last executing test programs: 3m19.729644142s ago: executing program 0 (id=154): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0x8) 3m19.585456008s ago: executing program 0 (id=155): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="58000000140019df751f69135db5fa234083598082e59a49e8aefc0b45ff810500000000070058000b480400d967b380c92eed594e27236ebb7fbeb2672c1dd03c884768762d70", 0x47}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 3m19.428512323s ago: executing program 0 (id=157): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r0, 0x8) 3m19.030754941s ago: executing program 0 (id=162): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650b53771860093ddbc9c50a5cdefe904da32fd224652550ff7b86b2bf8f5d8941ef8", 0xe1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sha256-generic\x00'}, &(0x7f0000000000)="92f900a77cb6719ff389c7be872d9326f7db65f5", 0x14}) 3m18.829993216s ago: executing program 0 (id=166): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m18.655875938s ago: executing program 0 (id=171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x200c4, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0), 0x4) 3m3.524249448s ago: executing program 32 (id=171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x200c4, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0), 0x4) 1m33.255256496s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 1m31.913681743s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1m16.297903668s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 1m15.701251343s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1m0.231422755s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 58.648738795s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 44.545466735s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 43.45649818s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 36.369758657s ago: executing program 5 (id=1413): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x405, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000800053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 36.245507454s ago: executing program 5 (id=1415): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) 36.164403077s ago: executing program 5 (id=1416): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000480)="9a03", 0x2}], 0x1}, 0x8800) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) 35.776547929s ago: executing program 5 (id=1418): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x1000000}}) 27.460419181s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 26.806502496s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 20.079208771s ago: executing program 5 (id=1418): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x1000000}}) 8.040819768s ago: executing program 1 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 6.762172147s ago: executing program 3 (id=795): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 4.650527437s ago: executing program 5 (id=1418): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x1000000}}) 1.508878472s ago: executing program 2 (id=1535): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001040)={0x2, 'vlan0\x00', {0x10001}, 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000001040)=ANY=[@ANYBLOB="050000000000000002"]) 1.266829623s ago: executing program 2 (id=1538): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 981.211697ms ago: executing program 4 (id=1540): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x10, &(0x7f0000000040)=0xd, 0x4) 974.283686ms ago: executing program 2 (id=1541): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 878.388466ms ago: executing program 4 (id=1542): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 774.126382ms ago: executing program 2 (id=1543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 698.708731ms ago: executing program 4 (id=1544): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff", @ANYRESDEC], 0xc8) dup3(r1, r0, 0x0) 594.508978ms ago: executing program 2 (id=1545): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084"], 0x20, 0x6044}, 0x6) 539.983273ms ago: executing program 4 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) 467.619911ms ago: executing program 2 (id=1547): unshare(0x22020400) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 317.576386ms ago: executing program 4 (id=1548): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 4 (id=1549): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) kernel console output (not intermixed with test programs): [1, 2] type 2 family 0 port 47293 - 0 [ 221.683843][ T9465] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 47293 - 0 [ 221.702122][ T9465] geneve2: entered promiscuous mode [ 221.709718][ T9465] geneve2: entered allmulticast mode [ 221.765969][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.924046][ T5826] Bluetooth: hci4: command tx timeout [ 221.944970][ T3021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.996848][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.086874][ T3021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.191815][ T9325] team0: Port device team_slave_0 added [ 222.245326][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 222.288326][ T9325] team0: Port device team_slave_1 added [ 222.500429][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.508111][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.535880][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.583148][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.596091][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.624125][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.663434][ T3021] bridge_slave_1: left allmulticast mode [ 222.672833][ T3021] bridge_slave_1: left promiscuous mode [ 222.695000][ T3021] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.732281][ T3021] bridge_slave_0: left allmulticast mode [ 222.741053][ T3021] bridge_slave_0: left promiscuous mode [ 222.746985][ T3021] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.358206][ T5826] Bluetooth: hci3: command tx timeout [ 223.473359][ T3021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.484306][ T3021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.495099][ T3021] bond0 (unregistering): Released all slaves [ 223.604023][ T9529] syzkaller1: entered promiscuous mode [ 223.624681][ T9529] syzkaller1: entered allmulticast mode [ 223.766586][ T9325] hsr_slave_0: entered promiscuous mode [ 223.776732][ T9325] hsr_slave_1: entered promiscuous mode [ 223.782931][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.791794][ T9325] Cannot create hsr debugfs directory [ 223.994852][ T5826] Bluetooth: hci4: command tx timeout [ 224.141912][ T3021] hsr_slave_0: left promiscuous mode [ 224.243706][ T3021] hsr_slave_1: left promiscuous mode [ 224.264094][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.276977][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.298942][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.313522][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.313579][ T9548] program syz.2.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.353561][ T3021] veth1_macvtap: left promiscuous mode [ 224.359532][ T3021] veth0_macvtap: left promiscuous mode [ 224.365319][ T3021] veth1_vlan: left promiscuous mode [ 224.370671][ T3021] veth0_vlan: left promiscuous mode [ 224.525001][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.694717][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 224.710466][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.720942][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.733440][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.771490][ T47] usb 5-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 224.787474][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.796734][ T47] usb 5-1: Product: syz [ 224.800936][ T47] usb 5-1: Manufacturer: syz [ 224.805657][ T47] usb 5-1: SerialNumber: syz [ 224.816021][ T47] usb 5-1: config 0 descriptor?? [ 224.850252][ T47] vmk80xx 5-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 225.130873][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 225.177617][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 225.794791][ T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 225.852054][ T5871] usb 5-1: USB disconnect, device number 15 [ 225.976437][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 226.009512][ T47] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 226.030139][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.039468][ T47] usb 3-1: Product: syz [ 226.043772][ T47] usb 3-1: Manufacturer: syz [ 226.049068][ T47] usb 3-1: SerialNumber: syz [ 226.095600][ T47] usb 3-1: config 0 descriptor?? [ 226.106015][ T47] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 226.246963][ T9304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.284046][ T9304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.324351][ T9304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.410822][ T9304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.576394][ T47] gspca_ov534_9: reg_w failed -71 [ 226.698976][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.766900][ T9304] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.806425][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.813568][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.925825][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.932943][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.972887][ T9304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.983691][ T9304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.015605][ T47] gspca_ov534_9: Unknown sensor 0000 [ 227.015681][ T47] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 227.018052][ T9325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.035155][ T47] usb 3-1: USB disconnect, device number 14 [ 227.158426][ T9325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.181307][ T9325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.219044][ T9325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.352388][ T9607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.358665][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.440476][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.457778][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.485433][ T9304] veth0_vlan: entered promiscuous mode [ 227.502825][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.510011][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.530855][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.538040][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.607941][ T9304] veth1_vlan: entered promiscuous mode [ 227.619295][ T9325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.640690][ T9325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.768692][ T9304] veth0_macvtap: entered promiscuous mode [ 227.805896][ T9304] veth1_macvtap: entered promiscuous mode [ 227.893998][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.917137][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.946416][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.954498][ T29] audit: type=1326 audit(1735608847.604:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9598 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1453f85d29 code=0x7fc00000 [ 227.969487][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.033178][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.075089][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.091233][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.102103][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.113087][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.137844][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.169868][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.207326][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.236298][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.265978][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.309241][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.346963][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.376577][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.395185][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.425864][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.464664][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.512297][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.549919][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.632021][ T9304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.651658][ T9304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.670086][ T9304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.710766][ T9304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.840058][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.000580][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.010183][ T9325] veth0_vlan: entered promiscuous mode [ 229.033579][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.066600][ T9663] veth1_to_team: entered promiscuous mode [ 229.094935][ T5870] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.103938][ T9325] veth1_vlan: entered promiscuous mode [ 229.119686][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.120442][ T9662] veth1_to_team: left promiscuous mode [ 229.137366][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.193320][ T9325] veth0_macvtap: entered promiscuous mode [ 229.218046][ T9325] veth1_macvtap: entered promiscuous mode [ 229.266212][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 229.273257][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.297848][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.310750][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.321468][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.332532][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.342860][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.353063][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.364131][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.377071][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.387124][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.397816][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.407823][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.418502][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.428470][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.439443][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.449929][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.460567][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.479785][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.495128][ T5870] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 229.504708][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.512781][ T5870] usb 5-1: Product: syz [ 229.534730][ T5870] usb 5-1: Manufacturer: syz [ 229.539405][ T5870] usb 5-1: SerialNumber: syz [ 229.578504][ T5870] usb 5-1: config 0 descriptor?? [ 229.596974][ T5870] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 229.621156][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.632469][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.660559][ T29] audit: type=1326 audit(1735608849.314:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9677 comm="syz.2.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x0 [ 229.685074][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.720858][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.751292][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.780066][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.791108][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.802413][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.813910][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.825702][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.839160][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.851326][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.863759][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.947202][ T9325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.964672][ T9325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.983720][ T9325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.010335][ T9325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.136815][ T2979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.262994][ T2979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.407173][ T5870] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 230.431608][ T2979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.492747][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.518923][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.625113][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.657428][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.662459][ T5870] usb 5-1: USB disconnect, device number 16 [ 230.817795][ T2979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.226808][ T2979] bridge_slave_1: left allmulticast mode [ 231.260060][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.273521][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.284441][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.291930][ T2979] bridge_slave_1: left promiscuous mode [ 231.302555][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.311205][ T5819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.321831][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.357039][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.466473][ T2979] bridge_slave_0: left allmulticast mode [ 231.472204][ T2979] bridge_slave_0: left promiscuous mode [ 231.478182][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.734899][ T2147] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 231.925170][ T2147] usb 6-1: Using ep0 maxpacket: 16 [ 231.936721][ T2147] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 231.945496][ T2147] usb 6-1: config 0 has no interface number 0 [ 231.951883][ T2147] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 231.969093][ T2147] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 231.986599][ T2147] usb 6-1: config 0 interface 41 has no altsetting 0 [ 232.014475][ T2147] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 232.031462][ T2147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.040860][ T2147] usb 6-1: Product: syz [ 232.045290][ T2147] usb 6-1: Manufacturer: syz [ 232.049925][ T2147] usb 6-1: SerialNumber: syz [ 232.057345][ T2147] usb 6-1: config 0 descriptor?? [ 232.063644][ T9729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.072115][ T9729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.114075][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.131862][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.143694][ T2979] bond0 (unregistering): Released all slaves [ 232.207750][ T9717] syzkaller0 speed is unknown, defaulting to 1000 [ 232.290469][ T9729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.298387][ T9729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.308955][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.726733][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.737795][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.753946][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.768367][ T2979] hsr_slave_0: left promiscuous mode [ 232.783155][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.801566][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.809234][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.859560][ T2979] hsr_slave_1: left promiscuous mode [ 232.867183][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.874920][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.883090][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.891323][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.939212][ T2979] veth1_macvtap: left promiscuous mode [ 232.954809][ T2979] veth0_macvtap: left promiscuous mode [ 232.966727][ T2979] veth1_vlan: left promiscuous mode [ 232.988983][ T2979] veth0_vlan: left promiscuous mode [ 233.124695][ T2147] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 233.167538][ T2147] usb 6-1: USB disconnect, device number 12 [ 233.448061][ T5826] Bluetooth: hci3: command tx timeout [ 233.565524][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 233.693104][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 233.747018][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.773877][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.786025][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.799848][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 233.815360][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.835171][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.866463][ T5899] usb 5-1: config 0 descriptor?? [ 234.299434][ T5899] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 234.338279][ T5899] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.603648][ T5870] usb 5-1: USB disconnect, device number 17 [ 234.748917][ T9717] chnl_net:caif_netlink_parms(): no params data found [ 234.850048][ T9747] syzkaller0 speed is unknown, defaulting to 1000 [ 234.875337][ T5826] Bluetooth: hci4: command tx timeout [ 234.950627][ T29] audit: type=1400 audit(1735608854.574:81): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=9786 comm="syz.2.1315" name="file0" dev="tmpfs" ino=1623 [ 235.058809][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.103588][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.124217][ T9717] bridge_slave_0: entered allmulticast mode [ 235.140456][ T9717] bridge_slave_0: entered promiscuous mode [ 235.148776][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.156109][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.212800][ T9717] bridge_slave_1: entered allmulticast mode [ 235.236089][ T9717] bridge_slave_1: entered promiscuous mode [ 235.398274][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.430008][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.490902][ T9804] syzkaller1: entered promiscuous mode [ 235.509568][ T9804] syzkaller1: entered allmulticast mode [ 235.515680][ T5826] Bluetooth: hci3: command tx timeout [ 235.572814][ T9717] team0: Port device team_slave_0 added [ 235.586405][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.628743][ T9717] team0: Port device team_slave_1 added [ 235.745292][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 235.776616][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.805306][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 235.816525][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.829292][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.855871][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.872588][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.892247][ T5869] usb 5-1: config 0 descriptor?? [ 235.946708][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.953945][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.981888][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.120961][ T2979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.155934][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 236.164885][ T5899] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 236.219666][ T2979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.293243][ T9717] hsr_slave_0: entered promiscuous mode [ 236.304271][ T9717] hsr_slave_1: entered promiscuous mode [ 236.313343][ T9717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.325629][ T9717] Cannot create hsr debugfs directory [ 236.327043][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 236.337443][ T5869] logitech 0003:046D:C294.000F: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 236.349080][ T5869] logitech 0003:046D:C294.000F: no inputs found [ 236.381069][ T5899] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.389604][ T5899] usb 6-1: config 179 has no interface number 0 [ 236.396587][ T5899] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.408152][ T5899] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 236.419936][ T5899] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.431356][ T5899] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 236.442993][ T5899] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.456349][ T5899] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 236.465532][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.485702][ T9824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 236.486185][ T2979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.566334][ T5901] usb 5-1: USB disconnect, device number 18 [ 236.671283][ T2979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.790248][ T5870] usb 6-1: USB disconnect, device number 13 [ 236.796440][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.796490][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.868356][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.877862][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.892451][ T9747] bridge_slave_0: entered allmulticast mode [ 236.902341][ T9747] bridge_slave_0: entered promiscuous mode [ 236.925056][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.934849][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.952540][ T9747] bridge_slave_1: entered allmulticast mode [ 236.956092][ T5826] Bluetooth: hci4: command tx timeout [ 236.966000][ T9747] bridge_slave_1: entered promiscuous mode [ 237.169391][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.312320][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.357989][ T2979] bridge_slave_1: left allmulticast mode [ 237.377863][ T2979] bridge_slave_1: left promiscuous mode [ 237.387353][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.406829][ T2979] bridge_slave_0: left allmulticast mode [ 237.418207][ T2979] bridge_slave_0: left promiscuous mode [ 237.428752][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.536369][ T9870] netlink: 'syz.5.1329': attribute type 4 has an invalid length. [ 237.597407][ T5819] Bluetooth: hci3: command tx timeout [ 237.953260][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.964067][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.975925][ T2979] bond0 (unregistering): Released all slaves [ 238.018666][ T9747] team0: Port device team_slave_0 added [ 238.173464][ T9864] syzkaller0 speed is unknown, defaulting to 1000 [ 238.227898][ T9747] team0: Port device team_slave_1 added [ 238.261311][ T9881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 238.458027][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.473692][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.505469][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.552758][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.570093][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.634823][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.037257][ T5819] Bluetooth: hci4: command tx timeout [ 239.137090][ T9747] hsr_slave_0: entered promiscuous mode [ 239.160711][ T9747] hsr_slave_1: entered promiscuous mode [ 239.194744][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 239.195004][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.225036][ T9747] Cannot create hsr debugfs directory [ 239.274137][ T2979] hsr_slave_0: left promiscuous mode [ 239.293193][ T2979] hsr_slave_1: left promiscuous mode [ 239.301576][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.331925][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.342901][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.354762][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.371510][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.384753][ T5897] usb 3-1: config 1 has no interface number 0 [ 239.390889][ T5897] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.432659][ T2979] veth1_macvtap: left promiscuous mode [ 239.438762][ T5897] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 239.448073][ T2979] veth0_macvtap: left promiscuous mode [ 239.453672][ T5897] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 105, setting to 64 [ 239.465021][ T2979] veth1_vlan: left promiscuous mode [ 239.470363][ T2979] veth0_vlan: left promiscuous mode [ 239.479503][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.488798][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.497118][ T5897] usb 3-1: Product: syz [ 239.501510][ T5897] usb 3-1: Manufacturer: syz [ 239.507856][ T5897] usb 3-1: SerialNumber: syz [ 239.678428][ T5819] Bluetooth: hci3: command tx timeout [ 240.081300][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 240.147883][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 240.360858][ T5897] cdc_ncm 3-1:1.1: bind() failure [ 240.593124][ T5897] usb 3-1: USB disconnect, device number 15 [ 240.727644][ T9911] syzkaller0 speed is unknown, defaulting to 1000 [ 240.891670][ T9717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.948183][ T9717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.068701][ T9717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.088867][ T9717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.118533][ T5819] Bluetooth: hci4: command tx timeout [ 241.397374][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.444943][ T5870] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 241.457282][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.505886][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.513045][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.525821][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.532998][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.625704][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 241.643082][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.657944][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.691194][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.727234][ T9747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.757574][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.782478][ T9747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.794692][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.820739][ T9747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.846479][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.847851][ T9747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.870269][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.903435][ T5870] usb 3-1: Manufacturer: syz [ 241.923254][ T5870] usb 3-1: config 0 descriptor?? [ 242.076052][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.133741][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.189248][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.253740][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.260947][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.266974][ T5870] rc_core: IR keymap rc-hauppauge not found [ 242.274440][ T5870] Registered IR keymap rc-empty [ 242.286018][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.318023][ T9717] veth0_vlan: entered promiscuous mode [ 242.327079][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.341757][ T9717] veth1_vlan: entered promiscuous mode [ 242.348780][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 242.362760][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.370132][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.394862][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 242.427171][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.454837][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.475533][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.478934][ T9747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.513404][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.545096][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.574751][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.595151][ T9717] veth0_macvtap: entered promiscuous mode [ 242.605783][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.632073][ T9717] veth1_macvtap: entered promiscuous mode [ 242.646189][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.695424][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.699455][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.742900][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.753079][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.765953][ T5870] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 242.776068][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.796034][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.803737][ T5870] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.814791][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.842988][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.844994][ T5870] usb 3-1: USB disconnect, device number 16 [ 242.866105][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.901058][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.941466][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.984857][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.996826][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.060597][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.087798][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.103235][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.141779][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.171301][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.214424][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.246260][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.264695][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.294895][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.324672][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.361166][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.407103][ T9717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.454787][ T9717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.498757][ T9717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.513326][ T9717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.628638][ T29] audit: type=1326 audit(1735608863.274:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 243.674953][ T29] audit: type=1326 audit(1735608863.284:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 243.712653][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.778306][ T29] audit: type=1326 audit(1735608863.284:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 243.864073][ T29] audit: type=1326 audit(1735608863.284:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 243.949777][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.962649][ T29] audit: type=1326 audit(1735608863.284:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.001152][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.038996][ T9747] veth0_vlan: entered promiscuous mode [ 244.045887][ T29] audit: type=1326 audit(1735608863.304:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.102017][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.106286][ T9747] veth1_vlan: entered promiscuous mode [ 244.113990][ T29] audit: type=1326 audit(1735608863.364:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.125026][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.177425][ T29] audit: type=1326 audit(1735608863.464:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.224432][ T9747] veth0_macvtap: entered promiscuous mode [ 244.248588][ T9747] veth1_macvtap: entered promiscuous mode [ 244.284230][ T29] audit: type=1326 audit(1735608863.464:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.301855][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.333967][ T29] audit: type=1326 audit(1735608863.464:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c6f85d29 code=0x7ffc0000 [ 244.373561][T10010] loop2: detected capacity change from 0 to 7 [ 244.380057][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.397017][T10010] Dev loop2: unable to read RDB block 7 [ 244.402789][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.413955][T10010] loop2: unable to read partition table [ 244.420694][T10010] loop2: partition table beyond EOD, truncated [ 244.427307][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.437772][T10010] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.463876][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.480076][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.499714][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.558254][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.585355][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.619312][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.649712][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.680733][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.710481][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.771925][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.814779][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.831694][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.844876][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.864604][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.914596][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.924453][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.988098][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.035004][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.064802][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.094618][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.114923][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.158368][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.326383][ T9747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.344023][ T9747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.382566][ T9747] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.394800][ T9747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.584112][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.628743][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.836680][ T2947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.913629][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.972757][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.009120][ T2947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.205594][ T2947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.348327][ T2947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.519433][ T2947] bridge_slave_1: left allmulticast mode [ 246.531323][ T2947] bridge_slave_1: left promiscuous mode [ 246.542601][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.568835][ T2947] bridge_slave_0: left allmulticast mode [ 246.579213][ T2947] bridge_slave_0: left promiscuous mode [ 246.589254][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.271545][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.296954][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.306444][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.333286][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.362640][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.380213][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.488622][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.500021][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.511109][ T2947] bond0 (unregistering): Released all slaves [ 247.551253][T10087] syzkaller0 speed is unknown, defaulting to 1000 [ 247.962307][T10087] chnl_net:caif_netlink_parms(): no params data found [ 248.093101][ T2947] hsr_slave_0: left promiscuous mode [ 248.115286][ T2947] hsr_slave_1: left promiscuous mode [ 248.141418][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.185244][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.194219][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.204185][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.224736][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.245484][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.255431][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.262850][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.327427][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.335068][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.379295][ T2947] veth1_macvtap: left promiscuous mode [ 248.385993][ T2947] veth0_macvtap: left promiscuous mode [ 248.393930][ T2947] veth1_vlan: left promiscuous mode [ 248.401227][ T2947] veth0_vlan: left promiscuous mode [ 248.924891][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 249.077414][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.091095][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.113056][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.143418][ T9] usb 6-1: config 0 descriptor?? [ 249.189853][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 249.271671][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 249.439907][ T5826] Bluetooth: hci3: command tx timeout [ 249.583851][ T9] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 249.613614][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input21 [ 249.939173][ T9] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 250.156610][T10115] syzkaller0 speed is unknown, defaulting to 1000 [ 250.255321][ T9] usb 6-1: USB disconnect, device number 14 [ 250.396394][ T5819] Bluetooth: hci4: command tx timeout [ 250.491208][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.524073][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.552438][T10087] bridge_slave_0: entered allmulticast mode [ 250.584678][T10087] bridge_slave_0: entered promiscuous mode [ 250.615212][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.622451][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.649584][T10087] bridge_slave_1: entered allmulticast mode [ 250.675843][T10087] bridge_slave_1: entered promiscuous mode [ 250.803397][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.892226][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.023368][T10087] team0: Port device team_slave_0 added [ 251.080558][T10087] team0: Port device team_slave_1 added [ 251.247248][T10190] loop2: detected capacity change from 0 to 7 [ 251.287624][T10190] Dev loop2: unable to read RDB block 7 [ 251.296299][T10190] loop2: AHDI p1 p2 [ 251.300261][T10190] loop2: partition table partially beyond EOD, truncated [ 251.307807][T10190] loop2: p1 size 972816640 extends beyond EOD, truncated [ 251.345675][T10195] netlink: 'syz.2.1395': attribute type 10 has an invalid length. [ 251.388182][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 251.479080][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.514871][ T5826] Bluetooth: hci3: command tx timeout [ 251.552040][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.568677][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.622418][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.667883][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.723611][T10115] chnl_net:caif_netlink_parms(): no params data found [ 251.753429][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.763903][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.800524][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.815086][T10195] syz.2.1395 (10195) used greatest stack depth: 18096 bytes left [ 251.936161][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.106848][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.134690][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 252.184721][ T2147] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 252.256791][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.288171][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 252.303941][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 252.316171][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.316221][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.316245][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.325761][ T5870] usb 3-1: config 0 descriptor?? [ 252.365870][ T2147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.376253][T10208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.391693][ T2147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.399916][T10087] hsr_slave_0: entered promiscuous mode [ 252.412631][T10087] hsr_slave_1: entered promiscuous mode [ 252.419530][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.419557][T10087] Cannot create hsr debugfs directory [ 252.429867][ T2147] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.429917][ T2147] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.429941][ T2147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.434417][ T2147] usb 5-1: config 0 descriptor?? [ 252.447115][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.447214][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.447399][T10115] bridge_slave_0: entered allmulticast mode [ 252.448648][T10115] bridge_slave_0: entered promiscuous mode [ 252.450919][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.451020][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.451214][T10115] bridge_slave_1: entered allmulticast mode [ 252.452468][T10115] bridge_slave_1: entered promiscuous mode [ 252.484798][ T5826] Bluetooth: hci4: command tx timeout [ 252.658174][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.663476][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.772733][T10115] team0: Port device team_slave_0 added [ 252.826781][ T5870] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 252.834244][ T5870] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 252.853935][ T5870] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 252.862252][ T5870] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 252.881108][T10115] team0: Port device team_slave_1 added [ 252.912205][ T5870] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 252.913857][ T2147] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 252.970320][ T2147] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 253.002293][ T2147] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 253.047857][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.055929][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.097539][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.176604][ T5870] usb 3-1: USB disconnect, device number 17 [ 253.184822][ T2147] usb 5-1: USB disconnect, device number 19 [ 253.215237][ T63] bridge_slave_1: left allmulticast mode [ 253.224215][ T63] bridge_slave_1: left promiscuous mode [ 253.239263][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.262392][ T63] bridge_slave_0: left allmulticast mode [ 253.269002][ T63] bridge_slave_0: left promiscuous mode [ 253.275180][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.595632][ T5826] Bluetooth: hci3: command tx timeout [ 253.957768][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.980623][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.006060][ T63] bond0 (unregistering): Released all slaves [ 254.040661][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.055531][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.123593][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.317755][T10115] hsr_slave_0: entered promiscuous mode [ 254.361674][T10115] hsr_slave_1: entered promiscuous mode [ 254.376889][T10115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.393821][T10115] Cannot create hsr debugfs directory [ 254.554830][ T5826] Bluetooth: hci4: command tx timeout [ 255.007424][ T5819] Bluetooth: hci2: hardware error 0x2f [ 255.087274][ T63] hsr_slave_0: left promiscuous mode [ 255.103617][ T63] hsr_slave_1: left promiscuous mode [ 255.131242][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.165565][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.194121][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.217143][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.228973][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.252831][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.262199][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.283140][ T63] veth1_macvtap: left promiscuous mode [ 255.290091][ T63] veth0_macvtap: left promiscuous mode [ 255.296056][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.303623][ T63] veth1_vlan: left promiscuous mode [ 255.310484][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.317909][ T63] veth0_vlan: left promiscuous mode [ 255.323281][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.675440][ T55] Bluetooth: hci3: command tx timeout [ 256.157265][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.634816][ T55] Bluetooth: hci4: command tx timeout [ 256.745977][ T63] team0 (unregistering): Port device team_slave_1 removed [ 256.893076][ T63] team0 (unregistering): Port device team_slave_0 removed [ 257.036970][ T5819] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 257.434900][ T5819] Bluetooth: hci0: command tx timeout [ 257.879261][T10282] syzkaller0 speed is unknown, defaulting to 1000 [ 258.022078][T10087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.136064][T10087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.148868][T10087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.163545][T10087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.315390][ T5870] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.395750][T10282] chnl_net:caif_netlink_parms(): no params data found [ 258.448885][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.484669][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 258.491535][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.515441][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.542807][ T5870] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 258.581385][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.591203][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.623734][ T5870] usb 5-1: config 0 descriptor?? [ 258.647676][T10115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.691256][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.698447][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.802026][T10115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.817447][T10115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.833147][T10115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.853289][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.868362][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.885763][T10282] bridge_slave_0: entered allmulticast mode [ 258.901658][T10282] bridge_slave_0: entered promiscuous mode [ 258.923737][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.931197][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.977783][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.992202][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.000106][T10282] bridge_slave_1: entered allmulticast mode [ 259.007902][T10282] bridge_slave_1: entered promiscuous mode [ 259.070324][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.090412][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.188709][T10282] team0: Port device team_slave_0 added [ 259.212967][T10282] team0: Port device team_slave_1 added [ 259.286668][ T5870] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 259.346030][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.353560][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.382721][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.484840][ T5870] ft260 0003:0403:6030.0013: chip code: 0181 189f [ 259.486453][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.510169][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.543403][ T5819] Bluetooth: hci0: command tx timeout [ 259.549534][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.694670][ T5870] ft260 0003:0403:6030.0013: failed to retrieve system status [ 259.703024][ T5870] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -71 [ 259.739638][ T5870] usb 5-1: USB disconnect, device number 20 [ 259.772908][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.796766][T10282] hsr_slave_0: entered promiscuous mode [ 259.806261][T10282] hsr_slave_1: entered promiscuous mode [ 259.812494][T10282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.821657][T10282] Cannot create hsr debugfs directory [ 259.873844][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.939873][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.962687][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.969933][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.027652][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.034865][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.173224][T10115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.387833][T10282] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.523753][T10282] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.554233][T10087] veth0_vlan: entered promiscuous mode [ 260.583369][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.638917][T10282] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.706301][T10087] veth1_vlan: entered promiscuous mode [ 260.738664][T10282] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.802761][T10115] veth0_vlan: entered promiscuous mode [ 260.819152][T10087] veth0_macvtap: entered promiscuous mode [ 260.829275][T10087] veth1_macvtap: entered promiscuous mode [ 260.859666][T10115] veth1_vlan: entered promiscuous mode [ 260.918498][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.931285][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.941647][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.971523][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.993311][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.012542][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.024408][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.040446][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.052424][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.063343][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.074654][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.089083][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.106577][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.117010][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.127711][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.137697][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.149168][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.159247][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.169975][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.180224][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.206017][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.222400][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.238591][T10115] veth0_macvtap: entered promiscuous mode [ 261.296521][T10115] veth1_macvtap: entered promiscuous mode [ 261.311822][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.322770][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.332907][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.343485][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.353374][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.364086][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.374072][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.384693][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.394749][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.405535][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.415471][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.426022][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.439154][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.449015][T10087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.465181][T10087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.473928][T10087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.482917][T10087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.516531][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.527359][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.537989][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.549109][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.559364][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.570729][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.580896][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.593196][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.603666][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.604772][ T5819] Bluetooth: hci0: command tx timeout [ 261.624765][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.638867][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.650124][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.661509][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.683028][T10115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.708617][T10115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.717736][T10115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.727393][T10115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.759122][T10282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.785784][T10282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.816060][T10282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.839540][T10282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.064417][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.090540][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.157886][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.174787][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.220674][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 262.220690][ T29] audit: type=1326 audit(1735608881.874:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10399 comm="syz.4.1465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d17d85d29 code=0x0 [ 262.248824][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.257070][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.284983][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.345285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.426486][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.627456][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.650319][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.657523][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.778080][ T2979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.831627][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.838934][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.940845][ T2979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.121047][ T2979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.286544][ T2979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.341589][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.344998][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.614010][ T2979] bridge_slave_1: left allmulticast mode [ 263.635065][ T2979] bridge_slave_1: left promiscuous mode [ 263.648752][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.675404][ T5819] Bluetooth: hci0: command tx timeout [ 263.682980][ T2979] bridge_slave_0: left allmulticast mode [ 263.694675][ T2979] bridge_slave_0: left promiscuous mode [ 263.700477][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.934447][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.953745][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.964385][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.990040][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.012907][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 264.020484][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.815185][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.840626][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.850398][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.859513][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.909902][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.919260][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.934884][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.945466][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.946855][ T2979] bond0 (unregistering): Released all slaves [ 265.071054][T10435] syzkaller0 speed is unknown, defaulting to 1000 [ 265.175984][T10466] syzkaller0 speed is unknown, defaulting to 1000 [ 265.513463][T10487] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 265.641666][T10282] veth0_vlan: entered promiscuous mode [ 265.660788][T10282] veth1_vlan: entered promiscuous mode [ 265.683134][T10282] veth0_macvtap: entered promiscuous mode [ 266.026786][ T2979] hsr_slave_0: left promiscuous mode [ 266.063029][ T2979] hsr_slave_1: left promiscuous mode [ 266.075208][ T55] Bluetooth: hci3: command tx timeout [ 266.103160][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.121005][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.130638][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.138666][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.185433][ T2979] veth1_macvtap: left promiscuous mode [ 266.191084][ T2979] veth0_macvtap: left promiscuous mode [ 266.205026][ T2979] veth1_vlan: left promiscuous mode [ 266.210472][ T2979] veth0_vlan: left promiscuous mode [ 266.497280][T10516] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1480'. [ 267.040051][ T55] Bluetooth: hci4: command tx timeout [ 267.086902][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 267.142608][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 267.617239][T10282] veth1_macvtap: entered promiscuous mode [ 267.654064][T10516] batadv1: entered promiscuous mode [ 267.659592][T10516] batadv1: entered allmulticast mode [ 267.696525][T10435] chnl_net:caif_netlink_parms(): no params data found [ 267.751629][T10466] chnl_net:caif_netlink_parms(): no params data found [ 267.841733][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.864658][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.884681][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.905931][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 267.915758][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.927136][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.938755][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.950032][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.960983][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.971715][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.986806][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.997173][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.008343][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.020037][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.065436][T10521] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 268.147904][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.160851][ T55] Bluetooth: hci3: command tx timeout [ 268.184679][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.194743][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.212056][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.222115][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.232703][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.242751][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.254179][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.264159][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.274845][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.284785][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.295304][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.306459][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.419091][T10282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.428301][T10282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.437201][T10282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.446056][T10282] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.459420][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.480594][T10435] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.498991][T10435] bridge_slave_0: entered allmulticast mode [ 268.512619][T10435] bridge_slave_0: entered promiscuous mode [ 268.522386][T10435] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.530017][T10435] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.542134][T10435] bridge_slave_1: entered allmulticast mode [ 268.560999][T10435] bridge_slave_1: entered promiscuous mode [ 268.631826][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'. [ 268.659035][T10540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 268.666226][T10540] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.697823][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.715390][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.722681][T10466] bridge_slave_0: entered allmulticast mode [ 268.725814][T10540] vhci_hcd vhci_hcd.0: Device attached [ 268.737077][T10466] bridge_slave_0: entered promiscuous mode [ 268.744283][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.751677][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.753118][T10541] vhci_hcd: connection closed [ 268.759470][T10466] bridge_slave_1: entered allmulticast mode [ 268.771876][T10466] bridge_slave_1: entered promiscuous mode [ 268.794175][ T63] vhci_hcd: stop threads [ 268.819257][ T63] vhci_hcd: release socket [ 268.820506][T10435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.828014][ T63] vhci_hcd: disconnect device [ 268.846779][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.862817][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.885063][ T9] vhci_hcd: vhci_device speed not set [ 268.896160][T10435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.956847][ T2147] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.997892][ T2979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.038289][T10435] team0: Port device team_slave_0 added [ 269.061925][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.071339][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.089702][T10466] team0: Port device team_slave_0 added [ 269.101201][T10435] team0: Port device team_slave_1 added [ 269.115997][ T55] Bluetooth: hci4: command tx timeout [ 269.137736][ T2147] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.147590][ T2147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.150038][ T2979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.159417][ T2147] usb 5-1: config 0 descriptor?? [ 269.176376][ T2147] cp210x 5-1:0.0: cp210x converter detected [ 269.212615][T10466] team0: Port device team_slave_1 added [ 269.267160][T10435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.283396][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.311600][T10435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.400462][ T2979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.433997][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.441486][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.449637][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.464617][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.480238][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.496847][T10435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.503862][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.531352][T10435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.584092][ T2979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.599344][ T2147] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 269.627679][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.635888][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.668214][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.848068][ T2147] usb 5-1: cp210x converter now attached to ttyUSB0 [ 269.858769][T10435] hsr_slave_0: entered promiscuous mode [ 269.867878][T10435] hsr_slave_1: entered promiscuous mode [ 269.879818][T10435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.890391][T10435] Cannot create hsr debugfs directory [ 269.952287][T10466] hsr_slave_0: entered promiscuous mode [ 269.959105][T10466] hsr_slave_1: entered promiscuous mode [ 269.967776][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.975582][T10466] Cannot create hsr debugfs directory [ 270.112257][ T5871] usb 5-1: USB disconnect, device number 21 [ 270.121414][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 270.140748][ T5871] cp210x 5-1:0.0: device disconnected [ 270.146783][ T2147] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.179395][ T2979] bridge_slave_1: left allmulticast mode [ 270.187632][ T2979] bridge_slave_1: left promiscuous mode [ 270.195765][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.211655][ T2979] bridge_slave_0: left allmulticast mode [ 270.217894][ T2979] bridge_slave_0: left promiscuous mode [ 270.227287][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.236761][ T55] Bluetooth: hci3: command tx timeout [ 270.326102][ T2147] usb 3-1: Using ep0 maxpacket: 8 [ 270.355839][ T2147] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 270.401092][ T2147] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 270.411203][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.420692][ T2147] usb 3-1: SerialNumber: syz [ 270.444739][ T2147] cdc_ether 3-1:1.0: skipping garbage [ 270.450198][ T2147] usb 3-1: bad CDC descriptors [ 270.848768][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.859900][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.881941][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.907719][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.934412][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.959332][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.975186][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.990573][ T5901] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.006108][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.024050][ T2979] bond0 (unregistering): Released all slaves [ 271.184998][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 271.194844][ T55] Bluetooth: hci4: command tx timeout [ 271.204595][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.215964][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.226648][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.239804][ T5901] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 271.249094][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.260007][ T5901] usb 5-1: config 0 descriptor?? [ 271.313932][T10554] syzkaller0 speed is unknown, defaulting to 1000 [ 271.515259][ T2979] hsr_slave_0: left promiscuous mode [ 271.533409][ T2979] hsr_slave_1: left promiscuous mode [ 271.540707][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.548652][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.562186][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.569751][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.592188][ T2979] veth1_macvtap: left promiscuous mode [ 271.597940][ T2979] veth0_macvtap: left promiscuous mode [ 271.603528][ T2979] veth1_vlan: left promiscuous mode [ 271.608987][ T2979] veth0_vlan: left promiscuous mode [ 271.705563][ T5901] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 271.713249][ T5901] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 271.730319][ T5901] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 271.742371][ T5901] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 271.761806][ T5901] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 271.774742][ T5901] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 271.830519][ T5901] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 271.843057][ T5901] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 271.900624][T10553] random: crng reseeded on system resumption [ 272.325662][ T55] Bluetooth: hci3: command tx timeout [ 272.393451][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 272.513163][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 272.521177][ T2147] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 272.521402][ T5869] usb 5-1: USB disconnect, device number 22 [ 272.542585][ T2147] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.564624][ T2147] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.594699][ T2147] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.666805][ T2147] usb 3-1: USB disconnect, device number 18 [ 273.036499][ T55] Bluetooth: hci0: command tx timeout [ 273.275445][ T55] Bluetooth: hci4: command tx timeout [ 273.969842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.983353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.108275][T10554] chnl_net:caif_netlink_parms(): no params data found [ 274.706392][ T2979] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.742581][T10611] @: renamed from vlan0 (while UP) [ 274.793120][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.801301][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.820978][T10554] bridge_slave_0: entered allmulticast mode [ 274.834146][T10554] bridge_slave_0: entered promiscuous mode [ 274.848436][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.864117][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.893885][T10554] bridge_slave_1: entered allmulticast mode [ 274.902446][T10554] bridge_slave_1: entered promiscuous mode [ 274.934095][ T2979] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.992134][T10435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.027647][T10435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.045567][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.074021][ T2979] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.095544][T10435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.106724][T10435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.115021][ T55] Bluetooth: hci0: command tx timeout [ 275.127384][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.145105][ T5869] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 275.182573][ T2979] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.237967][T10554] team0: Port device team_slave_0 added [ 275.261148][T10554] team0: Port device team_slave_1 added [ 275.314453][ T5869] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 275.327181][ T5869] usb 3-1: config 179 has no interface number 0 [ 275.333874][ T5869] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 275.347239][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.354204][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.381352][ T5869] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 275.392625][ T5869] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 275.396936][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.404113][ T5869] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 275.426880][ T5869] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.441027][ T5869] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 275.452609][T10466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.459900][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.471836][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.478250][T10620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.486084][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.494920][T10620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.523751][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.546476][T10466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.620192][T10466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.701259][T10466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.855709][T10554] hsr_slave_0: entered promiscuous mode [ 275.884476][T10554] hsr_slave_1: entered promiscuous mode [ 275.892302][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.924624][T10554] Cannot create hsr debugfs directory [ 275.965491][ T2979] bridge_slave_1: left allmulticast mode [ 275.978064][ T2979] bridge_slave_1: left promiscuous mode [ 275.995185][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.008221][ T2979] bridge_slave_0: left allmulticast mode [ 276.021962][ T5868] usb 3-1: USB disconnect, device number 19 [ 276.021959][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 276.022090][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 276.050228][ T2979] bridge_slave_0: left promiscuous mode [ 276.056103][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.500321][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.511307][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.523291][ T2979] bond0 (unregistering): Released all slaves [ 277.194294][ T2979] hsr_slave_0: left promiscuous mode [ 277.200745][ T55] Bluetooth: hci0: command tx timeout [ 277.209178][ T2979] hsr_slave_1: left promiscuous mode [ 277.229615][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.244792][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.265865][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.274486][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.348780][ T2979] veth1_macvtap: left promiscuous mode [ 277.355141][ T2979] veth0_macvtap: left promiscuous mode [ 277.361330][ T2979] veth1_vlan: left promiscuous mode [ 277.368035][ T2979] veth0_vlan: left promiscuous mode [ 277.664839][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 277.814905][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 277.841464][ T5899] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.851298][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.888333][ T5899] usb 3-1: config 0 descriptor?? [ 278.070643][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 278.117396][ T5899] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 278.152235][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.153527][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 278.162357][ T5899] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 278.177490][ T5899] usb 3-1: media controller created [ 278.214743][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.758129][T10435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.916178][T10435] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.945743][ T5899] az6027: usb out operation failed. (-71) [ 278.953619][ T5899] stb0899_attach: Driver disabled by Kconfig [ 278.963809][ T5899] az6027: no front-end attached [ 278.963809][ T5899] [ 278.988745][ T5899] az6027: usb out operation failed. (-71) [ 278.996987][ T5899] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 279.019715][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 279.042606][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.046852][ T5899] dvb-usb: schedule remote query interval to 400 msecs. [ 279.049804][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.064418][ T5899] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 279.095177][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.102323][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.112290][ T5899] usb 3-1: USB disconnect, device number 20 [ 279.130173][ T5871] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 279.204388][ T5899] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 279.232722][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.276390][ T55] Bluetooth: hci0: command tx timeout [ 279.288707][T10435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.333724][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.346730][ T5871] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 279.365159][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.379836][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.387072][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.420583][ T5871] usb 5-1: config 0 descriptor?? [ 279.449896][ T5871] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 279.464435][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.471639][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.665955][ T5871] gp8psk: usb in 128 operation failed. [ 279.677230][T10466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.727501][T10435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.784162][T10554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.828456][T10554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.861290][T10554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.873337][ T5871] gp8psk: usb in 146 operation failed. [ 279.879089][ T5871] gp8psk: failed to get FW version [ 279.888725][ T5871] gp8psk: FPGA Version = 130 [ 279.917244][T10554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.038043][T10435] veth0_vlan: entered promiscuous mode [ 280.090589][T10435] veth1_vlan: entered promiscuous mode [ 280.097330][ T5871] gp8psk: usb in 138 operation failed. [ 280.109109][ T5871] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 280.145184][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 280.183939][ T5871] usb 5-1: USB disconnect, device number 23 [ 280.210963][T10435] veth0_macvtap: entered promiscuous mode [ 280.243533][T10435] veth1_macvtap: entered promiscuous mode [ 280.293518][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.295286][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 280.309431][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.323026][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.350774][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.364829][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.380239][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.390467][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.404716][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.420673][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.431418][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.443322][T10435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.463044][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.475211][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 280.482739][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.494603][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.505198][ T5899] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 280.513389][ T5899] usb 3-1: config 0 has no interface number 0 [ 280.519664][ T5899] usb 3-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=25.82 [ 280.528975][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.539967][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.548183][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.560491][ T5899] usb 3-1: config 0 descriptor?? [ 280.566957][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.578467][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.588589][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.600268][ T5899] ums-datafab 3-1:0.135: USB Mass Storage device detected [ 280.607900][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.618326][T10435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.629709][ T5899] ums-datafab 3-1:0.135: Quirks match for vid 07c4 pid a002: 1 [ 280.638335][T10435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.650168][T10435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.689273][T10435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.729615][T10435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.741150][T10435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.755127][T10435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.770029][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.788850][T10696] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 280.794711][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.848507][T10696] syz_tun: entered promiscuous mode [ 280.859201][T10696] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 280.899022][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.906285][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.962924][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.970134][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.033756][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.045060][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.054196][T10554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.071099][T10554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.184252][T10466] veth0_vlan: entered promiscuous mode [ 281.187467][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.197388][T10466] veth1_vlan: entered promiscuous mode [ 281.203859][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.205251][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 281.298872][T10466] veth0_macvtap: entered promiscuous mode [ 281.319239][T10466] veth1_macvtap: entered promiscuous mode [ 281.369768][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.390099][ T9] usb 3-1: USB disconnect, device number 21 [ 281.414136][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.426325][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.428405][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.449574][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.459828][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.459874][ T5901] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 281.459899][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.493745][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.494612][ T5901] usb 5-1: config 0 descriptor?? [ 281.507994][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.529798][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.541675][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.551865][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.563859][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.595702][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.610260][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.621760][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.722845][T10706] loop2: detected capacity change from 0 to 7 [ 281.730869][T10706] Dev loop2: unable to read RDB block 7 [ 281.736755][T10706] loop2: unable to read partition table [ 281.742646][T10706] loop2: partition table beyond EOD, truncated [ 281.757324][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.759161][T10706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.768561][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.804714][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.820020][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.851564][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.863469][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.886698][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.934380][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.939805][ T5901] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 281.960748][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.962516][ T5901] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 281.981117][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.000162][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.011536][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.032720][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.051101][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.064108][T10466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.076049][T10466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.103802][T10466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.113719][T10466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.143984][ T5901] cp2112 0003:10C4:EA90.0015: error requesting version [ 282.168677][ T5901] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 282.200037][ T5901] usb 5-1: USB disconnect, device number 24 [ 282.283364][ T5956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.401474][ T5956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.563810][ T5956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.620755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.629036][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.691392][ T5956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.709842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.718701][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.775229][T10554] veth0_vlan: entered promiscuous mode [ 282.804756][T10554] veth1_vlan: entered promiscuous mode [ 282.901199][T10554] veth0_macvtap: entered promiscuous mode [ 282.912825][T10554] veth1_macvtap: entered promiscuous mode [ 282.930759][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.942841][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.953135][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.966181][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.976491][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.987766][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.002037][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.013274][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.023633][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.043608][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.053509][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.064290][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.074306][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.085198][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.097325][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.108561][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.119477][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.129626][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.140208][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.150319][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.160971][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.171391][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.182264][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.192367][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.204395][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.214431][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.225122][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.235102][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.245590][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.256717][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.281749][T10554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.294344][T10554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.305314][T10554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.314053][T10554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.503456][ T5956] bridge_slave_1: left allmulticast mode [ 283.534685][ T5956] bridge_slave_1: left promiscuous mode [ 283.542729][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.615720][ T5956] bridge_slave_0: left allmulticast mode [ 283.622489][ T5956] bridge_slave_0: left promiscuous mode [ 283.634844][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.003066][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.028558][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.037344][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.061688][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.084480][ T5819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.095003][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.364698][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.378221][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.388780][ T5956] bond0 (unregistering): Released all slaves [ 284.414325][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.438316][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.505352][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.522596][T10733] syzkaller0 speed is unknown, defaulting to 1000 [ 284.530913][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.970522][T10744] syzkaller0 speed is unknown, defaulting to 1000 [ 285.178949][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.194428][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.205870][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.212964][ T5956] hsr_slave_0: left promiscuous mode [ 285.221226][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.224762][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 285.244897][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.266086][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.285034][ T5956] hsr_slave_1: left promiscuous mode [ 285.306220][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.313793][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.335735][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.353521][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.397273][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 285.411741][ T5956] veth1_macvtap: left promiscuous mode [ 285.416261][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.436608][ T5956] veth0_macvtap: left promiscuous mode [ 285.442397][ T5956] veth1_vlan: left promiscuous mode [ 285.454777][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.454844][ T5956] veth0_vlan: left promiscuous mode [ 285.494810][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 285.534723][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.569319][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.589603][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.627061][ T9] usb 3-1: config 0 descriptor?? [ 285.635099][T10749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.078330][ T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 286.096194][ T9] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 286.142198][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 286.154870][ T5819] Bluetooth: hci3: command tx timeout [ 286.312845][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.337488][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.345863][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.369903][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.392311][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.406811][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.420143][ T9] usb 3-1: USB disconnect, device number 22 [ 286.480308][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 286.534996][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 287.279956][T10752] syzkaller0 speed is unknown, defaulting to 1000 [ 287.358981][ T5819] Bluetooth: hci0: command tx timeout [ 287.371170][T10733] chnl_net:caif_netlink_parms(): no params data found [ 287.382971][T10765] syzkaller0 speed is unknown, defaulting to 1000 [ 287.680975][T10733] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.703896][T10733] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.721987][T10733] bridge_slave_0: entered allmulticast mode [ 287.736135][T10733] bridge_slave_0: entered promiscuous mode [ 287.763753][T10733] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.784647][T10733] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.791998][T10733] bridge_slave_1: entered allmulticast mode [ 287.807651][T10733] bridge_slave_1: entered promiscuous mode [ 287.937191][T10733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.960619][T10733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.205323][T10733] team0: Port device team_slave_0 added [ 288.225935][T10752] chnl_net:caif_netlink_parms(): no params data found [ 288.235628][ T5819] Bluetooth: hci3: command tx timeout [ 288.297432][T10733] team0: Port device team_slave_1 added [ 288.333262][T10765] chnl_net:caif_netlink_parms(): no params data found [ 288.385676][ T5956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.438051][T10733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.445929][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.473088][T10733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.483849][ T5819] Bluetooth: hci4: command tx timeout [ 288.491972][T10801] netlink: 'syz.2.1530': attribute type 21 has an invalid length. [ 288.504740][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1530'. [ 288.750911][ T5956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.811739][T10733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.819704][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.846466][T10733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.920526][ T5956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.971697][T10827] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 288.981396][T10828] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 288.984975][T10826] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 289.000628][T10829] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 289.211217][ T5956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.268839][T10733] hsr_slave_0: entered promiscuous mode [ 289.315080][T10733] hsr_slave_1: entered promiscuous mode [ 289.337778][T10733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.356896][T10733] Cannot create hsr debugfs directory [ 289.435023][ T5819] Bluetooth: hci0: command tx timeout [ 289.516412][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.523566][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.574483][T10752] bridge_slave_0: entered allmulticast mode [ 289.581938][T10752] bridge_slave_0: entered promiscuous mode [ 289.741899][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.756960][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.764281][T10765] bridge_slave_0: entered allmulticast mode [ 289.815905][T10765] bridge_slave_0: entered promiscuous mode [ 289.829707][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.845310][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.852700][T10752] bridge_slave_1: entered allmulticast mode [ 289.872875][T10752] bridge_slave_1: entered promiscuous mode [ 394.974497][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 394.981555][ C0] rcu: 1-...!: (1 GPs behind) idle=74a4/1/0x4000000000000000 softirq=53240/53241 fqs=2 [ 394.992729][ C0] rcu: (detected by 0, t=10502 jiffies, g=49133, q=395 ncpus=2) [ 395.000492][ C0] Sending NMI from CPU 0 to CPUs 1: [ 395.000537][ C1] NMI backtrace for cpu 1 [ 395.000567][ C1] CPU: 1 UID: 0 PID: 10733 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 395.000586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.000602][ C1] RIP: 0010:rcu_is_watching+0x44/0xb0 [ 395.000637][ C1] Code: 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 0b 2d 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 5c 41 7e 00 <48> c7 c3 d8 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 395.000650][ C1] RSP: 0018:ffffc90000a18b20 EFLAGS: 00000046 [ 395.000665][ C1] RAX: 1ffffffff1c5a16b RBX: 0000000000000001 RCX: ffffffff817aaeb4 [ 395.000676][ C1] RDX: 0000000000000000 RSI: ffffffff8c5edd40 RDI: ffffffff8c5edd00 [ 395.000688][ C1] RBP: ffffc90000a18c88 R08: ffffffff901853f7 R09: 1ffffffff2030a7e [ 395.000702][ C1] R10: dffffc0000000000 R11: fffffbfff2030a7f R12: 1ffff92000143170 [ 395.000714][ C1] R13: dffffc0000000000 R14: ffffffff8e2d0b58 R15: dffffc0000000000 [ 395.000726][ C1] FS: 0000555559e61500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 395.000740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.000751][ C1] CR2: 00007f65cc93b440 CR3: 000000002ff10000 CR4: 00000000003526f0 [ 395.000765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.000774][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.000785][ C1] Call Trace: [ 395.000791][ C1] [ 395.000800][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 395.000821][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 395.000839][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.000855][ C1] ? nmi_handle+0x2a/0x5a0 [ 395.000879][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 395.000898][ C1] ? nmi_handle+0x14f/0x5a0 [ 395.000913][ C1] ? nmi_handle+0x2a/0x5a0 [ 395.000930][ C1] ? rcu_is_watching+0x44/0xb0 [ 395.000947][ C1] ? default_do_nmi+0x63/0x160 [ 395.000963][ C1] ? exc_nmi+0x123/0x1f0 [ 395.000979][ C1] ? end_repeat_nmi+0xf/0x53 [ 395.000996][ C1] ? lock_acquire+0xd4/0x550 [ 395.001018][ C1] ? rcu_is_watching+0x44/0xb0 [ 395.001036][ C1] ? rcu_is_watching+0x44/0xb0 [ 395.001053][ C1] ? rcu_is_watching+0x44/0xb0 [ 395.001070][ C1] [ 395.001076][ C1] [ 395.001082][ C1] lock_acquire+0xe3/0x550 [ 395.001097][ C1] ? advance_sched+0xa02/0xca0 [ 395.001116][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 395.001135][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 395.001153][ C1] ? taprio_set_budgets+0x32c/0x370 [ 395.001170][ C1] ? advance_sched+0xa02/0xca0 [ 395.001185][ C1] ? advance_sched+0xa02/0xca0 [ 395.001204][ C1] _raw_spin_lock_irq+0xd3/0x120 [ 395.001221][ C1] ? __hrtimer_run_queues+0x670/0xd30 [ 395.001239][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 395.001261][ C1] __hrtimer_run_queues+0x670/0xd30 [ 395.001288][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 395.001305][ C1] ? sched_clock+0x4a/0x70 [ 395.001324][ C1] ? read_tsc+0x9/0x20 [ 395.001340][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 395.001360][ C1] hrtimer_interrupt+0x403/0xa40 [ 395.001390][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 395.001408][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 395.001427][ C1] [ 395.001432][ C1] [ 395.001438][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.001462][ C1] RIP: 0010:preempt_count_add+0x8/0x190 [ 395.001483][ C1] Code: 3c 24 e8 cb cf 95 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 89 fb 48 c7 c0 c0 89 37 9a 48 c1 e8 03 49 bf 00 00 00 00 00 fc [ 395.001495][ C1] RSP: 0018:ffffc90003bcea08 EFLAGS: 00000246 [ 395.001509][ C1] RAX: ffff88803525da00 RBX: ffff88803525da00 RCX: ffffffff8179f1e4 [ 395.001521][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 395.001530][ C1] RBP: ffffc90003bceaf0 R08: ffff88801baec0e7 R09: 1ffff1100375d81c [ 395.001542][ C1] R10: dffffc0000000000 R11: ffffed100375d81d R12: ffff88801baec0e0 [ 395.001560][ C1] R13: ffff88801baec0d8 R14: 1ffff92000779d4c R15: dffffc0000000000 [ 395.001576][ C1] ? up_write+0x204/0x590 [ 395.001598][ C1] up_write+0x105/0x590 [ 395.001618][ C1] ? __pfx_up_write+0x10/0x10 [ 395.001636][ C1] ? kernfs_link_sibling+0x3ba/0x420 [ 395.001659][ C1] kernfs_add_one+0x431/0x8b0 [ 395.001681][ C1] __kernfs_create_file+0x22e/0x2e0 [ 395.001699][ C1] sysfs_add_file_mode_ns+0x24a/0x310 [ 395.001720][ C1] internal_create_group+0x782/0x12d0 [ 395.001743][ C1] ? __pfx_up_write+0x10/0x10 [ 395.001761][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 395.001785][ C1] sysfs_create_groups+0x56/0x120 [ 395.001804][ C1] device_add_attrs+0xe5/0x600 [ 395.001822][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 395.001841][ C1] device_add+0x576/0xbf0 [ 395.001856][ C1] ? device_initialize+0x266/0x460 [ 395.001872][ C1] netdev_register_kobject+0x157/0x2e0 [ 395.001895][ C1] register_netdevice+0x12c5/0x1b00 [ 395.001919][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 395.001938][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 395.001957][ C1] ? register_vlan_dev+0x342/0x810 [ 395.001976][ C1] register_vlan_dev+0x38c/0x810 [ 395.001997][ C1] vlan_newlink+0x476/0x5c0 [ 395.002020][ C1] ? __pfx_vlan_newlink+0x10/0x10 [ 395.002039][ C1] rtnl_newlink_create+0x2ee/0xa40 [ 395.002063][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 395.002083][ C1] ? nla_strscpy+0x100/0x180 [ 395.002101][ C1] ? full_name_hash+0x93/0xe0 [ 395.002119][ C1] rtnl_newlink+0x1c7e/0x2210 [ 395.002144][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.002172][ C1] ? validate_chain+0x11e/0x5920 [ 395.002189][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 395.002206][ C1] ? __pfx_lock_release+0x10/0x10 [ 395.002223][ C1] ? __pfx_validate_chain+0x10/0x10 [ 395.002241][ C1] ? mark_lock+0x9a/0x360 [ 395.002259][ C1] ? __lock_acquire+0x1397/0x2100 [ 395.002290][ C1] ? __pfx_lock_release+0x10/0x10 [ 395.002305][ C1] ? __lock_acquire+0x1397/0x2100 [ 395.002326][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.002345][ C1] rtnetlink_rcv_msg+0x791/0xcf0 [ 395.002362][ C1] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 395.002379][ C1] ? __lock_acquire+0x1397/0x2100 [ 395.002395][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.002421][ C1] netlink_rcv_skb+0x1e3/0x430 [ 395.002439][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.002462][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.002487][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.002503][ C1] netlink_unicast+0x7f6/0x990 [ 395.002527][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 395.002545][ C1] ? __virt_addr_valid+0x45f/0x530 [ 395.002563][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 395.002578][ C1] ? __check_object_size+0x47a/0x730 [ 395.002600][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 395.002621][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.002639][ C1] ? __might_fault+0xaa/0x120 [ 395.002658][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.002673][ C1] __sock_sendmsg+0x221/0x270 [ 395.002695][ C1] __sys_sendto+0x363/0x4c0 [ 395.002713][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 395.002741][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 395.002758][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.002777][ C1] __x64_sys_sendto+0xde/0x100 [ 395.002793][ C1] do_syscall_64+0xf3/0x230 [ 395.002812][ C1] ? clear_bhb_loop+0x35/0x90 [ 395.002827][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.002846][ C1] RIP: 0033:0x7fa014587bbc [ 395.002868][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 395.002881][ C1] RSP: 002b:00007ffdf5f07200 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 395.002897][ C1] RAX: ffffffffffffffda RBX: 00007fa0152a4620 RCX: 00007fa014587bbc [ 395.002908][ C1] RDX: 0000000000000054 RSI: 00007fa0152a4670 RDI: 0000000000000003 [ 395.002919][ C1] RBP: 0000000000000000 R08: 00007ffdf5f07254 R09: 000000000000000c [ 395.002929][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 395.002939][ C1] R13: 0000000000000000 R14: 00007fa0152a4670 R15: 0000000000000000 [ 395.002957][ C1] [ 395.003523][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g49133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 395.812204][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 395.822185][ C0] rcu: RCU grace-period kthread stack dump: [ 395.828085][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 395.840198][ C0] Call Trace: [ 395.843481][ C0] [ 395.846425][ C0] __schedule+0x17fb/0x4be0 [ 395.850974][ C0] ? __pfx___schedule+0x10/0x10 [ 395.855845][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.860890][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.867231][ C0] ? schedule+0x90/0x320 [ 395.871485][ C0] schedule+0x14b/0x320 [ 395.875739][ C0] schedule_timeout+0x15a/0x290 [ 395.880600][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 395.886257][ C0] ? __pfx_process_timeout+0x10/0x10 [ 395.891646][ C0] ? prepare_to_swait_event+0x330/0x350 [ 395.897207][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 395.902069][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 395.907295][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 395.913465][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 395.918759][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 395.924670][ C0] ? finish_swait+0xd4/0x1e0 [ 395.929273][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 395.933877][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 395.939131][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 395.945043][ C0] ? __kthread_parkme+0x169/0x1d0 [ 395.950171][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 395.955422][ C0] kthread+0x2f0/0x390 [ 395.959515][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 395.964811][ C0] ? __pfx_kthread+0x10/0x10 [ 395.969419][ C0] ret_from_fork+0x4b/0x80 [ 395.973862][ C0] ? __pfx_kthread+0x10/0x10 [ 395.978742][ C0] ret_from_fork_asm+0x1a/0x30 [ 395.983548][ C0] [ 395.986590][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 395.992920][ C0] CPU: 0 UID: 0 PID: 10867 Comm: syz.4.1549 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 396.003691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.013782][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 396.020571][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 396.040207][ C0] RSP: 0018:ffffc90003c4f3e0 EFLAGS: 00000246 [ 396.046308][ C0] RAX: ffffffff81938eab RBX: 1ffff110170e88b9 RCX: 0000000000080000 [ 396.054385][ C0] RDX: ffffc9000d73d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 396.062374][ C0] RBP: ffffc90003c4f5e0 R08: ffffffff81938e7a R09: 1ffffffff284e310 [ 396.070395][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 396.078409][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 396.086403][ C0] FS: 00007f7d18c636c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 396.095354][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.101954][ C0] CR2: 0000001b2f91bff8 CR3: 000000004fc72000 CR4: 00000000003526f0 [ 396.109961][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.117965][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.125956][ C0] Call Trace: [ 396.129253][ C0] [ 396.132120][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 396.138471][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 396.144133][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 396.149953][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 396.155351][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 396.161608][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 396.167030][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 396.172686][ C0] ? update_process_times+0x242/0x2f0 [ 396.178090][ C0] ? tick_nohz_handler+0x37c/0x500 [ 396.183247][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 396.188742][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 396.194164][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 396.199918][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 396.204870][ C0] ? read_tsc+0x9/0x20 [ 396.208958][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 396.215045][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 396.220193][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 396.226358][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 396.232180][ C0] [ 396.235116][ C0] [ 396.238055][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.244231][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 396.250402][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 396.256578][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 396.262755][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 396.267823][ C0] ? __pfx___text_poke+0x10/0x10 [ 396.272797][ C0] ? __get_immv32+0x19c/0x350 [ 396.277508][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 396.283886][ C0] ? __pfx___might_resched+0x10/0x10 [ 396.289207][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 396.294256][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 396.299409][ C0] text_poke_bp_batch+0x352/0xb30 [ 396.304464][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 396.310029][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 396.315598][ C0] ? rcu_is_watching+0x15/0xb0 [ 396.320397][ C0] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 396.325827][ C0] text_poke_bp+0xb0/0x100 [ 396.330275][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 396.335319][ C0] ? arch_static_call_transform+0x37/0x380 [ 396.341156][ C0] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 396.346564][ C0] __static_call_transform+0x51a/0x810 [ 396.352049][ C0] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 396.357440][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.363262][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 396.369259][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 396.375194][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.381042][ C0] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 396.386447][ C0] arch_static_call_transform+0x141/0x380 [ 396.392220][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.398058][ C0] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 396.403457][ C0] __static_call_update+0xd8/0x5e0 [ 396.408585][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.414418][ C0] ? __pfx___static_call_update+0x10/0x10 [ 396.420167][ C0] ? trace_kmalloc+0x1f/0xd0 [ 396.424764][ C0] ? __kmalloc_noprof+0x2a5/0x4c0 [ 396.429806][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.435629][ C0] tracepoint_add_func+0x925/0xaa0 [ 396.440761][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.446582][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 396.453536][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 396.461009][ C0] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 396.466825][ C0] ? anon_inode_getfile+0xff/0x180 [ 396.471954][ C0] ? bpf_probe_register+0x134/0x1f0 [ 396.477182][ C0] bpf_raw_tp_link_attach+0x4a3/0x700 [ 396.482565][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 396.488495][ C0] ? __fget_files+0x2a/0x410 [ 396.493100][ C0] ? fput+0x21b/0x290 [ 396.497103][ C0] bpf_raw_tracepoint_open+0x177/0x1f0 [ 396.502577][ C0] __sys_bpf+0x3c0/0x810 [ 396.506837][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 396.511630][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.517628][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.523999][ C0] ? do_syscall_64+0x100/0x230 [ 396.528796][ C0] __x64_sys_bpf+0x7c/0x90 [ 396.533239][ C0] do_syscall_64+0xf3/0x230 [ 396.537760][ C0] ? clear_bhb_loop+0x35/0x90 [ 396.542451][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.548359][ C0] RIP: 0033:0x7f7d17d85d29 [ 396.552786][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.572403][ C0] RSP: 002b:00007f7d18c63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.580856][ C0] RAX: ffffffffffffffda RBX: 00007f7d17f75fa0 RCX: 00007f7d17d85d29 [ 396.588887][ C0] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 396.596888][ C0] RBP: 00007f7d17e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 396.604898][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.612895][ C0] R13: 0000000000000000 R14: 00007f7d17f75fa0 R15: 00007ffcb47e9ac8 [ 396.620923][ C0]