last executing test programs: 17.445135701s ago: executing program 4 (id=19164): r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) r1 = semget(0x2, 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0x200) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/56) r3 = semget(0x0, 0x1, 0x40) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000040)=""/227) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000003c0)={{0x3, r4, 0xee01, r5, 0xee00, 0x100, 0xa05e}, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffc0}) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000440)=""/77) semctl$IPC_RMID(r2, 0x0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000004c0)=""/176) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000580)=""/94) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) r6 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000600)=0x200) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000640)=0x81) r7 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000680)=""/210) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000780)=""/109) shmctl$SHM_UNLOCK(r7, 0xc) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000800)=""/193) r8 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r8, 0x0) 17.303546789s ago: executing program 4 (id=19166): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) unshare(0x22020600) unshare(0x22020600) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 17.085573811s ago: executing program 4 (id=19168): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 16.953708307s ago: executing program 4 (id=19171): syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02008006100207006000000002000020"]) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="2c38ba87acceb97e1c6b207ba0962f8c5a", 0x11) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000200)={0x40, 0xc, 0xd, {0xd, 0x22, "dad9abc2a433bf8bab0cf1"}}, &(0x7f0000000240)={0x0, 0x3, 0x41, @string={0x41, 0x3, "697a2f50bd04074ade0d2b217daab4dff4ca0107266efc00b342c83293ba3ae85dd1ca04f4890efc31b64e8ff0fa48e3736cf91a8a1bed1474e44e58aa6ced"}}, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3fe, 0xfc, 0x1, {0x22, 0x82b}}}}, &(0x7f00000005c0)={0x18, &(0x7f0000000380)={0x20, 0xf, 0x84, "27b20ffe21bf8e9445f7811efb30689129bca62264c83b11bc3dd18dd367aa7dbbcf6ec4148419185dc238576a383555f9e65b55860f2bd300d9875fb4552d8a6347312f48254f3930a17fddd9ad5e3b42e7bb213610e30dcbcb0b2eaf29b94005c6a05b625c19c46bbfce6015b9d6be25514b75d35c85bafbb858c6051f6c05d6c7b73f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xe9}, &(0x7f00000004c0)={0x20, 0x1, 0x9b, "9a4db8094b3f899537ef14d2532eda2bb3894bfb9f50fa843eaa949066ddd884b040f1006229033e77bc2da916e087a093c33e23bdde5d29604cf404211800b66379a1536ab8195f5a44edc891e66fd8bd04dcc85a202728ce97b85d9de4c8e2d1f72e38459d12353fca48cf378b08d30b465bb670027cde8e05479d1f0e0cf188dce3d19d83a6aa6168c1ab0295672fa713765d03172626400f30"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1}}) 16.484522411s ago: executing program 1 (id=19180): io_uring_setup(0x177f, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1b4b, 0x101, 0x0, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8e412e02bc36cb7637d7002bdcaa8dd125c123da1d"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) dup3(r9, r8, 0x0) ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(r7, &(0x7f0000002340)='net/udplite6\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000002380)=""/86, 0x56}], 0x2, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15.941393511s ago: executing program 4 (id=19189): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 15.021435396s ago: executing program 1 (id=19202): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000380), 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000000140)=""/11, 0xb}], 0x2, 0x0) r1 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000030c0)) getpid() process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x123382) r3 = memfd_create(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) r4 = socket$rds(0x15, 0x5, 0x0) connect$rds(r4, &(0x7f0000000380), 0x10) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"}) 15.017637912s ago: executing program 4 (id=19204): r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) 14.956343845s ago: executing program 1 (id=19205): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12141, 0x0) 14.873997747s ago: executing program 1 (id=19207): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000072000107000000000000000007000000ee"], 0x18}}, 0x0) 14.823171091s ago: executing program 1 (id=19209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000100013070000000000000000fe8000000000000000000000000000bbd314140000000000000000000000000000000000000000000200006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf0}}, 0x0) 14.765130483s ago: executing program 1 (id=19210): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.252353003s ago: executing program 2 (id=19381): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x37, 0x0, 0x0, @link_id}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x90) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map}, 0x10) 4.185466816s ago: executing program 2 (id=19382): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.137518812s ago: executing program 2 (id=19383): socket$unix(0x1, 0x2, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 4.064017131s ago: executing program 2 (id=19385): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) 3.974112099s ago: executing program 2 (id=19386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, 0x34) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) recvmsg(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.861648451s ago: executing program 2 (id=19387): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.677303072s ago: executing program 0 (id=19389): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 3.607989704s ago: executing program 0 (id=19390): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x37, 0x0, 0x0, @link_id}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x90) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map}, 0x10) 3.607567631s ago: executing program 0 (id=19391): r0 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = epoll_create(0xaf2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) 3.50011821s ago: executing program 0 (id=19393): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) 3.373676802s ago: executing program 0 (id=19394): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) 3.345378974s ago: executing program 0 (id=19395): syz_emit_ethernet(0x120, &(0x7f0000000240)={@local, @empty, @val, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '1$i', 0xe2, 0x21, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo]}, @fragment, @routing={0x0, 0xa, 0x0, 0x0, 0x0, [@remote, @private2, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48e1e7", 0x0, "568987"}, "9f90557339d2145dfe3f36a1c0b96ecb8980c95dc965bb07e5c62c7ce1ba63910aaf055617f53f3ea44979fb12e33e85dcf8cc76d4d5c47ef933950988e4401d971920738861a7f40fa5f0db0b5a54624ea6d8c131273aed3d25"}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001000000"]) 204.427383ms ago: executing program 3 (id=19403): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) 167.756785ms ago: executing program 3 (id=19404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x8, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 66.097303ms ago: executing program 3 (id=19405): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0bc5310, &(0x7f00000000c0)={{}, 'port1\x00'}) tkill(0x0, 0x0) 65.612267ms ago: executing program 3 (id=19406): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 31.097828ms ago: executing program 3 (id=19407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 0s ago: executing program 3 (id=19408): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') kernel console output (not intermixed with test programs): T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3380.885352][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3380.923440][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3380.952495][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3380.992299][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.033068][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3381.061497][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.098049][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3381.133040][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.167388][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3381.310055][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.360196][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.394600][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.433375][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.457931][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.496723][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.520944][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.543029][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.544769][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059deec00: rx timeout, send abort [ 3381.566748][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.600299][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.641458][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.671717][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.696805][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3381.723588][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3381.745573][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3381.810698][ T7272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.848318][ T7272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.881505][ T7272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.913183][ T7272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3381.960005][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 3382.061208][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059deec00: abort rx timeout. Force session deactivation [ 3382.076829][T14979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.097276][T14979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3382.128246][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 3382.135429][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3382.187442][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18572'. [ 3382.236239][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 3382.243432][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3382.310062][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.322471][ T7705] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18574'. [ 3382.352863][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3382.379758][ T7698] team0: Port device bridge1 added [ 3382.514750][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.533707][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3382.618474][T13484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.633466][T13484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3382.688706][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3382.745406][ T7709] netlink: 'syz.0.18413': attribute type 10 has an invalid length. [ 3382.785218][ T7709] bridge0: port 3(netdevsim0) entered blocking state [ 3382.792132][ T7709] bridge0: port 3(netdevsim0) entered disabled state [ 3382.794182][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18453'. [ 3382.853906][ T7709] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 3382.876265][ T7709] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 3382.911839][ T7709] bridge0: port 3(netdevsim0) entered blocking state [ 3382.918730][ T7709] bridge0: port 3(netdevsim0) entered forwarding state [ 3383.079060][ T7340] veth0_vlan: entered promiscuous mode [ 3383.140658][ T7340] veth1_vlan: entered promiscuous mode [ 3383.237004][ T7340] veth0_macvtap: entered promiscuous mode [ 3383.275165][ T7340] veth1_macvtap: entered promiscuous mode [ 3383.338895][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.373451][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.403423][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.443993][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.465969][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.491180][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.519503][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.557939][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.572971][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.584833][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18587'. [ 3383.593859][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.593884][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.593900][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.593921][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.593936][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.593952][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3383.593967][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.595922][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3383.722506][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.735329][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.755263][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.766288][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.781705][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.811009][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.831939][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.869651][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.895514][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.915624][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.929363][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.940617][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.952014][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3383.970220][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3383.995256][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3384.007437][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3384.021226][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3384.097472][ T7340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3384.129084][ T7340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3384.144610][ T7340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3384.153601][T29015] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3384.168406][ T7340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3384.373597][T29015] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3384.392925][T29015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.415009][T13484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3384.438724][T29015] usb 3-1: config 0 descriptor?? [ 3384.452569][T29015] cp210x 3-1:0.0: cp210x converter detected [ 3384.473533][T13484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3384.514761][T14979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3384.523172][T14979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3384.905000][T29015] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3384.928144][T29015] usb 3-1: cp210x converter now attached to ttyUSB0 [ 3385.042002][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18597'. [ 3385.200771][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18599'. [ 3385.230017][ T6727] usb 3-1: USB disconnect, device number 29 [ 3385.249213][ T6727] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3385.314455][ T6727] cp210x 3-1:0.0: device disconnected [ 3386.452192][ T7818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18615'. [ 3386.821943][ T7824] batadv0: mtu less than device minimum [ 3388.716638][ T7907] x_tables: duplicate underflow at hook 3 [ 3388.840558][ T7907] IPVS: Error connecting to the multicast addr [ 3388.875933][ T7910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18659'. [ 3389.253591][ T29] audit: type=1326 audit(1720180077.360:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.18667" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749f579 code=0x0 [ 3389.468280][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.478012][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.732725][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.763545][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.772560][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.846245][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.864325][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.884601][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18675'. [ 3389.983534][T29015] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3390.228503][T29015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3390.250287][T29015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3390.265826][T29015] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3390.296576][T29015] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3390.316840][T29015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.337083][T29015] usb 2-1: config 0 descriptor?? [ 3390.348260][ T7951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3390.453571][T30765] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3390.612795][ T7989] __nla_validate_parse: 3 callbacks suppressed [ 3390.612817][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.641231][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.652290][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.656161][T30765] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3390.672324][T30765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.689906][T30765] usb 5-1: config 0 descriptor?? [ 3390.699378][T30765] cp210x 5-1:0.0: cp210x converter detected [ 3390.727091][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.737928][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.755994][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.768812][T29015] plantronics 0003:047F:FFFF.0081: unknown main item tag 0xd [ 3390.795973][T29015] plantronics 0003:047F:FFFF.0081: No inputs registered, leaving [ 3390.817557][T29015] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3390.923808][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.950188][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3390.989142][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 3391.005036][T14979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.086361][ T6727] usb 2-1: USB disconnect, device number 42 [ 3391.134850][T30765] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3391.147310][T30765] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3391.227004][T14979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.405839][T30765] usb 5-1: USB disconnect, device number 23 [ 3391.408537][T14979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.427034][T30765] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3391.468459][T30765] cp210x 5-1:0.0: device disconnected [ 3391.553390][T14979] bridge0: port 3(netdevsim0) entered disabled state [ 3391.659140][T14979] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 3391.674560][T14979] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 3391.688653][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3391.691690][T14979] bridge0: port 3(netdevsim0) entered disabled state [ 3391.714151][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3391.725622][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3391.764887][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3391.766689][T14979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.795096][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3391.806620][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3391.862742][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18699'. [ 3391.945799][ T8006] macvlan0: entered promiscuous mode [ 3391.971729][ T8006] batadv_slave_0: entered promiscuous mode [ 3392.478776][T14979] bridge_slave_1: left allmulticast mode [ 3392.504415][T14979] bridge_slave_1: left promiscuous mode [ 3392.510142][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3392.577971][T14979] bridge_slave_0: left allmulticast mode [ 3392.589823][T14979] bridge_slave_0: left promiscuous mode [ 3392.615496][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3393.282183][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3393.295804][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3393.316168][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3393.343511][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3393.355360][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3393.370680][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3393.881754][ T4214] Bluetooth: hci2: command tx timeout [ 3393.995088][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3394.040504][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3394.074278][T14979] bond0 (unregistering): Released all slaves [ 3394.413146][ T29] audit: type=1326 audit(1720180082.520:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.18731" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f1579 code=0x0 [ 3394.919361][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 3395.015866][T14979] hsr_slave_0: left promiscuous mode [ 3395.047375][T14979] hsr_slave_1: left promiscuous mode [ 3395.065306][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3395.072771][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3395.095065][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3395.102538][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3395.151951][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3395.163625][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3395.172415][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3395.181467][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3395.192906][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3395.201619][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3395.284935][T14979] veth1_macvtap: left promiscuous mode [ 3395.313041][T14979] veth0_macvtap: left promiscuous mode [ 3395.340705][T14979] veth1_vlan: left promiscuous mode [ 3395.356063][T14979] veth0_vlan: left promiscuous mode [ 3395.365548][ T8106] MD5 Hash not found for [fe80::bb].0->[fe80::aa].20002 [S]L3 index 0 [ 3395.464669][ T5103] Bluetooth: hci3: command tx timeout [ 3395.632972][ T8110] __nla_validate_parse: 11 callbacks suppressed [ 3395.632993][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18739'. [ 3395.651150][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18739'. [ 3395.660256][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18739'. [ 3395.741353][ T8115] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18740'. [ 3395.956389][ T5103] Bluetooth: hci2: command tx timeout [ 3396.249908][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3396.311577][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3397.005691][ T6727] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3397.205270][ T6727] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 3397.215623][ T6727] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 3397.225613][ T6727] usb 5-1: config 0 has no interface number 1 [ 3397.239499][ T6727] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3397.252829][ T6727] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3397.262168][ T6727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3397.275256][ T6727] usb 5-1: config 0 descriptor?? [ 3397.285384][ T6727] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 3397.304279][ T5103] Bluetooth: hci4: command tx timeout [ 3397.426530][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 3397.454336][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 3397.486362][ T8007] bridge_slave_0: entered allmulticast mode [ 3397.496026][ T8007] bridge_slave_0: entered promiscuous mode [ 3397.524979][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 3397.532148][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 3397.550669][ T5103] Bluetooth: hci3: command tx timeout [ 3397.570131][ T8007] bridge_slave_1: entered allmulticast mode [ 3397.580099][ T8007] bridge_slave_1: entered promiscuous mode [ 3397.599126][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 3397.611937][ T6727] usb 5-1: USB disconnect, device number 24 [ 3397.754981][ T8143] MD5 Hash not found for [fe80::bb].0->[fe80::aa].20002 [S]L3 index 0 [ 3397.784533][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3397.827791][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3398.033886][ T5103] Bluetooth: hci2: command tx timeout [ 3398.072080][ T8007] team0: Port device team_slave_0 added [ 3398.136395][ T8007] team0: Port device team_slave_1 added [ 3398.355804][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 3398.373612][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 3398.380909][ T8046] bridge_slave_0: entered allmulticast mode [ 3398.401823][ T8046] bridge_slave_0: entered promiscuous mode [ 3398.504780][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3398.581705][ T8102] chnl_net:caif_netlink_parms(): no params data found [ 3398.606885][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 3398.617402][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 3398.624966][ T8046] bridge_slave_1: entered allmulticast mode [ 3398.632417][ T8046] bridge_slave_1: entered promiscuous mode [ 3398.687837][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3398.702756][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3398.711486][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3398.748447][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3398.863495][T30765] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3398.892356][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3398.933110][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3398.954194][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3399.025214][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3399.056336][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3399.077973][T30765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3399.089414][T30765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3399.133763][T30765] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3399.156886][T30765] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3399.172746][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3399.192767][T30765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3399.208311][T30765] usb 5-1: config 0 descriptor?? [ 3399.216197][ T8165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3399.246023][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3399.383788][ T5103] Bluetooth: hci4: command tx timeout [ 3399.416097][ T8184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3399.455893][ T8046] team0: Port device team_slave_0 added [ 3399.486987][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18754'. [ 3399.568736][ T8046] team0: Port device team_slave_1 added [ 3399.616225][ T8007] hsr_slave_0: entered promiscuous mode [ 3399.625472][ T5103] Bluetooth: hci3: command tx timeout [ 3399.646800][ T8007] hsr_slave_1: entered promiscuous mode [ 3399.662524][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3399.683670][ T8007] Cannot create hsr debugfs directory [ 3399.700452][T30765] plantronics 0003:047F:FFFF.0082: unknown main item tag 0xd [ 3399.726195][T30765] plantronics 0003:047F:FFFF.0082: No inputs registered, leaving [ 3399.750921][T30765] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3399.789773][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3399.812316][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3399.873473][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3399.892407][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 3399.900906][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 3399.909083][ T8102] bridge_slave_0: entered allmulticast mode [ 3399.917039][ T8102] bridge_slave_0: entered promiscuous mode [ 3399.939210][ T29] audit: type=1326 audit(1720180088.050:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.18756" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f1579 code=0x0 [ 3399.999952][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3400.007267][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3400.033681][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3400.053889][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 3400.061079][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 3400.078436][ T8102] bridge_slave_1: entered allmulticast mode [ 3400.086919][ T8102] bridge_slave_1: entered promiscuous mode [ 3400.104469][ T5103] Bluetooth: hci2: command tx timeout [ 3400.134197][ T8] usb 5-1: USB disconnect, device number 25 [ 3400.265764][T14979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3400.319037][ T8046] hsr_slave_0: entered promiscuous mode [ 3400.337797][ T8046] hsr_slave_1: entered promiscuous mode [ 3400.354053][ T8046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3400.361649][ T8046] Cannot create hsr debugfs directory [ 3400.383701][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3400.401015][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3400.430135][T14979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3400.577606][ T8102] team0: Port device team_slave_0 added [ 3400.639766][T14979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3400.798835][ T8102] team0: Port device team_slave_1 added [ 3400.907168][T14979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3401.022835][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3401.038372][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3401.084342][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3401.150162][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3401.158268][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3401.186915][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3401.468467][ T5103] Bluetooth: hci4: command tx timeout [ 3401.537099][ T8225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3401.567827][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18763'. [ 3401.675895][ T8102] hsr_slave_0: entered promiscuous mode [ 3401.696225][ T8102] hsr_slave_1: entered promiscuous mode [ 3401.704048][ T5103] Bluetooth: hci3: command tx timeout [ 3401.723427][ T8102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3401.731020][ T8102] Cannot create hsr debugfs directory [ 3401.877045][ T8229] MD5 Hash not found for [fe80::bb].0->[fe80::aa].20002 [S]L3 index 0 [ 3401.994426][T14979] bridge_slave_1: left allmulticast mode [ 3402.000106][T14979] bridge_slave_1: left promiscuous mode [ 3402.006393][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3402.024542][T14979] bridge_slave_0: left allmulticast mode [ 3402.030903][T14979] bridge_slave_0: left promiscuous mode [ 3402.046282][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3402.061813][T14979] bridge_slave_1: left allmulticast mode [ 3402.068662][T14979] bridge_slave_1: left promiscuous mode [ 3402.077131][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3402.087364][T14979] bridge_slave_0: left allmulticast mode [ 3402.093043][T14979] bridge_slave_0: left promiscuous mode [ 3402.099864][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3402.233552][T30765] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3402.444697][T30765] usb 3-1: Using ep0 maxpacket: 16 [ 3402.469274][T30765] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 3402.478492][T30765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3402.486914][T30765] usb 3-1: Product: syz [ 3402.491103][T30765] usb 3-1: Manufacturer: syz [ 3402.513512][T30765] usb 3-1: SerialNumber: syz [ 3402.521217][T30765] usb 3-1: config 0 descriptor?? [ 3402.536759][T30765] ims_pcu 3-1:0.0: Zero length descriptor [ 3402.553438][T30765] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 3402.855436][T14979] team0: Port device bridge1 removed [ 3402.972737][T29005] usb 3-1: USB disconnect, device number 30 [ 3403.222738][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3403.235829][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3403.249467][T14979] bond0 (unregistering): Released all slaves [ 3403.433159][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3403.450877][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3403.461929][T14979] bond0 (unregistering): Released all slaves [ 3403.554357][ T5103] Bluetooth: hci4: command tx timeout [ 3404.474940][T14979] macvlan0: left promiscuous mode [ 3404.482830][T14979] batadv_slave_0: left promiscuous mode [ 3404.506031][T14979] hsr_slave_0: left promiscuous mode [ 3404.511903][T14979] hsr_slave_1: left promiscuous mode [ 3404.517986][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3404.525576][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3404.541354][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3404.548994][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3404.561501][T14979] hsr_slave_0: left promiscuous mode [ 3404.569030][T14979] hsr_slave_1: left promiscuous mode [ 3404.580913][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3404.589254][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3404.605545][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3404.613185][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3404.661455][T14979] veth1_macvtap: left promiscuous mode [ 3404.667646][T14979] veth0_macvtap: left promiscuous mode [ 3404.673405][T14979] veth1_vlan: left promiscuous mode [ 3404.678992][T14979] veth0_vlan: left promiscuous mode [ 3404.686064][T14979] veth1_macvtap: left promiscuous mode [ 3404.691794][T14979] veth0_macvtap: left promiscuous mode [ 3404.697553][T14979] veth1_vlan: left promiscuous mode [ 3404.702852][T14979] veth0_vlan: left promiscuous mode [ 3405.318653][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18778'. [ 3405.591092][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3405.655695][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3405.705154][T15133] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3405.902209][T15133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3405.913707][T15133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3405.926790][T15133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3405.953444][T15133] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3405.973389][T15133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.004244][T15133] usb 5-1: config 0 descriptor?? [ 3406.012171][ T8275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3406.454827][T15133] plantronics 0003:047F:FFFF.0083: unknown main item tag 0xd [ 3406.475377][T15133] plantronics 0003:047F:FFFF.0083: No inputs registered, leaving [ 3406.500385][T15133] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3406.812289][ T6727] usb 5-1: USB disconnect, device number 26 [ 3407.064090][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3407.126966][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3407.932677][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18780'. [ 3408.403765][ T8007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3408.419099][ T8007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3408.489485][ T8007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3408.517346][ T8007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3408.999642][ T4214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3409.011240][ T4214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3409.025392][ T4214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3409.049019][ T4214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3409.059327][ T4214] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3409.068264][ T4214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3409.068321][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3409.151825][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 3409.220619][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 3409.227810][T14193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3409.366944][ T8102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3409.381401][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 3409.388592][T15133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3409.437111][ T8102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3409.476490][ T8102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3409.506690][ T8102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3409.598695][ T8046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3409.651308][ T4752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3409.703039][ T8046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3409.720790][ T8046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3409.738844][ T8046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3409.805493][ T4752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3409.827145][ T8007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3409.974827][ T4752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3410.015386][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 3410.087461][ T4752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3410.286567][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 3410.324129][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 3410.332751][ T8304] bridge_slave_0: entered allmulticast mode [ 3410.376076][ T8304] bridge_slave_0: entered promiscuous mode [ 3410.406113][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 3410.413264][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 3410.449211][ T8304] bridge_slave_1: entered allmulticast mode [ 3410.457236][ T8304] bridge_slave_1: entered promiscuous mode [ 3410.591729][ T4214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3410.620995][ T4214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3410.633893][ T4214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3410.654200][ T4214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3410.662040][ T4214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3410.670207][ T4214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3410.719575][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3410.761823][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3410.796737][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3410.820630][ T4752] bridge_slave_1: left allmulticast mode [ 3410.828865][ T4752] bridge_slave_1: left promiscuous mode [ 3410.835100][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 3410.846426][ T4752] bridge_slave_0: left allmulticast mode [ 3410.857888][ T4752] bridge_slave_0: left promiscuous mode [ 3410.864726][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 3411.147964][ T5103] Bluetooth: hci1: command tx timeout [ 3411.242691][ T4752] team0: Port device bridge1 removed [ 3411.448815][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3411.460088][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3411.477824][ T4752] bond0 (unregistering): Released all slaves [ 3411.501040][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3411.582813][ T8304] team0: Port device team_slave_0 added [ 3411.636089][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 3411.694679][ T8304] team0: Port device team_slave_1 added [ 3411.754876][T29016] bridge0: port 1(bridge_slave_0) entered blocking state [ 3411.761985][T29016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3411.810867][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3411.823249][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3411.851597][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3411.868272][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 3411.875496][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3411.936499][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3411.944116][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3411.971249][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3412.040364][ T8007] veth0_vlan: entered promiscuous mode [ 3412.087025][ T4752] hsr_slave_0: left promiscuous mode [ 3412.093136][ T4752] hsr_slave_1: left promiscuous mode [ 3412.114982][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3412.122434][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3412.137850][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3412.156917][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3412.202492][ T4752] veth1_macvtap: left promiscuous mode [ 3412.208820][ T4752] veth0_macvtap: left promiscuous mode [ 3412.214732][ T4752] veth1_vlan: left promiscuous mode [ 3412.220067][ T4752] veth0_vlan: left promiscuous mode [ 3412.745875][ T5103] Bluetooth: hci0: command tx timeout [ 3412.995730][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 3413.059924][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 3413.232097][ T5103] Bluetooth: hci1: command tx timeout [ 3413.801718][ T8304] hsr_slave_0: entered promiscuous mode [ 3413.829447][ T8304] hsr_slave_1: entered promiscuous mode [ 3413.844862][ T8304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3413.852476][ T8304] Cannot create hsr debugfs directory [ 3413.866738][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3413.910309][ T8007] veth1_vlan: entered promiscuous mode [ 3414.387611][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 3414.415454][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 3414.422627][T15133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3414.451408][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 3414.458611][T15133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3414.479655][ T8007] veth0_macvtap: entered promiscuous mode [ 3414.525635][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 3414.597396][ T8007] veth1_macvtap: entered promiscuous mode [ 3414.637707][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3414.827418][ T5103] Bluetooth: hci0: command tx timeout [ 3414.875063][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3414.889462][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3414.899449][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3414.910154][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3414.920293][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3414.930884][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3414.940754][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3414.952147][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3414.962289][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3414.973107][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3414.984953][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3415.029085][ T8046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3415.039894][ T8046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3415.171129][ T4752] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3415.197596][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.208236][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.218992][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.230121][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.242018][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.252726][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.264062][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.274919][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.285024][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.295630][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.306367][ T5103] Bluetooth: hci1: command tx timeout [ 3415.307921][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3415.328293][ T8007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.338453][ T8007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.347886][ T8007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.358225][ T8007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.401062][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 3415.408524][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 3415.416399][ T8323] bridge_slave_0: entered allmulticast mode [ 3415.423254][ T8323] bridge_slave_0: entered promiscuous mode [ 3415.477326][ T4752] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3415.498689][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 3415.506083][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 3415.513267][ T8323] bridge_slave_1: entered allmulticast mode [ 3415.520498][ T8323] bridge_slave_1: entered promiscuous mode [ 3415.621110][ T4752] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3415.640033][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3415.662351][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3415.719898][ T4752] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3415.829833][ T8323] team0: Port device team_slave_0 added [ 3415.853060][ T8323] team0: Port device team_slave_1 added [ 3415.896522][ T8102] veth0_vlan: entered promiscuous mode [ 3415.920708][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3415.978669][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3415.986921][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3416.015308][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3416.052935][ T8102] veth1_vlan: entered promiscuous mode [ 3416.072582][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3416.081687][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3416.109730][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3416.161196][ T4752] bridge_slave_1: left allmulticast mode [ 3416.167337][ T4752] bridge_slave_1: left promiscuous mode [ 3416.173050][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 3416.184171][ T4752] bridge_slave_0: left allmulticast mode [ 3416.189932][ T4752] bridge_slave_0: left promiscuous mode [ 3416.197797][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 3416.660318][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3416.673041][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3416.689052][ T4752] bond0 (unregistering): Released all slaves [ 3416.743993][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.751851][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.869635][ T8323] hsr_slave_0: entered promiscuous mode [ 3416.876543][ T8323] hsr_slave_1: entered promiscuous mode [ 3416.882623][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3416.890588][ T8323] Cannot create hsr debugfs directory [ 3416.903578][ T5103] Bluetooth: hci0: command tx timeout [ 3416.948891][ T8046] veth0_vlan: entered promiscuous mode [ 3417.046637][ T2442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3417.055482][ T2442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3417.086373][ T8304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3417.110357][ T8304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3417.249758][ T8046] veth1_vlan: entered promiscuous mode [ 3417.284532][ T8304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3417.357871][ T4752] hsr_slave_0: left promiscuous mode [ 3417.371846][ T4752] hsr_slave_1: left promiscuous mode [ 3417.384027][ T5103] Bluetooth: hci1: command tx timeout [ 3417.401212][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3417.409190][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3417.417917][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3417.425660][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3417.512485][ T4752] veth1_macvtap: left promiscuous mode [ 3417.529510][ T4752] veth0_macvtap: left promiscuous mode [ 3417.560868][ T4752] veth1_vlan: left promiscuous mode [ 3417.569034][ T4752] veth0_vlan: left promiscuous mode [ 3417.609812][ T8398] x_tables: duplicate underflow at hook 3 [ 3418.428322][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 3418.490419][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 3418.983623][ T5103] Bluetooth: hci0: command tx timeout [ 3419.118360][ T8304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3419.154380][ T8396] IPVS: Error connecting to the multicast addr [ 3419.209580][ T8102] veth0_macvtap: entered promiscuous mode [ 3419.299170][ T8102] veth1_macvtap: entered promiscuous mode [ 3419.376674][ T8046] veth0_macvtap: entered promiscuous mode [ 3419.508268][ T8046] veth1_macvtap: entered promiscuous mode [ 3419.529026][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3419.540979][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.551441][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3419.567518][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.577802][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3419.591766][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.611334][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3419.622380][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.645584][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3419.667051][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.699711][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3419.762682][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3419.798478][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.811515][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3419.829802][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.840391][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3419.851356][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.862045][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3419.877214][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.888117][ T8102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3419.901666][ T8102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3419.915270][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3420.028432][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.043888][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.054457][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.065252][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.076744][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.088129][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.098446][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.111454][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.121753][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.132644][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.142598][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3420.153153][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.172289][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3420.252087][ T8102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.266790][ T8102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.288724][ T8102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.297793][ T8102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.343999][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.360055][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.371350][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.383780][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.394851][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.405637][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.415741][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.426405][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.436507][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.448472][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.463408][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3420.474035][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.485762][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3420.677837][ T8046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.697977][ T8046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.710744][ T8046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.722493][ T8046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3420.853076][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3421.017947][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3421.038032][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3421.059304][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 3421.117228][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 3421.124429][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3421.135517][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 3421.142675][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3421.232861][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3421.252101][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3421.267845][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3421.268547][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3421.381392][ T8323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3421.479010][ T8323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3421.508828][ T2442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3421.517671][ T8323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3421.545145][ T2442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3421.569804][ T8323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3421.797498][ T8304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3422.091338][ T8304] veth0_vlan: entered promiscuous mode [ 3422.189728][ T8304] veth1_vlan: entered promiscuous mode [ 3422.265268][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3422.350501][ T29] audit: type=1326 audit(1720180110.460:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.389706][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 3422.399191][ T8304] veth0_macvtap: entered promiscuous mode [ 3422.436834][ T8304] veth1_macvtap: entered promiscuous mode [ 3422.453633][ T29] audit: type=1326 audit(1720180110.460:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.507095][T29016] bridge0: port 1(bridge_slave_0) entered blocking state [ 3422.514289][T29016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3422.534107][ T29] audit: type=1326 audit(1720180110.470:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.559195][T29016] bridge0: port 2(bridge_slave_1) entered blocking state [ 3422.566406][T29016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3422.634809][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.647510][ T29] audit: type=1326 audit(1720180110.470:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.688403][ T29] audit: type=1326 audit(1720180110.480:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.703394][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.759362][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.763379][ T29] audit: type=1326 audit(1720180110.480:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3422.791994][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.792018][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.792036][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.792056][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.792070][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.792091][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.792105][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.792119][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.792132][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.792145][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3422.792159][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3422.798780][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3422.817878][ T29] audit: type=1326 audit(1720180110.480:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.3.18807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a9579 code=0x7ffc0000 [ 3423.018093][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.055260][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.103767][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.128157][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.163475][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.200958][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.231424][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.271556][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.299409][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.334605][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.367376][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.405305][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.435625][ T8304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3423.475727][ T8304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3423.502966][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3423.566206][ T8304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3423.579422][ T8304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3423.601267][ T8304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3423.610703][ T8304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3423.662214][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3423.938744][T14979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3423.971487][T14979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3423.990529][ T8323] veth0_vlan: entered promiscuous mode [ 3424.022766][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18820'. [ 3424.046338][ T8323] veth1_vlan: entered promiscuous mode [ 3424.064723][T14979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3424.082847][T14979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3424.210320][ T8323] veth0_macvtap: entered promiscuous mode [ 3424.361880][ T8323] veth1_macvtap: entered promiscuous mode [ 3424.436260][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.447721][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.491061][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.519462][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.553495][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.594579][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.629118][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.651173][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.672437][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.703931][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.726119][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.752548][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.772955][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.785927][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.803464][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3424.823040][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.858742][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3424.912093][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3424.947917][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3424.985821][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.016930][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.048333][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.079918][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.103197][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.142735][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.173541][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.193596][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.203969][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.253566][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.275339][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.305341][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.322981][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3425.337277][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3425.358169][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3425.651460][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3425.746572][ T8323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3425.786718][ T8323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3425.821600][ T8323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3425.845595][ T8323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3425.932886][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.030891][ T4214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3426.043233][ T4214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3426.055043][ T4214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3426.084233][ T4214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3426.095055][ T4214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3426.102490][ T4214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3426.314143][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.524932][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3427.158624][ T4880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3427.194092][ T4880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3427.376867][T14979] bridge_slave_1: left allmulticast mode [ 3427.382564][T14979] bridge_slave_1: left promiscuous mode [ 3427.412511][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3427.454606][T14979] bridge_slave_0: left allmulticast mode [ 3427.460298][T14979] bridge_slave_0: left promiscuous mode [ 3427.484920][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3428.198247][ T4214] Bluetooth: hci4: command tx timeout [ 3428.513881][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3428.544772][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3428.580221][T14979] bond0 (unregistering): Released all slaves [ 3428.704404][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3428.712260][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3428.815062][ T29] audit: type=1326 audit(1720180116.930:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.18848" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3428.977786][ T29] audit: type=1326 audit(1720180117.090:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.18848" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3429.102197][ T8616] chnl_net:caif_netlink_parms(): no params data found [ 3429.531568][T14979] hsr_slave_0: left promiscuous mode [ 3429.558613][T14979] hsr_slave_1: left promiscuous mode [ 3429.573473][T29011] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3429.603979][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3429.653538][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3429.693196][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d36a400: rx timeout, send abort [ 3429.701811][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d369800: rx timeout, send abort [ 3429.710651][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807d36a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3429.725306][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807d369800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3429.744273][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3429.751728][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3429.803496][T29011] usb 5-1: Using ep0 maxpacket: 8 [ 3429.828974][T29011] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 3429.850419][T14979] veth1_macvtap: left promiscuous mode [ 3429.856055][T29011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3429.869138][T14979] veth0_macvtap: left promiscuous mode [ 3429.883916][T14979] veth1_vlan: left promiscuous mode [ 3429.889301][T14979] veth0_vlan: left promiscuous mode [ 3429.905002][T29011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3429.930221][T29011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3429.960901][T29011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3430.012615][T29011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3430.042201][T29011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3430.158646][ T8709] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18866'. [ 3430.264093][ T4214] Bluetooth: hci4: command tx timeout [ 3430.293496][T29011] usb 5-1: usb_control_msg returned -32 [ 3430.299088][T29011] usbtmc 5-1:16.0: can't read capabilities [ 3430.723717][ T8719] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 3430.873629][T29011] usb 5-1: USB disconnect, device number 27 [ 3431.644333][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3431.751588][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3431.795129][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18874'. [ 3431.885338][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a84c800: rx timeout, send abort [ 3431.893865][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888015b92c00: rx timeout, send abort [ 3431.902492][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a84c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3431.916992][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888015b92c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3432.344016][ T4214] Bluetooth: hci4: command tx timeout [ 3432.392296][ T29] audit: type=1326 audit(1720180120.500:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.18881" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73a9579 code=0x0 [ 3432.749332][ T58] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3432.851427][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 3432.900485][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 3432.914968][ T8616] bridge_slave_0: entered allmulticast mode [ 3432.922268][ T8616] bridge_slave_0: entered promiscuous mode [ 3432.941991][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 3432.949284][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 3432.961949][ T58] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=1e.8d [ 3432.982348][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 3432.992350][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3433.023676][ T8616] bridge_slave_1: entered allmulticast mode [ 3433.031033][ T8616] bridge_slave_1: entered promiscuous mode [ 3433.041755][ T58] usb 4-1: config 0 descriptor?? [ 3433.222742][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3433.262464][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3433.349507][ T29] audit: type=1326 audit(1720180121.460:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8761 comm="syz.2.18888" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3433.466720][ T8616] team0: Port device team_slave_0 added [ 3433.530086][ T29] audit: type=1326 audit(1720180121.640:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8761 comm="syz.2.18888" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3433.542214][ T8616] team0: Port device team_slave_1 added [ 3433.694958][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3433.701940][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3433.773537][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3433.805050][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3433.812155][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3433.899547][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3433.916880][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.934839][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3434.080492][ T8616] hsr_slave_0: entered promiscuous mode [ 3434.124382][ T8616] hsr_slave_1: entered promiscuous mode [ 3434.140540][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3434.163552][ T8616] Cannot create hsr debugfs directory [ 3434.423411][ T4214] Bluetooth: hci4: command tx timeout [ 3435.093838][T29005] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3435.319149][T29005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3435.344355][T29005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3435.363839][T29005] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 3435.372910][T29005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3435.413234][ T58] usb 4-1: USB disconnect, device number 32 [ 3435.435651][T29005] usb 1-1: config 0 descriptor?? [ 3435.486679][ T8616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3435.572720][ T8616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3435.621758][ T8616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3435.678281][ T8616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3435.903135][T29005] isku 0003:1E7D:319C.0084: unexpected long global item [ 3435.944303][T29005] isku 0003:1E7D:319C.0084: parse failed [ 3435.963605][T29005] isku 0003:1E7D:319C.0084: probe with driver isku failed with error -22 [ 3435.989407][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3436.060586][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 3436.105293][T29005] bridge0: port 1(bridge_slave_0) entered blocking state [ 3436.112481][T29005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3436.197734][T29005] bridge0: port 2(bridge_slave_1) entered blocking state [ 3436.204944][T29005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3436.226168][T29016] usb 1-1: USB disconnect, device number 46 [ 3436.257055][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18918'. [ 3436.514988][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3436.640966][ T8616] veth0_vlan: entered promiscuous mode [ 3436.664636][T29005] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3436.667427][ T8616] veth1_vlan: entered promiscuous mode [ 3436.764099][ T8616] veth0_macvtap: entered promiscuous mode [ 3436.787914][ T8616] veth1_macvtap: entered promiscuous mode [ 3436.811641][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3436.837661][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3436.853680][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18926'. [ 3436.864121][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3436.866120][T29005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.883901][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3436.916853][T29005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3436.935466][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3436.942064][T29005] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3436.971498][T29005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3436.974316][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3436.997282][T29005] usb 4-1: config 0 descriptor?? [ 3437.012530][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3437.045200][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.093031][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3437.133628][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.163425][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3437.186652][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.219416][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3437.243400][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.253243][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3437.325709][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.371061][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3437.430192][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.454953][T29005] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 3437.469564][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.491365][T29005] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 3437.506738][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.524298][T29005] plantronics 0003:047F:FFFF.0085: No inputs registered, leaving [ 3437.542330][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.555040][T29005] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3437.578174][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.610931][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.633013][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.662808][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.692139][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.692163][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.692202][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.692216][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.692237][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.692250][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.692267][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3437.692281][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3437.716135][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3437.719218][ T8918] netlink: 2 bytes leftover after parsing attributes in process `syz.0.18933'. [ 3437.768385][ T8616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.768450][ T8616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.768479][ T8616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.768506][ T8616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3438.031737][T14193] usb 4-1: USB disconnect, device number 33 [ 3438.112283][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.112309][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3438.263583][T29015] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3438.301508][T14979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.316206][T14979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3438.466225][T29015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.488954][T29015] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3438.526029][T29015] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3438.535887][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18937'. [ 3438.545187][T29015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3438.573633][T29015] usb 1-1: config 0 descriptor?? [ 3438.645962][ T8953] mac80211_hwsim hwsim893 wlan1: entered promiscuous mode [ 3438.759602][ T8953] mac80211_hwsim hwsim893 wlan1: left promiscuous mode [ 3438.786083][ T8953] mac80211_hwsim hwsim893 wlan1: entered allmulticast mode [ 3439.062752][T29015] usbhid 1-1:0.0: can't add hid device: -71 [ 3439.088861][T29015] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3439.112234][T29015] usb 1-1: USB disconnect, device number 47 [ 3439.331412][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18944'. [ 3439.729065][ T8986] netlink: 2 bytes leftover after parsing attributes in process `syz.4.18949'. [ 3440.720162][ T9025] netlink: 2 bytes leftover after parsing attributes in process `syz.3.18967'. [ 3440.975687][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18974'. [ 3441.271114][ T9058] netlink: 2 bytes leftover after parsing attributes in process `syz.3.18982'. [ 3441.306533][ T9060] C: renamed from lo (while UP) [ 3441.317828][ T9060] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3442.085321][ T9091] veth0_to_hsr: entered promiscuous mode [ 3442.100326][ T9091] vlan2: entered promiscuous mode [ 3442.129096][ T9091] veth0_to_hsr: left promiscuous mode [ 3442.172749][ T9093] C: renamed from lo (while UP) [ 3442.180347][ T9093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3443.253182][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3443.507078][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3443.612760][ T9128] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3443.779884][ T29] audit: type=1326 audit(1720180131.890:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.19017" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7495579 code=0x0 [ 3443.816394][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3443.883075][ T9138] mac80211_hwsim hwsim887 wlan1: entered promiscuous mode [ 3443.969733][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3443.986594][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3443.994946][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3444.005589][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3444.013438][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3444.020812][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3444.080209][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3444.158145][ T9138] mac80211_hwsim hwsim887 wlan1: left promiscuous mode [ 3444.171688][ T9138] mac80211_hwsim hwsim887 wlan1: entered allmulticast mode [ 3444.194585][T30765] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3444.393812][T30765] usb 3-1: Using ep0 maxpacket: 8 [ 3444.432394][T30765] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=1e.8d [ 3444.472416][T30765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3444.500354][T14979] bridge_slave_1: left allmulticast mode [ 3444.508232][T14979] bridge_slave_1: left promiscuous mode [ 3444.516612][T30765] usb 3-1: config 0 descriptor?? [ 3444.523205][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3444.549720][T14979] bridge_slave_0: left allmulticast mode [ 3444.572478][T14979] bridge_slave_0: left promiscuous mode [ 3444.602205][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3445.232389][ T9172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.243223][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3445.721095][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3445.750330][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3445.774838][T14979] bond0 (unregistering): Released all slaves [ 3445.860575][ T29] audit: type=1326 audit(1720180133.970:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.19027" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7495579 code=0x0 [ 3446.107619][ T4214] Bluetooth: hci4: command tx timeout [ 3446.148671][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 3446.358948][T14979] hsr_slave_0: left promiscuous mode [ 3446.370629][T14979] hsr_slave_1: left promiscuous mode [ 3446.384879][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3446.392476][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3446.402793][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3446.411646][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3446.455606][T14979] veth1_macvtap: left promiscuous mode [ 3446.461692][T14979] veth0_macvtap: left promiscuous mode [ 3446.468656][T14979] veth1_vlan: left promiscuous mode [ 3446.474254][T14979] veth0_vlan: left promiscuous mode [ 3446.923004][T21185] usb 3-1: USB disconnect, device number 31 [ 3447.088808][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19032'. [ 3447.368127][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3447.430552][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3447.973401][ T5277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3448.179136][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 3448.184573][ T4214] Bluetooth: hci4: command tx timeout [ 3448.223397][ T5277] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 3448.232376][ T5277] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3448.256902][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3448.271007][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3448.281523][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19032'. [ 3448.293672][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3448.324024][ T5277] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3448.333842][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3448.413996][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 3448.436416][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 3448.452176][ T9148] bridge_slave_0: entered allmulticast mode [ 3448.466922][ T9148] bridge_slave_0: entered promiscuous mode [ 3448.487023][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 3448.503781][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 3448.522081][ T9148] bridge_slave_1: entered allmulticast mode [ 3448.547041][ T9148] bridge_slave_1: entered promiscuous mode [ 3448.562426][ T5277] usb 5-1: GET_CAPABILITIES returned 0 [ 3448.573792][ T5277] usbtmc 5-1:16.0: can't read capabilities [ 3448.741852][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3448.803287][ T9239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3448.803916][ T9228] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 3448.880052][T21185] usb 5-1: USB disconnect, device number 28 [ 3448.889238][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3449.164818][ T9148] team0: Port device team_slave_0 added [ 3449.196258][ T9148] team0: Port device team_slave_1 added [ 3449.275564][ T29] audit: type=1326 audit(1720180137.390:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.0.19041" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73d1579 code=0x0 [ 3449.381413][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3449.413035][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3449.491282][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3449.540132][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3449.583408][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3449.639905][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3449.732532][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3449.750355][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3449.775333][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3449.784155][ T9148] hsr_slave_0: entered promiscuous mode [ 3449.811323][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3449.820395][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3449.828070][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3449.836276][ T9148] hsr_slave_1: entered promiscuous mode [ 3449.885888][ T9148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3449.913664][ T9148] Cannot create hsr debugfs directory [ 3450.080636][ T29] audit: type=1326 audit(1720180138.190:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.4.19045" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3450.081711][T14979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3450.286420][ T4214] Bluetooth: hci4: command tx timeout [ 3450.309726][T14979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3450.493735][T14979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3450.661407][T14979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3450.907880][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.914389][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.253765][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3451.327401][T14979] bridge_slave_1: left allmulticast mode [ 3451.333087][T14979] bridge_slave_1: left promiscuous mode [ 3451.339936][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3451.348951][T14979] bridge_slave_0: left allmulticast mode [ 3451.359373][T14979] bridge_slave_0: left promiscuous mode [ 3451.366162][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3451.461334][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 3451.487261][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 3451.510735][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3451.526162][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3451.556181][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3451.566839][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3451.597594][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3451.609036][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3451.882876][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 3451.898530][ T8] usbtmc 5-1:16.0: can't read capabilities [ 3451.946732][ T4214] Bluetooth: hci3: command tx timeout [ 3452.053721][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3452.067866][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3452.079122][T14979] bond0 (unregistering): Released all slaves [ 3452.105419][ T9305] netlink: 'syz.2.19054': attribute type 1 has an invalid length. [ 3452.123581][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19054'. [ 3452.159187][ T9294] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 3452.193160][ T8] usb 5-1: USB disconnect, device number 29 [ 3452.350232][ T4214] Bluetooth: hci4: command tx timeout [ 3452.568519][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 3452.983796][T14979] hsr_slave_0: left promiscuous mode [ 3453.005486][T14979] hsr_slave_1: left promiscuous mode [ 3453.024142][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3453.051573][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3453.076467][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3453.103548][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3453.159524][T14979] veth1_macvtap: left promiscuous mode [ 3453.165452][T14979] veth0_macvtap: left promiscuous mode [ 3453.171119][T14979] veth1_vlan: left promiscuous mode [ 3453.176551][T14979] veth0_vlan: left promiscuous mode [ 3453.797791][T14193] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3454.018430][T14193] usb 5-1: Using ep0 maxpacket: 8 [ 3454.028611][ T4214] Bluetooth: hci3: command tx timeout [ 3454.043688][T14979] team0 (unregistering): Port device team_slave_1 removed [ 3454.044730][T14193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3454.077493][T14193] usb 5-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.ab [ 3454.087109][T14193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.095317][T14193] usb 5-1: Product: syz [ 3454.099495][T14193] usb 5-1: Manufacturer: syz [ 3454.104184][T14193] usb 5-1: SerialNumber: syz [ 3454.117391][T14193] usb 5-1: config 0 descriptor?? [ 3454.124709][T14193] usb 5-1: bad CDC descriptors [ 3454.130480][T14193] option 5-1:0.0: GSM modem (1-port) converter detected [ 3454.148941][T14979] team0 (unregistering): Port device team_slave_0 removed [ 3455.051117][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 3455.058619][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 3455.074028][ T9264] bridge_slave_0: entered allmulticast mode [ 3455.090034][ T9264] bridge_slave_0: entered promiscuous mode [ 3455.156979][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 3455.190483][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 3455.199653][ T29] audit: type=1326 audit(1720180143.300:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.19076" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3455.233590][ T9264] bridge_slave_1: entered allmulticast mode [ 3455.241071][ T9264] bridge_slave_1: entered promiscuous mode [ 3455.264510][ T9148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3455.356649][ T9148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3455.368261][ T9148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3455.382883][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3455.398891][ T9148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3455.420112][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3455.474708][ T9264] team0: Port device team_slave_0 added [ 3455.489868][ T9264] team0: Port device team_slave_1 added [ 3455.542533][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3455.556517][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3455.582981][ T58] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 3455.603035][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3455.644848][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3455.654762][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3455.692548][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3455.784258][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 3455.797694][ T9264] hsr_slave_0: entered promiscuous mode [ 3455.799920][ T58] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 3455.815890][ T58] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3455.826117][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3455.836329][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3455.836471][ T9264] hsr_slave_1: entered promiscuous mode [ 3455.846737][ T58] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3455.867005][ T9264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3455.868855][ T58] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3455.882853][ T9264] Cannot create hsr debugfs directory [ 3455.899737][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3456.106231][ T4214] Bluetooth: hci3: command tx timeout [ 3456.152224][ T58] usb 1-1: GET_CAPABILITIES returned 0 [ 3456.163483][ T58] usbtmc 1-1:16.0: can't read capabilities [ 3456.430440][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3456.456506][ T9367] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 3456.475229][ T58] usb 5-1: USB disconnect, device number 30 [ 3456.496499][ T58] option 5-1:0.0: device disconnected [ 3456.580693][T29005] usb 1-1: USB disconnect, device number 48 [ 3456.597015][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 3456.700111][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 3456.707334][T14193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3456.775328][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 3456.782500][T14193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3457.107556][ T9148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3457.193741][ T29] audit: type=1326 audit(1720180145.300:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.19087" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3457.244413][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3457.501572][ T9264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3457.541001][ T9264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3457.587057][ T9264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3457.648131][ T9264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3457.685093][ T9148] veth0_vlan: entered promiscuous mode [ 3457.732883][ T9148] veth1_vlan: entered promiscuous mode [ 3457.908669][ T9148] veth0_macvtap: entered promiscuous mode [ 3457.923804][ T9442] netlink: 188 bytes leftover after parsing attributes in process `syz.0.19093'. [ 3457.971083][ T9148] veth1_macvtap: entered promiscuous mode [ 3458.051612][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3458.108354][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.152302][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.184814][ T4214] Bluetooth: hci3: command tx timeout [ 3458.203687][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.245282][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.282209][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.293104][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.313109][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.327527][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.338341][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.349260][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.361680][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.372852][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.384504][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3458.396571][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.414690][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3458.426005][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.437395][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.448415][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.459015][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.476749][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.489796][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.503031][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.520882][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.531072][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.541910][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.552044][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.553412][T29005] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3458.564544][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.581856][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3458.592737][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3458.614586][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3458.687146][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 3458.714731][ T9148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3458.729462][ T9148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3458.748675][ T9148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3458.763688][ T9148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3458.772472][T29005] usb 3-1: Using ep0 maxpacket: 8 [ 3458.803656][T29005] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3458.811899][T29005] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3458.857176][T29005] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3458.878933][T29011] bridge0: port 1(bridge_slave_0) entered blocking state [ 3458.886131][T29011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3458.895719][T29005] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3458.908473][T29011] bridge0: port 2(bridge_slave_1) entered blocking state [ 3458.915635][T29011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3458.923269][T29005] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3458.973444][T29005] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3459.004867][T29005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3459.213560][T14979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3459.243781][T14979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3459.292879][T29005] usb 3-1: GET_CAPABILITIES returned 0 [ 3459.324520][T29005] usbtmc 3-1:16.0: can't read capabilities [ 3459.372767][ T2442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3459.406816][ T2442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3459.465212][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3459.604162][ T9462] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 3459.649849][ T9264] veth0_vlan: entered promiscuous mode [ 3459.697871][ T9264] veth1_vlan: entered promiscuous mode [ 3459.736830][T30765] usb 3-1: USB disconnect, device number 32 [ 3459.842966][ T9264] veth0_macvtap: entered promiscuous mode [ 3459.876401][ T9264] veth1_macvtap: entered promiscuous mode [ 3459.926680][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3459.949721][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3459.983364][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.018098][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.048585][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.083706][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.117235][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.143076][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.173389][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.213427][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.251920][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.347970][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.373440][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.412813][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.443071][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.473436][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.517740][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3460.580098][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.642777][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.684653][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.710574][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.735001][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.772125][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.790308][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.803391][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.835604][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.864658][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.876783][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.888127][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.912662][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.935315][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.972515][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3460.993149][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.009985][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3461.079910][ T9264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.109909][ T9264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.129983][ T9264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.151912][ T9264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.226386][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19118'. [ 3461.302318][ T9540] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3461.312024][ T9540] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3461.320823][ T9540] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3461.329626][ T9540] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3461.343717][ T9540] vxlan0: entered promiscuous mode [ 3461.648651][ T4880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3461.679074][ T4880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3461.774184][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3461.803782][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3462.104177][T30765] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3462.314351][T30765] usb 2-1: Using ep0 maxpacket: 8 [ 3462.335542][T30765] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3462.373936][T30765] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3462.420325][T30765] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3462.455696][T30765] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3462.508074][T30765] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3462.551309][T30765] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3462.573404][T30765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3462.832470][T30765] usb 2-1: GET_CAPABILITIES returned 0 [ 3462.850563][T30765] usbtmc 2-1:16.0: can't read capabilities [ 3462.871211][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19138'. [ 3462.916331][ T9607] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3462.925278][ T9607] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3462.934084][ T9607] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3462.942796][ T9607] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3463.012354][ T9607] vxlan0: entered promiscuous mode [ 3463.180950][ T9560] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 3463.356446][T30765] usb 2-1: USB disconnect, device number 43 [ 3464.237382][ T9678] veth0_to_hsr: entered promiscuous mode [ 3464.250981][ T9678] vlan2: entered promiscuous mode [ 3464.261669][ T9678] veth0_to_hsr: left promiscuous mode [ 3464.369737][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19163'. [ 3464.919178][ T9711] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3465.239731][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19176'. [ 3465.477986][ T9745] binder: 9739:9745 ioctl c0306201 0 returned -14 [ 3465.712785][ T9764] veth0_to_hsr: entered promiscuous mode [ 3465.726533][ T9764] vlan2: entered promiscuous mode [ 3465.762869][ T9764] veth0_to_hsr: left promiscuous mode [ 3466.026546][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19189'. [ 3466.067910][ T9774] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3466.077095][ T9774] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3466.086068][ T9774] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3466.094968][ T9774] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3466.113727][ T9774] vxlan0: entered promiscuous mode [ 3466.283941][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19192'. [ 3466.492765][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19196'. [ 3466.657976][ T9797] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3466.892745][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19206'. [ 3467.003387][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19209'. [ 3467.547150][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19221'. [ 3467.709334][ T9851] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3467.918533][ T9822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3467.928735][ T9822] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 3467.945183][ T9822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3467.951307][ T9822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3467.979950][ T9822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3467.990848][ T9822] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 3468.152049][ T9822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3468.166532][ T9822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 3468.177087][ T9822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3468.183113][ T9822] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 3468.424453][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19235'. [ 3468.954365][ T9910] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3468.975235][ T29] audit: type=1326 audit(1720180157.090:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.2.19252" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7495579 code=0x0 [ 3469.532065][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19269'. [ 3469.546686][ T9946] vlan2: entered promiscuous mode [ 3469.559493][ T9946] batadv0: entered promiscuous mode [ 3469.565024][ T9946] vlan2: entered allmulticast mode [ 3469.570178][ T9946] batadv0: entered allmulticast mode [ 3469.583551][ T9946] batadv0: left allmulticast mode [ 3469.588603][ T9946] batadv0: left promiscuous mode [ 3470.297246][ T9977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3471.670512][T15133] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3471.724378][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19310'. [ 3471.744717][T10032] vlan2: entered promiscuous mode [ 3471.749775][T10032] batadv0: entered promiscuous mode [ 3471.756193][T10032] vlan2: entered allmulticast mode [ 3471.761338][T10032] batadv0: entered allmulticast mode [ 3471.768722][T10032] batadv0: left allmulticast mode [ 3471.773858][T10032] batadv0: left promiscuous mode [ 3471.870404][T15133] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=8b.30 [ 3471.883422][T15133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.898472][T15133] usb 3-1: config 0 descriptor?? [ 3472.193074][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3472.213188][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3472.367070][T29011] usb 3-1: USB disconnect, device number 33 [ 3472.668141][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19317'. [ 3473.125044][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19325'. [ 3473.146607][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19328'. [ 3473.352197][T10084] input: syz1 as /devices/virtual/input/input178 [ 3473.444447][T10086] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3473.460483][ T29] audit: type=1326 audit(1720180161.570:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.3.19334" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 3474.139295][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19340'. [ 3474.462571][T10119] overlayfs: missing 'lowerdir' [ 3474.523714][T29015] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 3474.545976][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19352'. [ 3474.606182][T10127] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (255) [ 3474.717582][T29015] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 3474.743123][T29015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3474.777397][T29015] usb 1-1: config 0 descriptor?? [ 3474.787228][T29015] ttusbir 1-1:0.0: cannot find expected altsetting [ 3474.996221][ T25] usb 1-1: USB disconnect, device number 49 [ 3475.633447][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3475.845232][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 3475.868115][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3475.889233][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3475.907311][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 3475.916852][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3475.928444][T10152] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3476.019873][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3476.120476][ T6530] udevd[6530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3476.736076][T14193] usb 3-1: USB disconnect, device number 34 [ 3481.650289][T10242] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 3481.865502][T10252] fuse: Bad value for 'fd' [ 3512.346978][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.353455][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.789487][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.795919][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 3615.383645][ T30] INFO: task kworker/1:9:29005 blocked for more than 143 seconds. [ 3615.391491][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3615.399780][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3615.408603][ T30] task:kworker/1:9 state:D stack:20528 pid:29005 tgid:29005 ppid:2 flags:0x00004000 [ 3615.418911][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 3615.425689][ T30] Call Trace: [ 3615.428988][ T30] [ 3615.431933][ T30] __schedule+0x17e8/0x4a20 [ 3615.436519][ T30] ? __pfx___schedule+0x10/0x10 [ 3615.441389][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3615.447516][ T30] ? __pfx_lock_release+0x10/0x10 [ 3615.452572][ T30] ? kick_pool+0x1bd/0x620 [ 3615.461171][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3615.467310][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3615.472536][ T30] ? schedule+0x90/0x320 [ 3615.477168][ T30] schedule+0x14b/0x320 [ 3615.481341][ T30] schedule_preempt_disabled+0x13/0x30 [ 3615.486935][ T30] __mutex_lock+0x6a4/0xd70 [ 3615.491454][ T30] ? __mutex_lock+0x527/0xd70 [ 3615.496200][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 3615.502464][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3615.507526][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3615.513619][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3615.519959][ T30] ? process_scheduled_works+0x945/0x1830 [ 3615.525736][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 3615.531816][ T30] ? process_scheduled_works+0x945/0x1830 [ 3615.537623][ T30] process_scheduled_works+0xa2c/0x1830 [ 3615.543193][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3615.549315][ T30] ? assign_work+0x364/0x3d0 [ 3615.554018][ T30] worker_thread+0x86d/0xd50 [ 3615.558714][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3615.567479][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3615.572704][ T30] kthread+0x2f0/0x390 [ 3615.578058][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3615.583210][ T30] ? __pfx_kthread+0x10/0x10 [ 3615.587877][ T30] ret_from_fork+0x4b/0x80 [ 3615.592314][ T30] ? __pfx_kthread+0x10/0x10 [ 3615.597144][ T30] ret_from_fork_asm+0x1a/0x30 [ 3615.601941][ T30] [ 3615.605059][ T30] INFO: task syz.4.19204:9806 blocked for more than 143 seconds. [ 3615.612778][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3615.620494][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3615.629612][ T30] task:syz.4.19204 state:D stack:24640 pid:9806 tgid:9806 ppid:8323 flags:0x20004004 [ 3615.639893][ T30] Call Trace: [ 3615.643180][ T30] [ 3615.646191][ T30] __schedule+0x17e8/0x4a20 [ 3615.650717][ T30] ? __pfx___schedule+0x10/0x10 [ 3615.655662][ T30] ? __pfx_lock_release+0x10/0x10 [ 3615.660709][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3615.666269][ T30] ? schedule+0x90/0x320 [ 3615.670521][ T30] schedule+0x14b/0x320 [ 3615.678717][ T30] schedule_preempt_disabled+0x13/0x30 [ 3615.684310][ T30] __mutex_lock+0x6a4/0xd70 [ 3615.688837][ T30] ? kobject_put+0x443/0x480 [ 3615.694392][ T30] ? __mutex_lock+0x527/0xd70 [ 3615.699112][ T30] ? rfkill_unregister+0xd0/0x230 [ 3615.704512][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3615.709571][ T30] ? __pfx_device_del+0x10/0x10 [ 3615.714529][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 3615.720540][ T30] rfkill_unregister+0xd0/0x230 [ 3615.725485][ T30] nfc_unregister_device+0x96/0x2a0 [ 3615.730708][ T30] virtual_ncidev_close+0x59/0x90 [ 3615.735815][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 3615.741557][ T30] __fput+0x24a/0x8a0 [ 3615.745609][ T30] task_work_run+0x24f/0x310 [ 3615.750229][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3615.755405][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 3615.761116][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 3615.766819][ T30] __do_fast_syscall_32+0xc4/0x120 [ 3615.771943][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3615.778179][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3615.787175][ T30] do_fast_syscall_32+0x34/0x80 [ 3615.792071][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3615.798495][ T30] RIP: 0023:0xf7495579 [ 3615.802573][ T30] RSP: 002b:00000000f75e7a9c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 3615.811308][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 3615.819518][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3615.827701][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3615.836295][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3615.844512][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3615.852506][ T30] [ 3615.855620][ T30] INFO: task syz.1.19210:9822 blocked for more than 143 seconds. [ 3615.863394][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3615.871034][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3615.879782][ T30] task:syz.1.19210 state:D stack:22832 pid:9822 tgid:9821 ppid:9148 flags:0x20004006 [ 3615.890022][ T30] Call Trace: [ 3615.893560][ T30] [ 3615.896506][ T30] __schedule+0x17e8/0x4a20 [ 3615.901032][ T30] ? __pfx___schedule+0x10/0x10 [ 3615.908843][ T30] ? __pfx_lock_release+0x10/0x10 [ 3615.914059][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3615.919564][ T30] ? schedule+0x90/0x320 [ 3615.924056][ T30] schedule+0x14b/0x320 [ 3615.928236][ T30] schedule_preempt_disabled+0x13/0x30 [ 3615.933786][ T30] __mutex_lock+0x6a4/0xd70 [ 3615.938300][ T30] ? __mutex_lock+0x527/0xd70 [ 3615.942970][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 3615.948633][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3615.954216][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3615.959452][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3615.965445][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3615.971807][ T30] nfc_rfkill_set_block+0x50/0x310 [ 3615.977056][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3615.982790][ T30] rfkill_set_block+0x1f1/0x440 [ 3615.987800][ T30] rfkill_fop_write+0x5bb/0x790 [ 3615.992674][ T30] ? common_file_perm+0x1a6/0x210 [ 3615.997826][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3616.003207][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 3616.008675][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 3616.013581][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3616.018960][ T30] vfs_write+0x2a2/0xc90 [ 3616.023190][ T30] ? __mm_populate+0x39a/0x460 [ 3616.028252][ T30] ? __pfx_vfs_write+0x10/0x10 [ 3616.033030][ T30] ? do_futex+0x33b/0x560 [ 3616.037568][ T30] ? __fget_files+0x29/0x470 [ 3616.042178][ T30] ? __fget_files+0x3f6/0x470 [ 3616.047065][ T30] ? __fget_files+0x29/0x470 [ 3616.051681][ T30] ksys_write+0x1a0/0x2c0 [ 3616.056110][ T30] ? __pfx_ksys_write+0x10/0x10 [ 3616.060978][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3616.067725][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3616.072937][ T30] __do_fast_syscall_32+0xb4/0x120 [ 3616.078106][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 3616.083057][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3616.088386][ T30] do_fast_syscall_32+0x34/0x80 [ 3616.093330][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3616.099697][ T30] RIP: 0023:0xf73c7579 [ 3616.112163][ T30] RSP: 002b:00000000f5ce057c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3616.120759][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 3616.128913][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 3616.136988][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3616.145084][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3616.153070][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3616.161128][ T30] [ 3616.164236][ T30] [ 3616.164236][ T30] Showing all locks held in the system: [ 3616.171950][ T30] 1 lock held by khungtaskd/30: [ 3616.176893][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 3616.187184][ T30] 2 locks held by getty/4851: [ 3616.191867][ T30] #0: ffff88802a8250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3616.201856][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 3616.212022][ T30] 3 locks held by kworker/1:9/29005: [ 3616.217379][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3616.228458][ T30] #1: ffffc9000d607d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3616.242023][ T30] #2: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 3616.253480][ T30] 2 locks held by syz.4.19204/9806: [ 3616.258681][ T30] #0: ffff88806a975100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 3616.268535][ T30] #1: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 3616.278699][ T30] 2 locks held by syz.1.19210/9822: [ 3616.284087][ T30] #0: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 3616.294269][ T30] #1: ffff88806a975100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 3616.304011][ T30] 2 locks held by syz-executor/10178: [ 3616.309392][ T30] #0: ffff88801fa03118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 3616.319496][ T30] #1: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 3616.329548][ T30] 2 locks held by syz-executor/10181: [ 3616.335134][ T30] #0: ffff88807b083918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 3616.345374][ T30] #1: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 3616.355636][ T30] 2 locks held by syz.2.19387/10198: [ 3616.360922][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.369550][ T30] #1: ffffffff8f8bb6e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 3616.379696][ T30] 1 lock held by syz.0.19395/10219: [ 3616.384983][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.393550][ T30] 1 lock held by syz.3.19408/10251: [ 3616.398757][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.407268][ T30] 1 lock held by syz-executor/10253: [ 3616.412551][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.421068][ T30] 1 lock held by syz-executor/10254: [ 3616.426815][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.435768][ T30] 1 lock held by syz-executor/10255: [ 3616.441072][ T30] #0: ffffffff8eb2f728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3616.449672][ T30] [ 3616.452002][ T30] ============================================= [ 3616.452002][ T30] [ 3616.460478][ T30] NMI backtrace for cpu 1 [ 3616.464822][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3616.474722][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3616.484797][ T30] Call Trace: [ 3616.488080][ T30] [ 3616.490999][ T30] dump_stack_lvl+0x241/0x360 [ 3616.495689][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3616.500898][ T30] ? __pfx__printk+0x10/0x10 [ 3616.505488][ T30] ? vprintk_emit+0x631/0x770 [ 3616.510177][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 3616.515209][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 3616.520154][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3616.525606][ T30] ? _printk+0xd5/0x120 [ 3616.529770][ T30] ? __pfx__printk+0x10/0x10 [ 3616.534362][ T30] ? __wake_up_klogd+0xcc/0x110 [ 3616.539225][ T30] ? __pfx__printk+0x10/0x10 [ 3616.543829][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 3616.548869][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3616.554851][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 3616.560850][ T30] watchdog+0xfde/0x1020 [ 3616.565102][ T30] ? watchdog+0x1ea/0x1020 [ 3616.569531][ T30] ? __pfx_watchdog+0x10/0x10 [ 3616.574209][ T30] kthread+0x2f0/0x390 [ 3616.578292][ T30] ? __pfx_watchdog+0x10/0x10 [ 3616.582972][ T30] ? __pfx_kthread+0x10/0x10 [ 3616.587564][ T30] ret_from_fork+0x4b/0x80 [ 3616.591989][ T30] ? __pfx_kthread+0x10/0x10 [ 3616.596578][ T30] ret_from_fork_asm+0x1a/0x30 [ 3616.601356][ T30] [ 3616.604877][ T30] Sending NMI from CPU 1 to CPUs 0: [ 3616.610110][ C0] NMI backtrace for cpu 0 [ 3616.610123][ C0] CPU: 0 PID: 4880 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3616.610143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3616.610154][ C0] Workqueue: events_unbound toggle_allocation_gate [ 3616.610177][ C0] RIP: 0010:kasan_check_range+0x5/0x290 [ 3616.610200][ C0] Code: 8d e8 cf 25 e4 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 3616.610214][ C0] RSP: 0018:ffffc9000420f320 EFLAGS: 00000046 [ 3616.610228][ C0] RAX: 0000000000000002 RBX: 00000000000000bd RCX: ffffffff8172767e [ 3616.610240][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa7590 [ 3616.610252][ C0] RBP: 00000000ffffffff R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 3616.610264][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: 0000000000000000 [ 3616.610276][ C0] R13: ffff888026a9c700 R14: 0000000000000000 R15: ffff888026a9c700 [ 3616.610289][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 3616.610303][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3616.610316][ C0] CR2: 00005575c8442600 CR3: 000000000e132000 CR4: 00000000003506f0 [ 3616.610330][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3616.610341][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3616.610352][ C0] Call Trace: [ 3616.610359][ C0] [ 3616.610366][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3616.610384][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3616.610402][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3616.610426][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3616.610443][ C0] ? nmi_handle+0x14f/0x5a0 [ 3616.610465][ C0] ? nmi_handle+0x2a/0x5a0 [ 3616.610486][ C0] ? kasan_check_range+0x5/0x290 [ 3616.610504][ C0] ? default_do_nmi+0x63/0x160 [ 3616.610521][ C0] ? exc_nmi+0x123/0x1f0 [ 3616.610537][ C0] ? end_repeat_nmi+0xf/0x53 [ 3616.610561][ C0] ? __lock_acquire+0x86e/0x1fd0 [ 3616.610578][ C0] ? kasan_check_range+0x5/0x290 [ 3616.610596][ C0] ? kasan_check_range+0x5/0x290 [ 3616.610616][ C0] ? kasan_check_range+0x5/0x290 [ 3616.610634][ C0] [ 3616.610640][ C0] [ 3616.610646][ C0] __lock_acquire+0x86e/0x1fd0 [ 3616.610670][ C0] lock_acquire+0x1ed/0x550 [ 3616.610685][ C0] ? __pte_offset_map+0x82/0x380 [ 3616.610710][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3616.610728][ C0] ? __pfx_switch_ldt+0x10/0x10 [ 3616.610744][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3616.610763][ C0] __pte_offset_map+0x9e/0x380 [ 3616.610783][ C0] ? __pte_offset_map+0x82/0x380 [ 3616.610805][ C0] ? __pfx___pte_offset_map+0x10/0x10 [ 3616.610829][ C0] __pte_offset_map_lock+0xc7/0x300 [ 3616.610845][ C0] ? __text_poke+0xaec/0xd30 [ 3616.610861][ C0] ? __pfx_lock_release+0x10/0x10 [ 3616.610877][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 3616.610899][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 3616.610919][ C0] ? walk_to_pmd+0x19b/0x240 [ 3616.610940][ C0] ? kmalloc_node_trace_noprof+0x8d/0x300 [ 3616.610961][ C0] __text_poke+0x2c5/0xd30 [ 3616.610978][ C0] ? kmalloc_trace_noprof+0x84/0x2c0 [ 3616.611004][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 3616.611022][ C0] ? __pfx___text_poke+0x10/0x10 [ 3616.611037][ C0] ? kmalloc_trace_noprof+0x83/0x2c0 [ 3616.611058][ C0] ? perf_event_text_poke+0x258/0x330 [ 3616.611079][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 3616.611096][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 3616.611115][ C0] ? __pfx___might_resched+0x10/0x10 [ 3616.611139][ C0] text_poke_bp_batch+0x59c/0xb30 [ 3616.611161][ C0] ? kmalloc_node_trace_noprof+0x8d/0x300 [ 3616.611182][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 3616.611202][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 3616.611224][ C0] text_poke_finish+0x30/0x50 [ 3616.611241][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 3616.611259][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 3616.611282][ C0] static_key_enable+0x1a/0x20 [ 3616.611302][ C0] toggle_allocation_gate+0xb5/0x250 [ 3616.611321][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 3616.611340][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3616.611362][ C0] ? process_scheduled_works+0x945/0x1830 [ 3616.611378][ C0] process_scheduled_works+0xa2c/0x1830 [ 3616.611405][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3616.611424][ C0] ? assign_work+0x364/0x3d0 [ 3616.611442][ C0] worker_thread+0x86d/0xd50 [ 3616.611462][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3616.611481][ C0] ? __kthread_parkme+0x169/0x1d0 [ 3616.611499][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3616.611515][ C0] kthread+0x2f0/0x390 [ 3616.611533][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3616.611548][ C0] ? __pfx_kthread+0x10/0x10 [ 3616.611566][ C0] ret_from_fork+0x4b/0x80 [ 3616.611584][ C0] ? __pfx_kthread+0x10/0x10 [ 3616.611601][ C0] ret_from_fork_asm+0x1a/0x30 [ 3616.611628][ C0] [ 3616.619614][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3616.619629][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3616.619648][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3616.619660][ T30] Call Trace: [ 3616.619667][ T30] [ 3616.619676][ T30] dump_stack_lvl+0x241/0x360 [ 3616.619707][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3616.619729][ T30] ? __pfx__printk+0x10/0x10 [ 3616.619754][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3616.619780][ T30] ? vscnprintf+0x5d/0x90 [ 3616.619800][ T30] panic+0x349/0x860 [ 3616.619822][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3616.619843][ T30] ? __pfx_panic+0x10/0x10 [ 3616.619862][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 3616.619887][ T30] ? __irq_work_queue_local+0x137/0x410 [ 3616.619906][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3616.619925][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3616.619942][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 3616.619963][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 3616.619984][ T30] watchdog+0x101d/0x1020 [ 3616.620004][ T30] ? watchdog+0x1ea/0x1020 [ 3616.620028][ T30] ? __pfx_watchdog+0x10/0x10 [ 3616.620046][ T30] kthread+0x2f0/0x390 [ 3616.620066][ T30] ? __pfx_watchdog+0x10/0x10 [ 3616.620083][ T30] ? __pfx_kthread+0x10/0x10 [ 3616.620103][ T30] ret_from_fork+0x4b/0x80 [ 3616.620124][ T30] ? __pfx_kthread+0x10/0x10 [ 3616.620144][ T30] ret_from_fork_asm+0x1a/0x30 [ 3616.620178][ T30] [ 3616.626827][ T30] Kernel Offset: disabled [ 3617.247901][ T30] Rebooting in 86400 seconds..