last executing test programs: 13m21.496669618s ago: executing program 1 (id=1118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) 13m19.552513138s ago: executing program 1 (id=1123): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000d40), 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="b80cce", 0x3}, {0x0}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'erspan0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 13m18.932717417s ago: executing program 1 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 13m9.474131432s ago: executing program 1 (id=1155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) eventfd2(0x72, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) request_key(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 13m9.173985667s ago: executing program 1 (id=1160): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x10) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003040)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x54}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13m7.946421346s ago: executing program 1 (id=1163): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m52.800286658s ago: executing program 32 (id=1163): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m52.976736882s ago: executing program 5 (id=2175): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x181c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m51.548361744s ago: executing program 5 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000610000005000400000000000900"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 7m51.174558729s ago: executing program 5 (id=2182): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, 'team_slave_1\x00'}}, 0x1e) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f809d3af1ed2a674fa5000f000000e8bd6efb250314000e0001", 0x23}], 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e0, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x10d8, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1340) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ext2\x00', 0x0, &(0x7f0000000140)='grpquota') 7m48.322558023s ago: executing program 5 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x3, 0xc, 0xe, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m47.072665983s ago: executing program 5 (id=2189): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 7m45.044937883s ago: executing program 5 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) close(r3) 7m28.405775278s ago: executing program 33 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) close(r3) 5m14.122994367s ago: executing program 0 (id=2621): io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5m12.336600674s ago: executing program 0 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7097b6dbdf2517000000040003804800068044000400"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 5m11.588658485s ago: executing program 0 (id=2628): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44885) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) 5m10.374520334s ago: executing program 0 (id=2633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2165099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x80100) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) 5m7.654679375s ago: executing program 0 (id=2639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') syz_genetlink_get_family_id$ethtool(0x0, r6) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r8, 0x40}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x0, 0x80000001, {{0x1d, 0x4, 0x0, 0x9, 0x74, 0x68, 0x0, 0x5, 0x29, 0x0, @local, @remote, {[@lsrr={0x83, 0xb, 0xf9, [@remote, @private=0xa010101]}, @rr={0x7, 0x13, 0x2d, [@multicast2, @broadcast, @multicast1, @local]}, @cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x24, 0xfd, 0x3, 0x0, [{@multicast1, 0x2}, {@broadcast, 0x567}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x40, 0x1, 0x0, [{@remote, 0x8}, {@multicast2, 0x862}]}, @lsrr={0x83, 0x3, 0xee}]}}}}}) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) 5m7.051191395s ago: executing program 0 (id=2644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x200, 0x103b, 0xffffffffffffffff, 0x0) 5m6.544807563s ago: executing program 34 (id=2644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x200, 0x103b, 0xffffffffffffffff, 0x0) 18.196993501s ago: executing program 3 (id=3504): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000c000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582024000000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b96f4116b0a1ff03075743008ea6", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 17.113699187s ago: executing program 6 (id=3510): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.97892272s ago: executing program 6 (id=3511): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) socket(0xa, 0x3, 0x3a) 13.68530896s ago: executing program 3 (id=3518): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12.712737465s ago: executing program 6 (id=3521): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x0, 0x401}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 12.44193373s ago: executing program 6 (id=3522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) fsopen(&(0x7f0000001300)='hugetlbfs\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000007000000ffffffff", @ANYRESHEX=r0]) 12.39360727s ago: executing program 3 (id=3524): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x10008, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 12.108679034s ago: executing program 2 (id=3525): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) 12.081607295s ago: executing program 6 (id=3526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f00000006c0)="55bb4cf961631e9a93b57c227efc78e766e91c3625ee889cd47f56f3c8bb93daf4b64dea9f887e9d2ce42fc21384e7d7508468a8e7d3402a9e7cdae59b733a2e226cabce9d2a41c971b4158c7ddd963d0d80e537fd8d1088b5600b70a88dc20202d647a9046b8b7f48f34d552748e250554298f61a1d4312654b16adfdd3670109e58d48a33619b37b1a90973924dacbb5e50f50093b5d498da2e9029572cecea3336d899aa09c72cf163ad32e0fec0f11cc024751fe48ed68cf7baac3245e15be2316ec92ce847595b34046c5b1004fbe8abb36705190c53b4387f74ed7a3e47bb00d42900fa1") 10.991516271s ago: executing program 2 (id=3527): pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x514da, 0x101, 0x8000000, 0x3, 0xfffffffe, 0x200001, 0x0, 0x7cce8c743ee810da}) 9.81343084s ago: executing program 2 (id=3531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x1000, &(0x7f0000f9a000/0x1000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) 8.912681664s ago: executing program 2 (id=3533): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) socket(0xa, 0x3, 0x3a) 8.47601163s ago: executing program 4 (id=3535): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x0, 0x401}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 8.193165144s ago: executing program 4 (id=3537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000007000000ffffffff", @ANYRESHEX=r0]) 7.478823615s ago: executing program 4 (id=3539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) 6.239050804s ago: executing program 7 (id=3540): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)=ANY=[@ANYBLOB=',mode=']) 6.160700546s ago: executing program 3 (id=3541): pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x514da, 0x101, 0x8000000, 0x3, 0xfffffffe, 0x200001, 0x0, 0x7cce8c743ee810da}) 5.601035994s ago: executing program 6 (id=3542): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8763, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000080)={[{0x5, 0x4e00, "ecd066c74e"}, {0x32, 0x4e00, "a5224a0ddbd78c3b7f2eaf84a82d346b1672733ab3f86783be1c0d3629dd6c01449da3c484e7cd808dd886eb1d940ed7260e"}, {}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5.600365304s ago: executing program 4 (id=3543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x1000, &(0x7f0000f9a000/0x1000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) 5.577945395s ago: executing program 2 (id=3544): ftruncate(0xffffffffffffffff, 0xffff) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x100000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.456843597s ago: executing program 7 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000240)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresuid(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYBLOB="085204f28c3b60594fb5df1ff22ecd8f2684cfec5bd7924cec4469fc6cfaa778fc26d47a6836ad7fc50669ba6c341fb2b8d1f819bd5e427600cf0d2d1076f8a7c4a2696e7b452a1d03a64b5a2a249b53633106fe06e214725da8060c104acd446b96a31a0735862510b4e7e14e183a7cc4588d69be76571c9bf2bfd5777c3581e335133a05deda05fb6fe28e9146b981cf", @ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="93790b9fd143a0318d6beb618dc5829c00000000000000"], 0x0}, 0x0) 3.138076152s ago: executing program 7 (id=3546): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) 3.107127182s ago: executing program 3 (id=3547): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x0, 0x401}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 2.985717604s ago: executing program 4 (id=3548): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffe, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x8) shutdown(r1, 0x1) 2.887182896s ago: executing program 7 (id=3549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000007000000ffffffff", @ANYRESHEX=r0]) 2.763558498s ago: executing program 4 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 2.653548639s ago: executing program 2 (id=3551): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x4034f}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.653074839s ago: executing program 7 (id=3552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c1410"], 0x24}}, 0x0) 2.544721521s ago: executing program 3 (id=3553): syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 0s ago: executing program 7 (id=3554): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) socket(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): etooth: hci4: command 0x0406 tx timeout [ 882.399206][T12370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.484465][T12370] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 882.490624][T12370] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 882.847659][T12379] ieee802154 phy0 wpan0: encryption failed: -22 [ 884.993951][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 886.835872][T12429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 886.847252][T12429] batman_adv: batadv0: Adding interface: gretap2 [ 886.854247][T12429] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.880168][T12429] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 887.053077][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 887.713919][T12433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 887.725230][T12433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 887.795593][T12433] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 888.386193][T12447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2352'. [ 889.803633][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 890.005139][T12474] fuse: Bad value for 'fd' [ 891.853665][T11934] Bluetooth: hci4: command 0x0406 tx timeout [ 894.747179][T12501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.753829][T12501] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 894.759841][T12501] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 896.343268][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 896.672986][T12527] device bridge0 entered promiscuous mode [ 896.692889][T12527] device macvlan2 entered promiscuous mode [ 896.763038][T12527] bridge0: port 3(macvlan2) entered blocking state [ 896.773651][T12527] bridge0: port 3(macvlan2) entered disabled state [ 897.174027][T12527] device bridge0 left promiscuous mode [ 897.634628][T12535] fuse: Bad value for 'fd' [ 899.424109][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 900.155539][T12549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2374'. [ 902.236906][T12561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.263628][T12561] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 902.313779][T12561] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 904.324472][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 905.571359][T12592] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2386'. [ 906.077133][T12603] ubi: mtd0 is already attached to ubi31 [ 906.333942][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 906.811967][T12604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 906.996847][T12604] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 907.112058][T12604] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 908.287633][T12613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 908.294290][T12613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 908.300352][T12613] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 909.953709][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 910.748098][T12650] No source specified [ 912.754287][T12664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 912.760367][T12664] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 912.768217][T12664] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 914.172977][T11934] Bluetooth: hci4: command 0x0406 tx timeout [ 917.115769][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 919.111373][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2419'. [ 919.520722][T11934] Bluetooth: hci4: command 0x0406 tx timeout [ 919.779446][T12732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 919.786114][T12732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 919.792175][T12732] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 922.154715][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 924.173699][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 926.923700][T12796] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 926.930011][T12796] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 926.943116][T12796] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 927.492459][ T9611] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 927.983045][ T9611] usb 3-1: Using ep0 maxpacket: 16 [ 927.992536][ T9611] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 928.022645][ T9611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.069536][ T9611] usb 3-1: Product: syz [ 928.089926][ T9611] usb 3-1: Manufacturer: syz [ 928.103585][ T9611] usb 3-1: SerialNumber: syz [ 928.129561][ T9611] usb 3-1: config 0 descriptor?? [ 928.190686][ T9611] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 928.973551][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.266989][ T9611] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 929.295106][ T9611] visor: probe of 3-1:0.0 failed with error -71 [ 929.333669][ T9611] usb 3-1: USB disconnect, device number 3 [ 929.989291][T12843] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 929.998416][T12843] overlayfs: failed to set xattr on upper [ 930.004301][T12843] overlayfs: ...falling back to index=off,metacopy=off. [ 930.011944][T12843] overlayfs: maximum fs stacking depth exceeded [ 931.053588][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 931.509527][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.520884][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.411694][T12861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 932.433738][T12861] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 932.454680][T12861] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 934.899104][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 937.315048][T12920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 937.321427][T12920] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 937.327639][T12920] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 938.573927][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 940.685666][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 941.823781][T12978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 941.921433][T12978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 941.958105][T12978] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 943.133708][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 945.213725][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 946.449402][T13062] fuse: Bad value for 'fd' [ 946.717641][T13050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.724182][T13050] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 946.730144][T13050] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 947.344629][ T4297] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 948.051567][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 948.265159][ T9611] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 948.323478][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 948.335982][ T4297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 948.355297][ T4297] usb 3-1: config 9 has an invalid interface number: 212 but max is 0 [ 948.374440][ T4297] usb 3-1: config 9 has no interface number 0 [ 948.389149][ T4297] usb 3-1: config 9 interface 212 has no altsetting 0 [ 948.418543][ T4297] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7f.22 [ 948.433136][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.441704][ T4297] usb 3-1: Product: syz [ 948.452025][ T4297] usb 3-1: Manufacturer: syz [ 948.468461][ T4297] usb 3-1: SerialNumber: syz [ 948.478219][ T9611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.511159][ T9611] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 948.583693][ T9611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.605512][ T9611] usb 1-1: config 0 descriptor?? [ 948.619109][ T9611] pwc: Askey VC010 type 2 USB webcam detected. [ 948.919696][ T4297] ttusbir 3-1:9.212: cannot find expected altsetting [ 948.975341][ T4297] usb 3-1: USB disconnect, device number 4 [ 949.110081][ T9611] pwc: recv_control_msg error -32 req 02 val 2b00 [ 949.121259][ T9611] pwc: recv_control_msg error -32 req 02 val 2700 [ 949.153866][ T9611] pwc: recv_control_msg error -32 req 02 val 2c00 [ 949.197305][ T9611] pwc: recv_control_msg error -32 req 04 val 1000 [ 949.231867][ T9611] pwc: recv_control_msg error -32 req 04 val 1300 [ 949.286587][ T9611] pwc: recv_control_msg error -32 req 04 val 1400 [ 949.305007][ T9611] pwc: recv_control_msg error -32 req 02 val 2000 [ 949.323960][ T9611] pwc: recv_control_msg error -32 req 02 val 2100 [ 949.531661][ T9611] pwc: recv_control_msg error -71 req 02 val 2500 [ 949.571001][ T9611] pwc: recv_control_msg error -71 req 02 val 2400 [ 949.590049][ T9611] pwc: recv_control_msg error -71 req 02 val 2600 [ 949.613756][ T9611] pwc: recv_control_msg error -71 req 02 val 2900 [ 949.632297][ T9611] pwc: recv_control_msg error -71 req 02 val 2800 [ 949.659445][ T9611] pwc: recv_control_msg error -71 req 04 val 1100 [ 949.708686][ T9611] pwc: recv_control_msg error -71 req 04 val 1200 [ 949.760569][ T9611] pwc: Registered as video103. [ 949.995343][ T9611] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 950.010612][ T9611] usb 1-1: USB disconnect, device number 8 [ 950.093596][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 953.583480][ T4554] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 953.793280][ T4554] usb 4-1: Using ep0 maxpacket: 32 [ 953.806249][ T4554] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 953.843557][ T4554] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 953.875714][ T4554] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 953.923479][ T4554] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 954.009436][ T4554] usb 4-1: config 0 interface 0 has no altsetting 0 [ 954.050518][ T4554] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 954.148794][ T4554] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 954.168265][ T4554] usb 4-1: Product: syz [ 954.175157][ T4554] usb 4-1: Manufacturer: syz [ 954.179896][ T4554] usb 4-1: SerialNumber: syz [ 954.407729][ T4554] usb 4-1: config 0 descriptor?? [ 954.418656][ T4554] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 954.441077][ T4554] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 955.054300][ T9611] usb 4-1: USB disconnect, device number 10 [ 955.077377][ T9611] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 956.080411][T13204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 956.087136][T13204] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 956.093912][T13204] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 957.411357][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 957.883692][ T4554] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 958.077981][ T4554] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 958.107680][ T4554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.117353][ T4554] usb 5-1: Product: syz [ 958.121739][ T4554] usb 5-1: Manufacturer: syz [ 958.127693][ T4554] usb 5-1: SerialNumber: syz [ 958.157863][ T4554] usb 5-1: config 0 descriptor?? [ 958.435796][ T4554] hso 5-1:0.0: Failed to find BULK IN ep [ 958.450645][T13241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 958.471957][T13241] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 958.483641][ T4554] usb-storage 5-1:0.0: USB Mass Storage device detected [ 958.499468][T13241] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 958.648025][ T8019] usb 5-1: USB disconnect, device number 11 [ 959.853772][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 961.914823][T13293] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 961.938960][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 961.976842][T13293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.020704][T13295] device veth5 entered promiscuous mode [ 962.057475][T13295] bond1: (slave veth5): Enslaving as an active interface with a down link [ 962.147905][T13293] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.676135][T13309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 963.684747][T13309] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 963.723611][T13309] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 964.052429][T13325] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 966.435747][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 968.493701][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 970.330497][T13368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 970.735397][T13368] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 970.767939][T13368] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 972.695552][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 973.352049][T13384] ptrace attach of ""[13394] was attempted by "./syz-executor exec"[13384] [ 973.710052][T13414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2605'. [ 974.743546][T13420] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 974.770078][T13420] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 974.827985][T13420] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 976.261386][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.333735][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 987.927725][T11934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 987.940972][T11934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 987.952392][T11934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 987.961457][T11934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 987.970389][T11934] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 987.979105][T11934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.569286][T13553] lo speed is unknown, defaulting to 1000 [ 990.013009][T11934] Bluetooth: hci0: command 0x0409 tx timeout [ 990.501016][T13553] chnl_net:caif_netlink_parms(): no params data found [ 991.635406][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.642655][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.670792][T13553] device bridge_slave_0 entered promiscuous mode [ 991.752531][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.791180][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.826273][T13553] device bridge_slave_1 entered promiscuous mode [ 991.969258][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.115499][T11934] Bluetooth: hci0: command 0x041b tx timeout [ 992.285506][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.828931][T13553] team0: Port device team_slave_0 added [ 992.908176][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.005410][T13553] team0: Port device team_slave_1 added [ 993.155665][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.194660][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.577247][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.189657][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 994.392296][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.531094][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.875950][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.022706][T13553] device hsr_slave_0 entered promiscuous mode [ 995.105548][T13553] device hsr_slave_1 entered promiscuous mode [ 995.146942][T13553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.155499][T13553] Cannot create hsr debugfs directory [ 996.253765][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 997.100671][T13553] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 997.136529][T13553] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 997.175047][T13553] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 997.216184][T13553] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 997.540730][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.596965][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.610211][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.647303][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.679132][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.700965][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.737944][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.745220][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.769128][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.797077][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 997.820440][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 997.839999][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.848746][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.889008][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 997.911979][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 997.962328][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 997.995118][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.043786][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.085094][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.160759][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.193618][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.226486][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.266344][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.310186][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.481076][T13553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.898724][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1000.916699][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1000.958818][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.543495][ T8019] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1001.679388][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.697225][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.735519][ T8019] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1001.795948][ T8019] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1001.830877][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1001.849521][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1001.861891][ T8019] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.900527][T13553] device veth0_vlan entered promiscuous mode [ 1001.916829][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.930568][ T8019] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1001.957563][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.973522][ T8019] usb 4-1: Product: syz [ 1002.002593][T13553] device veth1_vlan entered promiscuous mode [ 1002.020722][T13700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1002.037266][T13700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1002.119308][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1002.147294][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1002.189779][T13553] device veth0_macvtap entered promiscuous mode [ 1002.214230][T13553] device veth1_macvtap entered promiscuous mode [ 1002.285335][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.318223][ T8019] usb 4-1: USB disconnect, device number 11 [ 1002.370988][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.416216][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.500138][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.571951][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.629590][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.665423][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.715130][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.742140][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.775983][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.826670][T13101] udevd[13101]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.851170][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.912265][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1002.939478][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1002.984123][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1003.011120][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1003.026731][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.066339][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.165850][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.298831][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.358066][T13728] rdma_rxe: rxe creation allowed on top of a real device only [ 1003.426665][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.546179][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.601379][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.696871][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.747074][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.788915][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.851125][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.877130][T13725] bridge0: port 3(team0) entered blocking state [ 1003.884286][T13725] bridge0: port 3(team0) entered disabled state [ 1003.892245][T13725] device team0 entered promiscuous mode [ 1003.898806][T13725] device team_slave_0 entered promiscuous mode [ 1004.450264][T13725] device team_slave_1 entered promiscuous mode [ 1004.459641][T13725] bridge0: port 3(team0) entered blocking state [ 1004.466549][T13725] bridge0: port 3(team0) entered forwarding state [ 1004.513946][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1004.554510][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1004.582494][T13553] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.613471][T13553] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.653831][T13553] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.682954][T13553] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.714345][ T27] audit: type=1326 audit(1742764966.035:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1004.963325][T13737] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1005.375566][ T27] audit: type=1326 audit(1742764966.095:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1005.465766][ T27] audit: type=1326 audit(1742764966.115:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1005.579068][ T27] audit: type=1326 audit(1742764966.195:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1005.670296][ T27] audit: type=1326 audit(1742764966.215:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1005.859053][ T27] audit: type=1326 audit(1742764966.465:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1005.893573][T13737] ptrace attach of ""[13745] was attempted by "./syz-executor exec"[13737] [ 1005.960617][ T27] audit: type=1326 audit(1742764966.465:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc92a784127 code=0x7ffc0000 [ 1006.035892][ T27] audit: type=1326 audit(1742764966.465:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc92a729359 code=0x7ffc0000 [ 1006.092689][ T27] audit: type=1326 audit(1742764966.465:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc92a78d169 code=0x7ffc0000 [ 1006.395632][T13744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1006.414467][T13744] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1006.432251][T13744] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1006.441441][ T27] audit: type=1326 audit(1742764966.465:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc92a784127 code=0x7ffc0000 [ 1006.464483][T13744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1006.470895][T13744] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1006.477691][T13744] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1006.639171][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.674018][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.858121][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1006.957849][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.264698][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.421790][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1007.581531][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1008.493557][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1009.835302][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1010.107209][ T4260] syz-executor (4260) used greatest stack depth: 18752 bytes left [ 1010.287404][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.458798][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.572904][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.597590][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.954710][T13787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1010.960793][T13787] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1011.004495][T13787] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1011.023309][T13787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1011.039686][T13787] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1011.052287][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.087565][T13787] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1011.138981][T11934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1011.154762][T11934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1011.173745][T11934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1011.188695][T11934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1011.198147][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1011.208943][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1011.526390][T13789] lo speed is unknown, defaulting to 1000 [ 1012.058469][T13803] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1012.111580][T13803] ptrace attach of ""[13804] was attempted by "./syz-executor exec"[13803] [ 1012.173435][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1013.048127][T13789] chnl_net:caif_netlink_parms(): no params data found [ 1013.055690][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1013.293535][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 1013.860830][ T51] batman_adv: batadv0: Removing interface: gretap2 [ 1014.283089][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 1014.732166][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.746398][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.785536][T13789] device bridge_slave_0 entered promiscuous mode [ 1015.163079][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.571891][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 1016.195082][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.207146][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.272363][T13789] device bridge_slave_1 entered promiscuous mode [ 1016.554034][T13848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1017.268270][T13848] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1017.284305][T13848] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1017.333196][T13848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1017.376837][T13848] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1017.418678][T13848] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1017.474313][T13848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1017.493186][T13848] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1017.514357][T13848] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1017.525189][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.774861][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.849170][T13789] team0: Port device team_slave_0 added [ 1018.244730][T13789] team0: Port device team_slave_1 added [ 1018.362639][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.595470][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1018.624980][T13871] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 1018.759601][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.786132][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.886823][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.011579][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.293680][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1019.339269][T13866] ptrace attach of ""[13876] was attempted by "./syz-executor exec"[13866] [ 1019.373865][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.533507][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 1019.569236][ T51] device hsr_slave_0 left promiscuous mode [ 1019.603869][ T51] device hsr_slave_1 left promiscuous mode [ 1019.691286][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.742918][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.785246][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.832589][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.930395][ T51] device bridge_slave_1 left promiscuous mode [ 1019.973122][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.058385][ T51] device bridge_slave_0 left promiscuous mode [ 1020.075132][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.733575][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1020.831972][ T51] device veth1_macvtap left promiscuous mode [ 1020.841799][ T51] device veth0_macvtap left promiscuous mode [ 1020.883604][ T51] device veth1_vlan left promiscuous mode [ 1020.889586][ T51] device veth0_vlan left promiscuous mode [ 1021.365417][ T51] infiniband syz1: set down [ 1021.373775][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1021.615350][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1022.038020][ T51] bond1 (unregistering): (slave veth5): Releasing active interface [ 1023.692952][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.539827][ T51] bond1 (unregistering): Released all slaves [ 1025.507607][T13934] fuse: Bad value for 'fd' [ 1025.606760][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1025.671528][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1025.680428][ T5390] smc: removing ib device syz1 [ 1025.744528][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.802572][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.556395][ T51] bond0 (unregistering): Released all slaves [ 1026.713373][T13906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1026.724709][ T4301] lo speed is unknown, defaulting to 1000 [ 1026.735661][T13906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1026.741677][T13906] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1026.765073][T13906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.771334][T13906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1026.789684][T13906] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1026.843690][T13906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1026.869907][T13906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1026.892079][T13906] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1026.956115][T13789] device hsr_slave_0 entered promiscuous mode [ 1027.013387][T13789] device hsr_slave_1 entered promiscuous mode [ 1027.093322][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.100958][T13789] Cannot create hsr debugfs directory [ 1028.752937][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.812926][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1029.375459][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1030.453341][T13976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1030.465081][T13976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1030.495077][T13976] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1030.539743][T13976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1030.553061][T13976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1030.578430][T13976] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1030.618410][T13976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1030.662559][T13976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1030.681155][T13976] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1031.479816][T13789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1031.526106][T13789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1031.536901][T13789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1031.547934][T13789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1031.810773][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.926081][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1032.013096][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1032.058439][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1032.400247][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.535184][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1032.564719][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1032.575470][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1032.615323][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.622560][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.653584][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1032.703837][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1032.766008][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1032.794439][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.801603][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.846320][T13789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.856960][T13789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.017273][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1033.042041][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1033.348623][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1033.716807][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1033.802171][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1033.859000][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1033.869535][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1033.878695][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1033.888152][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.898395][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1033.907293][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.922425][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1033.930874][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1034.092898][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 1034.413598][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1034.413852][T14047] fuse: Bad value for 'fd' [ 1034.425763][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1034.439392][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.537249][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1034.571707][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1034.708249][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1034.747019][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1034.811306][T13789] device veth0_vlan entered promiscuous mode [ 1034.852267][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.872542][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1034.968120][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 1034.975050][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1034.981200][T14039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.013862][T14039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1035.026344][T13789] device veth1_vlan entered promiscuous mode [ 1035.055747][T14039] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1035.074633][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1035.083449][T14039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1035.094333][T14039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1035.113480][T14039] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1035.128966][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1035.140443][T14039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.162710][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1035.171873][T14039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1035.197574][T14039] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1035.208538][T13789] device veth0_macvtap entered promiscuous mode [ 1035.230126][T13789] device veth1_macvtap entered promiscuous mode [ 1035.347387][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.364572][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.375731][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.413274][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.440045][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.469687][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.517855][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.556297][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.576712][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.605247][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.639256][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.673504][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.882369][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.893761][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.905497][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.915712][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.926941][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.939740][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.660870][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1036.673210][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.844900][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.862880][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.907083][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.944200][T13789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.968422][T13789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.996466][T13789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.012865][T13789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.040159][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.054310][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1037.094173][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.125985][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.134575][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1037.142236][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1037.151316][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1037.403154][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1038.732989][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1038.837063][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.863390][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.930460][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1038.961931][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.993911][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.169831][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.213309][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1039.246664][T14108] fuse: Bad value for 'fd' [ 1039.255192][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1039.452348][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.463137][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1039.575086][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.027834][T14102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.063144][T14102] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1040.084099][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.103289][T14102] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1040.152345][T14102] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.170430][T14102] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1040.190705][T14102] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1040.218648][T14102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1040.249186][T14102] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1040.265598][T14102] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1040.578997][ T51] tipc: Left network mode [ 1041.514415][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.173570][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1042.253558][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1043.533446][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1044.253552][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1044.333470][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1045.912872][T14184] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.971438][T14184] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1046.145623][T14184] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1046.968837][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 1046.993055][T14184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1047.023230][T14184] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1047.041432][T14184] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1047.054197][ T51] device hsr_slave_0 left promiscuous mode [ 1047.061505][ T51] device hsr_slave_1 left promiscuous mode [ 1047.086128][T14184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1047.103587][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.143646][T14184] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1047.157168][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.175886][T14184] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1047.190625][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.271139][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.300308][ T51] device bridge_slave_1 left promiscuous mode [ 1047.363702][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.452020][ T51] device bridge_slave_0 left promiscuous mode [ 1047.470770][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.664190][ T51] device veth1_macvtap left promiscuous mode [ 1047.670318][ T51] device veth0_macvtap left promiscuous mode [ 1047.723564][ T51] device veth1_vlan left promiscuous mode [ 1047.729479][ T51] device veth0_vlan left promiscuous mode [ 1049.052952][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1049.059321][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 1049.133052][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1051.009345][T14265] fuse: Bad value for 'fd' [ 1051.143314][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1051.212992][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.618818][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1051.862435][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1052.296585][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.449257][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.532526][ T51] bond0 (unregistering): Released all slaves [ 1053.853780][T14260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.859865][T14260] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1053.865932][T14260] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1053.873292][T14260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1053.879270][T14260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1053.885259][T14260] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1053.892427][T14260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1053.898418][T14260] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1053.904416][T14260] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1054.340048][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.013295][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 1056.019353][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1056.026003][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1057.649268][T14341] fuse: Bad value for 'fd' [ 1057.953742][T14333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1057.959805][T14333] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1057.966147][T14333] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1057.973502][T14333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1057.979494][T14333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1057.985634][T14333] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1057.992884][T14333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1057.998934][T14333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1058.005079][T14333] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1059.491097][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 1060.505506][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1060.511597][T11934] Bluetooth: hci0: command 0x0c1a tx timeout [ 1061.666151][T14390] fuse: Bad value for 'fd' [ 1062.225021][T14385] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.231209][T14385] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1062.237279][T14385] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1062.244544][T14385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1062.250498][T14385] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1062.256522][T14385] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1062.263772][T14385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1062.269724][T14385] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1062.275706][T14385] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1063.063595][ T4921] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1064.373279][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1064.414193][ T4921] usb 8-1: no configurations [ 1064.419212][ T4921] usb 8-1: can't read configurations, error -22 [ 1064.623468][ T4921] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1064.813154][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1064.819278][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1064.826735][ T4921] usb 8-1: no configurations [ 1064.831382][ T4921] usb 8-1: can't read configurations, error -22 [ 1064.846571][ T4921] usb usb8-port1: attempt power cycle [ 1066.434108][T14441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1066.440232][T14441] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.446799][T14441] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1066.454422][T14441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1066.460349][T14441] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1066.466873][T14441] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1066.474850][T14441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1066.480853][T14441] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1066.487350][T14441] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1067.774529][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1068.423300][ T4921] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1069.156837][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1069.163555][T14306] Bluetooth: hci0: command 0x0c1a tx timeout [ 1069.363399][ T4921] usb 8-1: Using ep0 maxpacket: 8 [ 1069.370442][ T4921] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1069.412490][ T4921] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1069.451864][ T4921] usb 8-1: config 0 has no interface number 0 [ 1069.479292][ T4921] usb 8-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1069.565659][ T4921] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1069.646893][ T4921] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1069.682968][ T4921] usb 8-1: Product: syz [ 1069.974536][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 1069.979381][ T4921] usb 8-1: config 0 descriptor?? [ 1069.987324][T14472] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1070.564328][T14513] fuse: Bad value for 'fd' [ 1071.043922][T14505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1071.049988][T14505] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1071.056423][T14505] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1071.064035][T14505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1071.069954][T14505] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1071.076361][T14505] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1071.083997][T14505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1071.089933][T14505] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1071.096161][T14505] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1071.462515][ T4921] usb 8-1: USB disconnect, device number 5 [ 1072.333514][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1073.134723][T14306] Bluetooth: hci3: command 0x0c1a tx timeout [ 1073.140854][T14306] Bluetooth: hci0: command 0x0c1a tx timeout [ 1074.470516][T14565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1074.477910][T14565] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1074.483948][T14565] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1074.491114][T14565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1074.497076][T14565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1074.503047][T14565] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1074.510398][T14565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1074.516413][T14565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1074.522361][T14565] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1076.030507][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1076.594120][ T4257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1076.607169][ T4257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1076.616924][T11934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1076.630244][ T4257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1076.653451][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1076.659564][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1076.667225][T11934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1076.678412][ T4257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1077.973699][T14610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.979729][T14610] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1077.986126][T14610] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1077.993381][T14610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1077.999434][T14610] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1078.005481][T14610] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1078.012670][T14610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1078.018807][T14610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1078.024833][T14610] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1078.031998][T14610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1078.037972][T14610] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1078.043984][T14610] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1079.339025][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.458118][T14596] chnl_net:caif_netlink_parms(): no params data found [ 1080.093553][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 1080.100832][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1080.107697][T14306] Bluetooth: hci0: command 0x0c1a tx timeout [ 1080.113069][T11934] Bluetooth: hci4: command 0x0c1a tx timeout [ 1080.175542][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.418092][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.460393][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.498649][T14596] device bridge_slave_0 entered promiscuous mode [ 1080.508101][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.515317][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.524340][T14596] device bridge_slave_1 entered promiscuous mode [ 1081.533741][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1081.533758][ T27] audit: type=1326 audit(1742765042.855:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14654 comm="syz.7.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f8f8d169 code=0x7fc00000 [ 1081.594863][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.824790][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.840449][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.173246][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.199416][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 1082.214379][T11934] Bluetooth: hci2: command 0x040f tx timeout [ 1082.226308][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.348914][T14596] team0: Port device team_slave_0 added [ 1082.408741][T14596] team0: Port device team_slave_1 added [ 1082.492871][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.511681][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.546587][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.572168][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.597233][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.614451][T14664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1082.629892][T14664] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1082.636571][T14664] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1082.644209][T14664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1082.650124][T14664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1082.656503][T14664] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1082.664210][T14664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1082.670127][T14664] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1082.676526][T14664] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1082.684312][T14664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1082.690298][T14664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1082.697624][T14664] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1082.829347][T11934] Bluetooth: hci4: unexpected event for opcode 0x200a [ 1082.836104][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.735387][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1084.741556][ T4257] Bluetooth: hci2: command 0x0c1a tx timeout [ 1084.741599][T14645] Bluetooth: hci0: command 0x0c1a tx timeout [ 1085.298262][T14596] device hsr_slave_0 entered promiscuous mode [ 1085.325500][T14596] device hsr_slave_1 entered promiscuous mode [ 1085.342717][T14596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.352562][T14596] Cannot create hsr debugfs directory [ 1085.822636][ T11] tipc: Left network mode [ 1086.493216][T11934] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1086.813678][T11934] Bluetooth: hci2: command 0x0406 tx timeout [ 1086.813841][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1086.819738][T11934] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.408864][T14717] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1088.538198][T14717] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1088.921115][ T4257] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.115290][T11934] Bluetooth: hci4: command 0x0406 tx timeout [ 1089.655319][T14717] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1089.709159][T14717] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1089.743086][T14717] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1089.782023][T14717] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1089.811705][T14717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1089.825568][T14717] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1089.831855][T14717] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1089.985950][T14717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1090.011724][T14717] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1090.033705][T14717] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1090.672008][T14596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1090.948476][T14596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1090.990989][T14596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1091.035048][T14596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1091.141223][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 1092.125227][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 1092.131306][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1092.137833][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1093.090746][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.213416][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 1093.415526][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1093.444078][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.500656][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.554522][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.569250][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.579806][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.587059][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.676122][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1094.682370][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 1094.689378][T11934] Bluetooth: hci0: command 0x0406 tx timeout [ 1095.117615][ T11] device hsr_slave_0 left promiscuous mode [ 1095.131471][ T11] device hsr_slave_1 left promiscuous mode [ 1095.163031][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.179079][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.199460][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.240549][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.308009][ T11] device team0 left promiscuous mode [ 1095.347098][ T11] device team_slave_0 left promiscuous mode [ 1095.369453][ T11] device team_slave_1 left promiscuous mode [ 1095.377065][ T11] bridge0: port 3(team0) entered disabled state [ 1095.387798][ T11] device bridge_slave_1 left promiscuous mode [ 1095.394709][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.404023][ T11] device bridge_slave_0 left promiscuous mode [ 1095.410454][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.471554][ T11] device veth1_macvtap left promiscuous mode [ 1095.478990][ T11] device veth0_macvtap left promiscuous mode [ 1095.485762][ T11] device veth1_vlan left promiscuous mode [ 1095.491782][ T11] device veth0_vlan left promiscuous mode [ 1095.556352][ T4257] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1095.746774][ T11] bond1 (unregistering): (slave veth3): Releasing active interface [ 1096.271484][ T11] bond1 (unregistering): Released all slaves [ 1099.234725][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1099.521692][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1099.631788][ T4257] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1099.641147][ T4257] Bluetooth: hci4: Injecting HCI hardware error event [ 1099.654138][ T4268] Bluetooth: hci4: hardware error 0x00 [ 1099.767069][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.871527][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.773198][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1102.016755][ T11] bond0 (unregistering): Released all slaves [ 1102.208970][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1102.227066][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1102.241958][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1102.282519][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.289959][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.485778][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1102.503351][T14796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1102.509517][T14796] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1102.515636][T14796] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1102.522955][T14796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1102.529176][T14796] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1102.535335][T14796] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1102.542858][T14796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1102.548829][T14796] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1102.554835][T14796] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1102.626043][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1102.796295][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1102.848695][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.002079][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.094638][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.118925][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.227426][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.258556][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.150071][T14596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.161648][T14596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.338020][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.346800][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.442922][T14891] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1104.653290][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1104.653323][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1105.345812][T14894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1105.351935][T14894] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1105.357983][T14894] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1105.365189][T14894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1105.371138][T14894] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1105.377140][T14894] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1105.384382][T14894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1105.390296][T14894] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1105.396278][T14894] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1105.710927][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.729570][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.752113][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.133344][T11934] Bluetooth: hci0: command 0x0406 tx timeout [ 1108.032690][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1108.039445][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1108.772235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1109.548574][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1109.643642][T11934] Bluetooth: hci0: command 0x0c1a tx timeout [ 1109.774987][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1109.792223][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1109.832702][T14596] device veth0_vlan entered promiscuous mode [ 1109.868393][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1110.173571][T11934] Bluetooth: hci3: command 0x0406 tx timeout [ 1110.187796][T11934] Bluetooth: hci2: command 0x0406 tx timeout [ 1110.439648][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1110.526247][T14596] device veth1_vlan entered promiscuous mode [ 1110.679522][T14596] device veth0_macvtap entered promiscuous mode [ 1110.693537][T14596] device veth1_macvtap entered promiscuous mode [ 1110.720252][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1110.756221][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1110.766805][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1110.784756][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.796265][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.808194][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.819245][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.831456][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.842358][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.857049][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.869306][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.881732][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.889968][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1110.916234][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1111.097022][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1111.190009][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.201802][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.243089][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.254183][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.265483][T14951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1111.271555][T14951] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1111.277627][T14951] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1111.284839][T14951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1111.290803][T14951] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1111.296810][T14951] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1111.304018][T14951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1111.309963][T14951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1111.315962][T14951] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1111.364533][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.404758][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.454639][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.470725][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.486406][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.494784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1111.507382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1111.522284][T14596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.550604][T14596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.574773][T14596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.604231][T14596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.849465][ T4748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.881627][ T4748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.924514][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1112.016196][ T4748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.048723][ T4748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.078215][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1114.177181][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1114.291229][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.297924][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1115.791899][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.667476][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1116.674342][T11934] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.684917][T15002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1116.690977][T15002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1116.698125][T15002] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1116.705515][T15002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1116.711476][T15002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1116.717511][T15002] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1116.724750][T15002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1116.730705][T15002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1116.736789][T15002] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1118.012940][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1119.133091][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1119.161583][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1119.343610][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1119.364069][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1119.405006][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1119.483701][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1119.532117][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1119.535290][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.544029][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1120.092918][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1120.141285][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.648050][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.886417][T15048] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1120.892692][T15048] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1120.901940][T15048] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1120.909238][T15048] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.915254][T15048] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1120.921224][T15048] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1120.928635][T15048] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1120.935019][T15048] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1120.941133][T15048] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1120.948892][T15048] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1120.955004][T15048] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1120.960995][T15048] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1121.121952][T15060] fuse: Invalid rootmode [ 1121.666605][ T9] team0: Port device netdevsim0 removed [ 1121.700594][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.944840][T15037] chnl_net:caif_netlink_parms(): no params data found [ 1122.383411][T11934] Bluetooth: hci0: command 0x0c1a tx timeout [ 1123.052979][T11934] Bluetooth: hci1: command 0x041b tx timeout [ 1123.060238][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1123.066385][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1123.381758][T15037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.401099][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.463793][T15037] device bridge_slave_0 entered promiscuous mode [ 1123.505012][T15037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.552483][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.618947][T15037] device bridge_slave_1 entered promiscuous mode [ 1123.685366][T15037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.709871][T15037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.955717][T15095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1123.961789][T15095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1123.968034][T15095] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1123.975449][T15095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1123.981438][T15095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1123.987515][T15095] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1123.994864][T15095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1124.000871][T15095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1124.006881][T15095] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1124.014146][T15095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1124.020063][T15095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1124.026063][T15095] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1124.332932][ T4743] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1124.534741][ T4743] usb 4-1: config 0 has no interfaces? [ 1124.540665][ T4743] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1124.615616][ T4743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.647388][ T4743] usb 4-1: config 0 descriptor?? [ 1125.015071][T15037] team0: Port device team_slave_0 added [ 1125.045739][ T4743] usb 4-1: USB disconnect, device number 12 [ 1125.221182][T15037] team0: Port device team_slave_1 added [ 1125.452983][T11934] Bluetooth: hci0: command 0x0c1a tx timeout [ 1125.550303][T15037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.559494][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.610131][T15037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.711930][T15037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.725531][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.974261][T15037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.101194][T11934] Bluetooth: hci1: command 0x0419 tx timeout [ 1126.109499][T11934] Bluetooth: hci2: command 0x0c1a tx timeout [ 1126.116896][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1127.744381][T15144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1127.750479][T15144] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1127.757371][T15144] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1127.764692][T15144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1127.770642][T15144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1127.776694][T15144] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1127.783956][T15144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1127.789893][T15144] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1127.795902][T15144] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1127.803127][T15144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1127.809172][T15144] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1127.815171][T15144] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1128.907570][T15037] device hsr_slave_0 entered promiscuous mode [ 1128.959174][T15037] device hsr_slave_1 entered promiscuous mode [ 1129.092900][T11934] Bluetooth: hci0: command 0x0c1a tx timeout [ 1129.384013][T15037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1129.419493][T15037] Cannot create hsr debugfs directory [ 1129.704426][ T9] IPVS: stopping backup sync thread 7131 ... [ 1129.960316][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1130.013299][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1130.019380][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1130.023091][ T4743] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1130.025514][T11934] Bluetooth: hci3: command 0x0c1a tx timeout [ 1130.234892][ T4743] usb 8-1: not running at top speed; connect to a high speed hub [ 1130.279765][ T4743] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1131.076780][ T4743] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1131.104860][ T4743] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.114890][ T4743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.123879][ T4743] usb 8-1: Product: syz [ 1131.128096][ T4743] usb 8-1: Manufacturer: syz [ 1131.140021][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1131.147737][ T4743] usb 8-1: SerialNumber: syz [ 1131.159511][T15174] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1131.168178][T15174] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1131.573832][ T4743] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 1131.873459][ T4743] usb 8-1: USB disconnect, device number 6 [ 1132.038364][ T9] device hsr_slave_0 left promiscuous mode [ 1132.097376][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1132.104226][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1132.140099][T11934] Bluetooth: hci1: command 0x0c1a tx timeout [ 1132.444488][ T9] device hsr_slave_1 left promiscuous mode [ 1132.454750][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.502883][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.563760][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.571465][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.630375][ T9] device bridge_slave_1 left promiscuous mode [ 1132.643353][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.659561][ T9] device bridge_slave_0 left promiscuous mode [ 1132.688044][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.795862][ T9] device veth1_macvtap left promiscuous mode [ 1132.805862][ T9] device veth0_macvtap left promiscuous mode [ 1132.812137][ T9] device veth1_vlan left promiscuous mode [ 1132.838640][ T9] device veth0_vlan left promiscuous mode [ 1132.862926][ T4297] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1133.060568][ T4297] usb 8-1: config 0 has an invalid interface number: 242 but max is 0 [ 1133.088314][ T4297] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.129234][ T4297] usb 8-1: config 0 has no interface number 0 [ 1133.147601][ T4297] usb 8-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1133.166366][ T4297] usb 8-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1133.217444][ T4297] usb 8-1: config 0 interface 242 has no altsetting 0 [ 1133.247352][ T4297] usb 8-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 1133.592887][ T4297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.644119][ T4297] usb 8-1: Product: syz [ 1133.657496][ T4297] usb 8-1: Manufacturer: syz [ 1133.682588][ T4297] usb 8-1: SerialNumber: syz [ 1133.704215][ T4297] usb 8-1: config 0 descriptor?? [ 1133.919209][ T8019] usb 8-1: USB disconnect, device number 7 [ 1134.173019][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 1136.271020][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 1138.551608][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1138.557993][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 1138.764358][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1138.899036][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1138.976071][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.104327][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.381711][ T9] bond0 (unregistering): Released all slaves [ 1142.732714][T15297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1142.738912][T15297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1142.745045][T15297] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1142.752221][T15297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1142.758200][T15297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1142.764192][T15297] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1142.771357][T15297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1142.777316][T15297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1142.783298][T15297] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1142.790469][T15297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1142.796476][T15297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1142.802453][T15297] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1143.098966][T15315] fuse: Bad value for 'fd' [ 1144.652887][T14645] Bluetooth: hci0: command 0x0c1a tx timeout [ 1145.228470][ T4257] Bluetooth: hci1: command 0x0c1a tx timeout [ 1145.234594][ T4257] Bluetooth: hci2: command 0x0c1a tx timeout [ 1145.240809][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1145.351713][T15037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1145.398328][T15037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1145.657500][ T27] audit: type=1326 audit(1742765106.975:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1145.661290][T15037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1146.039104][ T27] audit: type=1326 audit(1742765107.025:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1146.331468][T15037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1146.453003][ T27] audit: type=1326 audit(1742765107.155:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1146.647787][ T27] audit: type=1326 audit(1742765107.435:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1146.795993][ T27] audit: type=1326 audit(1742765107.625:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1146.843070][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1147.293006][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1147.327483][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1147.333772][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1147.363326][ T27] audit: type=1326 audit(1742765107.625:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1147.598376][ T27] audit: type=1326 audit(1742765107.625:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1147.702229][T15037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.859934][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1147.885296][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1147.990580][T15037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.090308][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1148.139884][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1148.204399][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.211643][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.316729][T15359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1148.322832][T15359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1148.328981][T15359] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1148.336214][T15359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1148.342900][T15359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1148.348878][T15359] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1148.356087][T15359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1148.362003][T15359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1148.368496][T15359] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1148.375745][T15359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1148.381675][T15359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1148.387695][T15359] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1148.523308][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1148.533139][ T27] audit: type=1326 audit(1742765107.625:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1148.563441][ T27] audit: type=1326 audit(1742765107.665:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1148.574960][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1148.593468][ T27] audit: type=1326 audit(1742765107.665:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.6.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40658d169 code=0x7ffc0000 [ 1148.672429][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1148.703456][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.710747][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.742436][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1148.791355][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3123'. [ 1148.813491][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1148.834559][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1148.903073][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1148.940823][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1148.964174][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1149.001628][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1149.048203][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1149.084885][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.302070][T15037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.324137][T15037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1149.467596][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1149.692680][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1150.280877][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1150.493087][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 1150.499217][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1150.505539][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 1151.106223][T15405] netlink: 'syz.4.3131': attribute type 4 has an invalid length. [ 1151.383060][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1151.410659][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1151.449137][T15037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.981462][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1152.053828][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1152.237309][T15037] device veth0_vlan entered promiscuous mode [ 1152.266064][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1152.283865][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1152.321637][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1152.333262][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1152.340470][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1152.393823][T15037] device veth1_vlan entered promiscuous mode [ 1152.498801][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.514137][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.529329][T15037] device veth0_macvtap entered promiscuous mode [ 1152.556878][T15037] device veth1_macvtap entered promiscuous mode [ 1152.573125][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1152.579210][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1152.591319][T14645] Bluetooth: hci1: command 0x0406 tx timeout [ 1152.636967][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.742970][ T4743] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1152.857533][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.909513][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.954844][ T4743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.976291][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.998774][ T4743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.031812][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.058640][ T4743] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1153.091325][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.109250][ T4743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.145308][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.200436][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.211445][ T4743] usb 4-1: config 0 descriptor?? [ 1153.213941][T15037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.246680][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1153.267619][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1153.294122][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1153.324035][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1153.355092][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.383048][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.412882][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.442807][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.484349][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.517365][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.555745][T15037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.592857][T15037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.632707][T15037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.643082][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1153.651982][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1153.742322][T15037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.771778][T15037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.812915][T15037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.845578][T15037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.056211][T15418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.079405][T15418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.114916][T15418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.118456][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1154.124697][T15418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.146130][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1155.046771][ T4743] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 1155.086415][ T4743] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 1155.160475][ T4743] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 1155.201199][ T4743] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 1155.624305][ T4743] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 1155.654384][ T4743] usb 4-1: USB disconnect, device number 13 [ 1158.633810][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3167'. [ 1159.739645][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1162.829624][T15573] xt_hashlimit: max too large, truncated to 1048576 [ 1162.872060][T15573] Cannot find set identified by id 0 to match [ 1163.690854][T15584] program syz.4.3173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1163.754042][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1163.754060][ T27] audit: type=1326 audit(1742765125.075:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1163.840523][ T4268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1163.850678][ T4268] CPU: 0 PID: 4268 Comm: kworker/u5:8 Not tainted 6.1.131-syzkaller #0 [ 1163.858959][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1163.869052][ T4268] Workqueue: hci2 hci_rx_work [ 1163.873757][ T4268] Call Trace: [ 1163.877034][ T4268] [ 1163.879964][ T4268] dump_stack_lvl+0x1e3/0x2cb [ 1163.884653][ T4268] ? nf_tcp_handle_invalid+0x647/0x647 [ 1163.890110][ T4268] ? panic+0x764/0x764 [ 1163.894192][ T4268] sysfs_create_dir_ns+0x2c6/0x390 [ 1163.899312][ T4268] ? sysfs_warn_dup+0xa0/0xa0 [ 1163.904007][ T4268] kobject_add_internal+0x6df/0xd10 [ 1163.909214][ T4268] kobject_add+0x14e/0x210 [ 1163.913635][ T4268] ? device_add+0x3c2/0xfd0 [ 1163.918230][ T4268] ? kobject_init+0x1d0/0x1d0 [ 1163.922927][ T4268] ? __raw_spin_lock_init+0x41/0x100 [ 1163.928285][ T4268] ? get_device_parent+0x128/0x400 [ 1163.933514][ T4268] device_add+0x476/0xfd0 [ 1163.937997][ T4268] hci_conn_add_sysfs+0xe4/0x1f0 [ 1163.943136][ T4268] le_conn_complete_evt+0xcfe/0x1350 [ 1163.948556][ T4268] ? trace_contention_end+0x61/0x170 [ 1163.953873][ T4268] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 1163.960139][ T4268] ? __mutex_unlock_slowpath+0x218/0x750 [ 1163.965789][ T4268] ? mutex_unlock+0x10/0x10 [ 1163.970321][ T4268] ? skb_pull_data+0x10e/0x220 [ 1163.975122][ T4268] hci_le_conn_complete_evt+0x188/0x410 [ 1163.980720][ T4268] hci_event_packet+0xa40/0x1510 [ 1163.985689][ T4268] ? hci_remote_host_features_evt+0x270/0x270 [ 1163.991790][ T4268] ? bis_list+0x290/0x290 [ 1163.996237][ T4268] ? do_raw_spin_unlock+0x137/0x8a0 [ 1164.001474][ T4268] ? kcov_remote_start+0x4ae/0x7c0 [ 1164.006740][ T4268] ? lockdep_hardirqs_on+0x10/0x130 [ 1164.012051][ T4268] ? hci_send_to_monitor+0x99/0x4d0 [ 1164.017269][ T4268] hci_rx_work+0x3a6/0xd10 [ 1164.021720][ T4268] ? process_one_work+0x806/0x1260 [ 1164.027512][ T4268] process_one_work+0x917/0x1260 [ 1164.032825][ T4268] ? worker_detach_from_pool+0x260/0x260 [ 1164.038862][ T4268] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1164.044771][ T4268] ? kthread_data+0x4e/0xc0 [ 1164.049358][ T4268] ? wq_worker_running+0x97/0x190 [ 1164.054407][ T4268] worker_thread+0xa47/0x1200 [ 1164.059099][ T4268] ? release_firmware_map_entry+0x18b/0x18b [ 1164.065042][ T4268] kthread+0x28d/0x320 [ 1164.069117][ T4268] ? worker_clr_flags+0x190/0x190 [ 1164.074495][ T4268] ? kthread_blkcg+0xd0/0xd0 [ 1164.079111][ T4268] ret_from_fork+0x1f/0x30 [ 1164.083589][ T4268] [ 1164.091869][ T4268] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.106422][ T4268] Bluetooth: hci2: failed to register connection device [ 1164.118413][ T27] audit: type=1326 audit(1742765125.075:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.141274][ T27] audit: type=1326 audit(1742765125.075:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.166050][ T27] audit: type=1326 audit(1742765125.075:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.189369][ T27] audit: type=1326 audit(1742765125.075:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.213141][ T27] audit: type=1326 audit(1742765125.075:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.236497][ T27] audit: type=1326 audit(1742765125.075:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.259572][ T27] audit: type=1326 audit(1742765125.075:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.292830][ T27] audit: type=1326 audit(1742765125.115:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1164.385879][ T27] audit: type=1326 audit(1742765125.475:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663b18d169 code=0x7ffc0000 [ 1166.120303][T15619] fuse: Bad value for 'fd' [ 1172.694393][T15685] xt_hashlimit: max too large, truncated to 1048576 [ 1172.705510][T15685] Cannot find set identified by id 0 to match [ 1173.523000][ T4554] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1173.724664][ T4554] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1173.735217][ T4554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.759447][ T4554] usb 4-1: config 0 descriptor?? [ 1173.796784][ T4554] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1174.826480][ T4554] usb 4-1: USB disconnect, device number 14 [ 1177.224363][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.183006][ T4919] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1182.483111][ T4919] usb 5-1: Using ep0 maxpacket: 8 [ 1182.495263][ T4919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 1182.701307][ T4919] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1182.759022][ T4919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1182.785156][ T4919] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1182.819276][ T4919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.059369][ T4919] usb 5-1: config 0 descriptor?? [ 1183.637914][ T4919] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 1183.724365][ T4919] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 1183.788585][ T4919] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 1183.903005][ T4919] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 1184.264055][ T4919] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 1184.295613][ T4919] kye 0003:0458:5011.0009: hidraw0: USB HID v0.05 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 1184.353132][ T4919] kye 0003:0458:5011.0009: tablet-enabling feature report not found [ 1184.363693][ T4919] kye 0003:0458:5011.0009: tablet enabling failed [ 1184.732967][ T4919] usb 5-1: USB disconnect, device number 12 [ 1184.797433][T15759] xt_hashlimit: max too large, truncated to 1048576 [ 1184.827008][T15759] Cannot find set identified by id 0 to match [ 1185.404361][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1185.942877][ T4554] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1186.132810][ T4554] usb 7-1: Using ep0 maxpacket: 16 [ 1186.148490][ T4554] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1186.185341][ T4554] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.258984][ T4554] usb 7-1: config 0 has no interface number 0 [ 1186.300802][ T4554] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1186.360628][ T4554] usb 7-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.448616][ T4554] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1186.490825][ T4554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.530690][ T4554] usb 7-1: Product: syz [ 1186.555689][ T4554] usb 7-1: Manufacturer: syz [ 1186.576006][ T4554] usb 7-1: SerialNumber: syz [ 1186.607102][ T4554] usb 7-1: config 0 descriptor?? [ 1186.637394][T15787] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1186.863360][ T4554] asix: probe of 7-1:0.251 failed with error -22 [ 1186.893188][ T4554] usb 7-1: USB disconnect, device number 2 [ 1188.922352][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1189.054655][T15817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1189.267898][T15817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1190.029353][ T4297] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1190.384442][ T4297] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.523525][ T4297] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1191.652835][ T4297] usb 7-1: config 1 has no interface number 1 [ 1191.659178][ T4297] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1191.672202][ T4297] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1191.698821][ T4297] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.711914][ T4297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.720148][ T4297] usb 7-1: Product: syz [ 1191.733021][ T4297] usb 7-1: Manufacturer: syz [ 1191.755956][ T4297] usb 7-1: SerialNumber: syz [ 1191.982515][ T4297] usb 7-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1192.064719][ T4297] usb 7-1: USB disconnect, device number 3 [ 1193.173285][T12706] udevd[12706]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.772931][ T4268] Bluetooth: hci1: command 0x0411 tx timeout [ 1199.610363][T15861] syz.6.3259 (15861): drop_caches: 2 [ 1199.625715][ T4554] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1199.772993][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1199.843821][ T4554] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.859843][ T4554] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1199.870062][ T4554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.883072][ T4554] usb 8-1: config 0 descriptor?? [ 1199.906907][ T4554] pwc: Askey VC010 type 2 USB webcam detected. [ 1200.303790][ T4554] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1201.136459][ T4554] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1201.145033][ T4554] pwc: recv_control_msg error -71 req 04 val 1000 [ 1201.152780][ T4554] pwc: recv_control_msg error -71 req 04 val 1300 [ 1201.160529][ T4554] pwc: recv_control_msg error -71 req 04 val 1400 [ 1201.173253][ T4554] pwc: recv_control_msg error -71 req 02 val 2000 [ 1201.181097][ T4554] pwc: recv_control_msg error -71 req 02 val 2100 [ 1201.198946][ T4554] pwc: recv_control_msg error -71 req 04 val 1500 [ 1201.217414][ T4554] pwc: recv_control_msg error -71 req 02 val 2500 [ 1201.225801][ T4554] pwc: recv_control_msg error -71 req 02 val 2400 [ 1201.234114][ T4554] pwc: recv_control_msg error -71 req 02 val 2600 [ 1201.242366][ T4554] pwc: recv_control_msg error -71 req 02 val 2900 [ 1201.251168][ T4554] pwc: recv_control_msg error -71 req 02 val 2800 [ 1201.259976][ T4554] pwc: recv_control_msg error -71 req 04 val 1100 [ 1201.268015][ T4554] pwc: recv_control_msg error -71 req 04 val 1200 [ 1201.304433][ T4554] pwc: Registered as video103. [ 1201.329563][ T4554] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input19 [ 1201.407476][ T4554] usb 8-1: USB disconnect, device number 8 [ 1209.582870][ T8019] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1209.773218][ T8019] usb 8-1: Using ep0 maxpacket: 32 [ 1209.780873][ T8019] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1209.837664][ T8019] usb 8-1: config 0 has an invalid interface number: 157 but max is 0 [ 1209.858538][ T8019] usb 8-1: config 0 has no interface number 0 [ 1209.870891][ T8019] usb 8-1: config 0 interface 157 has no altsetting 0 [ 1209.970358][ T8019] usb 8-1: New USB device found, idVendor=0471, idProduct=209e, bcdDevice=1e.f3 [ 1210.009480][ T8019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.018367][ T8019] usb 8-1: Product: syz [ 1210.022785][ T8019] usb 8-1: Manufacturer: syz [ 1210.032813][ T8019] usb 8-1: SerialNumber: syz [ 1210.083691][ T8019] usb 8-1: config 0 descriptor?? [ 1210.632976][ T8019] usb 8-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1210.672104][ T8019] usb 8-1: USB disconnect, device number 9 [ 1212.777468][T16002] syz.4.3300 (16002): drop_caches: 2 [ 1213.802914][ T4554] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1214.398133][ T4554] usb 8-1: Using ep0 maxpacket: 8 [ 1214.406082][ T4554] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1214.417642][ T4554] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1214.433973][ T4554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.450519][ T4554] usb 8-1: config 0 descriptor?? [ 1214.687612][ T4554] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1215.683211][T15875] usb 8-1: USB disconnect, device number 10 [ 1217.063175][T16059] binfmt_misc: Unknown parameter 'fd' [ 1217.926968][T16064] syz.3.3316 (16064): drop_caches: 2 [ 1217.962970][ T4554] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1218.373154][ T4554] usb 8-1: Using ep0 maxpacket: 32 [ 1218.535724][ T4554] usb 8-1: config 0 has an invalid interface number: 219 but max is 0 [ 1218.832928][ T4554] usb 8-1: config 0 has no interface number 0 [ 1218.839110][ T4554] usb 8-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1218.953177][ T4554] usb 8-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1218.992750][ T4554] usb 8-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1219.066427][ T4554] usb 8-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1219.263029][ T4554] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.341547][ T4554] usb 8-1: Product: syz [ 1219.350707][ T4554] usb 8-1: Manufacturer: syz [ 1219.366304][ T4554] usb 8-1: SerialNumber: syz [ 1220.287342][ T4554] usb 8-1: config 0 descriptor?? [ 1220.322855][T16072] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1221.363497][ T4554] etas_es58x 8-1:0.219: Starting syz syz (Serial Number syz) [ 1221.461376][ T4554] usb 8-1: USB disconnect, device number 11 [ 1222.682941][ T4554] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1231.509494][T16213] device veth1_macvtap left promiscuous mode [ 1231.523424][T16213] device macsec0 entered promiscuous mode [ 1232.264497][T16217] device veth1_macvtap entered promiscuous mode [ 1232.287692][T16217] device macsec0 left promiscuous mode [ 1232.328081][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.503196][T16278] tipc: Started in network mode [ 1237.508433][T16278] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1237.516323][T16278] tipc: Enabled bearer , priority 0 [ 1238.626764][ T4681] tipc: Node number set to 11578026 [ 1238.671315][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.452797][ T4743] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1241.390755][ T4743] usb 3-1: Using ep0 maxpacket: 8 [ 1241.405407][ T4743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.419867][ T4743] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1241.430751][ T4743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.442314][ T4743] usb 3-1: config 0 descriptor?? [ 1241.600511][T16334] usb usb1: usbfs: process 16334 (syz.4.3397) did not claim interface 0 before use [ 1241.719922][ T4743] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1241.839551][T16336] tipc: Started in network mode [ 1241.844829][T16336] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1241.854642][T16336] tipc: Enabled bearer , priority 0 [ 1242.843124][ T4554] tipc: Node number set to 11578026 [ 1243.425002][T15199] usb 3-1: USB disconnect, device number 5 [ 1246.141855][T16394] tipc: Started in network mode [ 1246.147028][T16394] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1246.154866][T16394] tipc: Enabled bearer , priority 0 [ 1247.022807][ T4743] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1247.212873][ T4743] usb 3-1: Using ep0 maxpacket: 8 [ 1247.239382][ T4743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1247.282818][ T4677] tipc: Node number set to 11578026 [ 1248.125853][ T4743] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1248.135239][ T4743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.215164][ T4743] usb 3-1: config 0 descriptor?? [ 1248.442507][ T4743] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1249.705028][T15875] usb 3-1: USB disconnect, device number 6 [ 1250.644986][T16452] tipc: Enabled bearer , priority 10 [ 1250.679104][T16452] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3437'. [ 1250.698612][T16452] tipc: Resetting bearer [ 1251.128609][T16452] tipc: Disabling bearer [ 1252.021916][ T4268] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 1252.410344][T16482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1252.573138][ T4677] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1252.772828][ T4677] usb 5-1: Using ep0 maxpacket: 8 [ 1252.814751][ T4677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.841724][ T4677] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1252.862669][ T4677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.891235][ T4677] usb 5-1: config 0 descriptor?? [ 1255.887836][ T4677] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1255.901147][ T4677] usb 5-1: USB disconnect, device number 14 [ 1256.093034][ T4268] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1256.104391][ T4268] Bluetooth: hci0: Injecting HCI hardware error event [ 1256.116620][ T4268] Bluetooth: hci0: hardware error 0x00 [ 1258.172948][ T4268] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1259.531908][ T4268] Bluetooth: hci1: link tx timeout [ 1259.537924][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1259.549357][ T4268] Bluetooth: hci1: link tx timeout [ 1259.554835][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1259.565777][T16538] CUSE: unknown device info "ÿ" [ 1259.570818][T16538] CUSE: zero length info key specified [ 1260.442994][ T4681] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1261.252144][T16557] vivid-005: kernel_thread() failed [ 1261.340731][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1261.363054][ T4681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1261.378293][ T4681] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1261.420303][ T4681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.447282][ T4681] usb 5-1: config 0 descriptor?? [ 1261.612865][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1261.777790][ T4681] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1264.136851][T15199] usb 5-1: USB disconnect, device number 15 [ 1264.659976][T15199] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1266.332799][T15199] usb 5-1: Using ep0 maxpacket: 8 [ 1266.350700][T15199] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1266.469050][T15199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.501837][T15199] usb 5-1: config 0 has no interface number 0 [ 1266.530638][T15199] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1266.582928][T15199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.627620][T15199] usb 5-1: Product: syz [ 1266.631862][T15199] usb 5-1: Manufacturer: syz [ 1266.668244][T15199] usb 5-1: SerialNumber: syz [ 1266.691783][T15199] usb 5-1: config 0 descriptor?? [ 1271.176955][ T8019] usb 5-1: USB disconnect, device number 16 [ 1271.202761][ T4743] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1271.422839][ T4743] usb 3-1: Using ep0 maxpacket: 8 [ 1271.429835][ T4743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.468132][ T4743] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1271.499239][ T4743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.535934][ T4743] usb 3-1: config 0 descriptor?? [ 1271.779228][ T4743] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1272.865130][T15875] usb 3-1: USB disconnect, device number 7 [ 1274.132946][ T4554] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1274.172929][ T4268] Bluetooth: hci1: command 0x0405 tx timeout [ 1274.333338][ T4554] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.351977][ T4554] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1274.385141][ T4554] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.400596][ T4554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.418181][ T4554] usb 4-1: Product: syz [ 1274.427937][ T4554] usb 4-1: Manufacturer: syz [ 1274.443109][ T4554] usb 4-1: SerialNumber: syz [ 1274.686990][T16670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1277.625568][ T4554] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1277.652656][ T4554] cdc_ncm 4-1:1.0: bind() failure [ 1277.692430][ T4554] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1277.723048][ T4554] cdc_ncm 4-1:1.1: bind() failure [ 1277.742921][ T4554] usb 4-1: USB disconnect, device number 15 [ 1277.921076][ T4268] Bluetooth: hci1: link tx timeout [ 1277.926477][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.934459][ T4268] Bluetooth: hci1: link tx timeout [ 1277.939633][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.948804][T16723] CUSE: unknown device info "ÿ" [ 1277.954035][T16723] CUSE: zero length info key specified [ 1277.973786][T15199] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1278.093164][T15875] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1278.189316][T15199] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 1278.249952][T15199] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 1278.312907][T15875] usb 5-1: Using ep0 maxpacket: 8 [ 1278.329327][T15875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1278.414736][T15199] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1278.449424][T15875] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1278.519198][T15199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.551999][T15875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.715767][T16717] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1278.810997][T15199] usb 8-1: invalid MIDI in EP 0 [ 1278.818355][T15875] usb 5-1: config 0 descriptor?? [ 1279.020903][T15199] snd-usb-audio: probe of 8-1:27.0 failed with error -22 [ 1279.060291][T15875] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1279.108782][T15199] usb 8-1: USB disconnect, device number 12 [ 1279.505327][T16734] udevd[16734]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.361456][ T4919] usb 5-1: USB disconnect, device number 17 [ 1283.246686][T16779] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3536'. [ 1285.337920][T16790] tmpfs: Bad value for 'mpol' [ 1287.272747][T15199] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1288.333300][T15199] usb 7-1: Using ep0 maxpacket: 8 [ 1288.356791][T15199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1288.387565][T15199] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1288.406868][T15199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.453573][T15199] usb 7-1: config 0 descriptor?? [ 1288.691051][T15199] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1288.877778][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3552'. [ 1289.010964][T16836] overlayfs: missing 'lowerdir' [ 1393.912664][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1393.920216][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l [ 1393.928666][ C0] (detected by 0, t=10502 jiffies, g=89533, q=165 ncpus=2) [ 1393.935994][ C0] task:kworker/u4:0 state:R running task stack:22328 pid:9 ppid:2 flags:0x00004000 [ 1393.948675][ C0] Workqueue: bat_events batadv_nc_worker [ 1393.954367][ C0] Call Trace: [ 1393.957665][ C0] [ 1393.960615][ C0] __schedule+0x143f/0x4570 [ 1393.965459][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 1393.971553][ C0] ? print_irqtrace_events+0x210/0x210 [ 1393.977096][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 1393.982626][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 1393.987780][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 1393.993550][ C0] irqentry_exit+0x53/0x80 [ 1393.998080][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1394.004092][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 1394.009670][ C0] Code: 2b 00 74 08 4c 89 f7 e8 4f 55 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1394.029429][ C0] RSP: 0018:ffffc900000e7a80 EFLAGS: 00000206 [ 1394.035525][ C0] RAX: 0000000000000001 RBX: 1ffff9200001cf5c RCX: 1ffff9200001cefc [ 1394.043517][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 1394.051524][ C0] RBP: ffffc900000e7be0 R08: dffffc0000000000 R09: fffffbfff225724d [ 1394.059535][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200001cf58 [ 1394.067542][ C0] R13: dffffc0000000000 R14: ffffc900000e7ae0 R15: 0000000000000246 [ 1394.075581][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1394.081013][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1394.086273][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1394.091349][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1394.097509][ C0] batadv_nc_worker+0xe8/0x610 [ 1394.102324][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1394.107345][ C0] ? batadv_nc_worker+0xc7/0x610 [ 1394.112335][ C0] ? process_one_work+0x806/0x1260 [ 1394.117486][ C0] process_one_work+0x917/0x1260 [ 1394.122487][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1394.128188][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1394.133783][ C0] ? kthread_data+0x4e/0xc0 [ 1394.138329][ C0] ? wq_worker_running+0x97/0x190 [ 1394.143464][ C0] worker_thread+0xa47/0x1200 [ 1394.148195][ C0] kthread+0x28d/0x320 [ 1394.152281][ C0] ? worker_clr_flags+0x190/0x190 [ 1394.157324][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1394.161951][ C0] ret_from_fork+0x1f/0x30 [ 1394.166418][ C0] [ 1394.169463][ C0] rcu: rcu_preempt kthread starved for 10205 jiffies! g89533 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1394.180684][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1394.190667][ C0] rcu: RCU grace-period kthread stack dump: [ 1394.196585][ C0] task:rcu_preempt state:R running task stack:26656 pid:16 ppid:2 flags:0x00004000 [ 1394.207910][ C0] Call Trace: [ 1394.211328][ C0] [ 1394.214587][ C0] __schedule+0x143f/0x4570 [ 1394.219413][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1394.224334][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 1394.230867][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 1394.236273][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1394.242214][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1394.247115][ C0] schedule+0xbf/0x180 [ 1394.251247][ C0] schedule_timeout+0x1b9/0x300 [ 1394.256130][ C0] ? console_conditional_schedule+0x40/0x40 [ 1394.262069][ C0] ? update_process_times+0x1b0/0x1b0 [ 1394.267475][ C0] ? prepare_to_swait_event+0x329/0x350 [ 1394.273166][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1394.278055][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1394.284309][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 1394.290000][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 1394.294801][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1394.300740][ C0] ? finish_swait+0xcf/0x1e0 [ 1394.305370][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 1394.310006][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1394.315180][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1394.321212][ C0] ? __kthread_parkme+0x168/0x1c0 [ 1394.326291][ C0] kthread+0x28d/0x320 [ 1394.330385][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1394.335538][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1394.340172][ C0] ret_from_fork+0x1f/0x30 [ 1394.344662][ C0] [ 1394.347704][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1394.354048][ C0] CPU: 0 PID: 15943 Comm: kworker/u4:22 Not tainted 6.1.131-syzkaller #0 [ 1394.362714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1394.372796][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1394.379336][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 1394.385623][ C0] Code: 74 c5 77 7e 65 8b 15 75 c5 77 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 1394.405535][ C0] RSP: 0018:ffffc90003c1f598 EFLAGS: 00000246 [ 1394.411665][ C0] RAX: ffffffff817f6229 RBX: 1ffff110171e81b1 RCX: ffff8880313b0000 [ 1394.419861][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1394.427876][ C0] RBP: ffffc90003c1f980 R08: ffffffff817f61f2 R09: fffffbfff225724d [ 1394.435877][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 1394.443878][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8f40d88 [ 1394.451870][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1394.460834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1394.467436][ C0] CR2: 00007f521bd2f866 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 1394.475428][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1394.483453][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1394.491442][ C0] Call Trace: [ 1394.494823][ C0] [ 1394.497699][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 1394.504062][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 1394.509756][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 1394.514772][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 1394.520199][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1394.525122][ C0] ? hrtimer_run_queues+0x163/0x450 [ 1394.530370][ C0] ? acct_account_cputime+0x26e/0x270 [ 1394.535773][ C0] ? update_process_times+0x147/0x1b0 [ 1394.541198][ C0] ? tick_sched_timer+0x386/0x550 [ 1394.546354][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 1394.551944][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 1394.557368][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1394.562505][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1394.568624][ C0] ? hrtimer_interrupt+0x392/0x980 [ 1394.573788][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 1394.579983][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1394.585836][ C0] [ 1394.588796][ C0] [ 1394.591918][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1394.598112][ C0] ? smp_call_function_many_cond+0x1f92/0x3460 [ 1394.604314][ C0] ? smp_call_function_many_cond+0x1fc9/0x3460 [ 1394.610509][ C0] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 1394.616084][ C0] smp_call_function_many_cond+0x1fc9/0x3460 [ 1394.622111][ C0] ? text_poke_sync+0x20/0x20 [ 1394.626817][ C0] ? __text_poke+0x81a/0x9a0 [ 1394.631446][ C0] ? mark_lock+0x9a/0x340 [ 1394.635792][ C0] ? smp_call_function_many+0x30/0x30 [ 1394.641215][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1394.647282][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 1394.652528][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1394.657508][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 1394.663056][ C0] ? __text_poke+0x81a/0x9a0 [ 1394.667804][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 1394.673340][ C0] ? __text_poke+0x9a0/0x9a0 [ 1394.677967][ C0] ? text_poke+0x90/0x90 [ 1394.682336][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1394.687839][ C0] ? __mutex_trylock_common+0x17e/0x2e0 [ 1394.693467][ C0] ? __might_sleep+0xb0/0xb0 [ 1394.698170][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1394.704439][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 1394.709952][ C0] ? text_poke_sync+0x20/0x20 [ 1394.714652][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 1394.719841][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 1394.725351][ C0] text_poke_bp_batch+0x2bb/0x940 [ 1394.730410][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 1394.736500][ C0] ? text_poke_loc_init+0x680/0x680 [ 1394.741727][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 1394.747945][ C0] text_poke_finish+0x16/0x30 [ 1394.752680][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 1394.758692][ C0] static_key_enable_cpuslocked+0x12e/0x250 [ 1394.764618][ C0] ? process_one_work+0x806/0x1260 [ 1394.770018][ C0] static_key_enable+0x16/0x20 [ 1394.774999][ C0] toggle_allocation_gate+0xbf/0x480 [ 1394.780336][ C0] ? show_object+0xa0/0xa0 [ 1394.784788][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1394.790821][ C0] ? print_irqtrace_events+0x210/0x210 [ 1394.796529][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1394.802453][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 1394.807684][ C0] ? process_one_work+0x806/0x1260 [ 1394.812821][ C0] process_one_work+0x917/0x1260 [ 1394.817812][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1394.823477][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1394.829040][ C0] ? kthread_data+0x4e/0xc0 [ 1394.833582][ C0] ? wq_worker_running+0x97/0x190 [ 1394.838729][ C0] worker_thread+0xa47/0x1200 [ 1394.843454][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1394.848973][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 1394.854920][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1394.859810][ C0] kthread+0x28d/0x320 [ 1394.863906][ C0] ? worker_clr_flags+0x190/0x190 [ 1394.868955][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1394.873567][ C0] ret_from_fork+0x1f/0x30 [ 1394.878034][ C0] [ 1394.896014][ C0] hrtimer: interrupt took 983383299 ns