last executing test programs: 11m57.26173658s ago: executing program 32 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[]) 8m36.861643794s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 8m35.49391021s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m16.928487383s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 8m16.113683336s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m56.421920278s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m54.910189144s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 7m41.152009923s ago: executing program 33 (id=1938): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7m33.120130971s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 7m31.251045622s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m15.169637053s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 7m13.667544102s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m2.320884603s ago: executing program 0 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.56770595s ago: executing program 34 (id=1440): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 7m1.522584577s ago: executing program 35 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.478101716s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 7m0.805707322s ago: executing program 36 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x7a, 0x9, 0xc, 0xfa, 0x5, 0x6, 0x8, 0xe, 0x40, 0x7d, 0x2, 0x0, 0x4}, {0x80000001, 0x8001, 0x9, 0xc, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x5, 0x1, 0x30, 0xf0, 0x8, 0xf, 0x8, 0x6, 0x7, 0x96, 0x87}], 0x3}) 6m14.092974206s ago: executing program 7 (id=2431): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 6m13.686842755s ago: executing program 7 (id=2438): dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 6m13.534293321s ago: executing program 7 (id=2439): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6m11.126157695s ago: executing program 7 (id=2460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 6m10.971244034s ago: executing program 7 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 6m10.29851802s ago: executing program 7 (id=2472): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) 6m9.379571715s ago: executing program 37 (id=2472): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) 5m44.632128258s ago: executing program 3 (id=2705): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) 5m44.499341543s ago: executing program 3 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5m44.244764387s ago: executing program 3 (id=2709): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9, 0x4}, 0x20) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) 5m44.01612853s ago: executing program 3 (id=2711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) 5m43.942442168s ago: executing program 3 (id=2712): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 5m43.646437376s ago: executing program 3 (id=2713): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 2m49.892498494s ago: executing program 39 (id=4582): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 1m18.665616174s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.422903703s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 1m3.811946841s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.208897083s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 48.720642194s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 48.25263707s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 36.862506246s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 35.685607812s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 23.909241475s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 22.519351637s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 7.357717762s ago: executing program 1 (id=4586): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 6.137539836s ago: executing program 5 (id=4678): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.874301282s ago: executing program 9 (id=5532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 3.590977543s ago: executing program 9 (id=5534): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r3}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.405617974s ago: executing program 9 (id=5536): unshare(0xa000400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x29, &(0x7f0000000300)=[{&(0x7f0000000880)=""/88, 0x58}], 0x1}, 0x400001c0) 3.242489812s ago: executing program 9 (id=5538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) recvfrom$x25(r1, &(0x7f0000000200)=""/64, 0x40, 0x10120, 0x0, 0x0) 3.13642495s ago: executing program 9 (id=5540): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.033699135s ago: executing program 4 (id=5541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000003fc0)={0x2020}, 0x2020) 2.434356896s ago: executing program 8 (id=5543): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x80, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 2.15794425s ago: executing program 4 (id=5544): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.941997997s ago: executing program 4 (id=5545): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 1.828482802s ago: executing program 4 (id=5546): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r3, r1, 0x0, 0x4, 0x3c, 0x92a, 0x9, 0xffffffff, 0x9, 0x4, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x5}) 1.668001113s ago: executing program 4 (id=5547): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) 1.590348141s ago: executing program 4 (id=5548): prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000ac0)={0x0, 0x0, 0x1, '='}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 1.48879134s ago: executing program 8 (id=5549): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 1.330278202s ago: executing program 8 (id=5550): r0 = syz_io_uring_setup(0x821, &(0x7f0000000480)={0x0, 0xbc02, 0x800, 0x0, 0x22b}, &(0x7f00000010c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x2, 0xc]}, {0x80000000, 0x0, 0x3, [0x12f, 0xb]}, 0x1, [0x5, 0x80000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x52, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.191386011s ago: executing program 8 (id=5551): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xab9, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1}, 0x6e) 980.721833ms ago: executing program 8 (id=5552): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffff, 0x30020000, 0xfff2, 0x7, 0xc, 0xc, 0x0, 0x0, 0x4, 0xc}}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 816.957828ms ago: executing program 8 (id=5553): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='signal_generate\x00', r1}, 0x18) listen(r0, 0x6) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 9 (id=5554): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x200000b0) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): SS using preconfigured BSSID 50:50:50:50:50:50 [ 802.297426][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.345665][T20788] veth0_macvtap: entered promiscuous mode [ 802.373610][T20788] veth1_macvtap: entered promiscuous mode [ 802.443926][T20788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.478780][T20788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.881454][T21039] netlink: 'syz.8.4952': attribute type 1 has an invalid length. [ 803.003833][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.003989][ T6996] bridge_slave_1: left allmulticast mode [ 803.018200][ T6996] bridge_slave_1: left promiscuous mode [ 803.029408][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.050427][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.101797][ T6996] bridge_slave_0: left allmulticast mode [ 803.112363][ T6996] bridge_slave_0: left promiscuous mode [ 803.128633][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.755482][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.766374][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.779155][ T6996] bond0 (unregistering): Released all slaves [ 803.794280][T21041] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 804.260935][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.290750][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.746954][ T6996] hsr_slave_0: left promiscuous mode [ 804.770519][ T6996] hsr_slave_1: left promiscuous mode [ 804.796275][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.807251][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.829089][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.843711][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.853521][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.863739][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.872836][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.881359][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.896198][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.961226][ T6996] veth1_macvtap: left promiscuous mode [ 804.967102][ T6996] veth0_macvtap: left promiscuous mode [ 804.975153][ T6996] veth1_vlan: left promiscuous mode [ 804.981080][ T6996] veth0_vlan: left promiscuous mode [ 805.079282][ T1217] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 805.186603][T21062] binder: 21061:21062 ioctl 4018620d 0 returned -22 [ 805.287724][ T1217] usb 10-1: Using ep0 maxpacket: 8 [ 805.299582][ T1217] usb 10-1: config 135 has an invalid interface number: 230 but max is 0 [ 805.331701][ T1217] usb 10-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 805.346544][ T1217] usb 10-1: config 135 has no interface number 0 [ 805.373649][ T1217] usb 10-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.393782][ T1217] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 805.423315][ T1217] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.431583][ T1217] usb 10-1: Product: syz [ 805.447447][ T1217] usb 10-1: Manufacturer: syz [ 805.452217][ T1217] usb 10-1: SerialNumber: syz [ 805.495381][ T1217] usb 10-1: Found UVC 0.00 device syz (18ec:3288) [ 805.523730][ T1217] usb 10-1: No valid video chain found. [ 805.711842][ T5923] usb 10-1: USB disconnect, device number 35 [ 805.762688][T21070] netlink: 'syz.4.4963': attribute type 6 has an invalid length. [ 806.818711][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 806.956248][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 806.967514][ T5831] Bluetooth: hci0: command tx timeout [ 808.329071][ T5938] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 808.487858][ T5938] usb 10-1: Using ep0 maxpacket: 32 [ 808.496966][ T5938] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.505653][ T5938] usb 10-1: config 0 has no interface number 0 [ 808.515009][ T5938] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 808.525096][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.533440][ T5938] usb 10-1: Product: syz [ 808.541002][ T5938] usb 10-1: Manufacturer: syz [ 808.545892][ T5938] usb 10-1: SerialNumber: syz [ 808.571229][ T5938] usb 10-1: config 0 descriptor?? [ 808.589505][ T5938] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 808.601025][ T5938] usb 10-1: selecting invalid altsetting 1 [ 808.610814][ T5938] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 808.623110][ T5938] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.667672][ T5938] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 808.676068][ T5938] usb 10-1: media controller created [ 808.778162][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.849085][T21140] sock: sock_timestamping_bind_phc: sock not bind to device [ 808.897364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.903875][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.939349][ T5938] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 808.946627][ T5938] zl10353_read_register: readreg error (reg=127, ret==-71) [ 809.020815][ T5938] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 809.047465][ T5831] Bluetooth: hci0: command tx timeout [ 809.166637][T21059] chnl_net:caif_netlink_parms(): no params data found [ 809.217533][ T5938] usb 10-1: USB disconnect, device number 36 [ 809.416014][T21059] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.423419][T21059] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.431611][T21059] bridge_slave_0: entered allmulticast mode [ 809.440935][T21059] bridge_slave_0: entered promiscuous mode [ 809.451791][T21059] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.459357][T21059] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.466643][T21059] bridge_slave_1: entered allmulticast mode [ 809.474987][T21059] bridge_slave_1: entered promiscuous mode [ 809.525215][T21059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.542583][T21059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.584754][T21059] team0: Port device team_slave_0 added [ 809.594159][T21059] team0: Port device team_slave_1 added [ 809.614929][ T6996] bridge_slave_1: left allmulticast mode [ 809.621790][ T6996] bridge_slave_1: left promiscuous mode [ 809.627939][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.637156][ T6996] bridge_slave_0: left allmulticast mode [ 809.644108][ T6996] bridge_slave_0: left promiscuous mode [ 809.650330][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.156048][ T5938] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 810.336062][ T5938] usb 10-1: Using ep0 maxpacket: 32 [ 810.372359][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.417139][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.437600][ T5938] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 810.446814][ T5938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.480308][ T5938] usb 10-1: config 0 descriptor?? [ 810.522969][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.535916][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.545667][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.556132][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.565462][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.924542][ T5938] savu 0003:1E7D:2D5A.0062: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 810.951483][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.969077][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.977700][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 810.996458][ T6996] bond0 (unregistering): Released all slaves [ 811.131528][ T5831] Bluetooth: hci0: command tx timeout [ 811.143367][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.182631][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.203016][ T5912] usb 10-1: USB disconnect, device number 37 [ 811.234917][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 811.253828][T21059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.263187][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.276702][T21059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.307094][ T24] usb 5-1: config 0 descriptor?? [ 811.318340][T21059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.355891][T21059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.364599][T21059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.404302][T21059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.663901][T21059] hsr_slave_0: entered promiscuous mode [ 811.682379][T21059] hsr_slave_1: entered promiscuous mode [ 811.691374][T21059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.701896][T21059] Cannot create hsr debugfs directory [ 811.749504][ T24] cm6533_jd 0003:0D8C:0022.0063: unknown main item tag 0x0 [ 811.757045][ T24] cm6533_jd 0003:0D8C:0022.0063: unknown main item tag 0x0 [ 811.776397][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0063/input/input85 [ 811.807486][ T6996] hsr_slave_0: left promiscuous mode [ 811.816777][ T24] cm6533_jd 0003:0D8C:0022.0063: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 811.870729][ T6996] hsr_slave_1: left promiscuous mode [ 811.877218][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.934346][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.945411][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.963817][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.985946][ T10] usb 5-1: USB disconnect, device number 88 [ 812.084987][ T6996] veth1_macvtap: left promiscuous mode [ 812.091369][ T6996] veth0_macvtap: left promiscuous mode [ 812.100795][ T6996] veth1_vlan: left promiscuous mode [ 812.106250][ T6996] veth0_vlan: left promiscuous mode [ 812.648052][ T5831] Bluetooth: hci2: command tx timeout [ 813.207464][ T5831] Bluetooth: hci0: command tx timeout [ 813.327499][ T30] audit: type=1326 audit(1751484194.517:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.409573][ T30] audit: type=1326 audit(1751484194.537:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.484026][ T30] audit: type=1326 audit(1751484194.557:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.531047][ T30] audit: type=1326 audit(1751484194.557:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.554126][ T30] audit: type=1326 audit(1751484194.557:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.680264][ T30] audit: type=1326 audit(1751484194.557:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.703872][ T30] audit: type=1326 audit(1751484194.557:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.741186][ T30] audit: type=1326 audit(1751484194.587:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.808983][ T30] audit: type=1326 audit(1751484194.587:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.847659][ T30] audit: type=1326 audit(1751484194.587:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21215 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 813.932103][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 813.996556][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 814.157430][ T5938] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 814.332565][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.346273][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.356755][ T5938] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 814.368877][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.381010][ T5938] usb 5-1: config 0 descriptor?? [ 814.731339][ T5831] Bluetooth: hci2: command tx timeout [ 814.805068][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.811989][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.818922][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.825678][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.832722][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.840672][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.848841][ T5938] elo 0003:04E7:0030.0064: unknown main item tag 0x0 [ 814.867637][ T5938] elo 0003:04E7:0030.0064: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 814.953724][T21231] input: syz1 as /devices/virtual/input/input86 [ 815.049675][ T5938] usb 5-1: USB disconnect, device number 89 [ 815.835494][T21167] chnl_net:caif_netlink_parms(): no params data found [ 816.041735][T21059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.189152][T21167] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.196529][T21167] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.248994][T21167] bridge_slave_0: entered allmulticast mode [ 816.271562][T21167] bridge_slave_0: entered promiscuous mode [ 816.294359][T21059] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.308916][T21261] netlink: 'syz.4.5035': attribute type 4 has an invalid length. [ 816.344459][T21261] netlink: 'syz.4.5035': attribute type 4 has an invalid length. [ 816.352634][T21167] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.369269][T21167] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.376632][T21167] bridge_slave_1: entered allmulticast mode [ 816.403418][T21167] bridge_slave_1: entered promiscuous mode [ 816.487218][T21167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.510621][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.517913][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.540885][T21167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.631544][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.638837][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.724391][T21167] team0: Port device team_slave_0 added [ 816.755105][T21167] team0: Port device team_slave_1 added [ 816.818398][ T5831] Bluetooth: hci2: command tx timeout [ 816.892291][T21167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.909432][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.939775][T21167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.954410][T21167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.964466][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.994399][T21167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.125568][T21167] hsr_slave_0: entered promiscuous mode [ 817.144177][T21167] hsr_slave_1: entered promiscuous mode [ 817.158275][T21167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.177389][T21167] Cannot create hsr debugfs directory [ 817.885727][T21059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.925548][T21306] netlink: 'syz.4.5050': attribute type 12 has an invalid length. [ 817.948083][T21306] netlink: 'syz.4.5050': attribute type 29 has an invalid length. [ 817.957499][T21306] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5050'. [ 818.042616][T21167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.145972][T21167] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.172967][T21312] veth0: entered promiscuous mode [ 818.183006][T21311] netlink: 'syz.8.5051': attribute type 4 has an invalid length. [ 818.234771][T21316] netlink: 'syz.8.5051': attribute type 4 has an invalid length. [ 818.271203][T21310] veth0: left promiscuous mode [ 818.278273][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.285487][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.342222][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.349467][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.857152][T21059] veth0_vlan: entered promiscuous mode [ 818.887573][ T5831] Bluetooth: hci2: command tx timeout [ 818.895817][T21059] veth1_vlan: entered promiscuous mode [ 818.940096][T21059] veth0_macvtap: entered promiscuous mode [ 818.956387][T21059] veth1_macvtap: entered promiscuous mode [ 818.978039][T21167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.990793][ T2964] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 819.005067][T21059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.027015][T21059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.057699][ T24] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 819.225751][ T24] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 819.257670][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.268891][ T24] usb 10-1: Product: syz [ 819.273313][ T24] usb 10-1: Manufacturer: syz [ 819.279298][ T24] usb 10-1: SerialNumber: syz [ 819.290065][ T24] usb 10-1: config 0 descriptor?? [ 819.309013][ T24] ch341 10-1:0.0: ch341-uart converter detected [ 819.395453][T21167] veth0_vlan: entered promiscuous mode [ 819.417031][T21167] veth1_vlan: entered promiscuous mode [ 819.470598][T21167] veth0_macvtap: entered promiscuous mode [ 819.491575][T21167] veth1_macvtap: entered promiscuous mode [ 819.528530][T21167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.556204][T21167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.819337][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.835267][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.894705][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.925533][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.968464][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.984843][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.021687][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.042766][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.238848][ T5912] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 820.306433][ T5912] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 820.345499][ T24] ch341-uart ttyUSB0: break control not supported, using simulated break [ 820.380331][ T24] usb 10-1: ch341-uart converter now attached to ttyUSB0 [ 820.410458][ T24] usb 10-1: USB disconnect, device number 38 [ 820.450010][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 820.481599][ T24] ch341 10-1:0.0: device disconnected [ 820.645918][ T2964] bridge_slave_1: left allmulticast mode [ 820.666088][ T2964] bridge_slave_1: left promiscuous mode [ 820.689855][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.722145][ T2964] bridge_slave_0: left allmulticast mode [ 820.738689][ T2964] bridge_slave_0: left promiscuous mode [ 820.752412][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.641812][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 821.694040][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 821.703125][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 821.712649][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 821.720449][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 821.808074][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.860960][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.882246][ T2964] bond0 (unregistering): Released all slaves [ 822.579490][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 822.594161][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 822.604161][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.634216][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.645235][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.841064][ T2964] hsr_slave_0: left promiscuous mode [ 822.851807][ T2964] hsr_slave_1: left promiscuous mode [ 822.858972][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.869780][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.880924][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.897420][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.932555][ T2964] veth1_macvtap: left promiscuous mode [ 822.938656][ T2964] veth0_macvtap: left promiscuous mode [ 822.944494][ T2964] veth1_vlan: left promiscuous mode [ 822.951411][ T2964] veth0_vlan: left promiscuous mode [ 823.171899][T21418] netlink: 'syz.8.5085': attribute type 3 has an invalid length. [ 823.195676][T21418] netlink: 'syz.8.5085': attribute type 1 has an invalid length. [ 823.206681][T21418] netlink: 191152 bytes leftover after parsing attributes in process `syz.8.5085'. [ 823.274528][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 823.274551][ T30] audit: type=1326 audit(1751484205.468:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.354828][ T30] audit: type=1326 audit(1751484205.478:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f589af2ab19 code=0x7ffc0000 [ 823.407232][ T30] audit: type=1326 audit(1751484205.478:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.528168][ T30] audit: type=1326 audit(1751484205.478:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.621537][T21424] Invalid ELF header magic: != ELF [ 823.623319][ T30] audit: type=1326 audit(1751484205.478:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.660468][T21426] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5089'. [ 823.697383][ T30] audit: type=1326 audit(1751484205.478:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f589af2ab19 code=0x7ffc0000 [ 823.813622][ T30] audit: type=1326 audit(1751484205.478:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.855850][ T5831] Bluetooth: hci0: command tx timeout [ 823.889417][ T30] audit: type=1326 audit(1751484205.478:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7ffc0000 [ 823.912659][ T30] audit: type=1326 audit(1751484205.478:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f589af2ab19 code=0x7ffc0000 [ 823.938194][ T30] audit: type=1326 audit(1751484205.478:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21419 comm="syz.4.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f589af2ab19 code=0x7ffc0000 [ 824.298306][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5096'. [ 824.707704][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 824.732081][ T5831] Bluetooth: hci2: command tx timeout [ 824.783064][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 825.327700][ T24] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 825.489367][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 825.506785][ T24] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 825.529178][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.548799][ T24] usb 9-1: config 0 descriptor?? [ 825.777535][ T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 825.928552][ T5831] Bluetooth: hci0: command tx timeout [ 826.017689][T21376] chnl_net:caif_netlink_parms(): no params data found [ 826.224837][T21399] chnl_net:caif_netlink_parms(): no params data found [ 826.317173][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.326437][T21376] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.338390][T21376] bridge_slave_0: entered allmulticast mode [ 826.347092][T21376] bridge_slave_0: entered promiscuous mode [ 826.389992][T21376] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.403350][T21376] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.417915][T21376] bridge_slave_1: entered allmulticast mode [ 826.436724][T21376] bridge_slave_1: entered promiscuous mode [ 826.500091][ T2964] bridge_slave_1: left allmulticast mode [ 826.506070][ T2964] bridge_slave_1: left promiscuous mode [ 826.518044][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.530209][ T2964] bridge_slave_0: left allmulticast mode [ 826.536089][ T2964] bridge_slave_0: left promiscuous mode [ 826.551727][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.792133][ T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 826.807604][ T5831] Bluetooth: hci2: command tx timeout [ 826.817354][ T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 826.857656][ T24] asix 9-1:0.0: probe with driver asix failed with error -71 [ 826.922011][ T24] usb 9-1: USB disconnect, device number 41 [ 827.078472][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 827.561860][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.572988][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.583497][ T2964] bond0 (unregistering): Released all slaves [ 827.615908][T21376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.649696][T21376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.662233][ T5912] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 827.689257][ T24] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 827.850944][T21376] team0: Port device team_slave_0 added [ 827.851971][ T5912] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 827.862101][T21376] team0: Port device team_slave_1 added [ 827.879616][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 827.888976][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.897177][ T24] usb 9-1: Product: syz [ 827.901829][ T5912] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 827.912384][ T5912] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 827.922580][ T24] usb 9-1: Manufacturer: syz [ 827.927250][ T24] usb 9-1: SerialNumber: syz [ 827.939306][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.952861][ T24] usb 9-1: config 0 descriptor?? [ 827.993900][T21486] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 828.001417][T21399] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.009019][ T5831] Bluetooth: hci0: command tx timeout [ 828.019283][ T5912] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.020819][T21399] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.038359][T21399] bridge_slave_0: entered allmulticast mode [ 828.048537][T21399] bridge_slave_0: entered promiscuous mode [ 828.097547][T21399] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.118397][T21399] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.135126][T21399] bridge_slave_1: entered allmulticast mode [ 828.168363][T21399] bridge_slave_1: entered promiscuous mode [ 828.186203][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 828.238173][ T5912] usb 10-1: USB disconnect, device number 39 [ 828.384457][ T24] airspy 9-1:0.0: Board ID: 00 [ 828.395088][ T24] airspy 9-1:0.0: Firmware version: [ 828.422118][T21376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.429617][T21376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.459334][T21376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.481947][T21399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.504354][T21376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.512642][T21376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.539221][T21376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.556145][T21399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.604542][ T2964] hsr_slave_0: left promiscuous mode [ 828.627470][ T2964] hsr_slave_1: left promiscuous mode [ 828.633651][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.645411][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.659295][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.666895][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.712752][ T2964] veth1_macvtap: left promiscuous mode [ 828.718656][ T2964] veth0_macvtap: left promiscuous mode [ 828.727555][ T2964] veth1_vlan: left promiscuous mode [ 828.737908][ T2964] veth0_vlan: left promiscuous mode [ 828.896566][ T5831] Bluetooth: hci2: command tx timeout [ 829.029083][ T5938] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 829.198788][ T24] airspy 9-1:0.0: usb_control_msg() failed -71 request 0f [ 829.209386][ T5938] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 829.222538][ T24] airspy 9-1:0.0: Registered as swradio24 [ 829.229168][ T24] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 829.241718][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.252994][ T5938] usb 5-1: config 0 descriptor?? [ 829.254996][ T24] usb 9-1: USB disconnect, device number 42 [ 829.349942][ T5912] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 829.544578][ T5912] usb 10-1: Using ep0 maxpacket: 8 [ 829.561996][ T5912] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.589998][ T5912] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 829.599309][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.623136][ T5912] usb 10-1: config 0 descriptor?? [ 829.660066][ T5912] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 829.719830][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 829.807049][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 830.087635][ T5831] Bluetooth: hci0: command tx timeout [ 830.490385][ T5938] pegasus 5-1:0.0: can't reset MAC [ 830.496011][ T5938] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 830.532272][ T5938] usb 5-1: USB disconnect, device number 90 [ 830.670777][T21399] team0: Port device team_slave_0 added [ 830.715484][T21399] team0: Port device team_slave_1 added [ 830.863970][ T5912] gspca_vc032x: reg_w err -71 [ 830.876190][ T5912] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 830.886886][T21399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.897704][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.927961][ T5912] usb 10-1: USB disconnect, device number 40 [ 830.936994][T21399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.976231][ T5831] Bluetooth: hci2: command tx timeout [ 831.014686][T21376] hsr_slave_0: entered promiscuous mode [ 831.073174][T21376] hsr_slave_1: entered promiscuous mode [ 831.086659][T21376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.109576][T21376] Cannot create hsr debugfs directory [ 831.116100][T21399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.151417][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.284898][T21399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.633357][T21522] loop2: detected capacity change from 0 to 7 [ 831.661533][ T6005] Dev loop2: unable to read RDB block 7 [ 831.680296][ T6005] loop2: unable to read partition table [ 831.688027][T21399] hsr_slave_0: entered promiscuous mode [ 831.698593][T21399] hsr_slave_1: entered promiscuous mode [ 831.705339][T21399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.716262][ T6005] loop2: partition table beyond EOD, truncated [ 831.738416][T21522] Dev loop2: unable to read RDB block 7 [ 831.744217][T21522] loop2: unable to read partition table [ 831.744376][T21399] Cannot create hsr debugfs directory [ 831.751375][T21522] loop2: partition table beyond EOD, truncated [ 831.774773][T21522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 832.246340][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5130'. [ 832.464319][T21376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.521375][T21376] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.538603][T21399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.556918][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.564260][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.637903][ T5938] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 832.651712][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.658976][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.739592][T21399] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.794201][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.801532][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.827687][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 832.834929][ T5938] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 832.866827][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.874254][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.882433][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.890290][ T5938] usb 5-1: config 0 descriptor?? [ 833.017875][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 833.029254][T21376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.206988][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 833.221318][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.249189][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.267848][ T10] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 833.288918][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.321395][ T10] usb 10-1: config 0 descriptor?? [ 833.506696][T21399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.537190][ T5938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 833.548219][T21376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.570417][ T5938] asix 5-1:0.0: probe with driver asix failed with error -61 [ 834.302785][T21399] veth0_vlan: entered promiscuous mode [ 834.332104][T21399] veth1_vlan: entered promiscuous mode [ 834.348024][T21376] veth0_vlan: entered promiscuous mode [ 834.367676][ T10] letsketch 0003:6161:4D15.0066: Device info: à° [ 834.384401][T21376] veth1_vlan: entered promiscuous mode [ 834.423974][T21399] veth0_macvtap: entered promiscuous mode [ 834.460258][T21399] veth1_macvtap: entered promiscuous mode [ 834.491917][T21376] veth0_macvtap: entered promiscuous mode [ 834.519007][T21399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.526997][T21376] veth1_macvtap: entered promiscuous mode [ 834.553176][T21399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.612501][T21376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.627172][ T10] usb 10-1: Max retries (5) exceeded reading string descriptor 201 [ 834.642043][T21376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.649671][ T10] letsketch 0003:6161:4D15.0066: probe with driver letsketch failed with error -71 [ 834.677943][ T10] usb 10-1: USB disconnect, device number 41 [ 834.869780][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.915437][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.986092][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.012459][ T7011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.019541][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.034416][ T7011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.107669][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.115606][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.405460][ T5938] usb 5-1: USB disconnect, device number 91 [ 835.506669][ T6996] bridge_slave_1: left allmulticast mode [ 835.523278][ T6996] bridge_slave_1: left promiscuous mode [ 835.539537][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.599108][ T6996] bridge_slave_0: left allmulticast mode [ 835.611272][ T6996] bridge_slave_0: left promiscuous mode [ 835.617133][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.297778][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.310455][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.321068][ T6996] bond0 (unregistering): Released all slaves [ 836.669438][ T6996] hsr_slave_0: left promiscuous mode [ 836.688934][ T6996] hsr_slave_1: left promiscuous mode [ 836.701003][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.717887][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.728372][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.735849][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.790533][ T6996] veth1_macvtap: left promiscuous mode [ 836.796177][ T6996] veth0_macvtap: left promiscuous mode [ 836.804306][ T6996] veth1_vlan: left promiscuous mode [ 836.810446][ T6996] veth0_vlan: left promiscuous mode [ 837.040172][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.070798][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.081040][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 837.096593][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 837.105536][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 837.586356][T21624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.858743][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.870760][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.897041][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.924047][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.934025][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.191134][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 838.371900][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 838.997629][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 838.997650][ T30] audit: type=1326 audit(1751484221.208:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21664 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x7fc00000 [ 839.222049][ T5831] Bluetooth: hci0: command tx timeout [ 839.617827][ T30] audit: type=1326 audit(1751484221.818:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21664 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f589af8e929 code=0x7fc00000 [ 839.778558][T21684] netlink: 566 bytes leftover after parsing attributes in process `syz.4.5176'. [ 840.013061][ T5831] Bluetooth: hci2: command tx timeout [ 840.593840][ T6996] bridge_slave_1: left allmulticast mode [ 840.599682][ T6996] bridge_slave_1: left promiscuous mode [ 840.605521][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.650479][ T6996] bridge_slave_0: left allmulticast mode [ 840.656212][ T6996] bridge_slave_0: left promiscuous mode [ 840.678833][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.037851][T16581] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 841.215504][T16581] usb 9-1: Using ep0 maxpacket: 16 [ 841.225796][T16581] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 841.254355][T16581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 841.275054][T16581] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 841.298168][ T5831] Bluetooth: hci0: command tx timeout [ 841.304949][T16581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.313664][T16581] usb 9-1: Product: syz [ 841.337674][T16581] usb 9-1: Manufacturer: syz [ 841.342361][T16581] usb 9-1: SerialNumber: syz [ 841.353869][T16581] usb 9-1: config 0 descriptor?? [ 841.364079][T16581] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 841.376978][T16581] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 841.632727][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.645618][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.668790][ T6996] bond0 (unregistering): Released all slaves [ 841.730063][T21614] chnl_net:caif_netlink_parms(): no params data found [ 841.745866][T21631] chnl_net:caif_netlink_parms(): no params data found [ 841.836007][T21716] macsec1: entered promiscuous mode [ 841.851944][T21716] dummy0: entered promiscuous mode [ 841.867586][T21716] macsec1: entered allmulticast mode [ 841.873128][T21716] dummy0: entered allmulticast mode [ 841.883173][T21716] dummy0: left allmulticast mode [ 841.888569][T21716] dummy0: left promiscuous mode [ 841.991784][T16581] em28xx 9-1:0.0: unknown em28xx chip ID (188) [ 842.088080][ T5831] Bluetooth: hci2: command tx timeout [ 842.201870][T16581] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 842.271040][T21614] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.279952][T21614] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.287668][T21614] bridge_slave_0: entered allmulticast mode [ 842.296056][T21614] bridge_slave_0: entered promiscuous mode [ 842.325459][ T6996] hsr_slave_0: left promiscuous mode [ 842.334820][ T6996] hsr_slave_1: left promiscuous mode [ 842.341559][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.349378][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.359353][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.366841][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.395486][ T6996] veth1_macvtap: left promiscuous mode [ 842.401491][ T6996] veth0_macvtap: left promiscuous mode [ 842.407414][ T6996] veth1_vlan: left promiscuous mode [ 842.412889][ T6996] veth0_vlan: left promiscuous mode [ 842.414552][T16581] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 842.429120][T16581] em28xx 9-1:0.0: No AC97 audio processor [ 842.443230][T16581] usb 9-1: USB disconnect, device number 43 [ 842.452928][T16581] em28xx 9-1:0.0: Disconnecting em28xx [ 842.475520][T16581] em28xx 9-1:0.0: Freeing device [ 843.320210][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 843.368917][ T5831] Bluetooth: hci0: command tx timeout [ 843.451268][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 844.177779][ T5831] Bluetooth: hci2: command tx timeout [ 844.407829][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 844.582823][T21614] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.590352][T21614] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.609537][ T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.610126][T21614] bridge_slave_1: entered allmulticast mode [ 844.627759][ T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.639771][T21614] bridge_slave_1: entered promiscuous mode [ 844.656412][ T10] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 844.683608][T21631] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.690919][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 844.691418][T21631] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.705212][T21631] bridge_slave_0: entered allmulticast mode [ 844.706145][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 844.719648][T21631] bridge_slave_0: entered promiscuous mode [ 844.730711][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.739958][T21631] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.747815][T21631] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.752700][ T10] usb 5-1: config 0 descriptor?? [ 844.755375][T21631] bridge_slave_1: entered allmulticast mode [ 844.779138][T21631] bridge_slave_1: entered promiscuous mode [ 844.913142][T21614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.940717][T21614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.954969][T21631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.076292][T21631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.129036][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 845.144949][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 845.181591][ T10] usb 5-1: USB disconnect, device number 92 [ 845.232621][T21614] team0: Port device team_slave_0 added [ 845.361669][T21631] team0: Port device team_slave_0 added [ 845.370860][T21614] team0: Port device team_slave_1 added [ 845.383122][T21631] team0: Port device team_slave_1 added [ 845.447482][ T5831] Bluetooth: hci0: command tx timeout [ 845.487035][T21631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.496486][T21631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.524712][T21631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.538190][T21631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.545196][T21631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.571585][T21631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.591442][T21614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.603357][T21614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.630089][T21614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.670904][T21614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.678443][T21614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.705382][T21614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.774597][T21631] hsr_slave_0: entered promiscuous mode [ 845.782189][T21631] hsr_slave_1: entered promiscuous mode [ 845.789211][T21631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.797050][T21631] Cannot create hsr debugfs directory [ 845.821807][T21614] hsr_slave_0: entered promiscuous mode [ 845.828766][T21614] hsr_slave_1: entered promiscuous mode [ 845.835013][T21614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.842769][T21614] Cannot create hsr debugfs directory [ 846.017590][T16566] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 846.190582][T16566] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.204617][T16566] usb 5-1: config 0 has no interface number 0 [ 846.220772][T16566] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 846.245119][T16566] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 846.259438][ T5831] Bluetooth: hci2: command tx timeout [ 846.267366][T16566] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 846.307660][T16566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.369310][T16566] usb 5-1: config 0 descriptor?? [ 846.375222][T21769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.396306][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5207'. [ 846.404263][T16566] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 846.632044][T21614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.663408][T21631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.716011][T21614] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.785243][T21631] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.818698][ T5912] usb 5-1: USB disconnect, device number 93 [ 846.847895][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.855130][ T7011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.920904][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.928232][ T7011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.960010][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.967400][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.010702][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.017976][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.726449][T21631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.755129][T21614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.275223][T21835] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5220'. [ 848.341981][T21839] netlink: 'syz.4.5221': attribute type 39 has an invalid length. [ 848.675609][T21614] veth0_vlan: entered promiscuous mode [ 848.750932][T21614] veth1_vlan: entered promiscuous mode [ 848.855314][T21631] veth0_vlan: entered promiscuous mode [ 848.906000][T21631] veth1_vlan: entered promiscuous mode [ 848.979569][T21614] veth0_macvtap: entered promiscuous mode [ 849.010821][T21631] veth0_macvtap: entered promiscuous mode [ 849.041284][T21614] veth1_macvtap: entered promiscuous mode [ 849.054349][T21631] veth1_macvtap: entered promiscuous mode [ 849.105330][T21631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.139678][T21614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.188795][T21614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.219569][T21631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.503403][T21866] loop6: detected capacity change from 0 to 63 [ 849.532019][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.552599][T21866] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.564998][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.600696][T21866] Buffer I/O error on dev loop6, logical block 1, async page read [ 849.620622][ T7011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.640342][ T7011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.653558][T21866] Buffer I/O error on dev loop6, logical block 2, async page read [ 849.688826][T21866] Buffer I/O error on dev loop6, logical block 3, async page read [ 849.692293][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.725779][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.740289][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.753292][ T6005] Buffer I/O error on dev loop6, logical block 1, async page read [ 849.764440][ T6005] Buffer I/O error on dev loop6, logical block 2, async page read [ 849.786265][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.797810][ T6005] Buffer I/O error on dev loop6, logical block 3, async page read [ 849.814575][ T6005] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.822789][ T6005] Buffer I/O error on dev loop6, logical block 1, async page read [ 849.828044][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.473352][ T59] bridge_slave_1: left allmulticast mode [ 850.483122][ T59] bridge_slave_1: left promiscuous mode [ 850.507562][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.551934][ T59] bridge_slave_0: left allmulticast mode [ 850.572256][ T59] bridge_slave_0: left promiscuous mode [ 850.578878][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.217908][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 851.257062][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 851.285171][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 851.335718][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 851.375766][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 851.394770][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.416032][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.426334][ T59] bond0 (unregistering): Released all slaves [ 851.630719][T21888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.907380][T16566] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 851.989713][ T59] hsr_slave_0: left promiscuous mode [ 852.015275][ T59] hsr_slave_1: left promiscuous mode [ 852.028651][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.036146][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.059748][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.070662][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.078103][T16566] usb 5-1: Using ep0 maxpacket: 32 [ 852.096460][T16566] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 852.138326][T16566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.157839][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.177936][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.186014][T16566] usb 5-1: config 0 descriptor?? [ 852.186892][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.206353][ T59] veth1_macvtap: left promiscuous mode [ 852.212743][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.224854][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 852.234662][ T59] veth0_macvtap: left promiscuous mode [ 852.240926][ T59] veth1_vlan: left promiscuous mode [ 852.246621][ T59] veth0_vlan: left promiscuous mode [ 852.412948][T16566] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 852.423746][T16566] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 852.439846][T16566] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 852.447214][T16566] usb 5-1: media controller created [ 852.485202][T16566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.631623][T16566] az6027: usb out operation failed. (-71) [ 852.660672][T16566] az6027: usb out operation failed. (-71) [ 852.666676][T16566] stb0899_attach: Driver disabled by Kconfig [ 852.674306][T16566] az6027: no front-end attached [ 852.674306][T16566] [ 852.687139][T16566] az6027: usb out operation failed. (-71) [ 852.694212][T16566] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 852.708779][T16566] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87 [ 852.729999][T16566] dvb-usb: schedule remote query interval to 400 msecs. [ 852.737046][T16566] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 852.758107][T16566] usb 5-1: USB disconnect, device number 94 [ 852.806248][T16566] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 853.211040][ T59] team0 (unregistering): Port device team_slave_1 removed [ 853.307101][ T59] team0 (unregistering): Port device team_slave_0 removed [ 853.455340][ T5831] Bluetooth: hci0: command tx timeout [ 854.081053][T21905] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5246'. [ 854.322133][ T5831] Bluetooth: hci1: unexpected cc 0x0809 length: 68 > 4 [ 854.329257][ T5843] Bluetooth: hci2: command tx timeout [ 854.332300][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 854.338109][ T5831] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 854.373189][T21922] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 855.052187][T21880] chnl_net:caif_netlink_parms(): no params data found [ 855.245538][ T59] bridge_slave_1: left allmulticast mode [ 855.261349][ T59] bridge_slave_1: left promiscuous mode [ 855.282033][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.313793][ T59] bridge_slave_0: left allmulticast mode [ 855.337605][ T59] bridge_slave_0: left promiscuous mode [ 855.363986][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.527843][ T5831] Bluetooth: hci0: command tx timeout [ 856.047903][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.059908][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.070597][ T59] bond0 (unregistering): Released all slaves [ 856.093171][T21898] chnl_net:caif_netlink_parms(): no params data found [ 856.113072][T21960] gtp0: entered promiscuous mode [ 856.286415][T21964] fuse: root generation should be zero [ 856.410967][ T5831] Bluetooth: hci2: command tx timeout [ 856.666645][T21880] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.674606][T21880] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.682154][T21880] bridge_slave_0: entered allmulticast mode [ 856.690820][T21880] bridge_slave_0: entered promiscuous mode [ 856.700481][T21880] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.710447][T21880] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.727696][T21880] bridge_slave_1: entered allmulticast mode [ 856.746208][T21880] bridge_slave_1: entered promiscuous mode [ 856.928994][T21880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.944755][ T59] hsr_slave_0: left promiscuous mode [ 856.951184][ T59] hsr_slave_1: left promiscuous mode [ 856.957222][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.977391][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.985873][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.999353][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.036602][ T59] veth1_macvtap: left promiscuous mode [ 857.044732][ T59] veth0_macvtap: left promiscuous mode [ 857.051704][ T59] veth1_vlan: left promiscuous mode [ 857.057905][ T59] veth0_vlan: left promiscuous mode [ 857.607509][ T5831] Bluetooth: hci0: command tx timeout [ 857.817547][T16566] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 857.862789][ T59] team0 (unregistering): Port device team_slave_1 removed [ 857.924735][ T59] team0 (unregistering): Port device team_slave_0 removed [ 857.982958][T16566] usb 9-1: Using ep0 maxpacket: 8 [ 857.992506][T16566] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.018122][T16566] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.028362][T16566] usb 9-1: config 0 interface 0 has no altsetting 0 [ 858.035041][T16566] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 858.059095][T16566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.089258][T16566] usb 9-1: config 0 descriptor?? [ 858.490354][ T5831] Bluetooth: hci2: command tx timeout [ 858.523720][T16566] steelseries 0003:1038:1410.0067: unknown main item tag 0x7 [ 858.541964][T16566] steelseries 0003:1038:1410.0067: item fetching failed at offset 3/5 [ 858.551385][T16566] steelseries 0003:1038:1410.0067: parse failed [ 858.557897][T16566] steelseries 0003:1038:1410.0067: probe with driver steelseries failed with error -22 [ 858.759632][ T1217] usb 9-1: USB disconnect, device number 44 [ 858.904093][T21898] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.927570][T21898] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.945806][T21898] bridge_slave_0: entered allmulticast mode [ 858.958781][T21898] bridge_slave_0: entered promiscuous mode [ 858.969809][T21880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.015604][T21898] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.046915][T21898] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.060586][T21898] bridge_slave_1: entered allmulticast mode [ 859.069511][T21898] bridge_slave_1: entered promiscuous mode [ 859.200118][T21880] team0: Port device team_slave_0 added [ 859.259231][T21898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.276769][T21880] team0: Port device team_slave_1 added [ 859.301973][T21898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.534230][T21880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.563482][T21880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.630964][T21880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.664140][T22024] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 859.687762][ T5831] Bluetooth: hci0: command tx timeout [ 859.995060][T21898] team0: Port device team_slave_0 added [ 860.016370][T21880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.043056][T21880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.074231][T21880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.159150][T21898] team0: Port device team_slave_1 added [ 860.463345][T21898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.487496][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.531971][T21898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.568285][ T5831] Bluetooth: hci2: command tx timeout [ 860.605872][T21880] hsr_slave_0: entered promiscuous mode [ 860.613875][T21880] hsr_slave_1: entered promiscuous mode [ 860.620489][T21880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.628731][T21880] Cannot create hsr debugfs directory [ 860.635401][T21898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.643438][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.670123][T21898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.850403][T21898] hsr_slave_0: entered promiscuous mode [ 860.858462][T21898] hsr_slave_1: entered promiscuous mode [ 860.865154][T21898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.874196][T21898] Cannot create hsr debugfs directory [ 861.072009][ T5912] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 861.267491][ T5912] usb 10-1: Using ep0 maxpacket: 32 [ 861.329574][ T5912] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 861.351440][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.363270][ T5912] usb 10-1: config 0 descriptor?? [ 861.372943][ T5912] gspca_main: sunplus-2.14.0 probing 041e:400b [ 861.772847][T21880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.869649][T21880] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.909300][T21898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.920405][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.927666][ T7011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.973560][T21898] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.987109][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.994413][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.035611][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.042918][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.103133][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.110402][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.809162][ T5912] gspca_sunplus: reg_w_riv err -71 [ 862.822822][ T5912] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 862.900999][ T5912] usb 10-1: USB disconnect, device number 42 [ 863.083809][T21880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.105663][T21898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.387631][ T1217] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 863.545844][T22114] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 863.572590][ T1217] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 863.595646][ T1217] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 863.626678][ T1217] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 863.649395][ T1217] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 863.682020][ T1217] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 863.724516][ T1217] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 863.736214][ T1217] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 863.764021][ T1217] usb 9-1: Product: syz [ 863.776943][ T1217] usb 9-1: Manufacturer: syz [ 863.812051][ T1217] cdc_wdm 9-1:1.0: skipping garbage [ 863.825488][ T1217] cdc_wdm 9-1:1.0: skipping garbage [ 863.833550][T21880] veth0_vlan: entered promiscuous mode [ 863.847946][ T1217] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 863.858213][T21898] veth0_vlan: entered promiscuous mode [ 863.867136][ T1217] cdc_wdm 9-1:1.0: Unknown control protocol [ 863.974276][T21898] veth1_vlan: entered promiscuous mode [ 864.057757][T21880] veth1_vlan: entered promiscuous mode [ 864.095090][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.102094][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.111845][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.118538][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.124891][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.131552][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.137917][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.144588][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.150946][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.157618][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.164161][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.170826][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.178772][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.185533][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.192128][ T1217] usb 9-1: USB disconnect, device number 45 [ 864.198261][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 864.198291][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 864.198313][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 864.290212][T21898] veth0_macvtap: entered promiscuous mode [ 864.302557][T21898] veth1_macvtap: entered promiscuous mode [ 864.341543][T21880] veth0_macvtap: entered promiscuous mode [ 864.356239][T21880] veth1_macvtap: entered promiscuous mode [ 864.374858][T21898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.400543][T21898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.442440][T21880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.472411][T21880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.633081][ T30] audit: type=1326 audit(1751484246.838:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22118 comm="syz.4.5311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f589af8e929 code=0x0 [ 864.664914][ T7011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.678963][ T7011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.722369][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.732020][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.816546][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.855320][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.862771][ T7011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.862801][ T7011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.471421][ T36] bridge_slave_1: left allmulticast mode [ 865.477158][ T36] bridge_slave_1: left promiscuous mode [ 865.502045][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.528878][ T36] bridge_slave_0: left allmulticast mode [ 865.534615][ T36] bridge_slave_0: left promiscuous mode [ 865.557666][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.581324][ T36] bridge_slave_1: left allmulticast mode [ 865.587050][ T36] bridge_slave_1: left promiscuous mode [ 865.608280][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.655036][ T36] bridge_slave_0: left allmulticast mode [ 865.667827][ T36] bridge_slave_0: left promiscuous mode [ 865.673909][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.252424][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 866.267009][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.292500][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.318863][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.352545][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 866.481510][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.493918][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.504331][ T36] bond0 (unregistering): Released all slaves [ 866.968000][ T5912] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 867.096268][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.118244][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.135085][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.155923][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 867.173798][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.194011][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.205246][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.205504][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.215256][ T5912] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 867.215288][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.226248][ T5912] usb 5-1: config 0 descriptor?? [ 867.305479][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.322850][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.334617][ T36] bond0 (unregistering): Released all slaves [ 867.734796][ T5912] usbhid 5-1:0.0: can't add hid device: -71 [ 867.744428][ T5912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 867.787754][ T5912] usb 5-1: USB disconnect, device number 95 [ 868.497468][ T5835] Bluetooth: hci0: command tx timeout [ 868.560939][ T36] hsr_slave_0: left promiscuous mode [ 868.573447][ T36] hsr_slave_1: left promiscuous mode [ 868.573840][T22193] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5333'. [ 868.589445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.608002][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.631635][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.670421][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.693972][ T36] hsr_slave_0: left promiscuous mode [ 868.703681][ T36] hsr_slave_1: left promiscuous mode [ 868.729131][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.749189][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.764315][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.780539][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.874280][ T36] veth1_macvtap: left promiscuous mode [ 868.890680][ T36] veth0_macvtap: left promiscuous mode [ 868.896713][ T36] veth1_vlan: left promiscuous mode [ 868.902791][ T36] veth0_vlan: left promiscuous mode [ 868.919394][ T36] veth1_macvtap: left promiscuous mode [ 868.925131][ T36] veth0_macvtap: left promiscuous mode [ 868.934427][ T36] veth1_vlan: left promiscuous mode [ 868.940179][ T36] veth0_vlan: left promiscuous mode [ 869.238890][T22217] netlink: 'syz.4.5339': attribute type 4 has an invalid length. [ 869.295887][T22219] netlink: 'syz.4.5339': attribute type 4 has an invalid length. [ 869.375377][ T5835] Bluetooth: hci2: command tx timeout [ 870.175650][ T36] team0 (unregistering): Port device team_slave_1 removed [ 870.245881][ T36] team0 (unregistering): Port device team_slave_0 removed [ 870.334874][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.341528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.568310][ T5835] Bluetooth: hci0: command tx timeout [ 871.449261][ T5835] Bluetooth: hci2: command tx timeout [ 871.674634][ T36] team0 (unregistering): Port device team_slave_1 removed [ 871.733629][ T36] team0 (unregistering): Port device team_slave_0 removed [ 872.445011][T22160] chnl_net:caif_netlink_parms(): no params data found [ 872.647557][ T5835] Bluetooth: hci0: command tx timeout [ 872.740475][T22143] chnl_net:caif_netlink_parms(): no params data found [ 872.986188][ T24] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 873.122116][T22160] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.155625][T22160] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.167529][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 873.167642][T22160] bridge_slave_0: entered allmulticast mode [ 873.179451][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.192860][T22160] bridge_slave_0: entered promiscuous mode [ 873.214786][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.219759][T22160] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.232689][T22160] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.243471][T22160] bridge_slave_1: entered allmulticast mode [ 873.251818][T22160] bridge_slave_1: entered promiscuous mode [ 873.262551][ T24] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 873.294891][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.326683][ T24] usb 10-1: config 0 descriptor?? [ 873.405551][T22143] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.418483][T22143] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.426187][T22143] bridge_slave_0: entered allmulticast mode [ 873.435397][T22143] bridge_slave_0: entered promiscuous mode [ 873.449464][T22247] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5346'. [ 873.469116][T22247] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5346'. [ 873.478891][T22247] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5346'. [ 873.489636][T22247] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5346'. [ 873.527390][ T5835] Bluetooth: hci2: command tx timeout [ 873.549149][T22143] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.560781][T22143] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.574437][T22143] bridge_slave_1: entered allmulticast mode [ 873.585346][T22143] bridge_slave_1: entered promiscuous mode [ 873.644157][T22160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.676782][T22143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.700292][T22143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.712690][T22160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.778034][ T24] prodikeys 0003:041E:2801.0068: unknown main item tag 0x0 [ 873.798484][ T24] prodikeys 0003:041E:2801.0068: unknown main item tag 0x0 [ 873.818238][ T24] prodikeys 0003:041E:2801.0068: unknown main item tag 0x0 [ 873.826036][ T24] prodikeys 0003:041E:2801.0068: unknown main item tag 0x0 [ 873.834088][ T24] prodikeys 0003:041E:2801.0068: unknown main item tag 0x0 [ 873.867221][ T24] prodikeys 0003:041E:2801.0068: hidraw0: USB HID v0.04 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input0 [ 873.927065][T22143] team0: Port device team_slave_0 added [ 873.951431][T22143] team0: Port device team_slave_1 added [ 874.007865][T22160] team0: Port device team_slave_0 added [ 874.025546][ T5938] usb 10-1: USB disconnect, device number 43 [ 874.066920][T22160] team0: Port device team_slave_1 added [ 874.185897][T22143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.194020][T22143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.225954][T22143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.238181][T22160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.245316][T22160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.274298][T22160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.286674][T22143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.294278][T22143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.323256][T22143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.335598][T22160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.343175][T22160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.369591][T22160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.431595][T22143] hsr_slave_0: entered promiscuous mode [ 874.438236][T22143] hsr_slave_1: entered promiscuous mode [ 874.444437][T22143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.452466][T22143] Cannot create hsr debugfs directory [ 874.507849][T22160] hsr_slave_0: entered promiscuous mode [ 874.514328][T22160] hsr_slave_1: entered promiscuous mode [ 874.523663][T22160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.531533][T22160] Cannot create hsr debugfs directory [ 874.727929][ T5835] Bluetooth: hci0: command tx timeout [ 874.941424][T22160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.952707][T22143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.982111][T22160] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.993774][T22143] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.011975][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.019206][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.028891][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.036145][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.059880][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.067219][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.082942][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.090145][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.179894][T22143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.455695][T22143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.485780][T22160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.613120][ T5835] Bluetooth: hci2: command tx timeout [ 875.687989][T22249] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 875.697973][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 875.854576][T22143] veth0_vlan: entered promiscuous mode [ 875.873344][T22143] veth1_vlan: entered promiscuous mode [ 875.920683][T22160] veth0_vlan: entered promiscuous mode [ 875.934788][T22143] veth0_macvtap: entered promiscuous mode [ 875.949953][T22143] veth1_macvtap: entered promiscuous mode [ 875.961183][T22160] veth1_vlan: entered promiscuous mode [ 875.988566][T22143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.011369][T22143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.033870][T22160] veth0_macvtap: entered promiscuous mode [ 876.056027][T22160] veth1_macvtap: entered promiscuous mode [ 876.091569][T22160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.133538][T22160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.364701][T22249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 876.375203][T22249] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 876.382963][T22249] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 876.390857][T22249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 876.398793][T22249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 876.405969][T22249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 876.418711][T22249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 876.424803][T22249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 876.433418][T22249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 876.596997][ T7011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.632919][ T7011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.733169][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.746422][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.858776][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.871070][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.985562][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.009751][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.238057][ T59] bridge_slave_1: left allmulticast mode [ 877.243792][ T59] bridge_slave_1: left promiscuous mode [ 877.265984][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.290799][ T59] bridge_slave_0: left allmulticast mode [ 877.296578][ T59] bridge_slave_0: left promiscuous mode [ 877.307518][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.780864][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 877.976740][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.988811][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.001405][ T59] bond0 (unregistering): Released all slaves [ 878.309384][ T59] hsr_slave_0: left promiscuous mode [ 878.315704][ T59] hsr_slave_1: left promiscuous mode [ 878.322378][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.333360][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.369287][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.383638][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.411940][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 878.429775][ T7011] Bluetooth: hci0: Frame reassembly failed (-84) [ 878.444068][ T5831] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 878.452984][ T59] veth1_macvtap: left promiscuous mode [ 878.477212][ T59] veth0_macvtap: left promiscuous mode [ 878.483426][ T59] veth1_vlan: left promiscuous mode [ 878.497508][ T59] veth0_vlan: left promiscuous mode [ 878.830909][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.846220][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.862775][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.873173][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.892913][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 879.385175][ T59] team0 (unregistering): Port device team_slave_1 removed [ 879.570648][ T59] team0 (unregistering): Port device team_slave_0 removed [ 879.740680][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.752726][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.762605][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.774779][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.785385][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 880.497000][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 880.498268][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 880.503643][ T5843] Bluetooth: hci0: command 0x1003 tx timeout [ 880.977691][ T5835] Bluetooth: hci2: command tx timeout [ 881.402701][T22326] chnl_net:caif_netlink_parms(): no params data found [ 881.487383][ T59] bridge_slave_1: left allmulticast mode [ 881.493689][ T59] bridge_slave_1: left promiscuous mode [ 881.504356][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.515282][ T59] bridge_slave_0: left allmulticast mode [ 881.525488][ T59] bridge_slave_0: left promiscuous mode [ 881.534475][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.849184][ T5835] Bluetooth: hci5: command tx timeout [ 881.988094][T22400] evm: overlay not supported [ 882.137749][ T1217] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 882.299603][ T1217] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 882.309292][ T1217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.335333][ T1217] usb 9-1: config 0 descriptor?? [ 882.362839][ T1217] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 882.459425][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.472803][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.484429][ T59] bond0 (unregistering): Released all slaves [ 882.560394][T22342] chnl_net:caif_netlink_parms(): no params data found [ 882.643951][T22416] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5396'. [ 882.772016][ T1217] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 882.834082][T22326] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.842436][T22326] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.858195][T22326] bridge_slave_0: entered allmulticast mode [ 882.868168][T22326] bridge_slave_0: entered promiscuous mode [ 882.962257][T22326] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.981671][T22326] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.997802][T22326] bridge_slave_1: entered allmulticast mode [ 883.015766][T22326] bridge_slave_1: entered promiscuous mode [ 883.047840][ T5835] Bluetooth: hci2: command tx timeout [ 883.184128][ T1217] gspca_cpia1: usb_control_msg 02, error -32 [ 883.195336][ T1217] gspca_cpia1: usb_control_msg 02, error -71 [ 883.201755][ T1217] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 883.212079][ T1217] usb 9-1: USB disconnect, device number 46 [ 883.237858][T22326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.264262][T22326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.354723][ T59] hsr_slave_0: left promiscuous mode [ 883.361016][ T59] hsr_slave_1: left promiscuous mode [ 883.366913][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.374733][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.388225][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.395818][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.436799][ T59] veth1_macvtap: left promiscuous mode [ 883.445312][ T59] veth0_macvtap: left promiscuous mode [ 883.453308][ T59] veth1_vlan: left promiscuous mode [ 883.461354][ T59] veth0_vlan: left promiscuous mode [ 883.927771][ T5835] Bluetooth: hci5: command tx timeout [ 884.360618][ T59] team0 (unregistering): Port device team_slave_1 removed [ 884.423742][ T59] team0 (unregistering): Port device team_slave_0 removed [ 885.077143][T22342] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.085498][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.096734][T22342] bridge_slave_0: entered allmulticast mode [ 885.104895][T22342] bridge_slave_0: entered promiscuous mode [ 885.127605][ T5835] Bluetooth: hci2: command tx timeout [ 885.151595][T22326] team0: Port device team_slave_0 added [ 885.164324][T22326] team0: Port device team_slave_1 added [ 885.172282][T22342] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.200194][T22342] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.224147][T22342] bridge_slave_1: entered allmulticast mode [ 885.239371][T22342] bridge_slave_1: entered promiscuous mode [ 885.484137][T22326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.506555][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.566259][T22326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.611259][T22342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.639458][T22326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.646481][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.733277][T22326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.813396][T22342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.979090][T22342] team0: Port device team_slave_0 added [ 886.008421][ T5835] Bluetooth: hci5: command tx timeout [ 886.140725][T22342] team0: Port device team_slave_1 added [ 886.305980][T22326] hsr_slave_0: entered promiscuous mode [ 886.328966][T22326] hsr_slave_1: entered promiscuous mode [ 886.342428][T22326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.367995][T22326] Cannot create hsr debugfs directory [ 886.382582][T22342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.400980][T22342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.436852][T22342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.505898][T22342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.517596][T22342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.576542][T22342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.765492][T22342] hsr_slave_0: entered promiscuous mode [ 886.799361][T22342] hsr_slave_1: entered promiscuous mode [ 886.805816][T22342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.823342][T22342] Cannot create hsr debugfs directory [ 887.217580][ T5835] Bluetooth: hci2: command tx timeout [ 887.592777][T22326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.659127][T22326] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.685075][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.692294][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.750267][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.757544][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.832148][T22342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.896907][T22342] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.931703][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.938969][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.957411][ T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 887.990311][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.997584][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.091363][ T5835] Bluetooth: hci5: command tx timeout [ 888.129859][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.150628][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.199310][ T24] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 888.237373][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 888.245452][ T24] usb 9-1: SerialNumber: syz [ 888.270418][T22326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.319587][T22534] KVM: debugfs: duplicate directory 22534-4 [ 888.482244][ T24] usb 9-1: 0:2 : does not exist [ 888.572089][ T24] usb 9-1: USB disconnect, device number 47 [ 888.641112][T22232] udevd[22232]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.650185][T22342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.659545][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5431'. [ 888.730224][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5431'. [ 888.896424][T22550] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5433'. [ 889.080830][T22326] veth0_vlan: entered promiscuous mode [ 889.133796][T22326] veth1_vlan: entered promiscuous mode [ 889.256625][T22326] veth0_macvtap: entered promiscuous mode [ 889.282069][T22326] veth1_macvtap: entered promiscuous mode [ 889.338372][T22326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.355820][T22326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.399654][T22342] veth0_vlan: entered promiscuous mode [ 889.438359][T22342] veth1_vlan: entered promiscuous mode [ 889.618106][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.643600][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.695513][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.713803][T22342] veth0_macvtap: entered promiscuous mode [ 889.727639][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.761106][T22342] veth1_macvtap: entered promiscuous mode [ 889.892419][T22342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.914888][T22342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.147014][ T1005] bridge_slave_1: left allmulticast mode [ 890.159218][ T1005] bridge_slave_1: left promiscuous mode [ 890.176309][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.200504][ T1005] bridge_slave_0: left allmulticast mode [ 890.209447][ T1005] bridge_slave_0: left promiscuous mode [ 890.223342][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.829444][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.840890][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.851694][ T1005] bond0 (unregistering): Released all slaves [ 890.900901][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.927706][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.975350][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.984340][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.212158][ T1005] hsr_slave_0: left promiscuous mode [ 891.225343][ T1005] hsr_slave_1: left promiscuous mode [ 891.232177][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.242973][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.252362][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.263111][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.301437][ T1005] veth1_macvtap: left promiscuous mode [ 891.307081][ T1005] veth0_macvtap: left promiscuous mode [ 891.313703][ T1005] veth1_vlan: left promiscuous mode [ 891.322627][ T1005] veth0_vlan: left promiscuous mode [ 892.096414][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.109654][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.120102][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 892.147471][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 892.155300][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.453714][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 892.516394][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 893.259366][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 893.280733][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 893.291590][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 893.300302][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.309163][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 894.137646][T16566] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 894.251694][ T5843] Bluetooth: hci0: command tx timeout [ 894.294086][T16566] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 894.330068][T16566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.352557][T16566] usb 5-1: Product: syz [ 894.356888][T16566] usb 5-1: Manufacturer: syz [ 894.378940][T16566] usb 5-1: SerialNumber: syz [ 894.402325][T16566] usb 5-1: config 0 descriptor?? [ 894.413255][T16566] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 895.366572][T22616] chnl_net:caif_netlink_parms(): no params data found [ 895.448485][ T5843] Bluetooth: hci2: command tx timeout [ 895.488639][ T1005] bridge_slave_1: left allmulticast mode [ 895.494429][ T1005] bridge_slave_1: left promiscuous mode [ 895.519178][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.536287][ T1005] bridge_slave_0: left allmulticast mode [ 895.550162][ T1005] bridge_slave_0: left promiscuous mode [ 895.559732][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.919539][ T1217] usb 5-1: USB disconnect, device number 96 [ 896.252349][T22668] loop6: detected capacity change from 0 to 7 [ 896.282116][T22668] Dev loop6: unable to read RDB block 7 [ 896.303018][T22668] loop6: unable to read partition table [ 896.309485][T22668] loop6: partition table beyond EOD, truncated [ 896.333690][T22668] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 896.335894][ T5843] Bluetooth: hci0: command tx timeout [ 896.516962][T22672] loop2: detected capacity change from 0 to 7 [ 896.550044][T22672] Dev loop2: unable to read RDB block 7 [ 896.555816][T22672] loop2: AHDI p1 p2 p3 [ 896.560626][T22672] loop2: partition table partially beyond EOD, truncated [ 896.574138][T22672] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 896.591046][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.592354][T22672] loop2: p2 size 150995456 extends beyond EOD, truncated [ 896.615173][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.635193][ T1005] bond0 (unregistering): Released all slaves [ 896.703072][T22664] udevd[22664]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 896.725188][T22232] udevd[22232]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 896.892614][T22594] chnl_net:caif_netlink_parms(): no params data found [ 897.252193][T22616] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.262577][T22616] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.278036][T22616] bridge_slave_0: entered allmulticast mode [ 897.285399][T22616] bridge_slave_0: entered promiscuous mode [ 897.293411][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5478'. [ 897.309528][T22686] batadv_slave_0: entered promiscuous mode [ 897.405724][T22690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.532517][ T5843] Bluetooth: hci2: command tx timeout [ 897.639917][T22690] batadv_slave_0 (unregistering): left promiscuous mode [ 897.657769][T22690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.738433][T22616] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.745906][T22616] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.753650][T22616] bridge_slave_1: entered allmulticast mode [ 897.770702][T22616] bridge_slave_1: entered promiscuous mode [ 898.047681][ T1005] hsr_slave_0: left promiscuous mode [ 898.077445][ T1005] hsr_slave_1: left promiscuous mode [ 898.083679][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.117441][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.154985][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.187363][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.287520][ T1005] veth1_macvtap: left promiscuous mode [ 898.293172][ T1005] veth0_macvtap: left promiscuous mode [ 898.302755][ T1005] veth1_vlan: left promiscuous mode [ 898.316104][ T1005] veth0_vlan: left promiscuous mode [ 898.408842][ T5843] Bluetooth: hci0: command tx timeout [ 899.607452][ T5843] Bluetooth: hci2: command tx timeout [ 899.972665][T22727] kvm: MWAIT instruction emulated as NOP! [ 900.497823][ T5843] Bluetooth: hci0: command tx timeout [ 900.599607][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 900.671992][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 901.473382][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.481452][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.498146][T22594] bridge_slave_0: entered allmulticast mode [ 901.505748][T22594] bridge_slave_0: entered promiscuous mode [ 901.550191][T22616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.572234][T22616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.582191][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.590100][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.597844][T22594] bridge_slave_1: entered allmulticast mode [ 901.618305][T22594] bridge_slave_1: entered promiscuous mode [ 901.697735][ T5843] Bluetooth: hci2: command tx timeout [ 901.790155][T22594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.842412][T22616] team0: Port device team_slave_0 added [ 901.854332][T22594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.894800][T22616] team0: Port device team_slave_1 added [ 901.981536][T22616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.988917][T22616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.015733][T22616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.159726][T22616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.169666][T22616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.209832][T22616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.232278][T22594] team0: Port device team_slave_0 added [ 902.254934][T22594] team0: Port device team_slave_1 added [ 902.340123][T22594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.349041][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.376609][T22594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.387671][ T24] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 902.402086][T22616] hsr_slave_0: entered promiscuous mode [ 902.409180][T22616] hsr_slave_1: entered promiscuous mode [ 902.415363][T22616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.423074][T22616] Cannot create hsr debugfs directory [ 902.431705][T22594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.440856][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.467882][T22594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.559096][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 902.574805][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 902.592313][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 902.601891][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.610161][ T24] usb 5-1: Product: syz [ 902.614586][ T24] usb 5-1: Manufacturer: syz [ 902.630630][ T24] usb 5-1: SerialNumber: syz [ 902.632261][T22594] hsr_slave_0: entered promiscuous mode [ 902.652081][T22594] hsr_slave_1: entered promiscuous mode [ 902.662146][T22594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.669941][T22594] Cannot create hsr debugfs directory [ 902.862772][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input88 [ 902.889795][ T5177] bcm5974 5-1:1.0: could not read from device [ 902.900767][ T5177] bcm5974 5-1:1.0: could not read from device [ 902.920670][ T5177] bcm5974 5-1:1.0: could not read from device [ 902.938152][ T24] usb 5-1: USB disconnect, device number 97 [ 903.484871][T22616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.560630][T22616] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.606553][T22594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.642091][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.649373][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.673960][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.683105][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.692248][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.701420][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.710571][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.719742][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.728945][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.738128][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.747334][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.756437][T22789] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 903.779672][T22594] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.792828][T22790] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 903.948103][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.955314][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.022069][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.029377][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.045730][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.053040][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.613922][T22616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.627784][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 904.655333][T22594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.797763][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 904.833440][ T24] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 904.849119][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.857202][ T24] usb 5-1: Product: syz [ 904.885098][ T24] usb 5-1: Manufacturer: syz [ 904.901322][ T24] usb 5-1: SerialNumber: syz [ 904.923365][ T24] usb 5-1: config 0 descriptor?? [ 904.941199][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 905.170133][ T24] gspca_ov534_9: reg_w failed -71 [ 905.388458][T22616] veth0_vlan: entered promiscuous mode [ 905.443315][T22594] veth0_vlan: entered promiscuous mode [ 905.467874][T22616] veth1_vlan: entered promiscuous mode [ 905.528858][T22594] veth1_vlan: entered promiscuous mode [ 905.577975][ T24] gspca_ov534_9: Unknown sensor 0000 [ 905.578079][ T24] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 905.623423][T22616] veth0_macvtap: entered promiscuous mode [ 905.634269][ T24] usb 5-1: USB disconnect, device number 98 [ 905.650610][T22594] veth0_macvtap: entered promiscuous mode [ 905.672272][T22616] veth1_macvtap: entered promiscuous mode [ 905.709493][T22616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.719314][T22594] veth1_macvtap: entered promiscuous mode [ 905.746996][T22616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.791699][T22594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.848442][T22594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.938181][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 905.984721][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.025739][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.072091][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.083218][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.127817][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 906.156085][ T24] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 906.180222][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.203120][ T24] usb 5-1: Product: syz [ 906.216138][ T24] usb 5-1: Manufacturer: syz [ 906.238826][ T24] usb 5-1: SerialNumber: syz [ 906.246925][ T24] usb 5-1: config 0 descriptor?? [ 906.262620][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 906.334373][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.347344][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.454695][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.485105][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.673141][ T7014] bridge_slave_1: left allmulticast mode [ 906.706476][ T7014] bridge_slave_1: left promiscuous mode [ 906.715239][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.752167][ T7014] bridge_slave_0: left allmulticast mode [ 906.758385][ T7014] bridge_slave_0: left promiscuous mode [ 906.764844][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.324732][ T24] gspca_ov534_9: reg_w failed -71 [ 907.417558][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.431678][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.444050][ T7014] bond0 (unregistering): Released all slaves [ 907.617386][ T24] gspca_ov534_9: Unknown sensor 0000 [ 907.617505][ T24] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 907.637849][ T24] usb 5-1: USB disconnect, device number 99 [ 907.901460][ T7014] hsr_slave_0: left promiscuous mode [ 907.941882][ T7014] hsr_slave_1: left promiscuous mode [ 907.948912][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.956417][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.965170][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.976961][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.017919][ T7014] veth1_macvtap: left promiscuous mode [ 908.023583][ T7014] veth0_macvtap: left promiscuous mode [ 908.030765][ T7014] veth1_vlan: left promiscuous mode [ 908.036163][ T7014] veth0_vlan: left promiscuous mode [ 908.281623][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 908.299260][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 908.310885][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 908.319235][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 908.340822][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 908.770853][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 908.833545][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 909.288644][T22862] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5527'. [ 909.301442][T22862] netlink: 'syz.9.5527': attribute type 7 has an invalid length. [ 909.320156][T22862] netlink: 'syz.9.5527': attribute type 8 has an invalid length. [ 909.340479][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5527'. [ 909.372932][ T1217] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 909.541895][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.549620][ T1217] usb 9-1: config 0 has no interfaces? [ 909.549665][ T1217] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 909.549690][ T1217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.574578][ T1217] usb 9-1: config 0 descriptor?? [ 909.610189][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.624151][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.635916][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.660508][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.835295][ T1217] usb 9-1: USB disconnect, device number 48 [ 910.414387][ T5835] Bluetooth: hci0: command tx timeout [ 910.805968][ T7014] bridge_slave_1: left allmulticast mode [ 910.815036][ T7014] bridge_slave_1: left promiscuous mode [ 910.834193][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.863233][ T7014] bridge_slave_0: left allmulticast mode [ 910.870419][ T7014] bridge_slave_0: left promiscuous mode [ 910.876313][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.189831][ T5912] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 911.357518][ T5912] usb 10-1: Using ep0 maxpacket: 8 [ 911.387587][ T5912] usb 10-1: config 0 has no interfaces? [ 911.418182][T22901] loop2: detected capacity change from 0 to 7 [ 911.426661][ T5912] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 911.446940][ T5912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.450441][T22901] loop2: [ 911.459150][T22901] loop2: partition table partially beyond EOD, truncated [ 911.466536][ T5912] usb 10-1: Product: syz [ 911.476736][ T5912] usb 10-1: Manufacturer: syz [ 911.484274][ T5912] usb 10-1: SerialNumber: syz [ 911.500564][ T5912] usb 10-1: config 0 descriptor?? [ 911.773036][ T5835] Bluetooth: hci2: command tx timeout [ 911.998336][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.013131][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.023681][ T7014] bond0 (unregistering): Released all slaves [ 912.061972][T22867] chnl_net:caif_netlink_parms(): no params data found [ 912.373027][T22849] chnl_net:caif_netlink_parms(): no params data found [ 912.460746][T22867] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.471287][T22867] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.490872][ T5835] Bluetooth: hci0: command tx timeout [ 912.504007][T22867] bridge_slave_0: entered allmulticast mode [ 912.515928][T22867] bridge_slave_0: entered promiscuous mode [ 912.594836][ T7014] hsr_slave_0: left promiscuous mode [ 912.601762][ T7014] hsr_slave_1: left promiscuous mode [ 912.610152][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.615935][T22924] xt_bpf: check failed: parse error [ 912.618531][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.632186][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.643925][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.701668][ T7014] veth1_macvtap: left promiscuous mode [ 912.707689][ T7014] veth0_macvtap: left promiscuous mode [ 912.713503][ T7014] veth1_vlan: left promiscuous mode [ 912.719717][ T5912] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 912.733324][ T7014] veth0_vlan: left promiscuous mode [ 912.880670][ T5912] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 912.900879][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.935102][ T5912] usb 5-1: config 0 descriptor?? [ 913.745295][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 913.815191][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 913.852901][ T5835] Bluetooth: hci2: command tx timeout [ 913.977326][ T5912] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 914.005079][ T5912] usb 5-1: USB disconnect, device number 100 [ 914.016004][T16566] usb 10-1: USB disconnect, device number 44 [ 914.106070][T22934] [ 914.108485][T22934] ===================================================== [ 914.115456][T22934] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 914.122966][T22934] 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 Not tainted [ 914.130099][T22934] ----------------------------------------------------- [ 914.137054][T22934] syz.9.5554/22934 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 914.144811][T22934] ffff8880280bf750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 914.153577][T22934] [ 914.153577][T22934] and this task is already holding: [ 914.161058][T22934] ffff88807ca50028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 914.170883][T22934] which would create a new lock dependency: [ 914.176809][T22934] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 914.184966][T22934] [ 914.184966][T22934] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 914.194444][T22934] (&client->buffer_lock){..-.}-{3:3} [ 914.194479][T22934] [ 914.194479][T22934] ... which became SOFTIRQ-irq-safe at: [ 914.207689][T22934] lock_acquire+0x120/0x360 [ 914.212322][T22934] _raw_spin_lock+0x2e/0x40 [ 914.216934][T22934] evdev_pass_values+0xb9/0xbd0 [ 914.221973][T22934] evdev_events+0x1e6/0x340 [ 914.226582][T22934] input_pass_values+0x285/0x890 [ 914.231620][T22934] input_event_dispose+0x3e5/0x6b0 [ 914.236928][T22934] input_event+0x8c/0xc0 [ 914.241503][T22934] hidinput_hid_event+0x132c/0x1c90 [ 914.246834][T22934] hid_process_event+0x4be/0x620 [ 914.251931][T22934] hid_report_raw_event+0xe91/0x16d0 [ 914.257420][T22934] hid_input_report+0x43e/0x520 [ 914.262392][T22934] hid_irq_in+0x47e/0x6d0 [ 914.266844][T22934] __usb_hcd_giveback_urb+0x41a/0x690 [ 914.272348][T22934] dummy_timer+0x862/0x4550 [ 914.276977][T22934] __hrtimer_run_queues+0x52c/0xc60 [ 914.282307][T22934] hrtimer_run_softirq+0x187/0x2b0 [ 914.287538][T22934] handle_softirqs+0x283/0x870 [ 914.292413][T22934] __irq_exit_rcu+0xca/0x1f0 [ 914.297133][T22934] irq_exit_rcu+0x9/0x30 [ 914.301497][T22934] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 914.307355][T22934] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 914.313462][T22934] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 914.319304][T22934] sync_rcu_exp_done_unlocked+0xdb/0x150 [ 914.325074][T22934] rcu_exp_sel_wait_wake+0x686/0xd40 [ 914.330480][T22934] kthread_worker_fn+0x504/0xb60 [ 914.335529][T22934] kthread+0x711/0x8a0 [ 914.339701][T22934] ret_from_fork+0x3fc/0x770 [ 914.344401][T22934] ret_from_fork_asm+0x1a/0x30 [ 914.349273][T22934] [ 914.349273][T22934] to a SOFTIRQ-irq-unsafe lock: [ 914.356299][T22934] (tasklist_lock){.+.+}-{3:3} [ 914.356331][T22934] [ 914.356331][T22934] ... which became SOFTIRQ-irq-unsafe at: [ 914.368979][T22934] ... [ 914.368989][T22934] lock_acquire+0x120/0x360 [ 914.376192][T22934] _raw_read_lock+0x36/0x50 [ 914.380807][T22934] __do_wait+0xde/0x740 [ 914.385153][T22934] do_wait+0x1f8/0x520 [ 914.389322][T22934] kernel_wait+0xab/0x170 [ 914.393751][T22934] call_usermodehelper_exec_work+0xbe/0x230 [ 914.399775][T22934] process_scheduled_works+0xae1/0x17b0 [ 914.405431][T22934] worker_thread+0x8a0/0xda0 [ 914.410148][T22934] kthread+0x711/0x8a0 [ 914.414336][T22934] ret_from_fork+0x3fc/0x770 [ 914.419062][T22934] ret_from_fork_asm+0x1a/0x30 [ 914.423939][T22934] [ 914.423939][T22934] other info that might help us debug this: [ 914.423939][T22934] [ 914.434200][T22934] Chain exists of: [ 914.434200][T22934] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 914.434200][T22934] [ 914.447378][T22934] Possible interrupt unsafe locking scenario: [ 914.447378][T22934] [ 914.455711][T22934] CPU0 CPU1 [ 914.461212][T22934] ---- ---- [ 914.466588][T22934] lock(tasklist_lock); [ 914.470848][T22934] local_irq_disable(); [ 914.477618][T22934] lock(&client->buffer_lock); [ 914.485010][T22934] lock(&new->fa_lock); [ 914.491792][T22934] [ 914.495258][T22934] lock(&client->buffer_lock); [ 914.500318][T22934] [ 914.500318][T22934] *** DEADLOCK *** [ 914.500318][T22934] [ 914.508493][T22934] 7 locks held by syz.9.5554/22934: [ 914.513710][T22934] #0: ffff88802a2f8118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 914.522891][T22934] #1: ffff88802a0f7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 914.533034][T22934] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 914.542931][T22934] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 914.552552][T22934] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 914.561868][T22934] #5: ffff88807ca50028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 914.572108][T22934] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 914.581628][T22934] [ 914.581628][T22934] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 914.592308][T22934] -> (&client->buffer_lock){..-.}-{3:3} { [ 914.598157][T22934] IN-SOFTIRQ-W at: [ 914.602155][T22934] lock_acquire+0x120/0x360 [ 914.608334][T22934] _raw_spin_lock+0x2e/0x40 [ 914.614509][T22934] evdev_pass_values+0xb9/0xbd0 [ 914.621026][T22934] evdev_events+0x1e6/0x340 [ 914.627195][T22934] input_pass_values+0x285/0x890 [ 914.633800][T22934] input_event_dispose+0x3e5/0x6b0 [ 914.640604][T22934] input_event+0x8c/0xc0 [ 914.646563][T22934] hidinput_hid_event+0x132c/0x1c90 [ 914.653467][T22934] hid_process_event+0x4be/0x620 [ 914.660087][T22934] hid_report_raw_event+0xe91/0x16d0 [ 914.667055][T22934] hid_input_report+0x43e/0x520 [ 914.673610][T22934] hid_irq_in+0x47e/0x6d0 [ 914.679618][T22934] __usb_hcd_giveback_urb+0x41a/0x690 [ 914.686662][T22934] dummy_timer+0x862/0x4550 [ 914.692830][T22934] __hrtimer_run_queues+0x52c/0xc60 [ 914.699704][T22934] hrtimer_run_softirq+0x187/0x2b0 [ 914.706505][T22934] handle_softirqs+0x283/0x870 [ 914.713039][T22934] __irq_exit_rcu+0xca/0x1f0 [ 914.719309][T22934] irq_exit_rcu+0x9/0x30 [ 914.725245][T22934] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 914.732590][T22934] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 914.740257][T22934] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 914.747651][T22934] sync_rcu_exp_done_unlocked+0xdb/0x150 [ 914.755039][T22934] rcu_exp_sel_wait_wake+0x686/0xd40 [ 914.762033][T22934] kthread_worker_fn+0x504/0xb60 [ 914.768652][T22934] kthread+0x711/0x8a0 [ 914.774421][T22934] ret_from_fork+0x3fc/0x770 [ 914.780685][T22934] ret_from_fork_asm+0x1a/0x30 [ 914.787231][T22934] INITIAL USE at: [ 914.791170][T22934] lock_acquire+0x120/0x360 [ 914.797364][T22934] _raw_spin_lock+0x2e/0x40 [ 914.803472][T22934] evdev_pass_values+0xb9/0xbd0 [ 914.810018][T22934] evdev_events+0x1e6/0x340 [ 914.816105][T22934] input_pass_values+0x285/0x890 [ 914.822725][T22934] input_event_dispose+0x330/0x6b0 [ 914.829858][T22934] input_inject_event+0x1fe/0x320 [ 914.836472][T22934] evdev_write+0x2fc/0x480 [ 914.842732][T22934] vfs_write+0x27b/0xa90 [ 914.848758][T22934] ksys_write+0x145/0x250 [ 914.854706][T22934] do_syscall_64+0xfa/0x3b0 [ 914.861613][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.869104][T22934] } [ 914.871689][T22934] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 914.880047][T22934] [ 914.880047][T22934] the dependencies between the lock to be acquired [ 914.880062][T22934] and SOFTIRQ-irq-unsafe lock: [ 914.893712][T22934] -> (tasklist_lock){.+.+}-{3:3} { [ 914.899139][T22934] HARDIRQ-ON-R at: [ 914.903307][T22934] lock_acquire+0x120/0x360 [ 914.909924][T22934] _raw_read_lock+0x36/0x50 [ 914.916441][T22934] __do_wait+0xde/0x740 [ 914.922631][T22934] do_wait+0x1f8/0x520 [ 914.928712][T22934] kernel_wait+0xab/0x170 [ 914.935056][T22934] call_usermodehelper_exec_work+0xbe/0x230 [ 914.942982][T22934] process_scheduled_works+0xae1/0x17b0 [ 914.950560][T22934] worker_thread+0x8a0/0xda0 [ 914.957210][T22934] kthread+0x711/0x8a0 [ 914.963323][T22934] ret_from_fork+0x3fc/0x770 [ 914.970075][T22934] ret_from_fork_asm+0x1a/0x30 [ 914.976878][T22934] SOFTIRQ-ON-R at: [ 914.981067][T22934] lock_acquire+0x120/0x360 [ 914.987613][T22934] _raw_read_lock+0x36/0x50 [ 914.994147][T22934] __do_wait+0xde/0x740 [ 915.000430][T22934] do_wait+0x1f8/0x520 [ 915.006528][T22934] kernel_wait+0xab/0x170 [ 915.013020][T22934] call_usermodehelper_exec_work+0xbe/0x230 [ 915.020989][T22934] process_scheduled_works+0xae1/0x17b0 [ 915.028713][T22934] worker_thread+0x8a0/0xda0 [ 915.035364][T22934] kthread+0x711/0x8a0 [ 915.042033][T22934] ret_from_fork+0x3fc/0x770 [ 915.048751][T22934] ret_from_fork_asm+0x1a/0x30 [ 915.055549][T22934] INITIAL USE at: [ 915.059653][T22934] lock_acquire+0x120/0x360 [ 915.066104][T22934] _raw_write_lock_irq+0xa2/0xf0 [ 915.073346][T22934] copy_process+0x224f/0x3c00 [ 915.080074][T22934] kernel_clone+0x224/0x7f0 [ 915.086563][T22934] user_mode_thread+0xdd/0x140 [ 915.093287][T22934] rest_init+0x23/0x300 [ 915.099504][T22934] start_kernel+0x47d/0x500 [ 915.106000][T22934] x86_64_start_reservations+0x24/0x30 [ 915.113532][T22934] x86_64_start_kernel+0x143/0x1c0 [ 915.120618][T22934] common_startup_64+0x13e/0x147 [ 915.127511][T22934] INITIAL READ USE at: [ 915.132136][T22934] lock_acquire+0x120/0x360 [ 915.139188][T22934] _raw_read_lock+0x36/0x50 [ 915.146084][T22934] __do_wait+0xde/0x740 [ 915.152656][T22934] do_wait+0x1f8/0x520 [ 915.159105][T22934] kernel_wait+0xab/0x170 [ 915.165852][T22934] call_usermodehelper_exec_work+0xbe/0x230 [ 915.174137][T22934] process_scheduled_works+0xae1/0x17b0 [ 915.182079][T22934] worker_thread+0x8a0/0xda0 [ 915.189061][T22934] kthread+0x711/0x8a0 [ 915.195533][T22934] ret_from_fork+0x3fc/0x770 [ 915.202695][T22934] ret_from_fork_asm+0x1a/0x30 [ 915.209925][T22934] } [ 915.212634][T22934] ... key at: [] tasklist_lock+0x18/0x40 [ 915.220549][T22934] ... acquired at: [ 915.224546][T22934] lock_acquire+0x120/0x360 [ 915.229342][T22934] _raw_read_lock+0x36/0x50 [ 915.234042][T22934] send_sigurg+0x12b/0x420 [ 915.238674][T22934] sk_send_sigurg+0x6c/0x2e0 [ 915.243458][T22934] queue_oob+0x490/0x5a0 [ 915.247907][T22934] unix_stream_sendmsg+0xaf9/0xc90 [ 915.253211][T22934] __sock_sendmsg+0x21c/0x270 [ 915.258089][T22934] ____sys_sendmsg+0x52d/0x830 [ 915.263043][T22934] ___sys_sendmsg+0x21f/0x2a0 [ 915.268087][T22934] __sys_sendmmsg+0x227/0x430 [ 915.272972][T22934] __x64_sys_sendmmsg+0xa0/0xc0 [ 915.278022][T22934] do_syscall_64+0xfa/0x3b0 [ 915.282835][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.288949][T22934] [ 915.291286][T22934] -> (&f_owner->lock){....}-{3:3} { [ 915.296609][T22934] INITIAL USE at: [ 915.300622][T22934] lock_acquire+0x120/0x360 [ 915.306924][T22934] _raw_write_lock_irq+0xa2/0xf0 [ 915.313647][T22934] __f_setown+0x67/0x370 [ 915.319704][T22934] fcntl_dirnotify+0x3d6/0x690 [ 915.326254][T22934] do_fcntl+0x6d0/0x1910 [ 915.332302][T22934] __se_sys_fcntl+0xc8/0x150 [ 915.338670][T22934] do_syscall_64+0xfa/0x3b0 [ 915.344942][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.352634][T22934] INITIAL READ USE at: [ 915.357069][T22934] lock_acquire+0x120/0x360 [ 915.363768][T22934] _raw_read_lock_irqsave+0xaf/0x100 [ 915.371262][T22934] send_sigio+0x38/0x370 [ 915.377718][T22934] dnotify_handle_event+0x169/0x440 [ 915.385133][T22934] fsnotify+0x1814/0x1a80 [ 915.391695][T22934] vfs_symlink+0x291/0x2f0 [ 915.398351][T22934] do_symlinkat+0x1b1/0x3f0 [ 915.405064][T22934] __x64_sys_symlink+0x7a/0x90 [ 915.412036][T22934] do_syscall_64+0xfa/0x3b0 [ 915.418767][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.426875][T22934] } [ 915.429485][T22934] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 915.438568][T22934] ... acquired at: [ 915.442578][T22934] lock_acquire+0x120/0x360 [ 915.447569][T22934] _raw_read_lock_irqsave+0xaf/0x100 [ 915.453597][T22934] send_sigio+0x38/0x370 [ 915.458065][T22934] kill_fasync+0x24d/0x4d0 [ 915.462688][T22934] lease_break_callback+0x26/0x30 [ 915.467932][T22934] __break_lease+0x6a2/0x1620 [ 915.472815][T22934] do_dentry_open+0xd62/0x1970 [ 915.477797][T22934] vfs_open+0x3b/0x340 [ 915.482231][T22934] path_openat+0x2ee5/0x3830 [ 915.487124][T22934] do_filp_open+0x1fa/0x410 [ 915.491879][T22934] do_sys_openat2+0x121/0x1c0 [ 915.496783][T22934] __x64_sys_open+0x11e/0x150 [ 915.501755][T22934] do_syscall_64+0xfa/0x3b0 [ 915.506514][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.512623][T22934] [ 915.514974][T22934] -> (&new->fa_lock){....}-{3:3} { [ 915.520139][T22934] INITIAL USE at: [ 915.524097][T22934] lock_acquire+0x120/0x360 [ 915.530235][T22934] _raw_write_lock_irq+0xa2/0xf0 [ 915.536778][T22934] fasync_remove_entry+0xf1/0x1c0 [ 915.543439][T22934] sock_fasync+0x85/0xf0 [ 915.549288][T22934] __fput+0x89f/0xa70 [ 915.554876][T22934] task_work_run+0x1d4/0x260 [ 915.561061][T22934] exit_to_user_mode_loop+0xec/0x110 [ 915.567952][T22934] do_syscall_64+0x2bd/0x3b0 [ 915.574157][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.581647][T22934] INITIAL READ USE at: [ 915.586018][T22934] lock_acquire+0x120/0x360 [ 915.592551][T22934] _raw_read_lock_irqsave+0xaf/0x100 [ 915.599920][T22934] kill_fasync+0x199/0x4d0 [ 915.606353][T22934] sock_wake_async+0x137/0x160 [ 915.613251][T22934] sock_def_error_report+0x332/0x390 [ 915.620567][T22934] sk_error_report+0x45/0x290 [ 915.627792][T22934] unix_dgram_connect+0x997/0xce0 [ 915.634933][T22934] __sys_connect+0x316/0x440 [ 915.641559][T22934] __x64_sys_connect+0x7a/0x90 [ 915.648453][T22934] do_syscall_64+0xfa/0x3b0 [ 915.655080][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.662993][T22934] } [ 915.665503][T22934] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 915.674205][T22934] ... acquired at: [ 915.678025][T22934] lock_acquire+0x120/0x360 [ 915.682917][T22934] _raw_read_lock_irqsave+0xaf/0x100 [ 915.688420][T22934] kill_fasync+0x199/0x4d0 [ 915.693135][T22934] evdev_pass_values+0x627/0xbd0 [ 915.698309][T22934] evdev_events+0x1e6/0x340 [ 915.703053][T22934] input_pass_values+0x285/0x890 [ 915.708210][T22934] input_event_dispose+0x330/0x6b0 [ 915.713635][T22934] input_inject_event+0x1fe/0x320 [ 915.718960][T22934] evdev_write+0x2fc/0x480 [ 915.723714][T22934] vfs_write+0x27b/0xa90 [ 915.728173][T22934] ksys_write+0x145/0x250 [ 915.732874][T22934] do_syscall_64+0xfa/0x3b0 [ 915.737686][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.743797][T22934] [ 915.746154][T22934] [ 915.746154][T22934] stack backtrace: [ 915.752108][T22934] CPU: 0 UID: 0 PID: 22934 Comm: syz.9.5554 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 915.752132][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.752151][T22934] Call Trace: [ 915.752164][T22934] [ 915.752175][T22934] dump_stack_lvl+0x189/0x250 [ 915.752206][T22934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.752232][T22934] ? __pfx__printk+0x10/0x10 [ 915.752254][T22934] validate_chain+0x1f05/0x2140 [ 915.752293][T22934] __lock_acquire+0xab9/0xd20 [ 915.752319][T22934] ? kill_fasync+0x199/0x4d0 [ 915.752335][T22934] lock_acquire+0x120/0x360 [ 915.752356][T22934] ? kill_fasync+0x199/0x4d0 [ 915.752378][T22934] _raw_read_lock_irqsave+0xaf/0x100 [ 915.752402][T22934] ? kill_fasync+0x199/0x4d0 [ 915.752417][T22934] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 915.752438][T22934] ? do_raw_spin_lock+0x121/0x290 [ 915.752461][T22934] kill_fasync+0x199/0x4d0 [ 915.752475][T22934] ? kill_fasync+0x53/0x4d0 [ 915.752491][T22934] evdev_pass_values+0x627/0xbd0 [ 915.752513][T22934] ? evdev_pass_values+0x631/0xbd0 [ 915.752533][T22934] evdev_events+0x1e6/0x340 [ 915.752563][T22934] ? evdev_events+0x79/0x340 [ 915.752582][T22934] ? input_pass_values+0x8d/0x890 [ 915.752597][T22934] input_pass_values+0x285/0x890 [ 915.752617][T22934] ? input_handle_event+0x70c/0xf30 [ 915.752642][T22934] input_event_dispose+0x330/0x6b0 [ 915.752668][T22934] input_inject_event+0x1fe/0x320 [ 915.752692][T22934] ? input_inject_event+0xbc/0x320 [ 915.752717][T22934] evdev_write+0x2fc/0x480 [ 915.752737][T22934] ? __pfx_evdev_write+0x10/0x10 [ 915.752755][T22934] ? bpf_lsm_file_permission+0x9/0x20 [ 915.752780][T22934] ? security_file_permission+0x75/0x290 [ 915.752803][T22934] ? rw_verify_area+0x258/0x650 [ 915.752827][T22934] ? __pfx_evdev_write+0x10/0x10 [ 915.752845][T22934] vfs_write+0x27b/0xa90 [ 915.752868][T22934] ? __pfx_vfs_write+0x10/0x10 [ 915.752887][T22934] ? __fget_files+0x2a/0x420 [ 915.752911][T22934] ? __fget_files+0x2a/0x420 [ 915.752933][T22934] ? __fget_files+0x3a0/0x420 [ 915.752955][T22934] ? __fget_files+0x2a/0x420 [ 915.752982][T22934] ksys_write+0x145/0x250 [ 915.753002][T22934] ? __pfx_ksys_write+0x10/0x10 [ 915.753020][T22934] ? rcu_is_watching+0x15/0xb0 [ 915.753048][T22934] ? do_syscall_64+0xbe/0x3b0 [ 915.753076][T22934] do_syscall_64+0xfa/0x3b0 [ 915.753101][T22934] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.753124][T22934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.753142][T22934] ? clear_bhb_loop+0x60/0xb0 [ 915.753162][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.753180][T22934] RIP: 0033:0x7f3f86d8e929 [ 915.753197][T22934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.753213][T22934] RSP: 002b:00007f3f87b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.753232][T22934] RAX: ffffffffffffffda RBX: 00007f3f86fb5fa0 RCX: 00007f3f86d8e929 [ 915.753245][T22934] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 915.753256][T22934] RBP: 00007f3f86e10b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 915.753268][T22934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.753279][T22934] R13: 0000000000000000 R14: 00007f3f86fb5fa0 R15: 00007ffe91a4b3e8 [ 915.753299][T22934] [ 916.106536][ T5835] Bluetooth: hci0: command tx timeout [ 916.112303][ T5835] Bluetooth: hci2: command tx timeout [ 917.034120][T22867] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.041468][T22867] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.048974][T22867] bridge_slave_1: entered allmulticast mode [ 917.055759][T22867] bridge_slave_1: entered promiscuous mode [ 917.217705][T22921] bond0: (slave syz_tun): Releasing backup interface [ 917.900998][ T7014] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.970529][ T7014] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.031819][ T7014] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.110864][ T7014] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.175420][ T7014] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.210812][ T7014] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.260400][ T7014] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.300835][ T7014] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.380390][ T7014] bridge_slave_1: left allmulticast mode [ 918.386114][ T7014] bridge_slave_1: left promiscuous mode [ 918.392229][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.401505][ T7014] bridge_slave_0: left allmulticast mode [ 918.408556][ T7014] bridge_slave_0: left promiscuous mode [ 918.414288][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.426097][ T7014] bridge_slave_1: left allmulticast mode [ 918.432004][ T7014] bridge_slave_1: left promiscuous mode [ 918.437954][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.446120][ T7014] bridge_slave_0: left allmulticast mode [ 918.451993][ T7014] bridge_slave_0: left promiscuous mode [ 918.457797][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.469892][ T7014] bridge_slave_1: left allmulticast mode [ 918.475574][ T7014] bridge_slave_1: left promiscuous mode [ 918.481845][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.490171][ T7014] bridge_slave_0: left allmulticast mode [ 918.495840][ T7014] bridge_slave_0: left promiscuous mode [ 918.501609][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.512586][ T7014] vlan2: left allmulticast mode [ 918.518661][ T7014] dummy0: left allmulticast mode [ 918.523641][ T7014] vlan2: left promiscuous mode [ 918.528840][ T7014] dummy0: left promiscuous mode [ 918.533989][ T7014] bridge0: port 3(vlan2) entered disabled state [ 918.542996][ T7014] bridge_slave_1: left allmulticast mode [ 918.548828][ T7014] bridge_slave_1: left promiscuous mode [ 918.554581][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.564137][ T7014] bridge_slave_0: left allmulticast mode [ 918.570070][ T7014] bridge_slave_0: left promiscuous mode [ 918.575893][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.673331][ T7014] bond0 (unregistering): Released all slaves [ 918.729657][ T7014] bond0 (unregistering): Released all slaves [ 919.207942][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.219793][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.229144][ T7014] bond0 (unregistering): Released all slaves [ 919.378737][ T7014] bond3 (unregistering): (slave gretap1): Releasing active interface [ 919.499551][ T7014] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 919.508030][ T7014] bridge1 (unregistering): left promiscuous mode [ 919.715600][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.725223][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.734566][ T7014] bond0 (unregistering): Released all slaves [ 919.911444][ T7014] bond1 (unregistering): (slave bond2): Releasing backup interface [ 919.920068][ T7014] bond1 (unregistering): Released all slaves [ 920.062051][ T7014] bond2 (unregistering): Released all slaves [ 920.211177][ T7014] bond3 (unregistering): Released all slaves [ 920.224165][ T7014] bond4 (unregistering): Released all slaves [ 920.462510][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.471725][ T7014] bond_slave_0: left promiscuous mode [ 920.479250][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.488377][ T7014] bond_slave_1: left promiscuous mode [ 920.494545][ T7014] bond0 (unregistering): Released all slaves [ 920.504862][ T7014] bond1 (unregistering): Released all slaves [ 920.648698][ T7014] tipc: Left network mode [ 921.134182][ T7014] hsr_slave_0: left promiscuous mode [ 921.140183][ T7014] hsr_slave_1: left promiscuous mode [ 921.149037][ T7014] hsr_slave_0: left promiscuous mode [ 921.154792][ T7014] hsr_slave_1: left promiscuous mode [ 921.161802][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.169541][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.182241][ T7014] hsr_slave_0: left promiscuous mode [ 921.188692][ T7014] hsr_slave_1: left promiscuous mode [ 921.197778][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.205214][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.215406][ T7014] veth1_macvtap: left promiscuous mode [ 921.221059][ T7014] veth0_macvtap: left promiscuous mode [ 921.226630][ T7014] veth1_vlan: left promiscuous mode [ 921.232080][ T7014] veth0_vlan: left promiscuous mode [ 921.623784][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 921.672323][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 922.682125][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 922.731787][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 923.353599][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 923.382582][ T7014] team0 (unregistering): Port device team_slave_0 removed