = dup3(r7, r5, 0x0) read$watch_queue(r5, &(0x7f0000002e00)=""/4088, 0xff8) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, "064e52dd1ddd8565"}) r9 = gettid() r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r9, r11, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) read$watch_queue(r8, &(0x7f0000004e00)=""/4084, 0xfdef) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x5, @void}, 0x10) 3.159873138s ago: executing program 1 (id=2093): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$sock_int(r1, 0x1, 0x0, 0x0, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)=0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/bus\x00') syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x5, 0x10) r5 = dup(0xffffffffffffffff) ioctl$int_in(r5, 0x0, &(0x7f0000000000)=0x5) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000380)) setresuid(0x0, 0x0, 0x0) lchown(&(0x7f00000002c0)='./file0/bus\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xb000, 0x8, 0x208, 0x8, 0xb, 0x8, 0x80000000, 0x7f}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600400030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x1) 2.377474923s ago: executing program 2 (id=2094): r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 2.370173983s ago: executing program 2 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) fcntl$addseals(r0, 0x409, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$alg(0x26, 0x5, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 2.269745499s ago: executing program 2 (id=2096): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1, @ANYBLOB="c119abab8ba49a42af73cd2eb27463e21f1991a69fd6f7d31d8c501dfec1d9b1e86872c09f0273cd9e6bd8d5c17677cac9287638b7b671771a2fce8097bf55209f123ec038853a42282fe261e29065cab31d813cbaac7c8de1e4021518feb70b6bf8d4f70f55de7cbc3fb8b6e3f4fd9c4105274bc3de44a26ca94e0caa78ca5204d1cd4af3024e4e56a8aac8647e918f5cc44dd71b8e901ec778836ddd30577c00ea136f0c03484173abbaac616e7b9cd3c459bf10cb9f87d7039a18bf607cb10eab719a18ed"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$session_to_parent(0x12) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000140)=""/45, &(0x7f0000001400)=0x2d) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffbf, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x113d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000200)=[{&(0x7f0000001700)=""/4095, 0xfff}, {&(0x7f0000000340)=""/103, 0x67}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2.155331175s ago: executing program 1 (id=2097): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000b00)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 1.904869124s ago: executing program 1 (id=2098): r0 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r8, 0x200004) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r7, r8, 0x0, 0x80001d00c0d1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2f, &(0x7f0000000680)={0x401, {{0x2, 0x2, @private}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000280)=ANY=[], 0x90) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[]) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/27) semget(0x3, 0x0, 0x46) 1.86000606s ago: executing program 0 (id=2099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) chmod(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, &(0x7f0000000240)={0x1000, 0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x10001]}, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.67551ms ago: executing program 1 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x0) ioctl$RTC_SET_TIME(r1, 0x7004, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x30f, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') pread64(r3, &(0x7f0000000400)=""/255, 0xff, 0x8) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x5d, &(0x7f0000000100)=0x9) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5c, 0x1c, 0xfe, 0x8, 0x6cd, 0x11c, 0xd7cc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x1b, 0xa4}}]}}]}}, 0x0) 0s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): : command tx timeout [ 564.407707][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.419829][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.431309][ T52] bond0 (unregistering): Released all slaves [ 564.452814][ T54] Bluetooth: hci1: command tx timeout [ 564.542076][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.573084][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.580487][T14346] bridge_slave_0: entered allmulticast mode [ 564.618466][T14346] bridge_slave_0: entered promiscuous mode [ 564.706152][T14305] hsr_slave_0: entered promiscuous mode [ 564.716433][T14305] hsr_slave_1: entered promiscuous mode [ 564.722815][T14305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.730726][T14305] Cannot create hsr debugfs directory [ 564.739686][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.748365][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.757880][T14346] bridge_slave_1: entered allmulticast mode [ 564.766159][T14346] bridge_slave_1: entered promiscuous mode [ 564.800507][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 564.885911][ T5270] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 564.896683][ T5270] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 564.910292][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.927225][ T5270] asix 2-1:0.0: probe with driver asix failed with error -71 [ 564.939113][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.952040][ T5270] usb 2-1: USB disconnect, device number 40 [ 565.008815][ T8648] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 565.071227][T14346] team0: Port device team_slave_0 added [ 565.104780][T14346] team0: Port device team_slave_1 added [ 565.197530][ T8648] usb 3-1: Using ep0 maxpacket: 8 [ 565.224244][ T8648] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 565.251715][ T8648] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 565.261646][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.271172][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.297464][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.310010][ T8648] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 565.319379][ T8648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.327938][ T8648] usb 3-1: Product: syz [ 565.330082][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.332205][ T8648] usb 3-1: Manufacturer: syz [ 565.343794][ T8648] usb 3-1: SerialNumber: syz [ 565.357327][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.385707][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.408191][ T52] hsr_slave_0: left promiscuous mode [ 565.414173][ T52] hsr_slave_1: left promiscuous mode [ 565.420563][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.428158][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.436957][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.445171][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.508441][ T52] veth1_macvtap: left promiscuous mode [ 565.514061][ T52] veth0_macvtap: left promiscuous mode [ 565.528365][ T52] veth1_vlan: left promiscuous mode [ 565.533916][ T52] veth0_vlan: left promiscuous mode [ 565.557696][ T8648] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device: [ 565.587104][ T8648] d8 70 a4 ab 2e b6 ee 60 [ 565.604897][ T8648] snd-usb-6fire 3-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 565.754648][ T54] Bluetooth: hci3: command tx timeout [ 565.926468][T15008] netlink: 'syz.2.1748': attribute type 3 has an invalid length. [ 565.934421][T15008] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 565.942341][T15008] netlink: 'syz.2.1748': attribute type 7 has an invalid length. [ 565.950079][T15008] netlink: 'syz.2.1748': attribute type 8 has an invalid length. [ 565.959846][T15008] netlink: 'syz.2.1748': attribute type 7 has an invalid length. [ 565.968948][T15008] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.1748'. [ 566.007426][ T5271] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 566.204046][ T52] team0 (unregistering): Port device team_slave_1 removed [ 566.204379][ T5271] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=1e.a0 [ 566.226780][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.240055][ T5271] usb 2-1: config 0 descriptor?? [ 566.252484][ T5271] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input51 [ 566.284299][ T52] team0 (unregistering): Port device team_slave_0 removed [ 566.467652][ T4658] bcm5974 2-1:0.0: could not read from device [ 566.489052][ T4658] bcm5974 2-1:0.0: could not read from device [ 566.507805][ T4658] bcm5974 2-1:0.0: could not read from device [ 566.518448][ T5271] usb 2-1: USB disconnect, device number 41 [ 566.526385][ T4658] bcm5974 2-1:0.0: could not read from device [ 566.883069][ T5271] usb 3-1: USB disconnect, device number 22 [ 566.994732][T14346] hsr_slave_0: entered promiscuous mode [ 567.012512][T14346] hsr_slave_1: entered promiscuous mode [ 567.021028][T14346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.029199][T14346] Cannot create hsr debugfs directory [ 567.073786][ C0] eth0: bad gso: type: 1, size: 1408 [ 567.351169][T14305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 567.363903][T14305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 567.379708][ T5270] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 567.416938][T14305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 567.442530][T14305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 567.567804][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.590092][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 567.604097][ T5270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.606502][T14305] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.625525][T15180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.626037][ T5270] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.656178][ T5270] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 567.666233][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.667719][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.681510][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.681620][ T5270] usb 2-1: config 0 descriptor?? [ 567.699721][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1755'. [ 567.724335][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.731563][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.788495][T15180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.848563][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 568.096657][T14346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 568.116925][T14346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 568.142290][T14346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 568.173735][T14346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 568.314811][T14305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.420865][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.508318][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.553961][T14305] veth0_vlan: entered promiscuous mode [ 568.585383][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.592540][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.652468][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.659647][ T8648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.699390][T14305] veth1_vlan: entered promiscuous mode [ 569.004649][T14305] veth0_macvtap: entered promiscuous mode [ 569.019022][T14305] veth1_macvtap: entered promiscuous mode [ 569.041039][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.052029][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.064133][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.087848][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.112146][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.126779][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.136984][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.147738][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.164491][T14305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.177531][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.331746][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.046443][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.149368][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.235619][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.284221][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.311362][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.344563][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.367373][T14305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.424155][T14305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.535542][T14305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.579447][T14305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.606049][T14305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.755357][ T8651] usb 2-1: USB disconnect, device number 42 [ 570.760748][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.016651][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.050215][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.077424][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.102951][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 571.116850][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.497184][T14346] veth0_vlan: entered promiscuous mode [ 571.529110][T14346] veth1_vlan: entered promiscuous mode [ 571.581360][T14346] veth0_macvtap: entered promiscuous mode [ 571.589964][T14346] veth1_macvtap: entered promiscuous mode [ 571.608067][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.621572][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.634877][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.650529][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.665338][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.679912][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.697457][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.708582][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.718913][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.729828][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.745317][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.782840][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.802645][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.827257][ T8651] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 571.843291][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.882505][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.925237][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.949035][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.961546][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.972346][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.982406][T14346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.023163][ T8651] usb 1-1: Using ep0 maxpacket: 16 [ 572.059475][ T8651] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 572.086681][ T8651] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 572.099995][ T8651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.112487][ T8651] usb 1-1: Product: syz [ 572.117353][T14346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.162463][ T8651] usb 1-1: Manufacturer:  [ 572.279749][ T8651] usb 1-1: SerialNumber: syz [ 572.279828][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.426705][T14346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.534069][T14346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.542940][T14346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.551734][T14346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.761209][ T1170] usb 1-1: USB disconnect, device number 33 [ 572.823956][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.849015][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.900278][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.925756][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.703284][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.739102][T15347] binder: 15345:15347 ioctl c0306201 20000580 returned -14 [ 575.653622][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.716068][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 575.797163][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.829414][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.839203][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.848783][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.858325][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.885346][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 575.885800][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.904496][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.940382][T15369] ip6gretap0 speed is unknown, defaulting to 1000 [ 576.043373][ T61] bridge_slave_1: left allmulticast mode [ 576.049053][ T61] bridge_slave_1: left promiscuous mode [ 576.055038][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.130808][ T61] bridge_slave_0: left allmulticast mode [ 576.153577][ T61] bridge_slave_0: left promiscuous mode [ 576.159348][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.194892][ T26] block nbd2: Possible stuck request ffff888020bd8000: control (read@0,4096B). Runtime 60 seconds [ 576.386316][T15392] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1787'. [ 576.404734][T15392] openvswitch: netlink: Tunnel attr 0 has unexpected len 20 expected 8 [ 576.715192][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.733389][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.766778][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.792734][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.824168][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 576.841263][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.984619][ T8651] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 577.953774][ T54] Bluetooth: hci1: command tx timeout [ 578.970607][ T54] Bluetooth: hci3: command tx timeout [ 580.846322][ T54] Bluetooth: hci1: command tx timeout [ 581.007474][ T54] Bluetooth: hci3: command tx timeout [ 581.923629][ T8651] usb 3-1: device descriptor read/all, error -71 [ 582.077567][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.088496][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.098936][ T61] bond0 (unregistering): Released all slaves [ 582.308841][T15406] ip6gretap0 speed is unknown, defaulting to 1000 [ 582.943821][ T54] Bluetooth: hci1: command tx timeout [ 582.984881][T15369] chnl_net:caif_netlink_parms(): no params data found [ 583.095318][ T54] Bluetooth: hci3: command tx timeout [ 583.363503][ T61] hsr_slave_0: left promiscuous mode [ 583.375243][T15610] syz.0.1801[15610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.375387][T15610] syz.0.1801[15610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.398845][ T61] hsr_slave_1: left promiscuous mode [ 583.428968][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.446625][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.477810][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.486351][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.571227][ T61] veth1_macvtap: left promiscuous mode [ 583.586592][ T61] veth0_macvtap: left promiscuous mode [ 583.593465][ T61] veth1_vlan: left promiscuous mode [ 583.599036][ T61] veth0_vlan: left promiscuous mode [ 584.327190][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 584.345478][T15622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1810'. [ 584.405010][ T5232] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 584.418899][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: kworker/u9:5 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 584.429793][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 584.439862][ T5232] Workqueue: hci2 hci_rx_work [ 584.444564][ T5232] Call Trace: [ 584.447841][ T5232] [ 584.450774][ T5232] dump_stack_lvl+0x241/0x360 [ 584.455471][ T5232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.460695][ T5232] ? __pfx__printk+0x10/0x10 [ 584.465286][ T5232] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 584.470567][ T5232] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 584.476113][ T5232] sysfs_create_dir_ns+0x2ce/0x3a0 [ 584.481222][ T5232] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 584.486858][ T5232] kobject_add_internal+0x435/0x8d0 [ 584.492065][ T5232] kobject_add+0x152/0x220 [ 584.496478][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 584.501674][ T5232] ? device_add+0x3e7/0xbf0 [ 584.506173][ T5232] ? __pfx_kobject_add+0x10/0x10 [ 584.511113][ T5232] ? _raw_spin_unlock+0x28/0x50 [ 584.515969][ T5232] ? get_device_parent+0x165/0x410 [ 584.521089][ T5232] device_add+0x4e5/0xbf0 [ 584.525613][ T5232] hci_conn_add_sysfs+0xe8/0x200 [ 584.530576][ T5232] le_conn_complete_evt+0xc9f/0x12e0 [ 584.535901][ T5232] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 584.541644][ T5232] ? __mutex_unlock_slowpath+0x21d/0x750 [ 584.547293][ T5232] ? __copy_skb_header+0x437/0x5b0 [ 584.552404][ T5232] ? skb_pull_data+0x112/0x230 [ 584.557173][ T5232] hci_le_enh_conn_complete_evt+0x185/0x420 [ 584.563080][ T5232] hci_event_packet+0xa55/0x1540 [ 584.568028][ T5232] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 584.573329][ T5232] ? __pfx_hci_event_packet+0x10/0x10 [ 584.578712][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 584.583940][ T5232] ? hci_send_to_monitor+0xd8/0x7f0 [ 584.589144][ T5232] ? kcov_remote_start+0x9e/0x7e0 [ 584.594176][ T5232] hci_rx_work+0x3e8/0xca0 [ 584.598605][ T5232] ? process_scheduled_works+0x945/0x1830 [ 584.604329][ T5232] process_scheduled_works+0xa2c/0x1830 [ 584.609906][ T5232] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.615897][ T5232] ? assign_work+0x364/0x3d0 [ 584.620490][ T5232] worker_thread+0x86d/0xd40 [ 584.625181][ T5232] ? __kthread_parkme+0x169/0x1d0 [ 584.630208][ T5232] ? __pfx_worker_thread+0x10/0x10 [ 584.635317][ T5232] kthread+0x2f0/0x390 [ 584.639379][ T5232] ? __pfx_worker_thread+0x10/0x10 [ 584.644485][ T5232] ? __pfx_kthread+0x10/0x10 [ 584.649067][ T5232] ret_from_fork+0x4b/0x80 [ 584.653482][ T5232] ? __pfx_kthread+0x10/0x10 [ 584.658063][ T5232] ret_from_fork_asm+0x1a/0x30 [ 584.662842][ T5232] [ 584.672494][ T5232] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 584.686571][ T5232] Bluetooth: hci2: failed to register connection device [ 585.026320][ T54] Bluetooth: hci1: command tx timeout [ 585.184494][ T54] Bluetooth: hci3: command tx timeout [ 586.111624][ T61] team0 (unregistering): Port device team_slave_1 removed [ 586.190535][ T61] team0 (unregistering): Port device team_slave_0 removed [ 586.520796][T15646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1818'. [ 586.530573][T15646] openvswitch: netlink: Tunnel attr 0 has unexpected len 20 expected 8 [ 587.040121][T15745] ALSA: mixer_oss: invalid OSS volume '' [ 587.124523][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.152356][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.159618][T15369] bridge_slave_0: entered allmulticast mode [ 587.193172][T15369] bridge_slave_0: entered promiscuous mode [ 587.215576][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.237871][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.245384][T15369] bridge_slave_1: entered allmulticast mode [ 587.253373][T15369] bridge_slave_1: entered promiscuous mode [ 587.347131][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.357910][T15406] chnl_net:caif_netlink_parms(): no params data found [ 587.374986][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.559961][T15840] tipc: Started in network mode [ 587.570606][T15840] tipc: Node identity 8a707b271f8e, cluster identity 4711 [ 587.603704][T15840] tipc: Enabled bearer , priority 0 [ 587.629618][T15369] team0: Port device team_slave_0 added [ 587.652150][T15369] team0: Port device team_slave_1 added [ 587.689077][T15800] : renamed from syzkaller0 [ 587.700469][T15800] tipc: Disabling bearer [ 587.945947][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.952930][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.009380][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.027934][T15406] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.042531][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.050439][T15406] bridge_slave_0: entered allmulticast mode [ 588.058182][T15406] bridge_slave_0: entered promiscuous mode [ 588.070482][T15924] trusted_key: encrypted_key: insufficient parameters specified [ 588.103069][T15406] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.136776][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.147963][T15406] bridge_slave_1: entered allmulticast mode [ 588.155346][T15406] bridge_slave_1: entered promiscuous mode [ 588.163950][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.171052][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.208595][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.252773][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 588.361303][T15406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.441603][T15369] hsr_slave_0: entered promiscuous mode [ 588.487982][T15369] hsr_slave_1: entered promiscuous mode [ 588.514007][T15369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.534153][T15369] Cannot create hsr debugfs directory [ 588.556445][T15406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.700209][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.556127][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.599799][T15406] team0: Port device team_slave_0 added [ 589.672231][T16023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.673892][T15406] team0: Port device team_slave_1 added [ 589.745457][T16011] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 589.837034][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.878621][T15406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.891084][T15406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.918156][T15406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.967352][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.992408][T15406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.000390][T15406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.033206][T15406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.095955][ T5270] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 590.216799][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 590.229892][T15406] hsr_slave_0: entered promiscuous mode [ 590.241051][T15406] hsr_slave_1: entered promiscuous mode [ 590.248068][T15406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.256315][T15406] Cannot create hsr debugfs directory [ 590.303746][ T5270] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 590.321224][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.348491][ T5270] usb 1-1: config 0 descriptor?? [ 590.599615][ T61] bridge_slave_1: left allmulticast mode [ 590.605997][ T61] bridge_slave_1: left promiscuous mode [ 590.611833][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.494964][ T5270] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 591.510849][ T61] bridge_slave_0: left allmulticast mode [ 591.516540][ T61] bridge_slave_0: left promiscuous mode [ 591.539745][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.756335][ T5270] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 596.772033][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.788856][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.802164][ T61] bond0 (unregistering): Released all slaves [ 596.940541][ T5270] usb 1-1: USB disconnect, device number 34 [ 597.237212][T16288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1857'. [ 597.551379][ T8648] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 597.611562][ T5268] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 597.659826][T15369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 597.709622][ T61] hsr_slave_0: left promiscuous mode [ 597.719328][ T61] hsr_slave_1: left promiscuous mode [ 597.729138][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.738549][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.747592][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.755148][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.781751][ T8648] usb 3-1: Using ep0 maxpacket: 16 [ 597.790807][ T8648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.809359][ T61] veth1_macvtap: left promiscuous mode [ 597.815114][ T5268] usb 2-1: Using ep0 maxpacket: 32 [ 597.822908][ T8648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.823484][ T61] veth0_macvtap: left promiscuous mode [ 597.840500][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.856047][ T8648] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 597.856244][ T61] veth1_vlan: left promiscuous mode [ 597.876587][ T8648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.876647][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.898827][ T8648] usb 3-1: config 0 descriptor?? [ 597.912218][ T61] veth0_vlan: left promiscuous mode [ 597.933035][ T5268] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 597.942350][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.961324][ T5268] usb 2-1: config 0 descriptor?? [ 598.355912][ T8648] chicony 0003:04F2:1421.001A: unbalanced collection at end of report description [ 598.392544][ T8648] chicony 0003:04F2:1421.001A: Chicony hid parse failed: -22 [ 598.402640][ T8648] chicony 0003:04F2:1421.001A: probe with driver chicony failed with error -22 [ 598.430725][ T5268] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 598.485028][ T8649] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 598.636461][ T5303] usb 3-1: USB disconnect, device number 25 [ 598.647504][ T5268] ft260 0003:0403:6030.001B: chip code: 5e81 abf2 [ 598.707477][ T8649] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 598.790432][ T8649] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 598.814794][ T8649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.832773][ T8649] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 598.856881][ T8649] usb 1-1: No valid video chain found. [ 599.099105][ T61] team0 (unregistering): Port device team_slave_1 removed [ 599.120912][ T5303] usb 2-1: USB disconnect, device number 43 [ 599.168799][ T61] team0 (unregistering): Port device team_slave_0 removed [ 599.598965][ T8649] usb 1-1: USB disconnect, device number 35 [ 599.912396][T15369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.922975][T15369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 599.980235][ T5303] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 599.988414][T15369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.052365][T16389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.173592][ T5303] usb 3-1: Using ep0 maxpacket: 32 [ 600.187096][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.207258][ T5303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.258231][ T5303] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 600.278094][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.290398][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 600.298582][ T5303] usb 3-1: Product: syz [ 600.322150][ T5303] usb 3-1: Manufacturer: syz [ 600.326820][ T5303] usb 3-1: SerialNumber: syz [ 600.346012][ T5303] usb 3-1: config 0 descriptor?? [ 600.362800][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.369948][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.418547][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.425737][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.526929][T15406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.551757][T15406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.563688][ T5268] usb 3-1: USB disconnect, device number 26 [ 600.567001][T15406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.598171][T15406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.806955][T15406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.891065][T15406] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.920845][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.928110][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.961722][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.968942][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.081640][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.452686][T15406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.596728][T15406] veth0_vlan: entered promiscuous mode [ 601.623750][T15406] veth1_vlan: entered promiscuous mode [ 601.660144][T15369] veth0_vlan: entered promiscuous mode [ 601.667863][ T5273] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 601.703047][T15369] veth1_vlan: entered promiscuous mode [ 601.749409][T16455] : Can't lookup blockdev [ 601.796097][T15369] veth0_macvtap: entered promiscuous mode [ 601.829285][T15406] veth0_macvtap: entered promiscuous mode [ 601.840898][T15369] veth1_macvtap: entered promiscuous mode [ 601.852363][T15406] veth1_macvtap: entered promiscuous mode [ 601.884212][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.896856][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 601.914224][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.931558][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.948458][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.974935][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.986404][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.996451][ T5273] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 602.005628][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.016339][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.026741][ T5273] usb 3-1: config 0 descriptor?? [ 602.033865][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.053548][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.064526][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.078851][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.108593][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.119971][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.135827][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.147711][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.161050][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.177883][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.191553][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.202180][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.215591][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.242053][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.254406][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.277907][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.291300][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.301905][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.312415][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.322303][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.334141][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.344141][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.355287][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.367967][T15406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.395955][T15369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.397104][ T8649] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 602.406179][T15369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.430368][T15369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.445856][T15369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.468893][ T5273] chicony 0003:04F2:1421.001C: unbalanced collection at end of report description [ 602.480015][ T5273] chicony 0003:04F2:1421.001C: Chicony hid parse failed: -22 [ 602.491906][ T5273] chicony 0003:04F2:1421.001C: probe with driver chicony failed with error -22 [ 602.507056][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.522279][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.537754][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.549160][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.559505][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.570041][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.580618][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.591589][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.611090][T15406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.621710][ T8649] usb 1-1: Using ep0 maxpacket: 8 [ 602.627334][T15406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.641213][ T8649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.654850][ T8649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.665614][T15406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.674026][ T8649] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.693203][ T8649] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 602.720360][T15406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.736294][ T8649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.748602][T15406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.757317][T15406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.767503][ T8649] usb 1-1: config 0 descriptor?? [ 602.784716][ T25] usb 3-1: USB disconnect, device number 27 [ 602.812439][T15406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.967965][T10720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.989531][T10720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.127461][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.137276][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.163797][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.179752][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.197316][T15417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.231648][ T8649] maltron 0003:058F:9410.001D: unknown main item tag 0x0 [ 603.255628][T15417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.267833][ T8649] maltron 0003:058F:9410.001D: unknown main item tag 0x0 [ 603.312542][ T8649] maltron 0003:058F:9410.001D: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 603.467396][ T8649] usb 1-1: USB disconnect, device number 36 [ 603.796457][ T54] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 603.803367][ T54] Bluetooth: Wrong link type (-22) [ 603.808748][ T54] Bluetooth: hci5: link tx timeout [ 603.814571][ T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 604.716420][T16556] NILFS (loop2): device size too small [ 604.757818][T16558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 604.914371][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 606.219612][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 606.721553][ T26] block nbd2: Possible stuck request ffff888020bd8000: control (read@0,4096B). Runtime 90 seconds [ 606.843582][ T2924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.939887][ T2924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.999165][ T2924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.078049][ T2924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.168383][ T2924] bridge_slave_1: left allmulticast mode [ 607.174174][ T2924] bridge_slave_1: left promiscuous mode [ 607.179847][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.190988][ T2924] bridge_slave_0: left allmulticast mode [ 607.196773][ T2924] bridge_slave_0: left promiscuous mode [ 607.205033][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.812862][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.832138][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.841222][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.863293][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.881664][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 607.890910][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.902394][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.937291][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.952341][ T2924] bond0 (unregistering): Released all slaves [ 607.983498][T16608] ip6gretap0 speed is unknown, defaulting to 1000 [ 608.428145][T16608] chnl_net:caif_netlink_parms(): no params data found [ 608.477639][ T2924] hsr_slave_0: left promiscuous mode [ 608.483483][ T2924] hsr_slave_1: left promiscuous mode [ 608.492270][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.499800][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.508824][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.516412][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.538648][ T2924] veth1_macvtap: left promiscuous mode [ 608.544190][ T2924] veth0_macvtap: left promiscuous mode [ 608.549952][ T2924] veth1_vlan: left promiscuous mode [ 608.556854][ T2924] veth0_vlan: left promiscuous mode [ 608.816343][ T54] Bluetooth: Unexpected start frame (len 252) [ 608.824127][ T54] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 608.831925][ T54] Bluetooth: Wrong link type (-22) [ 608.979138][T16734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 609.047271][ T5271] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 609.113227][T16741] NILFS (loop2): device size too small [ 609.172071][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.182278][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.191710][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.202465][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.210913][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 609.224392][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 609.288161][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 609.296625][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.308041][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.319171][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.336609][ T5271] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 609.347876][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.393102][ T5271] usb 1-1: config 0 descriptor?? [ 609.489445][ T8648] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 609.715480][ T8648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.734768][ T8648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.746035][ T8648] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 609.755545][ T8648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.767634][ T8648] usb 2-1: config 0 descriptor?? [ 609.776992][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 609.842273][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 609.852417][ T5271] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 609.871212][ T5271] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 609.887943][ T5271] maltron 0003:058F:9410.001E: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 609.919743][ T5232] Bluetooth: hci1: command tx timeout [ 610.106094][ T8651] usb 1-1: USB disconnect, device number 37 [ 610.187329][ T8648] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 610.206169][ T8648] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 610.217463][ T8648] isku 0003:1E7D:319C.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 610.409782][ T8648] isku 0003:1E7D:319C.001F: couldn't init struct isku_device [ 610.430863][ T8648] isku 0003:1E7D:319C.001F: couldn't install keyboard [ 610.440373][ T8648] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -71 [ 610.484373][ T8648] usb 2-1: USB disconnect, device number 44 [ 610.629944][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.661789][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.679359][T16608] bridge_slave_0: entered allmulticast mode [ 610.688653][T16608] bridge_slave_0: entered promiscuous mode [ 610.706244][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.729540][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.742026][T16608] bridge_slave_1: entered allmulticast mode [ 610.754610][T16608] bridge_slave_1: entered promiscuous mode [ 611.276653][ T5232] Bluetooth: hci3: command tx timeout [ 611.660944][T16742] ip6gretap0 speed is unknown, defaulting to 1000 [ 611.763791][T16608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.798015][T16608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.020393][ T5232] Bluetooth: hci1: command tx timeout [ 612.887522][T16608] team0: Port device team_slave_0 added [ 613.024137][ T2924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.083105][T16608] team0: Port device team_slave_1 added [ 613.208962][ T46] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 613.353261][ T2924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.363738][ T5232] Bluetooth: hci3: command tx timeout [ 613.412970][ T46] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 613.452339][T16608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.464514][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.515126][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 613.516246][T16608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.546138][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.575162][ T46] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 613.594860][ T46] usb 3-1: No valid video chain found. [ 613.666705][ T2924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.699804][T16608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.739251][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.766807][T16608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.866298][ T2924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.975794][T16608] hsr_slave_0: entered promiscuous mode [ 614.008950][T16608] hsr_slave_1: entered promiscuous mode [ 614.014881][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 614.020826][ T1170] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 614.030997][T16608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.038882][T16608] Cannot create hsr debugfs directory [ 614.084289][ T5232] Bluetooth: hci1: command tx timeout [ 614.205266][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.228010][ T1170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.232191][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.256460][ T1170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.266835][ T1170] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 614.276151][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.316710][ T1170] usb 2-1: config 0 descriptor?? [ 614.328436][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 614.348373][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.360949][ T46] usb 1-1: config 0 descriptor?? [ 614.588957][T16742] chnl_net:caif_netlink_parms(): no params data found [ 614.660201][ T2924] bridge_slave_1: left allmulticast mode [ 614.672963][ T2924] bridge_slave_1: left promiscuous mode [ 614.685565][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.717632][ T2924] bridge_slave_0: left allmulticast mode [ 614.728764][ T2924] bridge_slave_0: left promiscuous mode [ 614.737573][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.762142][ T1170] logitech 0003:046D:C101.0020: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.1-1/input0 [ 614.821702][ T46] isku 0003:1E7D:319C.0021: unknown main item tag 0x0 [ 614.838470][ T46] isku 0003:1E7D:319C.0021: unknown main item tag 0x0 [ 614.852074][ T46] isku 0003:1E7D:319C.0021: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 614.936951][ T8648] usb 3-1: USB disconnect, device number 28 [ 615.034947][ T46] isku 0003:1E7D:319C.0021: couldn't init struct isku_device [ 615.050756][ T46] isku 0003:1E7D:319C.0021: couldn't install keyboard [ 615.061362][ T46] isku 0003:1E7D:319C.0021: probe with driver isku failed with error -71 [ 615.076804][ T46] usb 1-1: USB disconnect, device number 38 [ 615.352203][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.363319][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.375118][ T2924] bond0 (unregistering): Released all slaves [ 615.405067][ T5270] usb 2-1: USB disconnect, device number 45 [ 615.452828][ T5232] Bluetooth: hci3: command tx timeout [ 615.825709][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.840004][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.338136][ T54] Bluetooth: hci1: command tx timeout [ 616.523255][T16742] bridge_slave_0: entered allmulticast mode [ 616.575929][T16742] bridge_slave_0: entered promiscuous mode [ 616.600609][ T29] audit: type=1326 audit(1722454408.411:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 616.646407][ T29] audit: type=1326 audit(1722454408.411:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dcb975d50 code=0x7ffc0000 [ 616.670063][ T29] audit: type=1326 audit(1722454408.411:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7dcb978b47 code=0x7ffc0000 [ 616.694576][ T29] audit: type=1326 audit(1722454408.411:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 616.716896][ T29] audit: type=1326 audit(1722454408.411:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7dcb978b47 code=0x7ffc0000 [ 616.747384][ T29] audit: type=1326 audit(1722454408.411:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7dcb97604a code=0x7ffc0000 [ 616.764262][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.784299][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.784553][T17273] netlink: 4716 bytes leftover after parsing attributes in process `syz.1.1926'. [ 616.791834][T16742] bridge_slave_1: entered allmulticast mode [ 616.817497][T16742] bridge_slave_1: entered promiscuous mode [ 616.823761][ T29] audit: type=1326 audit(1722454408.411:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 616.865431][ T29] audit: type=1326 audit(1722454408.421:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 616.891830][ T29] audit: type=1326 audit(1722454408.451:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 616.914506][ T29] audit: type=1326 audit(1722454408.451:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17233 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb9773b9 code=0x7ffc0000 [ 617.530055][ T54] Bluetooth: hci3: command tx timeout [ 617.837478][T17273] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1926'. [ 617.930427][T16742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.954968][T16742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.296212][ T2924] hsr_slave_0: left promiscuous mode [ 618.308282][ T2924] hsr_slave_1: left promiscuous mode [ 618.317134][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.326305][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.336947][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.350088][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.407822][ T2924] veth1_macvtap: left promiscuous mode [ 618.429229][ T2924] veth0_macvtap: left promiscuous mode [ 618.442522][ T2924] veth1_vlan: left promiscuous mode [ 618.468157][ T2924] veth0_vlan: left promiscuous mode [ 619.392287][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 619.441004][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 619.615260][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 619.908964][T16742] team0: Port device team_slave_0 added [ 619.928828][T16742] team0: Port device team_slave_1 added [ 620.096819][T16742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.111910][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.146762][T16742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.164014][T16742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.227377][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.275544][T16742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.369593][ T5268] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 620.385090][T17404] team0: Port device geneve2 added [ 620.589676][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.603683][T16742] hsr_slave_0: entered promiscuous mode [ 620.612300][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.623162][T16742] hsr_slave_1: entered promiscuous mode [ 620.642034][T16742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.647630][ T5268] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 620.650096][T16742] Cannot create hsr debugfs directory [ 620.666332][T16608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 620.685126][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.556468][ T5268] usb 2-1: config 0 descriptor?? [ 621.580956][T16608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.616616][T16608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 621.643042][T16608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 621.993142][ T5268] logitech 0003:046D:C101.0022: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.1-1/input0 [ 622.137340][T17517] Bluetooth: MGMT ver 1.23 [ 622.156339][T17517] Bluetooth: hci3: unsupported parameter 64512 [ 622.167646][T17517] Bluetooth: hci3: invalid length 0, exp 2 for type 5 [ 622.345239][ T5268] usb 2-1: USB disconnect, device number 46 [ 622.360073][T16608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.477104][T16608] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.557885][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.565089][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.633770][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.640957][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.916004][T16742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.955260][T17572] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 622.960607][T16742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 623.002747][T16742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 623.028176][T16742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 623.185853][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 623.185872][ T29] audit: type=1326 audit(1722454414.995:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 623.280954][T16742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.304444][ T29] audit: type=1326 audit(1722454414.995:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97a2f75d50 code=0x7ffc0000 [ 623.370624][ T29] audit: type=1326 audit(1722454414.995:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f97a2f78b47 code=0x7ffc0000 [ 623.396624][T16742] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.420383][ T29] audit: type=1326 audit(1722454414.995:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 623.437284][T16608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.464339][ T29] audit: type=1326 audit(1722454414.995:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f97a2f78b47 code=0x7ffc0000 [ 623.513556][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.520760][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.588731][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.595925][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.603869][ T29] audit: type=1326 audit(1722454414.995:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f97a2f7604a code=0x7ffc0000 [ 623.670768][ T29] audit: type=1326 audit(1722454414.995:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 623.712379][T16742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.758372][ T29] audit: type=1326 audit(1722454415.025:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 624.659459][ T29] audit: type=1326 audit(1722454415.045:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 624.743030][ T29] audit: type=1326 audit(1722454415.045:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a2f773b9 code=0x7ffc0000 [ 624.974318][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 624.991269][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.997612][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.106729][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 625.240811][T16608] veth0_vlan: entered promiscuous mode [ 625.280968][T16608] veth1_vlan: entered promiscuous mode [ 625.365983][T16608] veth0_macvtap: entered promiscuous mode [ 625.466761][T16608] veth1_macvtap: entered promiscuous mode [ 625.905999][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.960054][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.981456][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.001977][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.016937][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.027641][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.037979][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.048751][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.069146][T16608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.177554][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.236611][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 626.240662][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.270729][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.288094][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.315818][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.339608][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.350983][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.361460][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.372784][T16608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.387033][T16742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.429327][T16608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.449110][T16608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.459995][T16608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.469231][T16608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.576510][T16742] veth0_vlan: entered promiscuous mode [ 626.602036][ T5303] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 626.619886][T16742] veth1_vlan: entered promiscuous mode [ 626.659267][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.673642][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.725818][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.729470][T16742] veth0_macvtap: entered promiscuous mode [ 626.740819][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.757721][T16742] veth1_macvtap: entered promiscuous mode [ 626.814455][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.834019][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.849327][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.849424][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.859755][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.871147][ T5303] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 626.892661][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.898618][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.911477][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.914217][ T5303] usb 2-1: config 0 descriptor?? [ 626.923145][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.939037][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.949913][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.960278][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.971048][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.987060][T16742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.031475][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.050557][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.061721][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.072235][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.083182][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.093645][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.103790][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.115317][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.126202][T16742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.138347][T16742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.150576][T16742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.270159][T16742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.279690][T16742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.308212][T16742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.328213][T16742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.384370][ T5303] isku 0003:1E7D:319C.0023: unknown main item tag 0x0 [ 627.391220][ T5303] isku 0003:1E7D:319C.0023: unknown main item tag 0x0 [ 627.440551][ T5303] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 627.474463][T16608] syz-executor (16608) used greatest stack depth: 18416 bytes left [ 627.570664][T17667] dccp_invalid_packet: P.CsCov 5 exceeds packet length 16 [ 627.708612][ T5303] isku 0003:1E7D:319C.0023: couldn't init struct isku_device [ 627.722786][ T5303] isku 0003:1E7D:319C.0023: couldn't install keyboard [ 627.734398][ T5303] isku 0003:1E7D:319C.0023: probe with driver isku failed with error -71 [ 627.750795][ T5303] usb 2-1: USB disconnect, device number 47 [ 627.813341][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.643260][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.668874][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.680531][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.715605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.723696][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.517733][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.770854][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.851715][ T61] bridge_slave_1: left allmulticast mode [ 629.857483][ T61] bridge_slave_1: left promiscuous mode [ 629.863649][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.874465][ T61] bridge_slave_0: left allmulticast mode [ 629.880508][ T61] bridge_slave_0: left promiscuous mode [ 629.886177][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.457846][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.472036][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.493128][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.502224][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.510618][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 631.518218][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.546324][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 631.546343][ T29] audit: type=1326 audit(1722454423.337:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.608343][ T29] audit: type=1326 audit(1722454423.367:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.623426][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 631.670141][ T29] audit: type=1326 audit(1722454423.367:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.722951][ T29] audit: type=1326 audit(1722454423.367:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.770977][ T29] audit: type=1326 audit(1722454423.367:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.835524][ T29] audit: type=1326 audit(1722454423.367:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 631.892533][ T29] audit: type=1326 audit(1722454423.367:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17724 comm="syz.2.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be5773b9 code=0x7ffc0000 [ 632.158643][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.181411][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.222041][ T61] bond0 (unregistering): Released all slaves [ 632.395272][T17720] ip6gretap0 speed is unknown, defaulting to 1000 [ 633.566408][ T54] Bluetooth: hci1: command tx timeout [ 633.689324][ T61] hsr_slave_0: left promiscuous mode [ 633.695380][ T61] hsr_slave_1: left promiscuous mode [ 633.701593][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.711556][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.722574][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.733625][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.757620][ T61] veth1_macvtap: left promiscuous mode [ 633.763133][ T61] veth0_macvtap: left promiscuous mode [ 633.768987][ T61] veth1_vlan: left promiscuous mode [ 633.774265][ T61] veth0_vlan: left promiscuous mode [ 634.232644][ T61] team0 (unregistering): Port device team_slave_1 removed [ 634.275333][ T61] team0 (unregistering): Port device team_slave_0 removed [ 634.740335][T17720] chnl_net:caif_netlink_parms(): no params data found [ 634.945188][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 634.955990][T17901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'. [ 635.063161][T17720] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.089022][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.098244][T17720] bridge_slave_0: entered allmulticast mode [ 635.105922][T17720] bridge_slave_0: entered promiscuous mode [ 635.127658][T17901] bridge_slave_1: left allmulticast mode [ 635.138977][T17901] bridge_slave_1: left promiscuous mode [ 635.159267][T17901] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.192322][T17720] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.215929][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.244121][T17720] bridge_slave_1: entered allmulticast mode [ 635.265727][T17720] bridge_slave_1: entered promiscuous mode [ 635.370784][ T5271] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 635.417418][T17720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.420433][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.441164][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.450513][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.458720][T17720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.460014][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.479124][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.488165][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.582281][ T5271] usb 1-1: Using ep0 maxpacket: 32 [ 635.592227][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 635.605780][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 635.617243][ T5271] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 635.637461][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.648627][ T5271] usb 1-1: config 0 descriptor?? [ 635.652096][T17720] team0: Port device team_slave_0 added [ 635.666769][ T5232] Bluetooth: hci1: command tx timeout [ 635.685638][T17916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.693715][T17720] team0: Port device team_slave_1 added [ 635.827605][T17720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.836312][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.874515][T17720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.886137][T17951] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.895362][T17720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.918662][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.982558][T17720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.113874][ T5271] hid-rmi 0003:0461:4E72.0024: unknown main item tag 0x0 [ 636.136141][ T5271] hid-rmi 0003:0461:4E72.0024: unknown main item tag 0x0 [ 636.628401][ T5271] hid-rmi 0003:0461:4E72.0024: unknown main item tag 0x0 [ 636.687262][ T5271] hid-rmi 0003:0461:4E72.0024: unknown main item tag 0x0 [ 636.687266][ T3025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.743298][ T5271] hid-rmi 0003:0461:4E72.0024: unknown main item tag 0x0 [ 636.770478][ T5271] hid-rmi 0003:0461:4E72.0024: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 636.798331][ T5271] usb 1-1: USB disconnect, device number 39 [ 636.933869][ T3025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.004387][T17720] hsr_slave_0: entered promiscuous mode [ 637.012918][T17720] hsr_slave_1: entered promiscuous mode [ 637.037587][T17720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.052874][T17720] Cannot create hsr debugfs directory [ 637.134093][ T3025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.175091][ T26] block nbd2: Possible stuck request ffff888020bd8000: control (read@0,4096B). Runtime 120 seconds [ 637.584775][ T5232] Bluetooth: hci3: command tx timeout [ 637.734107][ T5232] Bluetooth: hci1: command tx timeout [ 638.222545][ T3025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.505475][ T46] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 638.708471][ T46] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 638.828920][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 638.869748][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.900838][ T46] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 638.923782][ T46] usb 2-1: No valid video chain found. [ 638.964238][ T3025] bridge_slave_1: left allmulticast mode [ 638.970023][ T3025] bridge_slave_1: left promiscuous mode [ 638.975750][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.986984][ T3025] bridge_slave_0: left allmulticast mode [ 639.004701][ T3025] bridge_slave_0: left promiscuous mode [ 639.024268][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.080362][T18210] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(139936340089357) <= P.seqno(0) <= S.SWH(139936340089431)) and (P.ackno exists or LAWL(192880414557184) <= P.ackno(192880414557185) <= S.AWH(192880414557185), sending SYNC... [ 639.657683][ T5232] Bluetooth: hci3: command 0x041b tx timeout [ 639.827670][ T54] Bluetooth: hci1: command tx timeout [ 640.039630][ T3025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.082115][ T3025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.087935][T18213] vivid-007: ================= START STATUS ================= [ 640.112014][T18213] vivid-007: Enable Output Cropping: true grabbed [ 640.147292][ T3025] bond0 (unregistering): Released all slaves [ 640.147528][T18213] vivid-007: Enable Output Composing: true grabbed [ 640.178672][T18213] vivid-007: Enable Output Scaler: true grabbed [ 640.188038][T18213] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 640.228499][T18213] vivid-007: Transmit Mode: HDMI grabbed [ 640.277362][T18213] vivid-007: Hotplug Present: 0x00000000 [ 640.321877][T18213] vivid-007: RxSense Present: 0x00000000 [ 640.338584][T18213] vivid-007: EDID Present: 0x00000000 [ 640.345222][T18213] vivid-007: ================== END STATUS ================== [ 640.503541][ T5271] usb 2-1: USB disconnect, device number 48 [ 641.025788][T17951] chnl_net:caif_netlink_parms(): no params data found [ 641.134473][ T5271] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 641.348130][ T5271] usb 2-1: config 0 has no interfaces? [ 641.357536][ T5271] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 641.368950][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.383272][ T5271] usb 2-1: config 0 descriptor?? [ 641.416481][ T3025] hsr_slave_0: left promiscuous mode [ 641.422065][ T54] Bluetooth: Unexpected start frame (len 252) [ 641.428360][ T54] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 641.435005][ T54] Bluetooth: Wrong link type (-22) [ 641.543173][ T3025] hsr_slave_1: left promiscuous mode [ 641.573763][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.614551][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.626926][ T5270] usb 2-1: USB disconnect, device number 49 [ 641.645415][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.660365][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.675046][T18378] tmpfs: Bad value for 'mpol' [ 641.707378][T18379] NILFS (loop2): device size too small [ 641.793388][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 641.859138][ T3025] veth1_macvtap: left promiscuous mode [ 641.865767][ T3025] veth0_macvtap: left promiscuous mode [ 641.871793][ T3025] veth1_vlan: left promiscuous mode [ 641.878467][ T3025] veth0_vlan: left promiscuous mode [ 642.072451][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 643.200585][ T3025] team0 (unregistering): Port device team_slave_1 removed [ 643.247154][ T3025] team0 (unregistering): Port device team_slave_0 removed [ 643.835007][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 644.034071][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.050807][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.085081][T17951] bridge_slave_0: entered allmulticast mode [ 644.106060][T17951] bridge_slave_0: entered promiscuous mode [ 644.145579][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.165326][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.190265][T17951] bridge_slave_1: entered allmulticast mode [ 644.212261][T17951] bridge_slave_1: entered promiscuous mode [ 644.318926][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.347271][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.398702][T17720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 644.405867][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 644.436138][T17720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 644.465310][T17951] team0: Port device team_slave_0 added [ 644.473142][T17720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 644.510846][T17951] team0: Port device team_slave_1 added [ 644.596599][ T46] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 644.612433][T17720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 644.645716][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 644.673497][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.721937][ T46] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 644.734525][ T46] usb 1-1: No valid video chain found. [ 644.742403][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.775606][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.852270][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.888071][T18528] netlink: 'syz.1.2018': attribute type 11 has an invalid length. [ 644.896111][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.906553][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.988414][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.055553][T17951] hsr_slave_0: entered promiscuous mode [ 645.071428][T17951] hsr_slave_1: entered promiscuous mode [ 645.097128][T17951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.104724][T17951] Cannot create hsr debugfs directory [ 645.518392][T18609] tmpfs: Bad value for 'mpol' [ 645.908085][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 646.013727][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 646.817152][T17720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.879667][ T8651] usb 1-1: USB disconnect, device number 40 [ 647.054649][T17720] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.148105][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.155311][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.203251][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.210366][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.516751][T17951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.539484][T17951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.580018][T17951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.620123][T17951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 647.830281][T17720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.063643][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.114402][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.145441][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.152642][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.278095][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.285297][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.458029][T17951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.545424][T18687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2028'. [ 648.667274][T17720] veth0_vlan: entered promiscuous mode [ 648.741545][T17720] veth1_vlan: entered promiscuous mode [ 648.905884][T17720] veth0_macvtap: entered promiscuous mode [ 648.951693][T17720] veth1_macvtap: entered promiscuous mode [ 648.959175][T18698] loop0: detected capacity change from 0 to 1 [ 648.984794][T18698] buffer_io_error: 6 callbacks suppressed [ 648.984824][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.044562][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.048807][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.074050][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.097442][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.102745][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.134581][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.156003][T18698] ldm_validate_partition_table(): Disk read failed. [ 649.168212][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.179008][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.209873][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.209986][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.224015][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.260432][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.260800][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.303720][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.314792][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.336398][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.364003][T18698] Dev loop0: unable to read RDB block 0 [ 649.372496][T17720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.384269][T18698] Buffer I/O error on dev loop0, logical block 0, async page read [ 649.438813][T18698] loop0: unable to read partition table [ 649.450123][T18698] loop0: partition table beyond EOD, truncated [ 649.462365][T18698] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡp [ 649.462365][T18698] ) failed (rc=-5) [ 649.525152][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.555441][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.604515][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.653977][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.685247][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.696016][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.709714][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.730378][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.746683][T17720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.783688][T17720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.792980][T17720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.824931][T17720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.852948][T17720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.912270][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.161022][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.198947][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.265995][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.286411][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.332371][T17951] veth0_vlan: entered promiscuous mode [ 650.387102][T17951] veth1_vlan: entered promiscuous mode [ 650.544481][T17951] veth0_macvtap: entered promiscuous mode [ 650.581462][T17951] veth1_macvtap: entered promiscuous mode [ 650.654619][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.689076][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.715789][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.736660][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.765752][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.796115][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.815867][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.836518][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.873507][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.907894][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.945266][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.958938][T18737] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 650.977160][T18737] veth1_macvtap: left promiscuous mode [ 651.010244][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.051906][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.065080][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.075585][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.085488][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.095967][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.116758][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.133774][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.145770][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.165687][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.177919][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.249991][T10720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.277627][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 651.288676][T17951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.304597][T17951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.314655][T17951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.323448][T17951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.354213][T10720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.455833][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.469631][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.472250][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 651.493195][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 651.506014][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 651.515581][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.520170][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.528684][ T9] usb 2-1: config 0 descriptor?? [ 651.541392][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.608932][T10720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.842089][T10720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.996937][T10720] bridge_slave_1: left allmulticast mode [ 652.002824][T10720] bridge_slave_1: left promiscuous mode [ 652.008720][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.018753][T10720] bridge_slave_0: left allmulticast mode [ 652.024420][T10720] bridge_slave_0: left promiscuous mode [ 652.031168][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.084335][T18737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.102193][T18737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.136093][ T9] hid-generic 0003:0158:0100.0025: unknown main item tag 0x1 [ 652.143854][ T9] hid-generic 0003:0158:0100.0025: unexpected long global item [ 652.152310][ T9] hid-generic 0003:0158:0100.0025: probe with driver hid-generic failed with error -22 [ 652.367541][ T46] usb 2-1: USB disconnect, device number 50 [ 652.443149][T10720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.458327][T10720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.469131][T10720] bond0 (unregistering): Released all slaves [ 652.719898][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 652.755133][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 653.165598][T10720] hsr_slave_0: left promiscuous mode [ 653.178755][T10720] hsr_slave_1: left promiscuous mode [ 653.235098][T10720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.255428][T10720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.301735][T10720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.309154][T10720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.323940][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 653.339856][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.349016][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.357367][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.365436][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 653.373007][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.395832][T10720] veth1_macvtap: left promiscuous mode [ 653.435567][T10720] veth0_macvtap: left promiscuous mode [ 653.449979][T10720] veth1_vlan: left promiscuous mode [ 653.455341][T10720] veth0_vlan: left promiscuous mode [ 653.923815][T10720] team0 (unregistering): Port device team_slave_1 removed [ 653.967773][T10720] team0 (unregistering): Port device team_slave_0 removed [ 654.410135][T18810] ip6gretap0 speed is unknown, defaulting to 1000 [ 654.739807][T18810] chnl_net:caif_netlink_parms(): no params data found [ 654.829803][T18810] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.837560][T18810] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.845377][T18810] bridge_slave_0: entered allmulticast mode [ 654.856062][T18810] bridge_slave_0: entered promiscuous mode [ 654.867571][T18810] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.875338][T18810] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.884804][T18810] bridge_slave_1: entered allmulticast mode [ 654.891583][T18810] bridge_slave_1: entered promiscuous mode [ 655.150906][T10720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.186039][T18982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.262445][T18810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.342714][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 655.367292][T10720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.400430][T18810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.442971][ T5232] Bluetooth: hci1: command tx timeout [ 655.520139][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 655.529499][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 655.547504][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.563367][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 655.570127][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.578570][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 655.588945][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 655.597725][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.612736][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.639820][ T25] usb 3-1: config 0 descriptor?? [ 655.648765][ T25] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 655.677435][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 655.684795][T10720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.688897][ T25] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 655.705336][ T25] usb 3-1: media controller created [ 655.731240][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.748491][T18810] team0: Port device team_slave_0 added [ 655.780322][ T25] usb 3-1: selecting invalid altsetting 1 [ 655.792070][T19022] ip6gretap0 speed is unknown, defaulting to 1000 [ 655.801283][T18810] team0: Port device team_slave_1 added [ 655.807115][ T25] set interface failed [ 655.807665][ T25] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 655.835102][ T25] error writing reg: 0xff, val: 0x00 [ 655.921592][T18984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.940402][T18984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.975840][ T25] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 655.989721][T10720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.024356][T18810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.036991][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.103424][T18810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.136174][T18810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.147843][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.175934][T18810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.339401][T18810] hsr_slave_0: entered promiscuous mode [ 656.374391][T18810] hsr_slave_1: entered promiscuous mode [ 656.398846][T18810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.430418][T18810] Cannot create hsr debugfs directory [ 656.652270][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 656.703574][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 656.838653][T10720] bridge_slave_1: left allmulticast mode [ 656.858387][T10720] bridge_slave_1: left promiscuous mode [ 656.873049][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.914443][T10720] bridge_slave_0: left allmulticast mode [ 656.933865][T10720] bridge_slave_0: left promiscuous mode [ 656.947501][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.435546][ T1170] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 657.447406][T10720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.460095][T10720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.470489][T10720] bond0 (unregistering): Released all slaves [ 657.493687][T19196] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.503220][T19196] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.512714][T19196] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.521544][T19196] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.536978][ T5232] Bluetooth: hci1: command tx timeout [ 657.650394][ T1170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.665508][ T1170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.676505][ T1170] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 657.686038][ T5232] Bluetooth: hci3: command tx timeout [ 657.693872][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.704890][ T1170] usb 2-1: config 0 descriptor?? [ 658.070908][ T8651] usb 3-1: USB disconnect, device number 29 [ 658.149288][ T1170] prodikeys 0003:041E:2801.0026: item fetching failed at offset 5/7 [ 658.184703][ T1170] prodikeys 0003:041E:2801.0026: hid parse failed [ 658.189203][T19022] chnl_net:caif_netlink_parms(): no params data found [ 658.205277][ T1170] prodikeys 0003:041E:2801.0026: probe with driver prodikeys failed with error -22 [ 658.260207][T10720] hsr_slave_0: left promiscuous mode [ 658.275709][T10720] hsr_slave_1: left promiscuous mode [ 658.299940][T10720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.313848][T10720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.332484][T10720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.349395][T10720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.365176][ T8651] usb 2-1: USB disconnect, device number 51 [ 658.415243][T10720] veth1_macvtap: left promiscuous mode [ 658.431691][T10720] veth0_macvtap: left promiscuous mode [ 658.444589][T10720] veth1_vlan: left promiscuous mode [ 658.457171][T10720] veth0_vlan: left promiscuous mode [ 659.037770][ T5271] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 659.072580][T10720] team0 (unregistering): Port device team_slave_1 removed [ 659.154256][T10720] team0 (unregistering): Port device team_slave_0 removed [ 659.298874][ T5271] usb 1-1: Using ep0 maxpacket: 16 [ 659.310943][ T5271] usb 1-1: config index 0 descriptor too short (expected 65138, got 92) [ 659.333044][ T5271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.352809][ T5271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.386547][ T5271] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 659.413671][ T5271] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 659.435567][ T5271] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 659.489930][ T5271] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 659.554365][ T5271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.590882][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.619341][ T5232] Bluetooth: hci1: command tx timeout [ 659.628783][ T5271] usb 1-1: Product: syz [ 659.659600][ T5271] usb 1-1: Manufacturer: syz [ 659.673667][ T5271] usb 1-1: SerialNumber: syz [ 659.776882][ T5232] Bluetooth: hci3: command tx timeout [ 660.075089][ T5271] cdc_ncm 1-1:1.0: bind() failure [ 660.114866][ T5271] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 660.147806][ T5271] cdc_ncm 1-1:1.1: bind() failure [ 660.203690][ T5271] usb 1-1: USB disconnect, device number 41 [ 660.545460][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.854098][T19022] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.870066][T19022] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.877297][T19022] bridge_slave_0: entered allmulticast mode [ 660.915013][T19022] bridge_slave_0: entered promiscuous mode [ 660.919961][ T8651] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 660.932314][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.948439][T19022] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.979199][T19022] bridge_slave_1: entered allmulticast mode [ 661.010473][T19022] bridge_slave_1: entered promiscuous mode [ 661.133049][ T8651] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.148089][ T8651] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 661.163742][T19022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.176706][ T8651] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 661.185995][T19022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.201257][ T8651] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.252301][ T8651] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 661.265209][ T8651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 661.281068][ T8651] usb 2-1: SerialNumber: syz [ 661.297015][ T8651] usb 2-1: config 0 descriptor?? [ 661.310062][T19391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.320048][ T8651] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 661.366470][T19022] team0: Port device team_slave_0 added [ 661.395030][T19022] team0: Port device team_slave_1 added [ 661.497533][T18810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 661.516556][T19022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.538370][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.546659][T19391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2069'. [ 661.582774][ T5270] usb 2-1: USB disconnect, device number 52 [ 661.610338][T19022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.638370][T19022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.641041][ T8651] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 661.652094][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.687896][T19022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.698666][ T5232] Bluetooth: hci1: command tx timeout [ 661.718781][T18810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 661.749513][T18810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 661.808902][T18810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 661.834483][ T8651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.851463][ T5232] Bluetooth: hci3: command tx timeout [ 661.861838][ T8651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.867164][T19022] hsr_slave_0: entered promiscuous mode [ 661.882055][ T8651] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 661.892415][ T8651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.898916][T19022] hsr_slave_1: entered promiscuous mode [ 661.907539][ T8651] usb 3-1: config 0 descriptor?? [ 661.920810][T19022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.932959][T19022] Cannot create hsr debugfs directory [ 662.342525][T18810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.368546][ T8651] prodikeys 0003:041E:2801.0027: item fetching failed at offset 5/7 [ 662.404709][ T8651] prodikeys 0003:041E:2801.0027: hid parse failed [ 662.411369][ T8651] prodikeys 0003:041E:2801.0027: probe with driver prodikeys failed with error -22 [ 662.429596][T18810] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.176371][ T8651] usb 3-1: USB disconnect, device number 30 [ 663.224486][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.231736][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.250160][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.257370][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.786412][T19022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 663.825804][T19022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 663.868948][T19022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 663.890735][T19022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 663.975022][ T5232] Bluetooth: hci3: command tx timeout [ 664.241471][ T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 664.435360][T19022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.601507][T19022] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.684781][ T46] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 664.693847][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.719611][T18810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.732469][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.739694][ T8651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.759694][ T46] usb 2-1: config 0 descriptor?? [ 664.777011][ T46] cp210x 2-1:0.0: cp210x converter detected [ 664.808436][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.815657][ T8651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.078612][T19740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.191814][ T46] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 665.246591][ T46] usb 2-1: cp210x converter now attached to ttyUSB0 [ 665.537321][T19022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.572391][ T5271] usb 2-1: USB disconnect, device number 53 [ 666.160028][ T5271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 666.165438][T19778] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2091'. [ 666.183136][ T5271] cp210x 2-1:0.0: device disconnected [ 666.250489][T19767] ip6gretap0 speed is unknown, defaulting to 1000 [ 666.292107][T18810] veth0_vlan: entered promiscuous mode [ 666.333716][T19022] veth0_vlan: entered promiscuous mode [ 666.387126][T18810] veth1_vlan: entered promiscuous mode [ 666.388886][T19789] 9pnet_virtio: no channels available for device [ 666.415647][T19022] veth1_vlan: entered promiscuous mode [ 666.525798][T18810] veth0_macvtap: entered promiscuous mode [ 666.566613][T18810] veth1_macvtap: entered promiscuous mode [ 666.585624][T19022] veth0_macvtap: entered promiscuous mode [ 666.637233][T19022] veth1_macvtap: entered promiscuous mode [ 666.653103][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.672343][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.682886][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.696965][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.709666][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.720544][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.730839][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.742387][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.753948][T18810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.794385][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.805831][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.817025][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.830524][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.842653][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.854926][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.864867][T18810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.875369][T18810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.886497][T18810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.908140][T18810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.919438][T18810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.930018][T18810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.942485][T18810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.979838][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.001217][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.026546][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.038820][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.048991][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.064036][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.087338][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.122651][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.133913][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.145159][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.156254][T19022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.183444][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.194954][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.204995][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.215508][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.234475][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.247312][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.257272][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.267997][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.283571][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.294400][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.305269][ T26] block nbd2: Possible stuck request ffff888020bd8000: control (read@0,4096B). Runtime 150 seconds [ 667.307392][T19022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.341293][T19022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.356896][T19022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.367976][T19022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.376935][T19022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.711396][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.719564][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.746941][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.756354][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.903724][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.932825][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.966916][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.989925][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.139415][ T29] audit: type=1326 audit(1722454459.880:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19857 comm="syz.0.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb9773b9 code=0x0 [ 669.867604][ T30] INFO: task syz.2.1619:12073 blocked for more than 143 seconds. [ 669.883604][ T30] Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 669.896955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.907652][ T30] task:syz.2.1619 state:D stack:21344 pid:12073 tgid:12067 ppid:9918 flags:0x00004004 [ 669.925571][ T30] Call Trace: [ 669.929598][ T30] [ 669.934219][ T30] __schedule+0x17ae/0x4a10 [ 669.946229][ T30] ? __pfx___schedule+0x10/0x10 [ 669.958472][ T30] ? __pfx_lock_release+0x10/0x10 [ 669.967749][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 669.978234][ T30] ? schedule+0x90/0x320 [ 669.985531][ T30] schedule+0x14b/0x320 [ 669.990222][ T30] io_schedule+0x8d/0x110 [ 669.994824][ T30] folio_wait_bit_common+0x882/0x12b0 [ 670.000326][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 670.009437][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 670.018864][ T30] ? __filemap_get_folio+0x769/0xc10 [ 670.029272][ T30] do_read_cache_folio+0xb9/0x820 [ 670.036923][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 670.047090][ T30] read_part_sector+0xb3/0x330 [ 670.052210][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 670.059766][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 670.067796][ T30] ? snprintf+0xda/0x120 [ 670.077925][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 670.086909][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 670.096310][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 670.104572][ T30] ? vsnprintf+0x184/0x1da0 [ 670.109363][ T30] ? __pfx_snprintf+0x10/0x10 [ 670.119508][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 670.129632][ T30] bdev_disk_changed+0x72c/0x13d0 [ 670.136823][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 670.147398][ T30] blkdev_get_whole+0x2d2/0x450 [ 670.154790][ T30] bdev_open+0x2d4/0xc60 [ 670.159068][ T30] blkdev_open+0x3e8/0x570 [ 670.168128][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 670.173320][ T30] do_dentry_open+0x970/0x1440 [ 670.178127][ T30] vfs_open+0x3e/0x330 [ 670.186198][ T30] path_openat+0x2b3e/0x3470 [ 670.190794][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 670.196470][ T30] ? __lock_acquire+0x137a/0x2040 [ 670.202750][ T30] ? __pfx_path_openat+0x10/0x10 [ 670.207724][ T30] do_filp_open+0x235/0x490 [ 670.213438][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 670.218556][ T30] ? _raw_spin_unlock+0x28/0x50 [ 670.223441][ T30] ? alloc_fd+0x5a1/0x640 [ 670.227784][ T30] do_sys_openat2+0x13e/0x1d0 [ 670.232643][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 670.237923][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 670.243068][ T30] __x64_sys_openat+0x247/0x2a0 [ 670.248072][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 670.253545][ T30] ? do_syscall_64+0x100/0x230 [ 670.258393][ T30] ? do_syscall_64+0xb6/0x230 [ 670.263762][ T30] do_syscall_64+0xf3/0x230 [ 670.268290][ T30] ? clear_bhb_loop+0x35/0x90 [ 670.273222][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 670.281296][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.287352][ T30] RIP: 0033:0x7f67a3975d50 [ 670.293648][ T30] RSP: 002b:00007f67a46b5b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 670.302333][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67a3975d50 [ 670.310312][ T30] RDX: 0000000000000000 RSI: 00007f67a46b5c20 RDI: 00000000ffffff9c [ 670.319459][ T30] RBP: 00007f67a46b5c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 670.327498][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 670.335543][ T30] R13: 000000000000000b R14: 00007f67a3b05f80 R15: 00007ffded82e9c8 [ 670.344243][ T30] [ 670.347334][ T30] INFO: task syz.2.1619:12091 blocked for more than 143 seconds. [ 670.359683][ T30] Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 670.367474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.376592][ T30] task:syz.2.1619 state:D stack:26648 pid:12091 tgid:12067 ppid:9918 flags:0x00004004 [ 670.386795][ T30] Call Trace: [ 670.390058][ T30] [ 670.393095][ T30] __schedule+0x17ae/0x4a10 [ 670.397624][ T30] ? __pfx___schedule+0x10/0x10 [ 670.403527][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.408563][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 670.414214][ T30] ? schedule+0x90/0x320 [ 670.419801][ T30] schedule+0x14b/0x320 [ 670.424423][ T30] schedule_preempt_disabled+0x13/0x30 [ 670.429898][ T30] __mutex_lock+0x6a4/0xd70 [ 670.434658][ T30] ? __mutex_lock+0x527/0xd70 [ 670.439350][ T30] ? bdev_release+0x184/0x700 [ 670.444355][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 670.449508][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 670.454877][ T30] bdev_release+0x184/0x700 [ 670.459408][ T30] blkdev_release+0x15/0x20 [ 670.464156][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 670.469368][ T30] __fput+0x24a/0x8a0 [ 670.473517][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 670.478644][ T30] task_work_run+0x24f/0x310 [ 670.483711][ T30] ? __pfx_task_work_run+0x10/0x10 [ 670.488843][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 670.494934][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 670.501059][ T30] do_syscall_64+0x100/0x230 [ 670.505880][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 670.515223][ T30] ? clear_bhb_loop+0x35/0x90 [ 670.521204][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.527167][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.538740][ T9] usb 2-1: config 0 descriptor?? [ 670.543742][ T30] RIP: 0033:0x7f67a39773b9 [ 670.548153][ T30] RSP: 002b:00007f67a4695048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.556843][ T30] RAX: 0000000000000000 RBX: 00007f67a3b06058 RCX: 00007f67a39773b9 [ 670.565207][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 670.574790][ T9] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 670.582672][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 670.583707][ T30] RBP: 00007f67a39e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 670.591360][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 670.604897][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.606638][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 670.616242][ T30] R13: 000000000000006e R14: 00007f67a3b06058 R15: 00007ffded82e9c8 [ 670.622189][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 670.639946][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 670.640053][ T30] [ 670.647574][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 670.659658][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 670.677212][ T30] [ 670.677212][ T30] Showing all locks held in the system: [ 670.680867][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 670.687186][ T30] 10 locks held by kworker/0:1/9: [ 670.700077][ T30] 1 lock held by khungtaskd/30: [ 670.721754][ T30] #0: ffffffff8e7377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 670.733061][ T30] 3 locks held by kworker/0:2/1170: [ 670.738284][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 670.749904][ T30] #1: ffffc9000434fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 670.761142][ T30] #2: ffffffff8fa6d988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 670.770880][ T30] 7 locks held by kworker/u8:14/3025: [ 670.776377][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 670.787391][ T30] #1: ffffc90009fbfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 670.804886][ T30] #2: ffffffff8fa60e10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 670.805388][ T8651] usb 2-1: USB disconnect, device number 54 [ 670.814449][ T30] #3: ffff8880202ea0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 670.814515][ T30] #4: ffff888060074250 (&devlink->lock_key#42){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 670.814575][ T30] #5: ffffffff8fa6d988 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 670.846676][ T8651] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 670.851993][ T30] #6: ffffffff8e73cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 670.852068][ T30] 2 locks held by getty/4971: [ 670.887181][ T30] #0: ffff88802ffd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 670.888800][ T8651] keyspan 2-1:0.0: device disconnected [ 670.900331][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 670.917684][ T30] 3 locks held by kworker/1:5/5270: [ 670.923059][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 670.935623][ T30] #1: ffffc90003fdfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 670.948304][ T30] #2: ffff88801beb9240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 670.958504][ T30] 3 locks held by kworker/1:12/8651: [ 670.963952][ T30] #0: ffff88801bac7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 670.975366][ T30] #1: ffffc900093f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 670.988364][ T30] #2: ffff888023f43190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 670.997348][ T30] 1 lock held by syz.2.1619/12073: [ 671.002531][ T30] #0: ffff888020b024c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 671.011787][ T30] 1 lock held by syz.2.1619/12091: [ 671.017034][ T30] #0: ffff888020b024c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 671.026712][ T30] 3 locks held by kworker/u8:5/15417: [ 671.032189][ T30] #0: ffff88802a980148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 671.045535][ T30] #1: ffffc90004557d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 671.058456][ T30] #2: ffffffff8fa6d988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 671.067957][ T30] 1 lock held by syz-executor/19022: [ 671.073363][ T30] #0: ffffffff8e73ca40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 671.083420][ T30] [ 671.085758][ T30] ============================================= [ 671.085758][ T30] [ 671.096046][ T30] NMI backtrace for cpu 0 [ 671.100477][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 671.110968][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 671.121021][ T30] Call Trace: [ 671.124293][ T30] [ 671.127218][ T30] dump_stack_lvl+0x241/0x360 [ 671.131897][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.137095][ T30] ? __pfx__printk+0x10/0x10 [ 671.141677][ T30] ? vprintk_emit+0x631/0x770 [ 671.146365][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 671.151407][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 671.156353][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 671.161808][ T30] ? _printk+0xd5/0x120 [ 671.165956][ T30] ? __pfx__printk+0x10/0x10 [ 671.170539][ T30] ? __wake_up_klogd+0xcc/0x110 [ 671.175383][ T30] ? __pfx__printk+0x10/0x10 [ 671.179966][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 671.184983][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 671.190956][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 671.196935][ T30] watchdog+0xfee/0x1030 [ 671.201179][ T30] ? watchdog+0x1ea/0x1030 [ 671.205598][ T30] ? __pfx_watchdog+0x10/0x10 [ 671.210269][ T30] kthread+0x2f0/0x390 [ 671.214327][ T30] ? __pfx_watchdog+0x10/0x10 [ 671.218996][ T30] ? __pfx_kthread+0x10/0x10 [ 671.223575][ T30] ret_from_fork+0x4b/0x80 [ 671.227985][ T30] ? __pfx_kthread+0x10/0x10 [ 671.232566][ T30] ret_from_fork_asm+0x1a/0x30 [ 671.237788][ T30] [ 671.243337][ T30] Sending NMI from CPU 0 to CPUs 1: [ 671.248570][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 671.272529][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 671.279403][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 671.289905][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 671.299959][ T30] Call Trace: [ 671.303249][ T30] [ 671.306191][ T30] dump_stack_lvl+0x241/0x360 [ 671.310891][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.316104][ T30] ? __pfx__printk+0x10/0x10 [ 671.320699][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 671.326691][ T30] ? vscnprintf+0x5d/0x90 [ 671.331040][ T30] panic+0x349/0x860 [ 671.334956][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 671.341138][ T30] ? __pfx_panic+0x10/0x10 [ 671.345574][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 671.350965][ T30] ? __irq_work_queue_local+0x137/0x410 [ 671.356539][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 671.361928][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 671.368107][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 671.374287][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 671.380449][ T30] watchdog+0x102d/0x1030 [ 671.384790][ T30] ? watchdog+0x1ea/0x1030 [ 671.389212][ T30] ? __pfx_watchdog+0x10/0x10 [ 671.393901][ T30] kthread+0x2f0/0x390 [ 671.397961][ T30] ? __pfx_watchdog+0x10/0x10 [ 671.402630][ T30] ? __pfx_kthread+0x10/0x10 [ 671.407207][ T30] ret_from_fork+0x4b/0x80 [ 671.411616][ T30] ? __pfx_kthread+0x10/0x10 [ 671.416208][ T30] ret_from_fork_asm+0x1a/0x30 [ 671.420982][ T30] [ 671.424215][ T30] Kernel Offset: disabled [ 671.428527][ T30] Rebooting in 86400 seconds..