last executing test programs: 55.051541896s ago: executing program 0 (id=5033): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x32, 0x0, [{0x0, 0x6, "34a6caf5"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 52.270410834s ago: executing program 0 (id=5036): r0 = msgget$private(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000039000901000000000000000004000000040000000c0001800600000005470000"], 0x24}}, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000d9d4b3090485ccaf89e77653a1c07bcbfdf58f77dee646739b2cbe3644e4ed2aa4520b33796c31c4f328a50f0000000000"], 0x39, 0x800) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000140), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) landlock_create_ruleset(&(0x7f0000000080)={0x4004, 0x33ac5e7410fd699}, 0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) open(&(0x7f0000000240)='./file0\x00', 0x408200, 0x32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 50.343770301s ago: executing program 0 (id=5045): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000800)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 18.596464364s ago: executing program 0 (id=5046): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x32, 0x0, [{0x0, 0x6, "34a6caf5"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 15.416933436s ago: executing program 1 (id=5089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100)={0x9}, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)='@', 0x1, 0x0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) 15.147342979s ago: executing program 0 (id=5140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1391e9", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x3, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x14, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x4, "03c0"}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x7, "111fad2ea7"}]}}}}}}}}, 0x0) 14.339734378s ago: executing program 0 (id=5142): prlimit64(0x0, 0x0, &(0x7f00000005c0)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x6, 0x0, "85000087fd000080c600"}) 13.863330381s ago: executing program 1 (id=5144): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 12.734634778s ago: executing program 1 (id=5148): pipe(0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x0, 0xffffffff]}, &(0x7f0000000000)=0x54) 11.399677619s ago: executing program 4 (id=5152): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) 11.160466165s ago: executing program 4 (id=5154): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xc6, 0x57, 0xd1, 0x20, 0x421, 0x4df, 0xd53b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{}]}}]}}]}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2, @in6=@initdev}}, {{@in=@empty}}}, &(0x7f0000000580)=0xe8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x33]}}], [{@obj_type={'obj_type', 0x3d, ']'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '}+#$#,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nr_inodes'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, 'netdevsim'}}, {@obj_type={'obj_type', 0x3d, '.K('}}]}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x82, 0xc0, 0xff, 0x20, 0xfe9, 0xd620, 0x6f18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xd1, 0x7f, 0xa6}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80900) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="af5cead5e2e395cc0d"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, r3, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102000000206a05380040000102030109022d000101ff0005000400060200100122ed0a090581030800090e080905020310007f0d0700000000000000093beb9214018253e8567719e1d074c67a866f62fc0db165a32c0d79c298569a32687ae15de80ac056934bb9b6f2ec976a433fe5ad5484d7905b5424a4df97988e82cb06bf002bacf37b8772eaf4388daa8202124a39f746686f90381bafd76ad4f6dbc2550d566f222a5143da37688cf6593b94b15c45"], &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x7, 0x5, 0x9, 0x8}, 0xf8, &(0x7f0000000180)={0x5, 0xf, 0xf8, 0x3, [@ptm_cap={0x3}, @generic={0xdc, 0x10, 0xb, "c271536f96febcac4f0a44517107982eab277a294e356393166cb0963b86189cf91a9d23b0a696d664034e9b0eac90995012e40176f77248ca7a7e98d09c5985f7b6857d90580e66f4d55d50ca33ef340fcd58040c1359a55ba4c8d179bec332106567ca661d14e832d0ac8cf86bf7afab4f95f46b30b662de961fb791e04f0c00f9c3c47c9e9a3cdd88d6b9e6efa7a279c951ef90ffe1ab34e15390f5f0f708ae7faf9053f710cc5f4eef3f55bb99373d27cc08a9bc84e37f00949c185a32c2baff40c378d8ea614f93872ce8b2c079741264f5c5a33fafc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9868e75403eb8a40c687522a4424602c"}]}, 0x1, [{0xe4, &(0x7f0000000280)=ANY=[@ANYBLOB="e4032c40bbf579740a8822c3734576b38d3098699b1cda70e88be17f9ed582c2fe6b0d15f33691710f206ac7bd7249d1c5fa295eea87c7020cec4f9ba3a385bf193d871f51b769ee7f2e89dd6ba1a56a2edcece72b2140012a841f4371f7683428907dfb0832eb2e3f0c1e7180459d4526746fc8fec0dfded388b8e8da951ef586992e503a2fb54ae37f8bd991723a8e49883e1cdf6bc4031d7b298972dbf4e25a19894e72d993f0c0de5b70410e49ab2d0991081fb736738abd04d7e910bd9bcaf1db5487796e76ab45ef2fb32663e4a5a2ab7181bd8f2fcfbe45055e61f0e1628e5d51"]}]}) 8.03391903s ago: executing program 4 (id=5161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b1c000000000000000016ffffff20000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r2], 0x34}}, 0x0) 7.899478454s ago: executing program 4 (id=5162): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x664, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0xfffffffffffffffc, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.793433339s ago: executing program 3 (id=5164): syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 7.651088756s ago: executing program 3 (id=5165): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 7.123735497s ago: executing program 3 (id=5166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) 7.055761016s ago: executing program 1 (id=5167): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) 6.932245645s ago: executing program 3 (id=5168): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x1612, &(0x7f0000000040)={0x0, 0x0, 0x201}, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 6.744102328s ago: executing program 1 (id=5170): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)) tkill(0x0, 0x7) 5.694728479s ago: executing program 1 (id=5171): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f0000003780)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = dup2(r1, r0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0xae}) 4.788207123s ago: executing program 2 (id=5174): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/20, 0x21}], 0x1, 0x0, 0x2a}}], 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 4.581122103s ago: executing program 2 (id=5175): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xbe, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x0, 0x7, 0x80, 0x10, 0x9}, 0x1a, &(0x7f0000000280)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x80, 0x1, 0x9}]}, 0x3, [{0xdc, &(0x7f0000000380)=@string={0xdc, 0x3, "b68dc396b2bf5bb05d7e9ae1f7bf776ded2aa9385ec6272d2c6698d8e63a8461ea78ef7ff4c93f01f190d042a57e73099ce2c1efa89b9cb0f5339fd48d31e3bbbd004c4bcb84761d310bdf3e78f2b5739e07b59cd1871b2f008b60e625c60177a8c12d0344620c0ed1bb2ab9f68d6d8b273d3c9ad5c0fbaa6d1eebab716b7dfa0f26095f008a513412b68159cd028a1d44aecf2cb9a065978a9cecd59ffca9fa8f8c8b720e6655d9e5330a5134baae7cdd9d4354a396e33315232a2988533bbce8e08bd43e52b87f07b6d59a8994f619ffb66663b820860ff0b1"}}, {0xf4, &(0x7f0000000480)=@string={0xf4, 0x3, "66528ab18ace78897d36278e7345e418499b8703004c8082c324c52553acd527eb5d4aaba5113adb43f788432bfdc628efdfdc48b56c31ee6b261e465d230dbf450d0f032c7d067f41815afbbf02aa23f258a0528cf870e97551c994a862f9b932fb2eac0050c769571f3182d2612ceb91cf96ea3e26b8c9c583a8a1bb63887bf8b882ec1931e866d2d083d0f1ee64c05ee36d954b74dad88bca00db00705b2b1c16362bad2f1db66baba4170e14e431d6c9e60cb6d7524ed3d8ab4163db0238d999986be32876a7ef9a8592e3ed81163aa73cab85a7fe155bdefff2be298b394c3ad4f516b80e506821ab817fe31412f07f"}}, {0x55, &(0x7f0000000580)=@string={0x55, 0x3, "19880edaaf0e6796e79233aa67a28fd46336d83a83500adda8f24c334b55a5964eeef7192dba79df46b00bb77eb3b96b8c01ffcffc2a871f0f338fcedecd774b348afaba73f51cdc73563ac89e1cfa1332aa28"}}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) socket$vsock_stream(0x28, 0x1, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "5ecd42e4"}, @global=@item_4={0x3, 0x1, 0x8, "8be18234"}, @local=@item_4={0x3, 0x2, 0x9, "02fbf5f7"}]}}, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRES32=r4, @ANYRES64=r4, @ANYRESDEC=r4, @ANYRES16=r3, @ANYRESDEC=r0], 0x0) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00b\xcd+\x0f\x85\xdd\xfb\x04!\x81\xe2\x81\xf6N\x9cG\xe8\xcd\x13\xc59\xb0\x85Aj6\xdf\x12yT\xb8r\r\xef\xe4\x94\xda') syz_usb_control_io(r5, 0x0, 0x0) 4.305511081s ago: executing program 4 (id=5176): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 4.20280048s ago: executing program 4 (id=5177): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1}}, 0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) chdir(0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201005) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) 3.535664276s ago: executing program 3 (id=5178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0xaf01, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffce6, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x40095505, 0x0) 2.254725767s ago: executing program 2 (id=5179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) 1.949929386s ago: executing program 2 (id=5180): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)) tkill(0x0, 0x7) 927.833724ms ago: executing program 2 (id=5181): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='\xceu\xbe\x17\xe6\x80\xd2\xdc\x9ceN7\xf0\x02\x96\xa9)q\xd4\x1eYP\xdf\xf6\xb3y\x9a\x11\xdf\x84H\xd34\xee\xa1{\x15\\=7\xa7\xd6\x90\xbeD\xefg\x12\x06\xb5\x95\xcdm\xe0t\xd1\xdc#\x0f\x97E\xa8\xd6+\xbf\x13\x10\xb9E\xc2\x8ax\xfd\x14\x85\x16\b\xec\x0f/f\x1a\xe6F\xdb\xc7;\xfek\xe207Z\xb0\xa4\xfa\x04\x8d\xbc@\xd5\xaa\xdd\xae\xae\x139 \xd8N\x1e+\xdd\xfd\x90SN?\bj}XG\xff\xd5\x80\xb1P(\x7f(\a\xa3K\xd3}\x14\xe0\xf0\x13\xd5R-F\xe3w\xf6\xf62\x89HN\x1e42(?\xd7\xd7\x15\x19\xcb\xcdkqU7\xde\x17\xfd\xeb\xcb\x94\xe0\x18\xa5I\xef\xc1\x8e1\xe9 ?\x10!\xb9\x93\xf9N\x04\x8bU\xd8\xf4A\xe0\x8f\x04\xcaP\x99\xa1\x03\xbc\x11\xb2\x99\xc0\xe1\xa1\xcf\xd6\x806\x06v\xf7\x0fD') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 101.759398ms ago: executing program 3 (id=5182): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 0s ago: executing program 2 (id=5183): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.2.4814'. [ 1585.272963][T24378] tipc: Invalid UDP bearer configuration [ 1585.273040][T24378] tipc: Enabling of bearer rejected, failed to enable media [ 1587.395732][T24407] delete_channel: no stack [ 1587.467100][T24337] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1587.681174][T24337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.712874][T24337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.747014][T24337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1587.777047][T24337] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1587.793690][T24337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.835247][T24337] usb 2-1: config 0 descriptor?? [ 1588.289965][T24401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.335759][T24401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.396619][T24401] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20003 [ 1588.481183][T24416] fuse: Bad value for 'user_id' [ 1588.566166][T24337] usbhid 2-1:0.0: can't add hid device: -71 [ 1588.575298][T24337] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1588.635770][T24337] usb 2-1: USB disconnect, device number 83 [ 1591.178758][T24454] fuse: Bad value for 'fd' [ 1591.478433][T24460] fuse: Bad value for 'fd' [ 1592.483545][T24474] delete_channel: no stack [ 1593.024477][T24485] binder: 24477:24485 ioctl 400c620e 20000380 returned -22 [ 1593.577194][ T5141] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1593.795730][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 1593.812268][ T5141] usb 1-1: config index 0 descriptor too short (expected 64742, got 92) [ 1593.837153][ T5141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.869765][ T5141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.897063][ T5141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1593.929071][ T5141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1593.946993][ T5141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1593.977032][ T5141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1593.999188][ T5141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1594.008736][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.016782][ T5141] usb 1-1: Product: syz [ 1594.031358][ T5141] usb 1-1: Manufacturer: syz [ 1594.036085][ T5141] usb 1-1: SerialNumber: syz [ 1594.271790][ T5141] cdc_ncm 1-1:1.0: bind() failure [ 1594.315694][ T5141] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1594.356568][ T5141] cdc_ncm 1-1:1.1: bind() failure [ 1594.418778][ T5141] usb 1-1: USB disconnect, device number 65 [ 1594.998099][T24506] fuse: Bad value for 'fd' [ 1596.456409][ T5088] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1596.667956][ T5088] usb 4-1: Using ep0 maxpacket: 8 [ 1596.677020][ T5174] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1596.684578][ T5088] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1596.727318][ T5088] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1596.757777][ T5088] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1596.789237][ T5088] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1596.803964][ T5088] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1596.814310][ T5088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.867111][ T5174] usb 5-1: Using ep0 maxpacket: 16 [ 1596.884531][ T5174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.914787][ T5174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.943790][ T5174] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.975610][ T5174] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1597.006742][ T5174] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1597.035156][ T5174] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1597.061721][ T5174] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1597.063684][ T5088] usb 4-1: usb_control_msg returned -32 [ 1597.089574][ T5174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.100543][ T5088] usbtmc 4-1:16.0: can't read capabilities [ 1597.115972][ T5174] usb 5-1: Product: syz [ 1597.117722][ T5088] usb 4-1: USB disconnect, device number 67 [ 1597.133769][ T5174] usb 5-1: Manufacturer: syz [ 1597.151864][ T5174] usb 5-1: SerialNumber: syz [ 1597.392682][ T5174] cdc_ncm 5-1:1.0: bind() failure [ 1597.424289][ T5174] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1597.449345][ T5174] cdc_ncm 5-1:1.1: bind() failure [ 1597.485277][ T5174] usb 5-1: USB disconnect, device number 80 [ 1597.904706][T24539] fuse: Bad value for 'fd' [ 1599.122807][T24552] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 50409 - 0 [ 1599.148098][T24552] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 50409 - 0 [ 1599.157967][T24552] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 50409 - 0 [ 1599.187067][T24552] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 50409 - 0 [ 1599.214802][T24552] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 49118 - 0 [ 1599.243494][T24552] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 49118 - 0 [ 1599.297357][T24552] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 49118 - 0 [ 1599.328494][T24552] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 49118 - 0 [ 1602.887883][T24577] fuse: Bad value for 'fd' [ 1607.257124][ T8] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1607.862121][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.869183][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.232182][T24641] netlink: 'syz.3.4892': attribute type 10 has an invalid length. [ 1608.246952][T24641] veth1_macvtap: left promiscuous mode [ 1608.297124][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1608.311289][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1608.347442][ T5088] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1608.368568][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.387341][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.407086][ T8] usb 3-1: Product: syz [ 1608.418842][ T8] usb 3-1: Manufacturer: syz [ 1608.428157][ T8] usb 3-1: SerialNumber: syz [ 1608.450065][ T8] usb 3-1: bad CDC descriptors [ 1608.577363][ T5088] usb 1-1: Using ep0 maxpacket: 8 [ 1608.588866][ T5088] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1608.602358][ T5088] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1608.640451][ T5088] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1608.723197][ T5088] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1608.786396][ T5141] IPVS: starting estimator thread 0... [ 1608.896756][ T5088] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1608.937423][T24647] IPVS: using max 14 ests per chain, 33600 per kthread [ 1609.216552][ T5088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.299295][T23865] usb 3-1: USB disconnect, device number 88 [ 1610.329949][T15567] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1610.392146][ T5088] usb 1-1: usb_control_msg returned -71 [ 1610.410357][ T5088] usbtmc 1-1:16.0: can't read capabilities [ 1610.453226][ T5088] usb 1-1: USB disconnect, device number 66 [ 1610.559127][T15567] usb 4-1: Using ep0 maxpacket: 16 [ 1610.592722][T15567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1610.849604][T15567] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1610.861606][T15567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.898377][T15567] usb 4-1: config 0 descriptor?? [ 1611.759693][T15567] usb 4-1: can't set config #0, error -71 [ 1611.777964][T15567] usb 4-1: USB disconnect, device number 68 [ 1613.288434][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.458552][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.663772][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.046402][T15567] IPVS: starting estimator thread 0... [ 1614.111426][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.147337][T24693] IPVS: using max 15 ests per chain, 36000 per kthread [ 1614.432065][T10549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1614.445781][T10549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1614.454884][T10549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1614.472513][T10549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1614.494111][T10549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1614.503522][T10549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1614.510123][T23865] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1614.769488][ T1104] bridge_slave_1: left allmulticast mode [ 1614.780975][ T1104] bridge_slave_1: left promiscuous mode [ 1614.792520][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.801972][T23865] usb 2-1: Using ep0 maxpacket: 8 [ 1614.815606][T23865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1614.834884][ T1104] bridge_slave_0: left allmulticast mode [ 1614.844150][T23865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1614.865423][ T1104] bridge_slave_0: left promiscuous mode [ 1614.871873][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.880906][T23865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1614.903895][T23865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.961507][T23865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1614.985301][T23865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.197047][T24337] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1615.244418][T23865] usb 2-1: usb_control_msg returned -32 [ 1615.262212][T23865] usbtmc 2-1:16.0: can't read capabilities [ 1615.301498][T23865] usb 2-1: USB disconnect, device number 84 [ 1615.387167][T24337] usb 1-1: Using ep0 maxpacket: 16 [ 1615.403337][T24337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1615.477061][T24337] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1615.521055][T24337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.585526][T24337] usb 1-1: config 0 descriptor?? [ 1616.578015][T10549] Bluetooth: hci0: command tx timeout [ 1616.752986][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1617.157011][T23865] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1617.358328][T23865] usb 2-1: Using ep0 maxpacket: 32 [ 1617.372145][T23865] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1617.413362][T23865] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1617.442888][T23865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.468305][T23865] usb 2-1: Product: syz [ 1617.482776][T23865] usb 2-1: Manufacturer: syz [ 1617.493587][T23865] usb 2-1: SerialNumber: syz [ 1617.510886][T23865] usb 2-1: config 0 descriptor?? [ 1617.521909][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.534946][T23865] usb 2-1: bad CDC descriptors [ 1617.541497][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.559175][T23865] cdc_acm 2-1:0.0: Zero length descriptor references [ 1617.562652][ T1104] bond0 (unregistering): Released all slaves [ 1617.576611][T23865] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1617.605907][T24699] netlink: 'syz.0.4909': attribute type 10 has an invalid length. [ 1617.653866][T24699] veth1_macvtap: left promiscuous mode [ 1617.701759][T24337] usbhid 1-1:0.0: can't add hid device: -71 [ 1617.714305][T24337] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1617.755859][T24337] usb 1-1: USB disconnect, device number 67 [ 1617.801473][T24717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.823826][T24717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.837075][ T5142] usb 2-1: USB disconnect, device number 85 [ 1618.659089][T10549] Bluetooth: hci0: command tx timeout [ 1619.107279][ T8] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1619.320082][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1619.332669][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.362442][ T8] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1619.386732][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40 [ 1619.406128][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.429914][ T8] usb 2-1: Product: syz [ 1619.442982][ T8] usb 2-1: Manufacturer: syz [ 1619.464211][ T8] usb 2-1: SerialNumber: syz [ 1619.732941][ T8] usb 2-1: USB disconnect, device number 86 [ 1619.987363][ T1104] hsr_slave_0: left promiscuous mode [ 1620.040008][ T1104] hsr_slave_1: left promiscuous mode [ 1620.056129][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.086654][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.108133][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.126011][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.194048][ T1104] veth0_macvtap: left promiscuous mode [ 1620.205927][ T1104] veth1_vlan: left promiscuous mode [ 1620.212693][ T1104] veth0_vlan: left promiscuous mode [ 1620.816887][ T5142] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1620.867295][T10549] Bluetooth: hci0: command tx timeout [ 1621.014522][T24179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1621.026178][T24179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1621.037645][T24179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1621.048447][ T5142] usb 3-1: Using ep0 maxpacket: 8 [ 1621.061874][ T5142] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1621.082881][ T5142] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1621.094603][ T5142] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1621.110346][ T5142] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.123823][ T5142] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1621.133697][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.207998][T24179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1621.221011][T24179] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1621.242871][T24179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.682347][ T5142] usb 3-1: usb_control_msg returned -32 [ 1621.702250][ T5142] usbtmc 3-1:16.0: can't read capabilities [ 1621.739685][ T5142] usb 3-1: USB disconnect, device number 89 [ 1622.900841][T24179] Bluetooth: hci0: command tx timeout [ 1623.338918][T24179] Bluetooth: hci3: command tx timeout [ 1623.781705][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1623.940092][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1625.172415][T24794] bio_check_eod: 2 callbacks suppressed [ 1625.172443][T24794] syz.2.4934: attempt to access beyond end of device [ 1625.172443][T24794] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1625.228916][T24794] hpfs: hpfs_map_sector(): read error [ 1625.299635][T24179] Bluetooth: hci2: command 0x0406 tx timeout [ 1625.387349][T10549] Bluetooth: hci3: command tx timeout [ 1627.222940][T24694] chnl_net:caif_netlink_parms(): no params data found [ 1627.457016][T10549] Bluetooth: hci3: command tx timeout [ 1628.085500][T24694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.116413][T24694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.154658][T24694] bridge_slave_0: entered allmulticast mode [ 1628.179515][T24694] bridge_slave_0: entered promiscuous mode [ 1628.205137][T24694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.239257][T24694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.273739][T24694] bridge_slave_1: entered allmulticast mode [ 1628.308867][T24694] bridge_slave_1: entered promiscuous mode [ 1628.621562][T24694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.650607][T24694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.779231][ T5174] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1628.825506][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.836547][T24337] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1628.847177][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50409 - 0 [ 1628.861507][ T1104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 49118 - 0 [ 1628.933988][T24694] team0: Port device team_slave_0 added [ 1628.981264][ T5174] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1629.010370][ T5174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.024892][ T5174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.041428][T24337] usb 5-1: Using ep0 maxpacket: 16 [ 1629.045124][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.046758][ T5174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1629.067086][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50409 - 0 [ 1629.086037][T24337] usb 5-1: config index 0 descriptor too short (expected 64742, got 92) [ 1629.095015][T24337] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.102812][ T1104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 49118 - 0 [ 1629.106605][T24337] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.132716][T24337] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1629.143364][ T5174] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1629.152683][ T5174] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1629.161678][T24760] chnl_net:caif_netlink_parms(): no params data found [ 1629.168605][ T5174] usb 3-1: Manufacturer: syz [ 1629.174637][T24337] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1629.192673][ T5174] usb 3-1: config 0 descriptor?? [ 1629.201020][T24337] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1629.216079][T24337] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1629.229574][T24337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1629.241662][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.244253][T24337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.261186][T24337] usb 5-1: Product: syz [ 1629.265428][T24337] usb 5-1: Manufacturer: syz [ 1629.270275][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50409 - 0 [ 1629.271196][T24337] usb 5-1: SerialNumber: syz [ 1629.293167][ T1104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 49118 - 0 [ 1629.330576][T24694] team0: Port device team_slave_1 added [ 1629.463351][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.476797][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50409 - 0 [ 1629.497249][ T1104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 49118 - 0 [ 1629.537568][T24694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.541825][T24337] cdc_ncm 5-1:1.0: bind() failure [ 1629.549750][T10549] Bluetooth: hci3: command tx timeout [ 1629.565864][T24694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1629.578821][T24337] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1629.595364][T24694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.614366][T24694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.624933][ T5174] appleir 0003:05AC:8243.0051: No inputs registered, leaving [ 1629.631927][T24694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1629.644722][T24337] cdc_ncm 5-1:1.1: bind() failure [ 1629.678902][T24337] usb 5-1: USB disconnect, device number 81 [ 1629.703185][ T5174] appleir 0003:05AC:8243.0051: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1629.723401][T24694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.242811][T24694] hsr_slave_0: entered promiscuous mode [ 1630.290611][T24694] hsr_slave_1: entered promiscuous mode [ 1630.309040][T24694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1630.327288][T24694] Cannot create hsr debugfs directory [ 1630.359000][T24760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.376229][T24760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.392502][T24760] bridge_slave_0: entered allmulticast mode [ 1630.409560][T24760] bridge_slave_0: entered promiscuous mode [ 1630.483449][T24760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.506862][T24760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.678756][T24760] bridge_slave_1: entered allmulticast mode [ 1630.698832][T24760] bridge_slave_1: entered promiscuous mode [ 1630.848990][ T5174] IPVS: starting estimator thread 0... [ 1631.030308][T24872] IPVS: using max 14 ests per chain, 33600 per kthread [ 1631.377080][T24337] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 1631.776154][T24760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.882721][T24760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.896160][ T1104] bridge_slave_1: left allmulticast mode [ 1631.905591][ T1104] bridge_slave_1: left promiscuous mode [ 1631.915678][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.934419][ T1104] bridge_slave_0: left allmulticast mode [ 1631.940778][ T1104] bridge_slave_0: left promiscuous mode [ 1631.949843][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.242325][ T58] usb 3-1: USB disconnect, device number 90 [ 1632.987436][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1633.219080][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1633.264441][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1633.347290][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1633.387315][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1633.444471][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1633.495418][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1633.536150][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.621095][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.727599][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.751467][ T1104] bond0 (unregistering): Released all slaves [ 1633.896804][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 1633.902866][ T8] usbtmc 5-1:16.0: can't read capabilities [ 1634.024519][T24760] team0: Port device team_slave_0 added [ 1634.053260][T16567] usb 5-1: USB disconnect, device number 82 [ 1634.309224][T24760] team0: Port device team_slave_1 added [ 1635.074168][ T1104] hsr_slave_0: left promiscuous mode [ 1635.081637][ T1104] hsr_slave_1: left promiscuous mode [ 1635.090315][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.107212][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.218217][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.892127][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.018539][ T1104] veth0_macvtap: left promiscuous mode [ 1636.027674][ T1104] veth1_vlan: left promiscuous mode [ 1636.033125][ T1104] veth0_vlan: left promiscuous mode [ 1636.382419][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4958'. [ 1637.217054][T16567] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1637.454281][T16567] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1637.465987][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.478353][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.489651][T16567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1637.504808][T16567] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1637.514319][T16567] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1637.522903][T16567] usb 3-1: Manufacturer: syz [ 1637.537266][T16567] usb 3-1: config 0 descriptor?? [ 1637.562680][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1637.648323][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1637.956224][T16567] appleir 0003:05AC:8243.0052: No inputs registered, leaving [ 1638.002343][T16567] appleir 0003:05AC:8243.0052: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1639.229202][T24760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.244819][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.260098][ T8] usb 3-1: USB disconnect, device number 91 [ 1639.277990][T24760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.326222][T24760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.342838][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.369289][T24760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.392528][T24933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4962'. [ 1640.630040][T24760] hsr_slave_0: entered promiscuous mode [ 1640.656211][T24760] hsr_slave_1: entered promiscuous mode [ 1640.729686][T24950] netlink: 'syz.1.4965': attribute type 10 has an invalid length. [ 1640.761249][T24950] veth1_macvtap: left promiscuous mode [ 1641.167175][T15567] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1641.417265][T15567] usb 2-1: Using ep0 maxpacket: 16 [ 1641.466349][T15567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1641.577921][ T1104] IPVS: stop unused estimator thread 0... [ 1641.684356][T15567] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1641.887555][T15567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.990193][T15567] usb 2-1: config 0 descriptor?? [ 1642.521585][T24950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.550018][T24950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.583903][T24694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1642.599327][T24694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1642.663411][T24694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1642.706804][T24694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1642.740011][T15567] hid-generic 0003:0158:0100.0053: unknown main item tag 0x1 [ 1642.747591][T15567] hid-generic 0003:0158:0100.0053: unexpected long global item [ 1642.756064][T15567] hid-generic 0003:0158:0100.0053: probe with driver hid-generic failed with error -22 [ 1642.777350][T15567] usb 2-1: USB disconnect, device number 87 [ 1643.182354][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4968'. [ 1644.958812][T24694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.181739][T24694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.209086][T24760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1645.240601][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.247899][T15567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.265718][T24760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1645.295724][T15567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.303019][T15567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.327868][T24760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1645.388444][T24760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1645.779428][T24179] Bluetooth: hci1: command 0x0406 tx timeout [ 1646.542922][T24760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.655534][T24760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.718270][T24179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1646.730855][T24179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1646.741341][T24179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1646.749651][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.756807][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.777660][T24179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1646.792211][T24179] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1646.801162][T24179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1646.841873][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.849173][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.942984][T24694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.947880][T15567] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1647.339243][T15567] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1647.504070][T24694] veth0_vlan: entered promiscuous mode [ 1647.981236][T24694] veth1_vlan: entered promiscuous mode [ 1648.180754][T15567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.205254][T15567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.218865][T15567] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1648.235518][T15567] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1648.247083][T15567] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1648.255228][T15567] usb 5-1: Manufacturer: syz [ 1648.263374][T15567] usb 5-1: config 0 descriptor?? [ 1648.379566][T25006] chnl_net:caif_netlink_parms(): no params data found [ 1648.525238][T24760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.676057][T24694] veth0_macvtap: entered promiscuous mode [ 1648.731552][T24694] veth1_macvtap: entered promiscuous mode [ 1648.738155][T15567] appleir 0003:05AC:8243.0054: No inputs registered, leaving [ 1648.792476][T15567] appleir 0003:05AC:8243.0054: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1648.891673][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1648.919862][T24179] Bluetooth: hci2: command tx timeout [ 1649.289994][T25006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.437477][T25006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.444802][T25006] bridge_slave_0: entered allmulticast mode [ 1649.518819][T25006] bridge_slave_0: entered promiscuous mode [ 1649.563217][T25006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.617583][T25006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.624930][T25006] bridge_slave_1: entered allmulticast mode [ 1649.650100][T25006] bridge_slave_1: entered promiscuous mode [ 1649.798889][T25006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.824881][T25006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.865336][T24760] veth0_vlan: entered promiscuous mode [ 1649.950234][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1650.002268][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.043709][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1650.093714][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.117043][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1650.135107][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.147273][T24694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.739494][T25006] team0: Port device team_slave_0 added [ 1650.791070][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.851701][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.892686][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.947659][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.977049][T24179] Bluetooth: hci2: command tx timeout [ 1650.987549][T24694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1651.027027][T24694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.048126][T24694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.313952][T25006] team0: Port device team_slave_1 added [ 1651.331170][T24760] veth1_vlan: entered promiscuous mode [ 1651.356405][T24694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.454763][T24694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.572142][T24694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.719235][T24694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.098545][T25006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.105559][T25006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.232241][T25006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.339189][T25006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.346235][T25006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.475965][ T8] usb 5-1: USB disconnect, device number 83 [ 1652.491556][T25006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.057737][T24179] Bluetooth: hci2: command tx timeout [ 1653.269565][T24760] veth0_macvtap: entered promiscuous mode [ 1653.345125][T25006] hsr_slave_0: entered promiscuous mode [ 1653.390155][T25006] hsr_slave_1: entered promiscuous mode [ 1653.414159][T25006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.432259][T25006] Cannot create hsr debugfs directory [ 1653.487870][T24760] veth1_macvtap: entered promiscuous mode [ 1653.630734][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.654739][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.739652][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.788999][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.806970][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.836985][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.857378][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.890032][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.901448][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.912487][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.925222][T24760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.992595][T25095] netlink: 'syz.2.4986': attribute type 10 has an invalid length. [ 1654.011099][T25095] veth1_macvtap: left promiscuous mode [ 1654.044970][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.097374][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.112506][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.124000][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.151072][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.163459][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.265261][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.285298][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.314328][T24760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.411394][ T5388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.438569][ T5388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.137368][T24179] Bluetooth: hci2: command tx timeout [ 1655.327150][T16567] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1655.429613][T25006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.587187][T16567] usb 3-1: Using ep0 maxpacket: 16 [ 1655.671379][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1655.758709][T24760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.818382][T16567] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1655.883216][T24760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.929603][T16567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.973799][T24760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.987284][T24760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.033430][T16567] usb 3-1: config 0 descriptor?? [ 1656.210784][T25006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.509336][T25006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.668880][T25095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.754145][T25095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.119571][T16567] hid-generic 0003:0158:0100.0055: unknown main item tag 0x1 [ 1657.149859][T16567] hid-generic 0003:0158:0100.0055: unexpected long global item [ 1657.207888][T16567] hid-generic 0003:0158:0100.0055: probe with driver hid-generic failed with error -22 [ 1657.245554][T25006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.309022][T16567] usb 3-1: USB disconnect, device number 92 [ 1657.357163][T15567] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1657.442613][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.466443][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.544700][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.565455][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.596446][T15567] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1657.630526][T15567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.672648][T15567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.699094][T15567] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1657.743670][T15567] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1657.769872][T15567] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1657.788150][T25140] fuse: Invalid rootmode [ 1657.794096][T15567] usb 5-1: Manufacturer: syz [ 1657.819251][T25006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1657.819415][T15567] usb 5-1: config 0 descriptor?? [ 1657.896430][T25006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1657.989035][T25006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1658.187680][T25006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1658.321397][T15567] appleir 0003:05AC:8243.0056: No inputs registered, leaving [ 1658.443894][T15567] appleir 0003:05AC:8243.0056: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1659.014029][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.522687][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.128640][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.693255][T16567] usb 5-1: USB disconnect, device number 84 [ 1662.340407][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.574389][T25006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.611866][T25006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.649194][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.656397][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.712280][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.719539][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.762782][T10549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1662.776215][T10549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1662.786395][T10549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1662.820566][T10549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1662.843045][T10549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1662.860811][T10549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1663.307272][ T58] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1663.356323][ T35] bridge_slave_1: left allmulticast mode [ 1663.366983][ T35] bridge_slave_1: left promiscuous mode [ 1663.394012][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.464991][ T35] bridge_slave_0: left allmulticast mode [ 1663.486752][ T35] bridge_slave_0: left promiscuous mode [ 1663.505939][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.526633][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 1663.559246][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1663.601370][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1663.633162][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.663129][ T58] usb 5-1: Product: syz [ 1663.678374][ T58] usb 5-1: Manufacturer: syz [ 1663.702432][ T58] usb 5-1: SerialNumber: syz [ 1663.728502][ T58] usb 5-1: bad CDC descriptors [ 1663.899662][T25213] fuse: Invalid rootmode [ 1664.379065][T16567] usb 5-1: USB disconnect, device number 85 [ 1665.038445][T10549] Bluetooth: hci4: command tx timeout [ 1665.217948][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.268194][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.306085][ T35] bond0 (unregistering): Released all slaves [ 1665.543352][T25006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.717101][ T5142] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1666.191545][ T5142] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1666.408753][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.451472][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.736596][ T5142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1666.768393][ T5142] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1667.068641][ T5142] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1667.085280][T10549] Bluetooth: hci4: command tx timeout [ 1667.316985][ T5142] usb 5-1: Manufacturer: syz [ 1667.364324][ T5142] usb 5-1: config 0 descriptor?? [ 1667.847414][T25189] chnl_net:caif_netlink_parms(): no params data found [ 1668.045156][ T5142] appleir 0003:05AC:8243.0057: No inputs registered, leaving [ 1668.061845][ T5142] appleir 0003:05AC:8243.0057: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1668.095476][T25259] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5012'. [ 1668.105193][T25259] openvswitch: netlink: Tunnel attr 3840 out of range max 16 [ 1668.121127][ T35] hsr_slave_0: left promiscuous mode [ 1668.137375][ T35] hsr_slave_1: left promiscuous mode [ 1668.170378][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.197569][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.237154][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1668.244654][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.289592][ T35] veth0_macvtap: left promiscuous mode [ 1668.295322][ T35] veth1_vlan: left promiscuous mode [ 1668.317102][ T35] veth0_vlan: left promiscuous mode [ 1668.937575][T10103] usb 5-1: USB disconnect, device number 86 [ 1669.140647][T10549] Bluetooth: hci4: command tx timeout [ 1669.307100][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.313705][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.306954][T10549] Bluetooth: hci4: command tx timeout [ 1671.887773][T25295] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5021'. [ 1671.897247][T25295] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1672.413246][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1673.135979][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1673.570619][T25312] overlayfs: missing 'lowerdir' [ 1674.287434][ T5142] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1674.357147][ T5174] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1674.484978][ T5142] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1674.496328][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.510764][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.536250][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1674.557172][ T5142] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1674.566299][ T5142] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1674.586599][T25006] veth0_vlan: entered promiscuous mode [ 1674.593994][ T5142] usb 4-1: Manufacturer: syz [ 1674.606375][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.620830][ T58] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1674.668032][ T5142] usb 4-1: config 0 descriptor?? [ 1674.676169][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.691031][ T5174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.704417][ T5174] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1674.713693][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.732749][ T5174] usb 5-1: config 0 descriptor?? [ 1674.733252][T25006] veth1_vlan: entered promiscuous mode [ 1674.848411][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 1674.859638][T25189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.867322][T25189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.868556][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1674.874908][T25189] bridge_slave_0: entered allmulticast mode [ 1674.898110][T25189] bridge_slave_0: entered promiscuous mode [ 1674.903289][ T58] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1674.915807][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.924575][ T58] usb 1-1: Product: syz [ 1674.929548][ T58] usb 1-1: Manufacturer: syz [ 1674.934292][ T58] usb 1-1: SerialNumber: syz [ 1674.939481][T25189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.946676][T25189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.956654][ T58] usb 1-1: config 0 descriptor?? [ 1674.976210][T25189] bridge_slave_1: entered allmulticast mode [ 1674.977576][ T58] usb 1-1: bad CDC descriptors [ 1674.997859][ T58] cdc_acm 1-1:0.0: Zero length descriptor references [ 1675.002996][T25189] bridge_slave_1: entered promiscuous mode [ 1675.004683][ T58] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1675.106428][ T5142] appleir 0003:05AC:8243.0058: No inputs registered, leaving [ 1675.148090][T25189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.158687][ T5142] appleir 0003:05AC:8243.0058: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1675.166282][T25308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.191877][T25189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.216232][T25308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.220377][T25314] tmpfs: Bad value for 'nr_inodes' [ 1675.236246][T25308] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20003 [ 1675.276631][T25314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.318706][T25314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.342114][ T5142] usb 1-1: USB disconnect, device number 68 [ 1675.398993][ T5174] usbhid 5-1:0.0: can't add hid device: -71 [ 1675.424744][ T5174] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1675.459924][ T5174] usb 5-1: USB disconnect, device number 87 [ 1675.476399][T25006] veth0_macvtap: entered promiscuous mode [ 1675.534146][T25189] team0: Port device team_slave_0 added [ 1675.560986][T25189] team0: Port device team_slave_1 added [ 1675.618798][ T35] IPVS: stop unused estimator thread 0... [ 1675.620785][T25006] veth1_macvtap: entered promiscuous mode [ 1675.778984][T25189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.806494][T25189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.867256][ T5141] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1675.877075][T25189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.935541][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.956106][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.976360][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.015784][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.041668][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.060156][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.075120][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.083513][ T5141] usb 1-1: not running at top speed; connect to a high speed hub [ 1676.098044][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.110858][ T5141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.132503][T25006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.140288][ T5141] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1676.149225][T25189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.164582][T25189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.168694][ T5141] usb 1-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40 [ 1676.214340][T25189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.242600][ T5174] usb 4-1: USB disconnect, device number 69 [ 1676.246455][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.287250][ T5141] usb 1-1: Product: syz [ 1676.291472][ T5141] usb 1-1: Manufacturer: syz [ 1676.296112][ T5141] usb 1-1: SerialNumber: syz [ 1676.325279][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.347902][T10549] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1676.352210][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.392220][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.402893][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.416074][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.429301][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.439268][T25006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.450757][T25006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.467576][T25006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.551768][T25006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.560738][T25006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.570617][T25006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.581791][T25006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.600613][ T5141] usb 1-1: USB disconnect, device number 69 [ 1676.636380][T25189] hsr_slave_0: entered promiscuous mode [ 1676.645653][T25189] hsr_slave_1: entered promiscuous mode [ 1676.661655][T25189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.669452][T25189] Cannot create hsr debugfs directory [ 1677.091083][T17563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.118152][T17563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.299234][T17563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.311822][T17563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.428191][T25364] netlink: 'syz.0.5033': attribute type 10 has an invalid length. [ 1678.458492][T25364] veth1_macvtap: left promiscuous mode [ 1678.853264][ T5088] IPVS: starting estimator thread 0... [ 1678.978248][ T785] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1678.986167][T25375] IPVS: using max 14 ests per chain, 33600 per kthread [ 1679.198231][ T785] usb 1-1: Using ep0 maxpacket: 16 [ 1679.232048][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1679.244935][T25189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1679.276592][ T785] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1679.303879][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.337142][T25189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1679.337445][ T785] usb 1-1: config 0 descriptor?? [ 1679.388691][T25189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1679.424216][T25189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1679.881895][T25364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.910003][T25374] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5034'. [ 1679.931220][T25364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.931753][T25189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.960662][T25374] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1680.002066][ T785] hid-generic 0003:0158:0100.0059: unknown main item tag 0x1 [ 1680.030562][ T785] hid-generic 0003:0158:0100.0059: unexpected long global item [ 1680.053333][ T785] hid-generic 0003:0158:0100.0059: probe with driver hid-generic failed with error -22 [ 1680.170959][T25189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.192520][ T785] usb 1-1: USB disconnect, device number 70 [ 1680.312877][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.320207][T16567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.889437][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.896670][T16567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.239002][T25189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1681.708976][T25396] overlayfs: missing 'lowerdir' [ 1681.994195][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1682.910003][T25189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.387077][T17563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.290580][T17563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.317202][ T5088] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1684.550069][T17563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.691254][T25444] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1684.701063][T25444] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1684.788486][ T5088] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1684.809839][ T5088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.814980][T17563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.846931][ T5088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.856748][ T5088] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1684.902285][T25189] veth0_vlan: entered promiscuous mode [ 1684.931257][ T5088] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1684.934815][T25189] veth1_vlan: entered promiscuous mode [ 1684.953147][ T5088] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1684.979218][ T5088] usb 5-1: Manufacturer: syz [ 1685.001927][ T5088] usb 5-1: config 0 descriptor?? [ 1685.066059][T24179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1685.085085][T24179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1685.099969][T24179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1685.122982][T24179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1685.131824][T24179] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1685.144207][T24179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1685.389882][T17563] bridge_slave_1: left allmulticast mode [ 1685.395629][T17563] bridge_slave_1: left promiscuous mode [ 1685.419639][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.445410][T17563] bridge_slave_0: left allmulticast mode [ 1685.464241][T17563] bridge_slave_0: left promiscuous mode [ 1685.580168][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.723795][ T5088] appleir 0003:05AC:8243.005A: No inputs registered, leaving [ 1685.735739][ T5088] appleir 0003:05AC:8243.005A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1686.199050][T25467] overlayfs: missing 'lowerdir' [ 1687.057364][ T5142] usb 5-1: reset high-speed USB device number 88 using dummy_hcd [ 1687.361072][T24179] Bluetooth: hci3: command tx timeout [ 1687.787797][T25490] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1687.797502][T25490] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1688.117765][T17563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.134229][T17563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.161128][ T58] usb 5-1: USB disconnect, device number 88 [ 1688.174154][T17563] bond0 (unregistering): Released all slaves [ 1688.253034][T25189] veth0_macvtap: entered promiscuous mode [ 1688.322939][T25189] veth1_macvtap: entered promiscuous mode [ 1688.408294][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.479222][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.490545][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.503753][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.514401][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.535324][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.554413][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.580370][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.606991][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.637076][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.714598][T25189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.873705][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.913542][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.931765][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.955835][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.973302][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.994876][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.015583][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.035905][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.046423][T25189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.058662][T25189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.102795][T25189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.184296][T25189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.210608][T25189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.231786][T25189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.246294][T25189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.388108][T24179] Bluetooth: hci3: command tx timeout [ 1689.428047][ T58] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1689.545171][T17563] hsr_slave_0: left promiscuous mode [ 1689.574515][T17563] hsr_slave_1: left promiscuous mode [ 1689.588623][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.617129][T17563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.630112][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.637941][T17563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.659954][ T58] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1689.677193][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.695537][T17563] veth0_macvtap: left promiscuous mode [ 1689.701967][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.712402][T17563] veth1_vlan: left promiscuous mode [ 1689.717939][T17563] veth0_vlan: left promiscuous mode [ 1689.723338][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1689.759569][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1689.784151][ T58] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1689.796352][ T58] usb 2-1: Manufacturer: syz [ 1689.821014][ T58] usb 2-1: config 0 descriptor?? [ 1689.877146][ T785] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1690.036784][T25521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5063'. [ 1690.083016][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.101224][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.114957][ T785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1690.128259][ T785] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1690.147299][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.160066][ T785] usb 5-1: config 0 descriptor?? [ 1690.266062][ T58] appleir 0003:05AC:8243.005B: No inputs registered, leaving [ 1690.312291][ T58] appleir 0003:05AC:8243.005B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1690.642241][T25520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.672982][T25520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.684579][T25520] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20003 [ 1690.801273][ T785] usbhid 5-1:0.0: can't add hid device: -71 [ 1690.820322][ T785] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1690.859934][ T785] usb 5-1: USB disconnect, device number 89 [ 1690.978480][T17563] team0 (unregistering): Port device team_slave_1 removed [ 1691.061174][T17563] team0 (unregistering): Port device team_slave_0 removed [ 1691.225100][T24337] usb 2-1: USB disconnect, device number 88 [ 1691.310932][T25531] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1691.320403][T25531] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1691.459279][T24179] Bluetooth: hci3: command tx timeout [ 1692.986947][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.011599][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.100111][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.125800][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.529435][T25447] chnl_net:caif_netlink_parms(): no params data found [ 1693.538609][T24179] Bluetooth: hci3: command tx timeout [ 1694.217794][T25447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.240159][T25447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.327732][T25447] bridge_slave_0: entered allmulticast mode [ 1694.365134][T25447] bridge_slave_0: entered promiscuous mode [ 1694.418032][T25447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.447204][T25447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.471819][T25447] bridge_slave_1: entered allmulticast mode [ 1694.734081][T25447] bridge_slave_1: entered promiscuous mode [ 1694.776330][T25576] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1694.785939][T25576] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1694.907877][T25447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.951191][T25447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.005259][T25554] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1695.119051][T25447] team0: Port device team_slave_0 added [ 1695.152521][T25447] team0: Port device team_slave_1 added [ 1695.524579][T25447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.566684][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.708906][T25447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.760947][T25447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.785777][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.811838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1695.836989][T24337] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1695.863989][T25447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.029213][T24337] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1696.045926][T25447] hsr_slave_0: entered promiscuous mode [ 1696.060542][T24337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.078208][T24337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.095649][T24337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1696.258453][T25447] hsr_slave_1: entered promiscuous mode [ 1696.286581][T24337] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1696.316275][T24337] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1696.361738][T24337] usb 5-1: Manufacturer: syz [ 1696.433290][T24337] usb 5-1: config 0 descriptor?? [ 1697.031393][T24337] appleir 0003:05AC:8243.005C: No inputs registered, leaving [ 1697.080349][T24337] appleir 0003:05AC:8243.005C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1697.946393][T25630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1697.956085][T25630] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1698.156011][T10549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1698.177566][T10549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1698.187977][T10549] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1698.196353][T10549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1698.220158][T10549] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1698.228215][T10549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1698.423750][ T785] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 1698.631942][T25640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1699.460245][ T1051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.694878][ T1051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.734102][T16567] usb 5-1: USB disconnect, device number 90 [ 1700.264415][ T1051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.337435][T24179] Bluetooth: hci5: command tx timeout [ 1700.508734][ T1051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.537085][T25447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1700.564617][T25447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1700.627446][T25634] chnl_net:caif_netlink_parms(): no params data found [ 1700.649502][T25447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1700.707219][T25447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1701.250633][T25634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.270783][T25634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.281129][T25634] bridge_slave_0: entered allmulticast mode [ 1701.295821][T25678] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1701.306194][T25678] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1701.312268][T25634] bridge_slave_0: entered promiscuous mode [ 1701.376385][T25634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.392445][T25634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.411402][T25634] bridge_slave_1: entered allmulticast mode [ 1701.426140][T25634] bridge_slave_1: entered promiscuous mode [ 1701.562693][T25634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.595851][T25634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.634453][ T1051] bridge_slave_1: left allmulticast mode [ 1701.651229][ T1051] bridge_slave_1: left promiscuous mode [ 1701.664861][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.686509][ T1051] bridge_slave_0: left allmulticast mode [ 1701.692577][ T1051] bridge_slave_0: left promiscuous mode [ 1701.698934][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.417179][T24179] Bluetooth: hci5: command tx timeout [ 1703.262280][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.298347][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.352907][ T1051] bond0 (unregistering): Released all slaves [ 1703.669162][T25719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1703.883226][T25634] team0: Port device team_slave_0 added [ 1703.939346][T25634] team0: Port device team_slave_1 added [ 1704.404640][T25634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.422872][T25634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.460530][ T5142] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1704.489590][T25634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.503882][T24179] Bluetooth: hci5: command tx timeout [ 1704.676336][ T5142] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1704.703932][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.719280][T25634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.726287][T25634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.752458][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.763049][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1704.787225][T25634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.807126][ T5142] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1704.847368][ T5142] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1704.896014][ T5142] usb 4-1: Manufacturer: syz [ 1704.935684][ T5142] usb 4-1: config 0 descriptor?? [ 1705.002224][T25739] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5110'. [ 1705.011890][T25739] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 1705.025857][ T1051] hsr_slave_0: left promiscuous mode [ 1705.043487][ T1051] hsr_slave_1: left promiscuous mode [ 1705.055288][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.068827][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.077994][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.085577][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.114469][ T1051] veth1_macvtap: left promiscuous mode [ 1705.126084][ T1051] veth0_macvtap: left promiscuous mode [ 1705.135542][ T1051] veth1_vlan: left promiscuous mode [ 1705.143902][ T1051] veth0_vlan: left promiscuous mode [ 1705.390942][ T5142] appleir 0003:05AC:8243.005D: No inputs registered, leaving [ 1705.422368][ T5142] appleir 0003:05AC:8243.005D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1706.371912][ T5174] usb 4-1: USB disconnect, device number 70 [ 1706.576986][T24179] Bluetooth: hci5: command tx timeout [ 1706.820766][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 1706.975592][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 1709.327879][T25776] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1710.458657][T25634] hsr_slave_0: entered promiscuous mode [ 1710.501085][T25634] hsr_slave_1: entered promiscuous mode [ 1710.578156][T25634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1710.585799][T25634] Cannot create hsr debugfs directory [ 1710.699351][T25447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.015902][T25447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.066158][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.073506][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.157113][ T5142] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1711.222692][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.230049][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.379311][ T5142] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1711.402202][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.459950][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.501667][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1711.554982][ T1051] IPVS: stop unused estimator thread 0... [ 1711.567519][ T5142] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1711.603875][ T5142] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1711.630362][ T5142] usb 3-1: Manufacturer: syz [ 1711.668213][ T5142] usb 3-1: config 0 descriptor?? [ 1712.082532][ T5142] appleir 0003:05AC:8243.005E: No inputs registered, leaving [ 1712.131016][ T5142] appleir 0003:05AC:8243.005E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1712.336697][T25447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.427887][T25634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1712.468778][T25634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1712.531355][T25634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1712.576502][T25634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1712.726617][T25447] veth0_vlan: entered promiscuous mode [ 1712.889053][T25447] veth1_vlan: entered promiscuous mode [ 1713.123680][T25447] veth0_macvtap: entered promiscuous mode [ 1713.179740][T25447] veth1_macvtap: entered promiscuous mode [ 1713.290564][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.312658][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.324401][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.349068][T16567] usb 3-1: USB disconnect, device number 93 [ 1713.378585][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.412513][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.432203][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.458271][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.490274][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.506300][T25447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.548336][T25634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.574713][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.591314][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.605572][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.763112][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.815161][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.865729][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.914102][T25447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.955594][T25447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.007772][T25447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.051241][T25447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.061409][T25447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.073341][T25447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.082254][T25447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.224243][T25634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.345161][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.352409][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.434773][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.442052][T10103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.512220][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.532826][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.657916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.677727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.945875][T25846] netlink: 'syz.0.5046': attribute type 10 has an invalid length. [ 1714.997966][T25846] veth1_macvtap: left promiscuous mode [ 1715.451605][T25634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.531272][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1715.658664][T25634] veth0_vlan: entered promiscuous mode [ 1715.723108][T25634] veth1_vlan: entered promiscuous mode [ 1715.927353][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1715.935289][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1715.936156][T25634] veth0_macvtap: entered promiscuous mode [ 1716.462883][T25634] veth1_macvtap: entered promiscuous mode [ 1716.649215][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.713084][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.728225][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1716.739524][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.750410][ T9] usb 1-1: config 0 descriptor?? [ 1716.776907][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.805060][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.825291][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.841558][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.861981][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.878179][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1716.886926][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.917094][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.949837][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.990013][T25634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1717.033105][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.078499][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.089187][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.100295][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.110742][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.123411][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.135090][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.148877][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.159497][T25634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.172124][T25634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.190746][T25634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1717.212528][T25873] netlink: 'syz.3.5137': attribute type 4 has an invalid length. [ 1717.272767][T25846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.283412][T25874] netlink: 'syz.3.5137': attribute type 4 has an invalid length. [ 1717.307482][T25846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.358139][T25634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.380782][ T9] hid-generic 0003:0158:0100.005F: unknown main item tag 0x1 [ 1717.397164][ T9] hid-generic 0003:0158:0100.005F: unexpected long global item [ 1717.404742][T25634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.414472][ T9] hid-generic 0003:0158:0100.005F: probe with driver hid-generic failed with error -22 [ 1717.427077][T25634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.446409][T25634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.561481][ T9] usb 1-1: USB disconnect, device number 71 [ 1717.738748][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.747486][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.842933][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.856922][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.976986][ T5142] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1719.126962][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 1719.134626][ T5142] usb 4-1: config index 0 descriptor too short (expected 64742, got 92) [ 1719.147828][ T5142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.159054][ T5142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.164770][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.186520][ T5142] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1719.209029][ T5142] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1719.229827][ T5142] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1719.243965][ T5142] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1719.261356][ T5142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1719.280652][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.322251][ T5142] usb 4-1: Product: syz [ 1719.326506][ T5142] usb 4-1: Manufacturer: syz [ 1719.344247][ T5142] usb 4-1: SerialNumber: syz [ 1719.417174][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.593169][ T5142] cdc_ncm 4-1:1.0: bind() failure [ 1719.622220][ T5142] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1719.655034][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.666360][ T5142] cdc_ncm 4-1:1.1: bind() failure [ 1719.737925][ T5142] usb 4-1: USB disconnect, device number 71 [ 1720.641299][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.824338][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1721.764168][T10549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.776465][T10549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.788086][T10549] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.798481][T10549] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.808623][T10549] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1721.816104][T10549] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1721.891159][T25920] capability: warning: `syz.4.5150' uses deprecated v2 capabilities in a way that may be insecure [ 1721.907630][T25920] overlayfs: upper fs does not support tmpfile. [ 1722.142842][ T11] bridge_slave_1: left allmulticast mode [ 1722.165558][ T11] bridge_slave_1: left promiscuous mode [ 1722.187964][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.225126][ T11] bridge_slave_0: left allmulticast mode [ 1722.232772][ T11] bridge_slave_0: left promiscuous mode [ 1722.251642][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.567007][ T785] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1722.777192][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 1722.785992][ T785] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1722.829781][ T785] usb 5-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1722.867014][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.875127][ T785] usb 5-1: Product: syz [ 1722.875154][ T785] usb 5-1: Manufacturer: syz [ 1722.899724][ T785] usb 5-1: SerialNumber: syz [ 1722.932808][ T785] usb 5-1: config 0 descriptor?? [ 1722.944293][ T785] usb 5-1: bad CDC descriptors [ 1722.952027][ T785] cdc_acm 5-1:0.0: Zero length descriptor references [ 1722.959028][ T785] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1723.271668][T25951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.337412][T25951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.393031][ T5142] usb 5-1: USB disconnect, device number 91 [ 1724.007914][T10549] Bluetooth: hci2: command tx timeout [ 1724.171558][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.195013][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.222036][ T11] bond0 (unregistering): Released all slaves [ 1724.496975][ T5142] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1724.695765][ T5142] usb 5-1: not running at top speed; connect to a high speed hub [ 1724.715017][ T5142] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.772170][ T5142] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1724.923756][ T5142] usb 5-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40 [ 1725.038353][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.067170][ T5142] usb 5-1: Product: syz [ 1725.082079][ T5142] usb 5-1: Manufacturer: syz [ 1725.086749][ T5142] usb 5-1: SerialNumber: syz [ 1725.215741][ T8] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1725.307325][ T5142] usb 5-1: USB disconnect, device number 92 [ 1725.407776][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1725.446250][ T8] usb 3-1: config index 0 descriptor too short (expected 64742, got 92) [ 1725.457239][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.468709][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.479018][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1725.501966][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1725.519750][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1725.542682][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1725.582995][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1725.606495][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.637006][ T8] usb 3-1: Product: syz [ 1725.641245][ T8] usb 3-1: Manufacturer: syz [ 1725.659640][ T8] usb 3-1: SerialNumber: syz [ 1725.743697][T25915] chnl_net:caif_netlink_parms(): no params data found [ 1725.875547][ T11] hsr_slave_0: left promiscuous mode [ 1725.894093][ T8] cdc_ncm 3-1:1.0: bind() failure [ 1725.927857][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1725.934749][ T8] cdc_ncm 3-1:1.1: bind() failure [ 1725.948805][ T11] hsr_slave_1: left promiscuous mode [ 1725.977664][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.985172][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.007876][ T8] usb 3-1: USB disconnect, device number 94 [ 1726.017131][T10549] Bluetooth: hci2: command tx timeout [ 1726.086292][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.118080][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.218586][ T11] veth0_macvtap: left promiscuous mode [ 1726.224343][ T11] veth1_vlan: left promiscuous mode [ 1726.261734][ T11] veth0_vlan: left promiscuous mode [ 1727.798601][ T8] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1728.021054][ T8] usb 4-1: config index 0 descriptor too short (expected 171, got 72) [ 1728.104941][T10549] Bluetooth: hci2: command tx timeout [ 1728.128624][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1728.150689][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.165227][ T8] usb 4-1: Product: syz [ 1728.170006][ T8] usb 4-1: Manufacturer: syz [ 1728.174825][ T8] usb 4-1: SerialNumber: syz [ 1728.207876][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1728.234985][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1729.107350][T24337] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1729.297216][T24337] usb 3-1: Using ep0 maxpacket: 32 [ 1729.305081][T24337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.339551][T24337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.367319][T24337] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1729.407242][T24337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.435399][T24337] usb 3-1: config 0 descriptor?? [ 1729.991959][T24337] gembird 0003:11FF:3331.0060: report_id 880992651 is invalid [ 1730.017123][T24337] gembird 0003:11FF:3331.0060: item 0 4 1 8 parsing failed [ 1730.068105][T24337] gembird 0003:11FF:3331.0060: probe with driver gembird failed with error -22 [ 1730.218950][T10549] Bluetooth: hci2: command tx timeout [ 1730.240401][T26024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.287656][T26024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.457980][T24337] usb 3-1: USB disconnect, device number 95 [ 1730.742451][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.750167][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.145810][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1731.891701][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1737.939667][T10549] Bluetooth: hci0: command 0x0406 tx timeout [ 1738.257689][T26053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1738.270344][T26053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1738.280346][T26053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1738.290135][T26053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1738.301725][T26053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1738.310103][T26053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1739.817135][T10549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1739.838304][T10549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1739.848565][T10549] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1739.857341][T10549] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1739.867534][T10549] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1739.875040][T10549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1740.417321][T24179] Bluetooth: hci3: command tx timeout [ 1740.446631][T25915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.477213][T25915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.484565][T25915] bridge_slave_0: entered allmulticast mode [ 1740.505345][T25915] bridge_slave_0: entered promiscuous mode [ 1740.523611][T25915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.531070][T25915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.547308][T25915] bridge_slave_1: entered allmulticast mode [ 1740.554972][T25915] bridge_slave_1: entered promiscuous mode [ 1740.905097][T25915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.931611][T25915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.615096][T25915] team0: Port device team_slave_0 added [ 1741.669047][T25915] team0: Port device team_slave_1 added [ 1741.937137][T24179] Bluetooth: hci6: command tx timeout [ 1742.368101][T25915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.375135][T25915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.410684][T25915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.434990][T25915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.455317][T25915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.498841][T24179] Bluetooth: hci3: command tx timeout [ 1742.523856][T25915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.165265][T25915] hsr_slave_0: entered promiscuous mode [ 1743.233631][T25915] hsr_slave_1: entered promiscuous mode [ 1744.035734][T24179] Bluetooth: hci6: command tx timeout [ 1744.577012][T24179] Bluetooth: hci3: command tx timeout [ 1744.908430][T10549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1744.920321][T10549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1744.929545][T10549] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1744.938652][T10549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1744.948845][T10549] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1744.956349][T10549] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1745.161756][T24179] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1745.176676][T24179] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1745.187656][T24179] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1745.197625][T24179] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1745.207641][T24179] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1745.215344][T24179] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1745.709613][T26066] chnl_net:caif_netlink_parms(): no params data found [ 1746.101205][T10549] Bluetooth: hci6: command tx timeout [ 1746.465157][T26066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.472799][T26066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.497582][T26066] bridge_slave_0: entered allmulticast mode [ 1746.520503][T26066] bridge_slave_0: entered promiscuous mode [ 1746.529958][T26066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.551860][T26066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.559974][T26066] bridge_slave_1: entered allmulticast mode [ 1746.577851][T26066] bridge_slave_1: entered promiscuous mode [ 1746.657111][T10549] Bluetooth: hci3: command tx timeout [ 1747.057260][T10549] Bluetooth: hci7: command tx timeout [ 1747.297381][T10549] Bluetooth: hci8: command tx timeout [ 1747.635605][T26066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.677696][T26066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.121439][T26066] team0: Port device team_slave_0 added [ 1748.156609][T26066] team0: Port device team_slave_1 added [ 1748.177203][T10549] Bluetooth: hci6: command tx timeout [ 1748.654615][T26066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.675264][T26066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.726707][T26066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.751530][T26066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.766545][T26066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.809848][T26066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.143054][T10549] Bluetooth: hci7: command tx timeout [ 1749.377530][T10549] Bluetooth: hci8: command tx timeout [ 1749.402568][T26066] hsr_slave_0: entered promiscuous mode [ 1749.519124][T26066] hsr_slave_1: entered promiscuous mode [ 1749.611548][T26066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1749.626660][T26066] Cannot create hsr debugfs directory [ 1751.222064][T10549] Bluetooth: hci7: command tx timeout [ 1751.457149][T10549] Bluetooth: hci8: command tx timeout [ 1753.297164][T10549] Bluetooth: hci7: command tx timeout [ 1753.541904][T10549] Bluetooth: hci8: command tx timeout [ 1781.521622][T24179] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1781.534826][T24179] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1781.543903][T24179] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1781.552572][T24179] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1781.573888][T24179] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1781.581716][T24179] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1782.134595][T26078] chnl_net:caif_netlink_parms(): no params data found [ 1783.127713][T26078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.134937][T26078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.168699][T26078] bridge_slave_0: entered allmulticast mode [ 1783.176512][T26078] bridge_slave_0: entered promiscuous mode [ 1783.202167][T26078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.221206][T26078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.233338][T26078] bridge_slave_1: entered allmulticast mode [ 1783.248771][T26078] bridge_slave_1: entered promiscuous mode [ 1783.573196][T26078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.606676][T26078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.627170][T24179] Bluetooth: hci9: command tx timeout [ 1784.160845][T26078] team0: Port device team_slave_0 added [ 1784.189372][T26078] team0: Port device team_slave_1 added [ 1784.426353][T26078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1784.444714][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.483126][T26078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.505906][T26078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.546117][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.583557][T26078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.376589][T26078] hsr_slave_0: entered promiscuous mode [ 1785.470441][T26078] hsr_slave_1: entered promiscuous mode [ 1785.583203][T26078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1785.595761][T26078] Cannot create hsr debugfs directory [ 1785.708389][T24179] Bluetooth: hci9: command tx timeout [ 1787.787754][T24179] Bluetooth: hci9: command tx timeout [ 1789.157184][T24179] Bluetooth: hci4: command 0x0406 tx timeout [ 1789.857264][T10549] Bluetooth: hci9: command tx timeout [ 1792.193876][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.210402][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.978638][T24179] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1798.991653][T24179] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1799.000791][T24179] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1799.019814][T24179] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1799.027969][T24179] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1799.035630][T24179] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1799.613829][T26091] chnl_net:caif_netlink_parms(): no params data found [ 1800.344690][T10549] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1800.371436][T10549] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1800.380687][T10549] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1800.409762][T10549] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1800.419501][T10549] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1800.430399][T10549] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1800.564341][T26091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.576970][T26091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.596099][T26091] bridge_slave_0: entered allmulticast mode [ 1800.617095][T26091] bridge_slave_0: entered promiscuous mode [ 1800.631406][T26091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.647180][T26091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.654599][T26091] bridge_slave_1: entered allmulticast mode [ 1800.678946][T26091] bridge_slave_1: entered promiscuous mode [ 1801.140825][T26091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.150510][T10549] Bluetooth: hci10: command tx timeout [ 1801.191381][T26091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.566578][T26091] team0: Port device team_slave_0 added [ 1801.607107][T26091] team0: Port device team_slave_1 added [ 1801.951039][T26091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.966895][T26091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.005957][T26091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.023646][T26091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.054360][T26091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.105742][T26091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.497520][T24179] Bluetooth: hci11: command tx timeout [ 1802.898833][T26091] hsr_slave_0: entered promiscuous mode [ 1803.227159][T24179] Bluetooth: hci10: command tx timeout [ 1803.316546][T26091] hsr_slave_1: entered promiscuous mode [ 1803.507491][T26091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1803.515126][T26091] Cannot create hsr debugfs directory [ 1804.518721][T10549] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1804.530591][T10549] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1804.539988][T10549] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1804.549079][T10549] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1804.561885][T10549] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1804.569803][T10549] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1804.587978][T24179] Bluetooth: hci11: command tx timeout [ 1805.215583][T26053] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1805.227626][T26053] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1805.236510][T26053] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1805.245247][T26053] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1805.257106][T26053] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1805.265141][T26053] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1805.317042][T26053] Bluetooth: hci10: command tx timeout [ 1805.804009][T26112] chnl_net:caif_netlink_parms(): no params data found [ 1806.574007][T26112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.581791][T26112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.597516][T26112] bridge_slave_0: entered allmulticast mode [ 1806.612663][T26112] bridge_slave_0: entered promiscuous mode [ 1806.622521][T26112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.655605][T26112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.663514][T26053] Bluetooth: hci12: command tx timeout [ 1806.669879][T10549] Bluetooth: hci11: command tx timeout [ 1806.680365][T26112] bridge_slave_1: entered allmulticast mode [ 1806.694562][T26112] bridge_slave_1: entered promiscuous mode [ 1807.318446][T26112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.355983][T26112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.387235][T26053] Bluetooth: hci10: command tx timeout [ 1807.392892][T26053] Bluetooth: hci13: command tx timeout [ 1808.214926][T26112] team0: Port device team_slave_0 added [ 1808.240501][T26112] team0: Port device team_slave_1 added [ 1808.713287][T26112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.721922][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.757200][T26053] Bluetooth: hci12: command tx timeout [ 1808.762780][T26053] Bluetooth: hci11: command tx timeout [ 1808.775843][T26112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.807656][T26112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.814755][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.870247][T26112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.452180][T26112] hsr_slave_0: entered promiscuous mode [ 1809.472782][T26053] Bluetooth: hci13: command tx timeout [ 1809.636721][T26112] hsr_slave_1: entered promiscuous mode [ 1809.709010][T26112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1809.727012][T26112] Cannot create hsr debugfs directory [ 1810.827354][T26053] Bluetooth: hci12: command tx timeout [ 1811.551717][T26053] Bluetooth: hci13: command tx timeout [ 1812.907327][T26053] Bluetooth: hci12: command tx timeout [ 1813.631930][T26053] Bluetooth: hci13: command tx timeout [ 1825.158124][T26053] Bluetooth: hci5: command 0x0406 tx timeout [ 1841.751709][T26053] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1841.763624][T26053] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1841.775599][T26053] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1841.785582][T26053] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1841.794794][T26053] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1841.802737][T26053] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1842.412895][T26122] chnl_net:caif_netlink_parms(): no params data found [ 1843.152938][T26122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.183145][T26122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.201615][T26122] bridge_slave_0: entered allmulticast mode [ 1843.218963][T26122] bridge_slave_0: entered promiscuous mode [ 1843.239213][T26122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.246471][T26122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.267185][T26122] bridge_slave_1: entered allmulticast mode [ 1843.276233][T26122] bridge_slave_1: entered promiscuous mode [ 1843.857539][T10549] Bluetooth: hci14: command tx timeout [ 1843.895485][T26122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.929007][T26122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.377743][T26122] team0: Port device team_slave_0 added [ 1844.417477][T26122] team0: Port device team_slave_1 added [ 1845.108380][T26122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.115402][T26122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.163345][T26122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.224663][T26122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.236847][T26122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.281918][T26122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.467327][T10549] Bluetooth: hci2: command 0x0406 tx timeout [ 1845.948361][T26053] Bluetooth: hci14: command tx timeout [ 1846.113647][T26122] hsr_slave_0: entered promiscuous mode [ 1846.263572][T26122] hsr_slave_1: entered promiscuous mode [ 1846.358848][T26122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1846.366507][T26122] Cannot create hsr debugfs directory [ 1848.027227][T26053] Bluetooth: hci14: command tx timeout [ 1850.107351][T26053] Bluetooth: hci14: command tx timeout [ 1853.632521][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.639963][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.542510][T24179] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1859.554376][T24179] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1859.566514][T24179] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1859.585800][T24179] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1859.607876][T24179] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1859.617268][T24179] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1860.189275][T26135] chnl_net:caif_netlink_parms(): no params data found [ 1860.827098][T24179] Bluetooth: hci3: command 0x0406 tx timeout [ 1861.004942][T26053] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1861.019597][T26053] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1861.030364][T26053] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1861.040590][T26053] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1861.049182][T26053] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1861.075274][T26053] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1861.365716][T26135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.388300][T26135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.395734][T26135] bridge_slave_0: entered allmulticast mode [ 1861.423442][T26135] bridge_slave_0: entered promiscuous mode [ 1861.447911][T26135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.455124][T26135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.487807][T26135] bridge_slave_1: entered allmulticast mode [ 1861.508734][T26135] bridge_slave_1: entered promiscuous mode [ 1861.707215][T10549] Bluetooth: hci15: command tx timeout [ 1862.227984][T26135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.259279][T26135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1862.763838][T26135] team0: Port device team_slave_0 added [ 1862.789715][T26135] team0: Port device team_slave_1 added [ 1863.227659][T26053] Bluetooth: hci16: command tx timeout [ 1863.389725][T26135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1863.407364][T26135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1863.456470][T26135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1863.507226][T26135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1863.514236][T26135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1863.557030][T26135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.787248][T10549] Bluetooth: hci15: command tx timeout [ 1864.731817][T24179] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1864.744078][T24179] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1864.753835][T24179] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1864.762416][T24179] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1864.772501][T24179] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1864.786338][T24179] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1864.858519][T26135] hsr_slave_0: entered promiscuous mode [ 1864.937655][T26135] hsr_slave_1: entered promiscuous mode [ 1865.036602][T26135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1865.066864][T26135] Cannot create hsr debugfs directory [ 1865.318001][T24179] Bluetooth: hci16: command tx timeout [ 1865.877080][T24179] Bluetooth: hci15: command tx timeout [ 1865.947284][T24179] Bluetooth: hci6: command 0x0406 tx timeout [ 1866.188047][T26053] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1866.208749][T26053] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1866.221897][T26053] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1866.248267][T26053] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1866.264331][T26053] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 1866.275175][T26053] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1866.827258][T26053] Bluetooth: hci17: command tx timeout [ 1867.387171][T26053] Bluetooth: hci16: command tx timeout [ 1867.948456][T26053] Bluetooth: hci15: command tx timeout [ 1868.346986][T26053] Bluetooth: hci18: command tx timeout [ 1868.907094][T26053] Bluetooth: hci17: command tx timeout [ 1869.467348][ T5094] Bluetooth: hci16: command tx timeout [ 1870.427065][ T5094] Bluetooth: hci18: command tx timeout [ 1870.977463][ T5094] Bluetooth: hci17: command tx timeout [ 1871.067383][ T5094] Bluetooth: hci7: command 0x0406 tx timeout [ 1871.073626][ T5094] Bluetooth: hci8: command 0x0406 tx timeout [ 1872.507038][T24179] Bluetooth: hci18: command tx timeout [ 1873.067286][T24179] Bluetooth: hci17: command tx timeout [ 1874.587074][T24179] Bluetooth: hci18: command tx timeout [ 1876.667371][ T30] INFO: task dhcpcd:4746 blocked for more than 143 seconds. [ 1876.675341][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1876.764732][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1876.798121][ T30] task:dhcpcd state:D stack:20384 pid:4746 tgid:4746 ppid:4745 flags:0x00000002 [ 1876.896942][ T30] Call Trace: [ 1876.900329][ T30] [ 1876.903299][ T30] __schedule+0x1796/0x49d0 [ 1876.937090][ T30] ? __pfx___schedule+0x10/0x10 [ 1876.942053][ T30] ? __pfx_lock_release+0x10/0x10 [ 1876.976563][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1876.987200][ T30] ? schedule+0x90/0x320 [ 1876.992720][ T30] schedule+0x14b/0x320 [ 1877.016974][ T30] schedule_preempt_disabled+0x13/0x30 [ 1877.022527][ T30] __mutex_lock+0x6a4/0xd70 [ 1877.046883][ T30] ? __mutex_lock+0x527/0xd70 [ 1877.051666][ T30] ? devinet_ioctl+0x2ce/0x1bc0 [ 1877.056565][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1877.076974][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1877.081757][ T30] ? security_capable+0x90/0xb0 [ 1877.086759][ T30] devinet_ioctl+0x2ce/0x1bc0 [ 1877.111890][ T30] ? get_user_ifreq+0x1bb/0x200 [ 1877.122958][ T30] inet_ioctl+0x3d7/0x4f0 [ 1877.136913][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 1877.141887][ T30] sock_do_ioctl+0x158/0x460 [ 1877.177364][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1877.182673][ T30] ? __pfx_lock_release+0x10/0x10 [ 1877.196047][ T30] ? __asan_memset+0x23/0x50 [ 1877.206998][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1877.212147][ T30] sock_ioctl+0x629/0x8e0 [ 1877.216539][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1877.236969][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1877.243064][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1877.263494][ T30] ? security_file_ioctl+0x87/0xb0 [ 1877.269777][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1877.274706][ T30] __se_sys_ioctl+0xfc/0x170 [ 1877.287023][ T30] do_syscall_64+0xf3/0x230 [ 1877.310261][ T30] ? clear_bhb_loop+0x35/0x90 [ 1877.326957][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.333001][ T30] RIP: 0033:0x7ffa2ed4ed49 [ 1877.347002][ T30] RSP: 002b:00007ffd8da8a138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.355517][ T30] RAX: ffffffffffffffda RBX: 00007ffa2ec806c0 RCX: 00007ffa2ed4ed49 [ 1877.379749][ T30] RDX: 00007ffd8da9a328 RSI: 0000000000008914 RDI: 0000000000000018 [ 1877.394062][ T30] RBP: 00007ffd8daaa4e8 R08: 00007ffd8da9a2e8 R09: 00007ffd8da9a298 [ 1877.416949][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1877.425006][ T30] R13: 00007ffd8da9a328 R14: 0000000000000028 R15: 0000000000008914 [ 1877.447558][ T30] [ 1877.453182][ T30] INFO: task syz.1.5171:26013 blocked for more than 144 seconds. [ 1877.497324][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1877.519168][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1877.535421][ T30] task:syz.1.5171 state:D stack:24384 pid:26013 tgid:26009 ppid:25634 flags:0x00000004 [ 1877.546502][ T30] Call Trace: [ 1877.556840][ T30] [ 1877.559846][ T30] __schedule+0x1796/0x49d0 [ 1877.564421][ T30] ? __pfx___schedule+0x10/0x10 [ 1877.585389][ T30] ? __pfx_lock_release+0x10/0x10 [ 1877.591333][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1877.606089][ T30] ? schedule+0x90/0x320 [ 1877.616833][ T30] schedule+0x14b/0x320 [ 1877.621079][ T30] schedule_preempt_disabled+0x13/0x30 [ 1877.626582][ T30] __mutex_lock+0x6a4/0xd70 [ 1877.658166][ T30] ? __mutex_lock+0x527/0xd70 [ 1877.662950][ T30] ? dev_ioctl+0x706/0x1340 [ 1877.677572][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1877.682680][ T30] ? cap_capable+0x1b4/0x250 [ 1877.694995][ T30] ? dev_load+0x21/0x1f0 [ 1877.708044][ T30] dev_ioctl+0x706/0x1340 [ 1877.712478][ T30] sock_do_ioctl+0x240/0x460 [ 1877.725188][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1877.736855][ T30] ? __asan_memset+0x23/0x50 [ 1877.744746][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1877.755690][ T30] sock_ioctl+0x629/0x8e0 [ 1877.788720][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1877.796471][ T30] ? __fget_files+0x3f6/0x470 [ 1877.807268][ T30] ? __fget_files+0x29/0x470 [ 1877.827488][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1877.832515][ T30] ? security_file_ioctl+0x87/0xb0 [ 1877.853241][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1877.866845][ T30] __se_sys_ioctl+0xfc/0x170 [ 1877.871540][ T30] do_syscall_64+0xf3/0x230 [ 1877.876229][ T30] ? clear_bhb_loop+0x35/0x90 [ 1877.897471][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.903704][ T30] RIP: 0033:0x7f7fda575bd9 [ 1877.932359][ T30] RSP: 002b:00007f7fdb3fe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.961407][ T30] RAX: ffffffffffffffda RBX: 00007f7fda704038 RCX: 00007f7fda575bd9 [ 1877.978487][ T30] RDX: 0000000020000000 RSI: 0000000000008922 RDI: 0000000000000003 [ 1877.986544][ T30] RBP: 00007f7fda5e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1878.013326][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1878.037086][ T30] R13: 000000000000006e R14: 00007f7fda704038 R15: 00007ffc263034c8 [ 1878.045173][ T30] [ 1878.066937][ T30] [ 1878.066937][ T30] Showing all locks held in the system: [ 1878.074832][ T30] 3 locks held by kworker/0:0/8: [ 1878.095763][ T30] 2 locks held by kworker/0:1/9: [ 1878.101959][ T30] 4 locks held by kworker/u8:0/11: [ 1878.118605][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1878.144807][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1878.165794][ T30] #2: ffffffff8f5c8190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1878.197337][ T30] #3: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 1878.206284][ T30] 1 lock held by khungtaskd/30: [ 1878.232941][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1878.247548][ T30] 3 locks held by kworker/u8:4/62: [ 1878.257063][ T30] #0: ffff88802a39b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1878.286889][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1878.315328][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1878.348204][ T30] 1 lock held by klogd/4521: [ 1878.352886][ T30] 1 lock held by dhcpcd/4746: [ 1878.376985][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 1878.386271][ T30] 2 locks held by getty/4837: [ 1878.406971][ T30] #0: ffff88802faa20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1878.436937][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1878.457024][ T30] 3 locks held by kworker/1:3/10103: [ 1878.462401][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1878.494982][ T30] #1: ffffc9000b267d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1878.524084][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1878.536544][ T30] 3 locks held by kworker/0:4/16567: [ 1878.547155][ T30] 3 locks held by kworker/u8:5/17563: [ 1878.552726][ T30] 3 locks held by kworker/1:1/24337: [ 1878.573352][ T30] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1878.594780][ T30] #1: ffffc90002e8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1878.618607][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 [ 1878.644246][ T30] 7 locks held by syz-executor/25915: [ 1878.656836][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1878.673416][ T30] #1: ffff888025184088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1878.693336][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1878.714651][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1878.725737][ T30] #4: ffff888079d8e0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1878.756990][ T30] #5: ffff888079d8d250 (&devlink->lock_key#60){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1878.777288][ T30] #6: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1878.786296][ T30] 1 lock held by syz.1.5171/26013: [ 1878.806733][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 1878.815788][ T30] 3 locks held by syz.4.5177/26027: [ 1878.826832][ T30] 1 lock held by syz.3.5182/26048: [ 1878.832013][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1878.872515][ T30] 1 lock held by syz.2.5183/26046: [ 1878.886895][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1878.913596][ T30] 1 lock held by syz-executor/26050: [ 1878.925568][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1878.955543][ T30] 1 lock held by syz-executor/26055: [ 1878.966832][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1878.976465][ T30] 1 lock held by syz-executor/26063: [ 1879.016943][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.027045][ T30] 4 locks held by syz-executor/26066: [ 1879.032515][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.058985][ T30] #1: ffff88802f111488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.086903][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.104037][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.136901][ T30] 4 locks held by syz-executor/26078: [ 1879.146648][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.166290][ T30] #1: ffff88801c79e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.193821][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.226394][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.238551][ T30] 4 locks held by syz-executor/26091: [ 1879.245204][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.276981][ T30] #1: ffff888028d35488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.296756][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.323847][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.346412][ T30] 1 lock held by syz-executor/26104: [ 1879.356847][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.366477][ T30] 1 lock held by syz-executor/26108: [ 1879.386578][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.419265][ T30] 4 locks held by syz-executor/26112: [ 1879.424713][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.446894][ T30] #1: ffff88802fb3d888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.467559][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.496980][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.515321][ T30] 4 locks held by syz-executor/26122: [ 1879.523752][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.564716][ T30] #1: ffff888033d6c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.593180][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.616844][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.635811][ T30] 4 locks held by syz-executor/26135: [ 1879.644330][ T30] #0: ffff8880305aa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1879.667367][ T30] #1: ffff88807dd5cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1879.702160][ T30] #2: ffff8880233bcf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1879.723256][ T30] #3: ffffffff8eee2008 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1879.734573][ T30] 1 lock held by syz-executor/26146: [ 1879.747796][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.776221][ T30] 1 lock held by syz-executor/26149: [ 1879.782817][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.807138][ T30] 1 lock held by syz-executor/26155: [ 1879.812500][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1879.845446][ T30] [ 1879.848883][ T30] ============================================= [ 1879.848883][ T30] [ 1879.867306][ T30] NMI backtrace for cpu 1 [ 1879.871737][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1879.881671][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1879.891762][ T30] Call Trace: [ 1879.895072][ T30] [ 1879.898032][ T30] dump_stack_lvl+0x241/0x360 [ 1879.902760][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1879.908005][ T30] ? __pfx__printk+0x10/0x10 [ 1879.912632][ T30] ? vprintk_emit+0x631/0x770 [ 1879.917351][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1879.922427][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1879.927407][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1879.932915][ T30] ? _printk+0xd5/0x120 [ 1879.937124][ T30] ? __pfx__printk+0x10/0x10 [ 1879.941757][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1879.946650][ T30] ? __pfx__printk+0x10/0x10 [ 1879.951281][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1879.956394][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1879.962414][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1879.968437][ T30] watchdog+0xfde/0x1020 [ 1879.972723][ T30] ? watchdog+0x1ea/0x1020 [ 1879.977214][ T30] ? __pfx_watchdog+0x10/0x10 [ 1879.981937][ T30] kthread+0x2f0/0x390 [ 1879.986049][ T30] ? __pfx_watchdog+0x10/0x10 [ 1879.992066][ T30] ? __pfx_kthread+0x10/0x10 [ 1879.996699][ T30] ret_from_fork+0x4b/0x80 [ 1880.001164][ T30] ? __pfx_kthread+0x10/0x10 [ 1880.005797][ T30] ret_from_fork_asm+0x1a/0x30 [ 1880.010620][ T30] [ 1880.015067][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1880.021187][ C0] NMI backtrace for cpu 0 [ 1880.021204][ C0] CPU: 0 PID: 26027 Comm: syz.4.5177 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1880.021225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1880.021237][ C0] RIP: 0010:unwind_next_frame+0x37/0x2a00 [ 1880.021270][ C0] Code: 53 48 81 ec a0 00 00 00 48 89 fd 49 bd 00 00 00 00 00 fc ff df e8 a9 36 55 00 48 8d 5d 48 48 89 d8 48 c1 e8 03 48 89 44 24 30 <42> 80 3c 28 00 74 08 48 89 df e8 3a a2 b7 00 48 89 5c 24 20 4c 8b [ 1880.021287][ C0] RSP: 0018:ffffc90000005fc8 EFLAGS: 00000806 [ 1880.021304][ C0] RAX: 1ffff92000000c1d RBX: ffffc900000060e8 RCX: ffff888027ffbc00 [ 1880.021319][ C0] RDX: 0000000080010101 RSI: ffffffff8b7d22c6 RDI: ffffc900000060a0 [ 1880.021333][ C0] RBP: ffffc900000060a0 R08: 000000000000001e R09: ffffc90000006190 [ 1880.021346][ C0] R10: 0000000000000003 R11: ffffffff8181dca0 R12: ffff888027ffbc00 [ 1880.021361][ C0] R13: dffffc0000000000 R14: ffffc90000006180 R15: ffffc900000060a0 [ 1880.021375][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1880.021391][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1880.021405][ C0] CR2: 000000110c392668 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1880.021422][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1880.021433][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1880.021445][ C0] Call Trace: [ 1880.021452][ C0] [ 1880.021460][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1880.021482][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1880.021505][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1880.021526][ C0] ? nmi_handle+0x2a/0x5a0 [ 1880.021562][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1880.021583][ C0] ? nmi_handle+0x14f/0x5a0 [ 1880.021610][ C0] ? nmi_handle+0x2a/0x5a0 [ 1880.021638][ C0] ? unwind_next_frame+0x37/0x2a00 [ 1880.021663][ C0] ? default_do_nmi+0x63/0x160 [ 1880.021684][ C0] ? exc_nmi+0x123/0x1f0 [ 1880.021704][ C0] ? end_repeat_nmi+0xf/0x53 [ 1880.021733][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1880.021765][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.021790][ C0] ? unwind_next_frame+0x37/0x2a00 [ 1880.021816][ C0] ? unwind_next_frame+0x37/0x2a00 [ 1880.021842][ C0] ? unwind_next_frame+0x37/0x2a00 [ 1880.021867][ C0] [ 1880.021873][ C0] [ 1880.021886][ C0] ? irq_exit_rcu+0x9/0x30 [ 1880.021902][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.021927][ C0] ? __kernel_text_address+0xd/0x40 [ 1880.021957][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.021981][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1880.022011][ C0] arch_stack_walk+0x151/0x1b0 [ 1880.022042][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.022069][ C0] stack_trace_save+0x118/0x1d0 [ 1880.022099][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1880.022131][ C0] ? debug_check_no_obj_freed+0x561/0x580 [ 1880.022158][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1880.022184][ C0] ? __pfx_lock_release+0x10/0x10 [ 1880.022206][ C0] kasan_save_track+0x3f/0x80 [ 1880.022233][ C0] ? kasan_save_track+0x3f/0x80 [ 1880.022257][ C0] ? kasan_save_free_info+0x40/0x50 [ 1880.022280][ C0] ? poison_slab_object+0xe0/0x150 [ 1880.022307][ C0] ? __kasan_slab_free+0x37/0x60 [ 1880.022334][ C0] ? kfree+0x149/0x360 [ 1880.022353][ C0] ? dummy_timer+0x7ce/0x45d0 [ 1880.022372][ C0] ? __hrtimer_run_queues+0x59b/0xd50 [ 1880.022398][ C0] ? hrtimer_interrupt+0x396/0x990 [ 1880.022422][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1880.022449][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1880.022473][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1880.022500][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1880.022519][ C0] ? unwind_next_frame+0x1e82/0x2a00 [ 1880.022543][ C0] ? arch_stack_walk+0x151/0x1b0 [ 1880.022570][ C0] ? stack_trace_save+0x118/0x1d0 [ 1880.022598][ C0] ? kasan_save_track+0x3f/0x80 [ 1880.022623][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 1880.022650][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 1880.022672][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1880.022695][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1880.022717][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1880.022739][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1880.022766][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 1880.022791][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 1880.022816][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1880.022841][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1880.022867][ C0] ? tasklet_action_common+0x321/0x4d0 [ 1880.022887][ C0] ? handle_softirqs+0x2c4/0x970 [ 1880.022903][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1880.022920][ C0] ? irq_exit_rcu+0x9/0x30 [ 1880.022936][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.022984][ C0] ? dummy_timer+0x7ce/0x45d0 [ 1880.023002][ C0] kasan_save_free_info+0x40/0x50 [ 1880.023025][ C0] poison_slab_object+0xe0/0x150 [ 1880.023054][ C0] __kasan_slab_free+0x37/0x60 [ 1880.023082][ C0] ? dummy_timer+0x7ce/0x45d0 [ 1880.023100][ C0] kfree+0x149/0x360 [ 1880.023124][ C0] dummy_timer+0x7ce/0x45d0 [ 1880.023149][ C0] ? __pfx_lock_release+0x10/0x10 [ 1880.023180][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1880.023211][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 1880.023243][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1880.023276][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1880.023301][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1880.023320][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1880.023347][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1880.023377][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1880.023410][ C0] hrtimer_interrupt+0x396/0x990 [ 1880.023450][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1880.023479][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1880.023504][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1880.023531][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1880.023551][ C0] Code: 8b 3d 0c 3c 44 0c 48 89 de 5b e9 c3 f6 56 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 80 d4 03 00 65 8b 15 b0 ad 6d 7e f7 c2 00 01 ff 00 [ 1880.023566][ C0] RSP: 0018:ffffc90000006b60 EFLAGS: 00000286 [ 1880.023582][ C0] RAX: ffffffff81410e72 RBX: 0000000080000100 RCX: 0000000000000101 [ 1880.023595][ C0] RDX: ffff888027ffbc00 RSI: 0000000080000100 RDI: 0000000000000000 [ 1880.023607][ C0] RBP: ffffc90000006c40 R08: ffffffff81410e65 R09: ffffffff8141095f [ 1880.023621][ C0] R10: 0000000000000003 R11: ffff888027ffbc00 R12: ffffc9000497fed8 [ 1880.023635][ C0] R13: dffffc0000000000 R14: ffffc90004978000 R15: ffffc9000497fee0 [ 1880.023653][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 1880.023678][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 1880.023703][ C0] ? unwind_next_frame+0x1e82/0x2a00 [ 1880.023732][ C0] unwind_next_frame+0x1e82/0x2a00 [ 1880.023763][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 1880.023788][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 1880.023810][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1880.023840][ C0] arch_stack_walk+0x151/0x1b0 [ 1880.023872][ C0] ? syscall_exit_to_user_mode+0xc9/0x360 [ 1880.023902][ C0] stack_trace_save+0x118/0x1d0 [ 1880.023933][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1880.023976][ C0] kasan_save_track+0x3f/0x80 [ 1880.024001][ C0] ? kasan_save_track+0x3f/0x80 [ 1880.024026][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 1880.024052][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 1880.024073][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1880.024096][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1880.024118][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1880.024139][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1880.024165][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 1880.024190][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 1880.024216][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1880.024241][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1880.024266][ C0] ? tasklet_action_common+0x321/0x4d0 [ 1880.024286][ C0] ? handle_softirqs+0x2c4/0x970 [ 1880.024303][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1880.024319][ C0] ? irq_exit_rcu+0x9/0x30 [ 1880.024335][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.024359][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1880.024385][ C0] ? unwind_get_return_address+0x23/0xc0 [ 1880.024409][ C0] ? arch_stack_walk+0x125/0x1b0 [ 1880.024435][ C0] ? stack_trace_save+0x118/0x1d0 [ 1880.024462][ C0] ? save_stack+0xfb/0x1f0 [ 1880.024482][ C0] ? __reset_page_owner+0x75/0x3f0 [ 1880.024502][ C0] ? free_unref_page+0xd19/0xea0 [ 1880.024521][ C0] ? vfree+0x186/0x2e0 [ 1880.024541][ C0] ? kcov_close+0x2b/0x50 [ 1880.024559][ C0] ? __fput+0x24a/0x8a0 [ 1880.024581][ C0] ? task_work_run+0x24f/0x310 [ 1880.024604][ C0] ? do_exit+0xa27/0x27e0 [ 1880.024625][ C0] ? do_group_exit+0x207/0x2c0 [ 1880.024647][ C0] ? get_signal+0x16a1/0x1740 [ 1880.024673][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 1880.024712][ C0] __kasan_kmalloc+0x98/0xb0 [ 1880.024740][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1880.024763][ C0] __kmalloc_noprof+0x1f9/0x400 [ 1880.024788][ C0] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 1880.024819][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1880.024842][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1880.024876][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 1880.024901][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1880.024925][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1880.024971][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1880.024990][ C0] ? ieee80211_rx_handlers+0xb7af/0xb820 [ 1880.025015][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1880.025034][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1880.025059][ C0] ? validate_chain+0x11e/0x5900 [ 1880.025082][ C0] ? ieee80211_rx_handlers+0xb7af/0xb820 [ 1880.025119][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1880.025142][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1880.025167][ C0] ? mark_lock+0x9a/0x350 [ 1880.025191][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 1880.025227][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1880.025247][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1880.025278][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 1880.025308][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1880.025335][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1880.025365][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1880.025399][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1880.025418][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 1880.025437][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 1880.025460][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 1880.025493][ C0] ieee80211_rx_list+0x2b00/0x3780 [ 1880.025519][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 1880.025547][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1880.025580][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1880.025601][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1880.025622][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1880.025647][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1880.025672][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 1880.025697][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1880.025728][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1880.025757][ C0] ? skb_dequeue+0x113/0x150 [ 1880.025777][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1880.025806][ C0] tasklet_action_common+0x321/0x4d0 [ 1880.025830][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1880.025855][ C0] ? workqueue_softirq_action+0xca/0x140 [ 1880.025879][ C0] handle_softirqs+0x2c4/0x970 [ 1880.025899][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1880.025920][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1880.025941][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1880.025975][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1880.025994][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1880.026018][ C0] irq_exit_rcu+0x9/0x30 [ 1880.026034][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1880.026059][ C0] [ 1880.026066][ C0] [ 1880.026073][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1880.026100][ C0] RIP: 0010:unwind_get_return_address+0x23/0xc0 [ 1880.026126][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 74 38 55 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 72 8b 2b 31 ff 89 ee e8 99 3c 55 00 85 ed [ 1880.026142][ C0] RSP: 0018:ffffc9000497f518 EFLAGS: 00000a02 [ 1880.026157][ C0] RAX: 1ffff9200092fea8 RBX: ffffc9000497f540 RCX: ffff888027ffbc00 [ 1880.026171][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: ffffc9000497f540 [ 1880.026184][ C0] RBP: ffffc9000497f5d0 R08: ffffffff81410e65 R09: ffffffff8141095f [ 1880.026198][ C0] R10: 0000000000000003 R11: ffff888027ffbc00 R12: ffff888027ffbc00 [ 1880.026212][ C0] R13: ffffffff8181dca0 R14: dffffc0000000000 R15: ffffc9000497f540 [ 1880.026227][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1880.026258][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 1880.026283][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 1880.026312][ C0] ? unwind_get_return_address+0x1c/0xc0 [ 1880.026338][ C0] ? save_stack+0xfb/0x1f0 [ 1880.026359][ C0] arch_stack_walk+0x125/0x1b0 [ 1880.026391][ C0] ? __reset_page_owner+0x75/0x3f0 [ 1880.026417][ C0] stack_trace_save+0x118/0x1d0 [ 1880.026447][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1880.026484][ C0] save_stack+0xfb/0x1f0 [ 1880.026507][ C0] ? __pfx_save_stack+0x10/0x10 [ 1880.026539][ C0] ? page_ext_get+0x20/0x2a0 [ 1880.026562][ C0] __reset_page_owner+0x75/0x3f0 [ 1880.026585][ C0] ? mod_memcg_page_state+0x4ae/0x770 [ 1880.026613][ C0] free_unref_page+0xd19/0xea0 [ 1880.026639][ C0] vfree+0x186/0x2e0 [ 1880.026663][ C0] kcov_close+0x2b/0x50 [ 1880.026682][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1880.026700][ C0] __fput+0x24a/0x8a0 [ 1880.026729][ C0] task_work_run+0x24f/0x310 [ 1880.026758][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1880.026784][ C0] ? do_exit+0xa22/0x27e0 [ 1880.026808][ C0] ? kmem_cache_free+0x145/0x350 [ 1880.026834][ C0] do_exit+0xa27/0x27e0 [ 1880.026863][ C0] ? __pfx_do_exit+0x10/0x10 [ 1880.026886][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1880.026916][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1880.026938][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1880.026961][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1880.026991][ C0] do_group_exit+0x207/0x2c0 [ 1880.027014][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1880.027041][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1880.027067][ C0] get_signal+0x16a1/0x1740 [ 1880.027103][ C0] ? __pfx_get_signal+0x10/0x10 [ 1880.027129][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1880.027154][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1880.027178][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1880.027204][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1880.027231][ C0] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1880.027260][ C0] syscall_exit_to_user_mode+0xc9/0x360 [ 1880.027289][ C0] do_syscall_64+0x100/0x230 [ 1880.027317][ C0] ? clear_bhb_loop+0x35/0x90 [ 1880.027345][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.027371][ C0] RIP: 0033:0x7f80da975c97 [ 1880.027386][ C0] Code: Unable to access opcode bytes at 0x7f80da975c6d. [ 1880.027395][ C0] RSP: 002b:00007ffead5c41d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1880.027413][ C0] RAX: 0000000000000000 RBX: 00007f80db7636c0 RCX: 00007f80da975c97 [ 1880.027426][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f80db744000 [ 1880.027438][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1880.027449][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffead5c4430 [ 1880.027462][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1880.027484][ C0] [ 1881.654780][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1881.661710][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1881.671651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1881.681760][ T30] Call Trace: [ 1881.685075][ T30] [ 1881.688029][ T30] dump_stack_lvl+0x241/0x360 [ 1881.692768][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1881.698012][ T30] ? __pfx__printk+0x10/0x10 [ 1881.702697][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1881.708726][ T30] ? vscnprintf+0x5d/0x90 [ 1881.713094][ T30] panic+0x349/0x860 [ 1881.717033][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1881.723236][ T30] ? __pfx_panic+0x10/0x10 [ 1881.727692][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1881.733110][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1881.738725][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1881.744134][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1881.750325][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1881.756544][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1881.762763][ T30] watchdog+0x101d/0x1020 [ 1881.767236][ T30] ? watchdog+0x1ea/0x1020 [ 1881.771702][ T30] ? __pfx_watchdog+0x10/0x10 [ 1881.776423][ T30] kthread+0x2f0/0x390 [ 1881.780528][ T30] ? __pfx_watchdog+0x10/0x10 [ 1881.785240][ T30] ? __pfx_kthread+0x10/0x10 [ 1881.789901][ T30] ret_from_fork+0x4b/0x80 [ 1881.794353][ T30] ? __pfx_kthread+0x10/0x10 [ 1881.799014][ T30] ret_from_fork_asm+0x1a/0x30 [ 1881.803847][ T30] [ 1881.807471][ T30] Kernel Offset: disabled [ 1881.811833][ T30] Rebooting in 86400 seconds..