last executing test programs: 31.375781277s ago: executing program 1 (id=2236): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000180), 0x0) 30.84464134s ago: executing program 1 (id=2241): r0 = socket$netlink(0x10, 0x3, 0xf) write$binfmt_elf64(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x852) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) unshare(0x4040600) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x587300, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000002c00)={'nr0\x00'}) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc080) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000480)=0x0) io_submit(r7, 0x1, &(0x7f0000000640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)='p', 0xf4240}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000040)={0x1, 0x3, 0xffffffff}) 8.125340291s ago: executing program 1 (id=2242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000640), 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x109000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) mknodat$loop(r8, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) name_to_handle_at(r8, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)=@ocfs2_parent={0x18}, &(0x7f0000000140), 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rthdr_2292={{0x14, 0x29, 0xb}}], 0x14}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) getpeername$tipc(r3, &(0x7f0000000040), &(0x7f00000001c0)=0x10) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000380)) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440309000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) 7.296780359s ago: executing program 1 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) utimes(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000003080104000000000000000000000000060002400000000005000300060000000c0004800800064000000000f760e2ed6711a447c128c279b939b7971c262ee5f0df9b4d3f6c3a8b2d7f0b7c1afa715417aa9aba211662f18370fdd3ea8683077822e6bf719c66a5244c8115133c6efe36a81e0cc3c2b04af14f39b5ce5bb429427153e07c6e9bb7d0e9541a25ee305a35b23caa995518bcbd4de32cdb8861330635447773585bd98c883022815ccfd012d336123d14917960b73cf79ada04aa4c537dee1e9b113fec2e962c4f02b524d3b237aa193d755222322471c000a5bc1e0756fca7e2045c384f4f9707e98a"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x188, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x158, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}]}, 0x188}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0xc}, 0x90) 5.832625019s ago: executing program 1 (id=2326): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1}, 0x4) 5.555640666s ago: executing program 1 (id=2327): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) 3.999585735s ago: executing program 4 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x1, 'none\x00'}, 0x2c) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r9 = syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f01000000000000000000062407000000090581034000000000090582020800000000090503"], 0x0) syz_usb_ep_read(r9, 0x0, 0x73, &(0x7f0000000000)=""/115) 3.852666072s ago: executing program 0 (id=2340): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000240)={0x0, 0x4, 0x80, 0x10000000}, &(0x7f00000001c0), &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) pipe(0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04140602c90004990b"], 0x9) r1 = geteuid() quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, r1, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x9, 0x8}, {0x0, 0x4719}}}}, 0x15) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$sequencer(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="9200"], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001240)="e1559a5e60105410b305c60625655dff", 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3f, 0x1}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000400)=0x4, 0x8) add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)="5ea6a58c52f8ac1df9ea63ac32004673c8c51bde6722e926c732a44ade2c4c153562a0fb8fa191dbc1281c98cd6db089948928dd54ca34205bf05e988aaf8bca87b56c1e3907e8dfa10077ed7bd211e3be5e42d5e1", 0x55, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) recvmmsg(r4, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) memfd_create(&(0x7f0000000700)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\x82E6\x8f\xee\x88e\x7f\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80k\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xda\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xc0\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xcekh\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd0/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x80th~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\xff\xff\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88YY\xd4\xff\x00\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc7\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRYX\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\xded\x16A!\x8b#1\xf9\x05\x00G\x02\xa3\xe6Bl\xd2\x02\xfb[\x82J\xca\xdf:\x8ft\xe0\xf8\a\x00\x00\x00\x00\x00\x00\x00\x00\xde-U\xd8\xc5\x85\x9d\xb6~p;\xe3\"`\x83\x12\xc1\xa5\xa7\tf\xf2\xde\xe2\x01\xcc\xf7\x1cjq0\x90\xa9g{\x9b6\xc4cN\xcd\xc6\xfbw\x01\xe3Z\x02\xed\xab\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r?\x1e\xee,\xca\xffn\x1eq\xd6\xccs\x92;\xf5*\xa3\xe6_S\f12+\xf7\x98\x9a\xc0{j\xbb\x1c\x05k\xea#2\xa2U\xfc\xd3c\xe0E\xcc\'\xe7s\xa2\x7f\xd1 ,\x91\x8b(L\x00\xc0\xaf\xd2\xc5', 0x2) 3.810612922s ago: executing program 2 (id=2341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in=@local, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.439576808s ago: executing program 2 (id=2343): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_gettime(0x2, &(0x7f0000000200)) write$apparmor_current(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='permhat '], 0x7c) socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r0, 0x80079a0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="08000000000000000a0001"], 0x2c}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r3, r0, 0x0, 0xffff) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80001, 0x102, 0x9}, 0x18) 2.941071988s ago: executing program 2 (id=2344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 2.864938779s ago: executing program 0 (id=2345): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "151ef7", 0x14, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) 2.769397281s ago: executing program 0 (id=2347): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 2.064980705s ago: executing program 4 (id=2353): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 2.017977542s ago: executing program 2 (id=2354): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 1.930964126s ago: executing program 4 (id=2356): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000000ed00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0xffffffec}, './file0\x00'}) 1.79424114s ago: executing program 2 (id=2357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003080)=ANY=[], 0xbb4}}, 0x0) 1.758092355s ago: executing program 4 (id=2359): ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.3027821s ago: executing program 4 (id=2362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in=@local, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.043076712s ago: executing program 4 (id=2364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x1, 'none\x00'}, 0x2c) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r9 = syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f01000000000000000000062407000000090581034000000000090582020800000000090503"], 0x0) syz_usb_ep_read(r9, 0x0, 0x73, &(0x7f0000000000)=""/115) 957.920756ms ago: executing program 0 (id=2365): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="5001000000000000", @ANYRES64=r0], 0x150) 915.01536ms ago: executing program 0 (id=2367): ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x2) getdents64(r0, 0x0, 0x18) 764.181371ms ago: executing program 2 (id=2368): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x24b5, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r4, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 598.245946ms ago: executing program 3 (id=2369): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 510.683561ms ago: executing program 3 (id=2370): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/95, 0x5f}, 0x0) 454.299086ms ago: executing program 3 (id=2371): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f00000002c0)) 405.858379ms ago: executing program 3 (id=2372): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback={0xfec0ffff00000000}}}) 291.799391ms ago: executing program 3 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 281.053688ms ago: executing program 3 (id=2374): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=2375): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) kernel console output (not intermixed with test programs): ue to avoid problems! [ 337.649083][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.685259][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.698592][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.720026][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.747430][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.764185][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.775586][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.801549][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.812368][T11362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.827569][T11362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.872134][T11362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.975846][T11362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.016654][T11362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.050752][T11362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.087458][T11362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.147407][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.333739][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.395806][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.402986][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.426268][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.433509][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.490125][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.536101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.684263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.692233][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.826457][T11754] sctp: [Deprecated]: syz.1.1868 (pid 11754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.826457][T11754] Use struct sctp_sack_info instead [ 338.868270][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.982653][T11479] veth0_vlan: entered promiscuous mode [ 339.062563][T11479] veth1_vlan: entered promiscuous mode [ 339.459159][T11479] veth0_macvtap: entered promiscuous mode [ 339.499456][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 339.519339][T11479] veth1_macvtap: entered promiscuous mode [ 339.563334][T11772] input: syz1 as /devices/virtual/input/input32 [ 339.627745][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.688844][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.729558][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.766109][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.779025][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.792887][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.804148][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.853326][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.872711][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.892811][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.912827][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.924149][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.968306][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.026382][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.037221][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.048221][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.058626][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.074678][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.086403][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.097452][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.108993][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.121282][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.135826][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.196835][T11799] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 340.213095][T11796] IPVS: stopping backup sync thread 11799 ... [ 340.236268][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.302895][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.358927][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.395186][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.422679][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.434109][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.444526][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.455741][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.471115][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.520167][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.533125][ T25] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 340.557132][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.569071][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.610383][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.628629][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.641036][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.652447][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.662768][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.673961][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.686691][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.697450][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.711247][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.735443][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.743303][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.762336][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.774642][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.792360][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 4 [ 340.817777][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 340.831527][T11479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.832974][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.882941][T11479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.885332][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 340.909794][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 340.914763][T11479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.918435][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 340.932035][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 340.954415][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 340.966217][T11479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.002986][ T5151] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 341.213038][ T5151] usb 4-1: Using ep0 maxpacket: 8 [ 341.275215][ T5151] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 341.285138][ T5151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.294109][ T5151] usb 4-1: Product: syz [ 341.301077][ T5151] usb 4-1: Manufacturer: syz [ 341.306475][ T5151] usb 4-1: SerialNumber: syz [ 341.334679][ T5151] usb 4-1: config 0 descriptor?? [ 341.405845][ T5151] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 341.438932][ T5151] dvb-usb: bulk message failed: -22 (2/0) [ 341.452666][ T5151] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-22) [ 341.485996][ T2837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.526015][ T5151] cinergyT2 4-1:0.0: probe with driver cinergyT2 failed with error -22 [ 341.535635][ T2837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.695983][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.744753][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.861788][ T5151] usb 4-1: USB disconnect, device number 21 [ 341.921429][T11835] sctp: [Deprecated]: syz.1.1889 (pid 11835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.921429][T11835] Use struct sctp_sack_info instead [ 341.969143][ T7173] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 342.163198][ T7173] usb 5-1: Using ep0 maxpacket: 32 [ 342.199753][ T7173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.238992][ T7173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.268869][ T7173] usb 5-1: New USB device found, idVendor=04f3, idProduct=1236, bcdDevice= 0.00 [ 342.284839][ T7173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.298376][ T7173] usb 5-1: config 0 descriptor?? [ 342.556038][ T7173] usbhid 5-1:0.0: can't add hid device: -71 [ 342.571572][ T7173] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.592988][ T7173] usb 5-1: USB disconnect, device number 28 [ 343.095496][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 343.102952][ T5151] usb 1-1: USB disconnect, device number 21 [ 343.118891][T11859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1896'. [ 343.156267][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1896'. [ 343.205154][T11859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1896'. [ 343.232858][T11859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1896'. [ 343.282766][ T29] audit: type=1326 audit(1721654993.539:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.4.1899" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 343.304339][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.706169][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 343.713384][ T5110] Bluetooth: Wrong link type (-22) [ 343.718815][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 343.725453][ T5110] Bluetooth: Wrong link type (-22) [ 343.730570][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 343.737151][ T5110] Bluetooth: Wrong link type (-22) [ 343.742282][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 343.748905][ T5110] Bluetooth: Wrong link type (-22) [ 343.756781][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 343.764671][ T5110] Bluetooth: Wrong link type (-22) [ 343.786639][T11875] input: syz0 as /devices/virtual/input/input33 [ 344.122775][ T7173] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 344.220278][T11885] netlink: 'syz.2.1904': attribute type 11 has an invalid length. [ 344.229157][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 344.312850][ T7173] usb 2-1: Using ep0 maxpacket: 8 [ 344.345398][ T7173] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 344.373531][ T7173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.381685][ T7173] usb 2-1: Product: syz [ 344.387530][ T7173] usb 2-1: Manufacturer: syz [ 344.393302][ T7173] usb 2-1: SerialNumber: syz [ 344.400282][ T7173] usb 2-1: config 0 descriptor?? [ 344.409376][ T7173] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 344.429953][ T7173] dvb-usb: bulk message failed: -22 (2/0) [ 344.440088][ T7173] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-22) [ 344.465535][ T7173] cinergyT2 2-1:0.0: probe with driver cinergyT2 failed with error -22 [ 344.483531][ T29] audit: type=1326 audit(1721654994.739:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.4.1906" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 344.728401][ T5152] usb 2-1: USB disconnect, device number 21 [ 344.810674][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.834322][T11900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1911'. [ 344.855704][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'. [ 344.865402][T11900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1911'. [ 344.904285][T11900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1911'. [ 344.927852][ T2852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.083834][ T2852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.211745][ T2852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.398167][ T2852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.829119][T11917] netlink: 'syz.1.1918': attribute type 11 has an invalid length. [ 345.865085][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 345.875059][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.883347][ T2852] bridge_slave_1: left allmulticast mode [ 345.889013][ T2852] bridge_slave_1: left promiscuous mode [ 345.898835][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 345.914890][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 345.950156][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.958192][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 345.974977][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 345.986361][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 345.988634][ T7173] IPVS: starting estimator thread 0... [ 346.011024][ T2852] bridge_slave_0: left allmulticast mode [ 346.037984][ T2852] bridge_slave_0: left promiscuous mode [ 346.055039][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.132720][T11925] IPVS: using max 20 ests per chain, 48000 per kthread [ 346.220574][T11929] input: syz0 as /devices/virtual/input/input34 [ 347.216523][ T2852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.244157][ T2852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.258703][ T2852] bond0 (unregistering): Released all slaves [ 347.473081][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 347.662767][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 347.675264][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.700723][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 347.760931][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 347.795020][ T46] usb 2-1: SerialNumber: syz [ 347.822039][ T46] usb 2-1: config 0 descriptor?? [ 347.964401][ T2852] hsr_slave_0: left promiscuous mode [ 347.983697][ T2852] hsr_slave_1: left promiscuous mode [ 347.994126][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.015302][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.033929][ T46] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 348.046828][ T46] usb 2-1: No valid video chain found. [ 348.047135][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.075704][ T5110] Bluetooth: hci8: command tx timeout [ 348.080263][ T46] usb 2-1: USB disconnect, device number 22 [ 348.100248][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.168513][ T2852] veth1_macvtap: left promiscuous mode [ 348.174910][ T2852] veth0_macvtap: left promiscuous mode [ 348.180969][ T2852] veth1_vlan: left promiscuous mode [ 348.187575][ T2852] veth0_vlan: left promiscuous mode [ 348.625930][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 348.815756][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.827227][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.837703][ T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.854144][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.871610][ T46] usb 2-1: config 0 descriptor?? [ 349.287656][T11994] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 349.289835][ T46] hid (null): bogus close delimiter [ 349.318121][T11994] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 349.356252][T11994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.362195][T11994] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 349.412384][T11994] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 349.433458][T11994] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 349.464154][T11994] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 349.474195][T11994] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 349.494678][ T46] usb 2-1: string descriptor 0 read error: -22 [ 349.502481][T11994] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 349.522507][T11994] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 349.757561][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.790363][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.989870][ T2852] team0 (unregistering): Port device team_slave_1 removed [ 350.095649][ T2852] team0 (unregistering): Port device team_slave_0 removed [ 351.197108][T11946] bridge_slave_1: left allmulticast mode [ 351.203221][T11946] bridge_slave_1: left promiscuous mode [ 351.209423][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.220871][T11946] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 351.263863][ T46] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #100: -71 [ 351.292450][ T46] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 351.310048][ T46] uclogic 0003:256C:006D.001A: failed probing pen v1 parameters: -71 [ 351.325063][ T46] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 351.361280][ T46] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 351.400514][ T46] usb 2-1: USB disconnect, device number 23 [ 351.567772][T11928] chnl_net:caif_netlink_parms(): no params data found [ 351.879879][T11928] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.888609][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.896768][T11928] bridge_slave_0: entered allmulticast mode [ 351.904952][T11928] bridge_slave_0: entered promiscuous mode [ 351.936736][T11928] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.996443][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.038016][T11928] bridge_slave_1: entered allmulticast mode [ 352.072195][T11928] bridge_slave_1: entered promiscuous mode [ 352.308540][T11928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.314794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055233000: rx timeout, send abort [ 352.328397][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055233000: 0x0fe00: (3) A timeout occurred and this is the connection abort to close the session. [ 352.419872][T11928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.603861][T11928] team0: Port device team_slave_0 added [ 352.656526][T11928] team0: Port device team_slave_1 added [ 352.757580][T11928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.774642][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.862893][T11928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.905175][T11928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.912360][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.951989][T11928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.145376][T11928] hsr_slave_0: entered promiscuous mode [ 353.162934][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.192209][T11928] hsr_slave_1: entered promiscuous mode [ 353.239882][T11928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.263926][T11928] Cannot create hsr debugfs directory [ 353.392840][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 353.412059][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.466118][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 353.539934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 353.559964][ T9] usb 2-1: SerialNumber: syz [ 353.613041][ T9] usb 2-1: config 0 descriptor?? [ 353.835786][ T9] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 353.845981][ T9] usb 2-1: No valid video chain found. [ 353.882062][ T9] usb 2-1: USB disconnect, device number 24 [ 354.383363][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 354.595132][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.621669][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.632876][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.643280][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.656459][ T9] usb 2-1: config 0 descriptor?? [ 354.984446][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 354.995506][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 355.003994][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 355.016738][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 355.029102][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 355.038001][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 355.061244][ T5110] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 355.069208][ T5110] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 355.079005][ T5110] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 355.090715][ T5110] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 355.103844][ T5110] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 355.112436][ T9] hid (null): bogus close delimiter [ 355.119099][ T5110] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 355.181319][T11928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.218099][T11928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.280925][ T9] usb 2-1: string descriptor 0 read error: -22 [ 355.282541][T11928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.387527][T11928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.544377][T12073] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 355.580238][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.672121][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.748369][ T9] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 355.764015][ T9] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 355.782689][ T9] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 355.801544][ T9] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 355.811707][ T9] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 355.880155][ T9] usb 2-1: USB disconnect, device number 25 [ 355.903056][T11431] udevd[11431]: setting mode of /dev/bus/usb/002/025 to 020664 failed: No such file or directory [ 355.922883][T11431] udevd[11431]: setting owner of /dev/bus/usb/002/025 to uid=0, gid=0 failed: No such file or directory [ 356.210870][T11928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.293918][T12128] chnl_net:caif_netlink_parms(): no params data found [ 356.421514][T11928] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.673971][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.681139][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.722076][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.729277][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.776489][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.804496][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.811778][T12128] bridge_slave_0: entered allmulticast mode [ 356.858880][T12128] bridge_slave_0: entered promiscuous mode [ 356.906146][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.940019][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.969251][T12128] bridge_slave_1: entered allmulticast mode [ 356.986782][T12128] bridge_slave_1: entered promiscuous mode [ 357.174352][T12128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.194542][ T54] Bluetooth: hci11: command tx timeout [ 357.246024][T12128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.547172][T12128] team0: Port device team_slave_0 added [ 357.587002][T12128] team0: Port device team_slave_1 added [ 357.913932][T12128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.941033][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.002764][T12128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.071285][T12128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.088737][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.166068][ T5199] IPVS: starting estimator thread 0... [ 358.228516][T12128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.282753][T12225] IPVS: using max 21 ests per chain, 50400 per kthread [ 358.335903][T11928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.438963][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 358.633036][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 358.642418][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.642489][T12128] hsr_slave_0: entered promiscuous mode [ 358.667154][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 358.698931][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.731850][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 358.742004][T12128] hsr_slave_1: entered promiscuous mode [ 358.748572][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.765869][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 358.774269][ T25] usb 2-1: SerialNumber: syz [ 358.782155][T12224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.800434][T12128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.864816][T12128] Cannot create hsr debugfs directory [ 358.967719][T12244] @: renamed from vlan0 (while UP) [ 359.045556][ T58] usb 2-1: USB disconnect, device number 26 [ 359.273365][ T54] Bluetooth: hci11: command tx timeout [ 359.407335][T11928] veth0_vlan: entered promiscuous mode [ 359.529810][T12128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.613967][T11928] veth1_vlan: entered promiscuous mode [ 359.694738][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.828066][T12128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.939454][T12273] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2015'. [ 359.964798][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 359.991156][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 360.009901][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.011815][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2015'. [ 360.030867][ T8] usb 1-1: config 0 descriptor?? [ 360.046707][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 360.056063][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 360.065698][T12273] caif0: entered allmulticast mode [ 360.191771][T12128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.264223][T11928] veth0_macvtap: entered promiscuous mode [ 360.318037][T11928] veth1_macvtap: entered promiscuous mode [ 360.425105][ T58] usb 1-1: USB disconnect, device number 22 [ 360.554481][T12281] input: syz0 as /devices/virtual/input/input35 [ 360.586584][T12128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.794258][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.835867][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.898947][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.910233][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.927312][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.938337][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.970792][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.001456][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.023844][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.050505][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.069748][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.081228][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.091531][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.102227][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.112258][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.124753][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.135341][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.146430][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.156563][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.170043][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.180894][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.192044][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.214115][T11928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.232156][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.245594][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.287734][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.298758][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.310534][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.321523][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.341810][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.372244][ T54] Bluetooth: hci11: command tx timeout [ 361.387541][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.442462][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.464382][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.476829][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.489411][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.500895][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.511552][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.550373][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.567595][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.617976][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.628698][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.639082][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.650388][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.660629][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.671868][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.730978][T11928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.773852][T11928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.787719][T11928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.810309][T11928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.831923][T11928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.861274][T12317] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2025'. [ 361.898728][T12317] caif0: entered allmulticast mode [ 361.966407][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2025'. [ 362.012959][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 362.368619][T12128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.469248][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.478163][T12128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.527405][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.547033][T12128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.663057][T12128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.831080][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.871447][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.974739][T12351] random: crng reseeded on system resumption [ 363.220698][T12128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.266827][T12128] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.350413][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.357573][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.420625][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.427833][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.435754][ T54] Bluetooth: hci11: command tx timeout [ 363.500834][T12128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.529552][T12128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.661502][T12128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.870779][T12128] veth0_vlan: entered promiscuous mode [ 363.940310][T12128] veth1_vlan: entered promiscuous mode [ 364.070288][T12128] veth0_macvtap: entered promiscuous mode [ 364.157741][T12128] veth1_macvtap: entered promiscuous mode [ 364.290879][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.366234][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.408273][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.464863][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.519151][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.537813][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.551753][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.562715][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.573425][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.584247][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.594716][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.606584][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.616667][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.627239][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.637765][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.669665][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.685608][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.696707][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.715547][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.762753][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.774662][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.785887][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.796695][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.807363][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.837413][T12128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.896791][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.933833][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.952731][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.963592][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.976716][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.992028][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.003097][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.013614][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.023695][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.036241][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.046624][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.059796][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.070340][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.082068][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.092145][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.103394][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.115126][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.126165][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.136586][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.149404][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.162144][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.177668][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.187583][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.198709][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.210896][T12128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.283847][T12128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.302041][T12128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.329270][T12128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.375382][T12128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.513937][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 365.715856][ T2837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.733555][ T2837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.787401][ T2837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.821587][ T2837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.862693][ T29] audit: type=1326 audit(1721655016.109:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12447 comm="syz.2.2057" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 365.911044][ T29] audit: type=1326 audit(1721655016.169:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12447 comm="syz.2.2057" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf741d579 code=0x0 [ 366.132302][T12455] netlink: 'syz.4.1974': attribute type 11 has an invalid length. [ 366.141102][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 366.964991][ T8] IPVS: starting estimator thread 0... [ 367.063230][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 367.082950][T12486] IPVS: using max 21 ests per chain, 50400 per kthread [ 367.265039][ T5152] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 367.496413][ T5152] usb 5-1: Using ep0 maxpacket: 16 [ 367.543789][ T5152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.555663][ T5152] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 367.566969][ T5152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.579259][ T5152] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 367.596125][ T5152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.617972][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.633277][ T5152] usb 5-1: SerialNumber: syz [ 367.641579][T12484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 367.986434][ T46] usb 5-1: USB disconnect, device number 29 [ 368.065096][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 369.038116][T12547] input: syz1 as /devices/virtual/input/input36 [ 369.401343][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.658512][T12560] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2104'. [ 369.730310][T12560] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 369.849481][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.990367][ T29] audit: type=1326 audit(1721655020.249:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2107" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x0 [ 370.023562][ T5110] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 370.033801][ T5110] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 370.054274][ T5110] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 370.064836][ T5110] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 370.082866][ T29] audit: type=1326 audit(1721655020.299:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2107" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7fe5579 code=0x0 [ 370.106375][ T5110] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 370.117747][ T5110] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 370.186403][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.222845][ T5199] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 370.357777][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.477397][ T5199] usb 3-1: Using ep0 maxpacket: 16 [ 370.495352][ T5199] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.512665][ T5199] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 370.546164][ T5199] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.574426][ T5199] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 370.592315][ T5199] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.603678][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.611689][ T5199] usb 3-1: SerialNumber: syz [ 370.619864][T12556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.807940][T12584] input: syz1 as /devices/virtual/input/input37 [ 370.939256][ T5152] usb 3-1: USB disconnect, device number 25 [ 370.975179][ T35] bridge_slave_1: left allmulticast mode [ 370.980863][ T35] bridge_slave_1: left promiscuous mode [ 371.033431][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.073545][ T35] bridge_slave_0: left allmulticast mode [ 371.089447][ T35] bridge_slave_0: left promiscuous mode [ 371.098145][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.234728][ T54] Bluetooth: hci9: command tx timeout [ 372.511867][ T5110] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 372.530548][ T5110] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 372.541501][ T5110] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 372.576718][ T5110] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 372.592691][ T5110] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 372.600538][ T5110] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 372.665373][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 372.740427][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 372.790460][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.853054][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.873121][ T54] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 372.883942][ T54] Bluetooth: hci11: Injecting HCI hardware error event [ 372.895756][ T54] Bluetooth: hci11: hardware error 0x00 [ 372.916601][ T35] bond0 (unregistering): Released all slaves [ 373.327417][T12630] veth0_macvtap: left promiscuous mode [ 373.836563][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'. [ 373.885953][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 373.918453][T12571] chnl_net:caif_netlink_parms(): no params data found [ 373.958395][T12642] netlink: 'syz.1.2131': attribute type 10 has an invalid length. [ 373.988188][T12642] ipvlan1: entered promiscuous mode [ 374.044585][T12642] team0: Device ipvlan1 failed to register rx_handler [ 374.189421][ T35] hsr_slave_0: left promiscuous mode [ 374.206660][ T35] hsr_slave_1: left promiscuous mode [ 374.221063][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.244998][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.272002][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.302999][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.313181][ T5110] Bluetooth: hci9: command tx timeout [ 374.377894][ T35] veth1_macvtap: left promiscuous mode [ 374.391704][ T35] veth0_macvtap: left promiscuous mode [ 374.398115][ T35] veth1_vlan: left promiscuous mode [ 374.422063][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 374.423263][ T35] veth0_vlan: left promiscuous mode [ 374.447416][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 374.705739][T12670] random: crng reseeded on system resumption [ 374.713385][ T5110] Bluetooth: hci12: command tx timeout [ 374.954691][ T54] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 375.016664][T12676] fuse: Bad value for 'fd' [ 375.646325][ T35] team0 (unregistering): Port device team_slave_1 removed [ 375.711986][ T35] team0 (unregistering): Port device team_slave_0 removed [ 376.152059][T12695] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2146'. [ 376.162831][T12695] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 376.392898][ T54] Bluetooth: hci9: command tx timeout [ 376.792859][ T54] Bluetooth: hci12: command tx timeout [ 376.868448][T12706] delete_channel: no stack [ 377.279580][T12571] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.306048][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.337322][T12571] bridge_slave_0: entered allmulticast mode [ 377.354008][T12571] bridge_slave_0: entered promiscuous mode [ 377.388781][T12571] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.409754][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.440242][T12571] bridge_slave_1: entered allmulticast mode [ 377.474795][T12571] bridge_slave_1: entered promiscuous mode [ 377.613365][ T8] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 377.621784][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2158'. [ 377.641025][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 377.653007][ T58] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 377.674177][T12734] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 377.687643][T12734] team0: Device ipvlan1 failed to register rx_handler [ 377.780407][T12571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.820038][T12571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.836911][T12623] chnl_net:caif_netlink_parms(): no params data found [ 377.845559][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 377.864592][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 377.864642][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 377.899836][ T58] usb 5-1: config 0 has no interfaces? [ 377.901145][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.911339][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.929495][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.938117][ T58] usb 5-1: Product: syz [ 377.944000][ T58] usb 5-1: Manufacturer: syz [ 377.948695][ T58] usb 5-1: SerialNumber: syz [ 377.968602][ T58] usb 5-1: config 0 descriptor?? [ 377.975625][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 377.999372][ T8] usb 4-1: SerialNumber: syz [ 378.048768][T12724] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.188173][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.324038][T12571] team0: Port device team_slave_0 added [ 378.348201][T12571] team0: Port device team_slave_1 added [ 378.473204][ T54] Bluetooth: hci9: command tx timeout [ 378.518455][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.559542][ T46] usb 5-1: USB disconnect, device number 30 [ 378.729681][T12571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.737478][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.764990][T12571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.802969][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809833][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.882525][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.896912][ T54] Bluetooth: hci12: command tx timeout [ 379.030215][T12571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.066313][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.092388][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.134126][T12571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.314938][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.555645][T12759] delete_channel: no stack [ 379.646375][T12623] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.664263][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.671792][T12623] bridge_slave_0: entered allmulticast mode [ 379.715336][T12623] bridge_slave_0: entered promiscuous mode [ 379.758649][T12623] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.811506][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.820715][T12623] bridge_slave_1: entered allmulticast mode [ 379.831024][T12623] bridge_slave_1: entered promiscuous mode [ 379.864015][T12571] hsr_slave_0: entered promiscuous mode [ 379.893233][T12571] hsr_slave_1: entered promiscuous mode [ 379.941422][T12571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.973653][T12571] Cannot create hsr debugfs directory [ 380.213931][T12623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.321791][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 380.338421][T12623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.393211][ T8] usb 4-1: USB disconnect, device number 22 [ 380.443036][ T58] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 380.644297][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 380.654772][T12623] team0: Port device team_slave_0 added [ 380.671289][ T58] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 380.688522][T12623] team0: Port device team_slave_1 added [ 380.729406][ T58] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16698, setting to 1024 [ 380.742230][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 380.752522][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.774238][ T58] hub 5-1:4.0: USB hub found [ 380.823814][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 380.838442][T12623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.852099][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.950076][T12623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.960967][ T54] Bluetooth: hci12: command tx timeout [ 380.976148][ T58] hub 5-1:4.0: 2 ports detected [ 380.981031][ T58] usb 5-1: selecting invalid altsetting 1 [ 380.987532][ T58] hub 5-1:4.0: Using single TT (err -22) [ 381.060603][ T8] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 381.074365][T12623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.097791][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.125143][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.157162][ T8] usb 4-1: config 0 descriptor?? [ 381.167164][T12623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.179747][ T58] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 381.194101][ T58] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 381.195093][ T8] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 381.226713][ T58] usb 5-1: USB disconnect, device number 31 [ 381.231115][ T8] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 381.261366][ T35] bridge_slave_1: left allmulticast mode [ 381.277553][ T35] bridge_slave_1: left promiscuous mode [ 381.286567][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.315041][ T35] bridge_slave_0: left allmulticast mode [ 381.345901][ T35] bridge_slave_0: left promiscuous mode [ 381.351662][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.408154][ T5152] usb 4-1: USB disconnect, device number 23 [ 382.305735][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.320555][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.338549][ T35] bond0 (unregistering): Released all slaves [ 382.669158][T12623] hsr_slave_0: entered promiscuous mode [ 382.677745][T12623] hsr_slave_1: entered promiscuous mode [ 382.688745][T12623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.712420][T12623] Cannot create hsr debugfs directory [ 383.802783][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 383.867114][ T35] hsr_slave_0: left promiscuous mode [ 383.885003][ T35] hsr_slave_1: left promiscuous mode [ 383.942274][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.960875][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.995416][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.006139][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 384.011370][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.022072][ T8] usb 5-1: config 0 has no interfaces? [ 384.030420][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.049938][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.073467][ T8] usb 5-1: Product: syz [ 384.077656][ T8] usb 5-1: Manufacturer: syz [ 384.082277][ T8] usb 5-1: SerialNumber: syz [ 384.103323][ T8] usb 5-1: config 0 descriptor?? [ 384.114046][ T35] veth1_macvtap: left promiscuous mode [ 384.132934][ T35] veth0_macvtap: left promiscuous mode [ 384.157027][ T35] veth1_vlan: left promiscuous mode [ 384.185677][ T35] veth0_vlan: left promiscuous mode [ 384.733268][ T7173] usb 5-1: USB disconnect, device number 32 [ 385.556473][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2199'. [ 385.567327][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'. [ 385.884512][ T35] team0 (unregistering): Port device team_slave_1 removed [ 385.955756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 386.152444][T12891] vhci_hcd: invalid port number 0 [ 387.034016][T12876] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 387.044277][T12880] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2199'. [ 387.062997][T12876] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 387.089737][T12880] caif0: entered allmulticast mode [ 387.356405][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'. [ 387.426191][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2208'. [ 387.443533][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 387.520361][T12913] macsec0: entered promiscuous mode [ 387.527790][T12913] macsec1: entered promiscuous mode [ 387.575480][T12914] netlink: 'syz.4.2208': attribute type 10 has an invalid length. [ 387.595377][T12914] ipvlan1: entered promiscuous mode [ 387.616166][T12914] team0: Device ipvlan1 failed to register rx_handler [ 388.016751][T12571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.083225][ T29] audit: type=1326 audit(1721655038.339:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.4.2216" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x0 [ 388.143837][T12571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.176606][T12571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.283804][T12571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.336587][ T35] IPVS: stop unused estimator thread 0... [ 388.749099][T12571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.764586][T12942] kvm: pic: non byte write [ 388.804563][T12942] kvm: pic: non byte write [ 388.842105][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 388.842555][T12942] kvm: pic: non byte write [ 388.865722][T12942] kvm: pic: non byte write [ 388.870346][T12942] kvm: pic: non byte write [ 388.876142][T12942] kvm: pic: non byte write [ 388.880727][T12942] kvm: pic: non byte write [ 388.886043][T12942] kvm: pic: non byte write [ 388.890974][T12942] kvm: pic: non byte write [ 388.896017][T12942] kvm: pic: non byte write [ 388.907535][T12955] macsec1: entered promiscuous mode [ 389.123488][T12571] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.185354][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.192493][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.253311][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.260508][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.315357][T12623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.395183][T12623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.428361][T12623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.516870][T12623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.589794][T12968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2225'. [ 389.618436][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 389.653167][T12978] netlink: 'syz.3.2225': attribute type 10 has an invalid length. [ 389.661115][T12978] ipvlan1: entered promiscuous mode [ 389.752360][T12978] team0: Device ipvlan1 failed to register rx_handler [ 389.860737][T12571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.871700][T12571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.127213][ T29] audit: type=1326 audit(1721655040.389:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.4.2233" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x0 [ 390.155626][T12571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.259195][T12623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.350023][T13005] vhci_hcd: invalid port number 0 [ 390.390436][T12623] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.716806][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.724011][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.760500][T12571] veth0_vlan: entered promiscuous mode [ 390.801024][T12571] veth1_vlan: entered promiscuous mode [ 390.826360][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.833547][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.981280][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.063919][ T7173] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 391.169819][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.276208][ T7173] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 391.299423][ T7173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.338906][ T7173] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 391.357410][ T7173] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 391.373745][ T7173] usb 4-1: Manufacturer: syz [ 391.381627][ T7173] usb 4-1: config 0 descriptor?? [ 391.391882][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.492797][ T7173] rc_core: IR keymap rc-hauppauge not found [ 391.520166][ T7173] Registered IR keymap rc-empty [ 391.548352][ T7173] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 391.607625][ T7173] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 391.634818][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.668547][ T7173] usb 4-1: USB disconnect, device number 24 [ 391.736458][T12571] veth0_macvtap: entered promiscuous mode [ 391.843665][ T5110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.849075][T12571] veth1_macvtap: entered promiscuous mode [ 391.860907][ T5110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.875844][ T5110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 391.894331][ T5110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 391.905596][ T5110] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 391.923116][ T5110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.111243][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.143537][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.174956][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.215602][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.252697][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.289306][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.313043][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.351295][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.361934][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.388890][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.437750][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.477187][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.505046][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.523983][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.535484][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.555214][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.586043][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.600658][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.611881][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.622872][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.634909][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.685971][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.726221][T12571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.811093][T12623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.945750][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.983197][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.993238][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.004664][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.016915][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.027906][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.039845][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.050946][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.060880][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.071822][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.083370][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.094398][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.104780][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.118975][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.128988][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.139567][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.150428][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.160957][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.170930][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.181491][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.214407][T12571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.249767][T12571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.282354][T12571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.334817][T12571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.356607][T12571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.380880][T12571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.393087][T12571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.449854][ T11] bridge_slave_0: left allmulticast mode [ 393.467353][ T11] bridge_slave_0: left promiscuous mode [ 393.477939][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.995632][ T54] Bluetooth: hci7: command tx timeout [ 394.128357][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.145437][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.197633][ T11] bond0 (unregistering): Released all slaves [ 394.905624][T13045] chnl_net:caif_netlink_parms(): no params data found [ 395.002797][T12623] veth0_vlan: entered promiscuous mode [ 395.074796][ T11] hsr_slave_0: left promiscuous mode [ 395.114274][ T11] hsr_slave_1: left promiscuous mode [ 395.149564][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.161184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.183523][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.190942][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.277950][ T11] veth1_macvtap: left promiscuous mode [ 395.283703][ T11] veth0_macvtap: left promiscuous mode [ 395.289343][ T11] veth1_vlan: left promiscuous mode [ 395.299527][ T11] veth0_vlan: left promiscuous mode [ 395.530854][ T5110] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 395.543130][ T5110] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 395.563380][ T5110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 395.574502][ T5110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 395.583015][ T5110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 395.590686][ T5110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.074128][ T54] Bluetooth: hci7: command tx timeout [ 396.178809][ T11] team0 (unregistering): Port device team_slave_1 removed [ 396.234431][ T11] team0 (unregistering): Port device team_slave_0 removed [ 396.879127][T12623] veth1_vlan: entered promiscuous mode [ 396.950493][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.974868][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.021739][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.044742][T13045] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.051998][T13045] bridge_slave_0: entered allmulticast mode [ 397.083921][T13045] bridge_slave_0: entered promiscuous mode [ 397.124893][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.132041][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.177822][T13045] bridge_slave_1: entered allmulticast mode [ 397.203330][T13045] bridge_slave_1: entered promiscuous mode [ 397.386867][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.420369][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.458683][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.486441][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.673372][ T5110] Bluetooth: hci8: command tx timeout [ 397.692922][T13045] team0: Port device team_slave_0 added [ 397.709310][ T11] IPVS: stop unused estimator thread 0... [ 397.745253][T13045] team0: Port device team_slave_1 added [ 397.858713][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.869136][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.895752][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.910710][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.918139][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.947176][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.018833][T12623] veth0_macvtap: entered promiscuous mode [ 398.067782][T12623] veth1_macvtap: entered promiscuous mode [ 398.131036][T13148] erspan0: entered promiscuous mode [ 398.151467][T13148] syz_tun: entered promiscuous mode [ 398.156982][ T5110] Bluetooth: hci7: command tx timeout [ 398.378602][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.509373][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.523932][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.555380][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.569497][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.580153][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.591462][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.602088][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.613568][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.624094][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.638329][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.660442][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.671672][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.682481][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.693730][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.704343][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.716171][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.727397][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.739268][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.753676][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.765776][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.776402][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.787576][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.801616][T12623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.877137][T13045] hsr_slave_0: entered promiscuous mode [ 398.898367][T13045] hsr_slave_1: entered promiscuous mode [ 398.916748][T13045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.944015][T13045] Cannot create hsr debugfs directory [ 399.031158][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.090712][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.111405][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.127104][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.138872][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.149220][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.162129][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.172549][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.184587][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.199915][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.210935][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.221450][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.231969][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.243237][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.256116][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.266311][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.304871][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.316992][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.330820][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.363575][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.374612][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.384870][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.395811][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.409442][T12623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.508402][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.678869][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.729592][T12623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.757199][ T5110] Bluetooth: hci8: command tx timeout [ 399.772265][T12623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.803748][T12623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.812473][T12623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.881597][T13109] chnl_net:caif_netlink_parms(): no params data found [ 400.232949][ T5110] Bluetooth: hci7: command tx timeout [ 400.414247][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.428921][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.444468][T13109] bridge_slave_0: entered allmulticast mode [ 400.466170][T13109] bridge_slave_0: entered promiscuous mode [ 400.492958][ T11] bridge_slave_1: left allmulticast mode [ 400.507180][ T11] bridge_slave_1: left promiscuous mode [ 400.520062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.532420][ T11] bridge_slave_0: left allmulticast mode [ 400.544144][ T11] bridge_slave_0: left promiscuous mode [ 400.565910][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.301413][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 401.325428][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 401.336740][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 401.358975][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 401.367773][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 401.375233][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 401.637093][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.662413][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.686380][ T11] bond0 (unregistering): Released all slaves [ 401.751862][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.764142][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.777451][T13109] bridge_slave_1: entered allmulticast mode [ 401.793510][T13109] bridge_slave_1: entered promiscuous mode [ 401.834399][ T5110] Bluetooth: hci8: command tx timeout [ 402.236112][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.435481][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.551538][T13222] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 402.675713][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.699060][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.748599][T13109] team0: Port device team_slave_0 added [ 402.847231][T13109] team0: Port device team_slave_1 added [ 402.993700][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.011438][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.069272][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.125411][ T11] hsr_slave_0: left promiscuous mode [ 403.143983][ T11] hsr_slave_1: left promiscuous mode [ 403.159453][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.168511][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.179853][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.192898][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.278411][ T11] veth1_macvtap: left promiscuous mode [ 403.286704][ T11] veth1_vlan: left promiscuous mode [ 403.313751][ T11] veth0_vlan: left promiscuous mode [ 403.434819][ T5110] Bluetooth: hci10: command tx timeout [ 403.923901][ T5110] Bluetooth: hci8: command tx timeout [ 404.268838][ T11] team0 (unregistering): Port device team_slave_1 removed [ 404.379204][ T11] team0 (unregistering): Port device team_slave_0 removed [ 405.204576][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.224037][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.250641][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.322814][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.330666][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.361168][T13045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.513552][ T5110] Bluetooth: hci10: command tx timeout [ 405.522727][T13045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.679176][T13109] hsr_slave_0: entered promiscuous mode [ 405.773163][T13109] hsr_slave_1: entered promiscuous mode [ 405.801788][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.832308][T13109] Cannot create hsr debugfs directory [ 405.893727][T13045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.085256][T13045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.575413][T13208] chnl_net:caif_netlink_parms(): no params data found [ 407.311687][T13045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.523802][T13208] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.557923][T13208] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.569004][T13208] bridge_slave_0: entered allmulticast mode [ 407.577208][T13208] bridge_slave_0: entered promiscuous mode [ 407.582759][ T5199] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 407.594056][ T5110] Bluetooth: hci10: command tx timeout [ 407.606160][T13208] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.615537][T13208] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.624480][T13208] bridge_slave_1: entered allmulticast mode [ 407.642380][T13208] bridge_slave_1: entered promiscuous mode [ 407.822674][ T5199] usb 1-1: Using ep0 maxpacket: 16 [ 407.828096][T13045] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.831940][ T5199] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 407.852632][ T5199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.864509][ T5199] usb 1-1: Product: syz [ 407.868708][ T5199] usb 1-1: Manufacturer: syz [ 407.873896][ T5199] usb 1-1: SerialNumber: syz [ 407.880908][ T5199] usb 1-1: config 0 descriptor?? [ 407.902520][T13208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.952222][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.959426][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.082311][T13208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.145676][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.152886][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.242458][T13299] bond0: entered promiscuous mode [ 408.247804][T13299] bond_slave_0: entered promiscuous mode [ 408.255178][T13299] bond_slave_1: entered promiscuous mode [ 408.263759][T13299] dummy0: entered promiscuous mode [ 408.338997][T13208] team0: Port device team_slave_0 added [ 408.362524][T13208] team0: Port device team_slave_1 added [ 408.413027][ T8] usb 1-1: USB disconnect, device number 23 [ 408.547172][T13109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 408.588011][T13109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 408.620230][T13208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.633016][T11431] udevd[11431]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.641721][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.685504][T13208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.705712][T13208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.730548][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.785448][T13208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.813068][T13109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.844074][T13109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 409.050879][T13208] hsr_slave_0: entered promiscuous mode [ 409.058821][T13208] hsr_slave_1: entered promiscuous mode [ 409.068775][T13208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.076880][T13208] Cannot create hsr debugfs directory [ 409.483523][T13045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.672914][ T5110] Bluetooth: hci10: command tx timeout [ 409.986568][T13208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.078770][T13045] veth0_vlan: entered promiscuous mode [ 410.132956][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 410.148199][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.246215][T13045] veth1_vlan: entered promiscuous mode [ 410.323796][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 410.337867][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 410.352497][T13208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.378644][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.404197][ T46] usb 3-1: Product: syz [ 410.409381][ T46] usb 3-1: Manufacturer: syz [ 410.421206][ T46] usb 3-1: SerialNumber: syz [ 410.466218][ T46] usb 3-1: config 0 descriptor?? [ 410.556310][T13208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.600084][T11431] udevd[11431]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.620048][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.699038][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.706258][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.754764][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.761930][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.782006][T13352] bond0: entered promiscuous mode [ 410.794281][T13352] bond_slave_0: entered promiscuous mode [ 410.802714][T13375] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 410.806528][T13352] bond_slave_1: entered promiscuous mode [ 410.839700][T13352] dummy0: entered promiscuous mode [ 410.849198][T13352] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 410.876411][T13352] Cannot create hsr debugfs directory [ 410.968640][ T8] usb 3-1: USB disconnect, device number 26 [ 410.984334][T13208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.073529][T13045] veth0_macvtap: entered promiscuous mode [ 411.145119][T13045] veth1_macvtap: entered promiscuous mode [ 411.263789][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.313688][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.341300][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.374694][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.393553][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.430887][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.462757][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.494064][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.526767][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.566998][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.608272][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.635672][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.684217][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.702685][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.713037][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.724272][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.734997][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.748216][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.758888][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.769965][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.781331][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.792188][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.805493][T13045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.847618][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.902699][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.915212][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.926213][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.936537][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.947602][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.959494][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.970498][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.980934][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.991879][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.006393][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.018887][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.030971][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.042284][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.052321][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.066665][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.079448][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.091120][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.103506][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.116360][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.126837][T13045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.137822][T13045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.150688][T13045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.251039][T13402] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2304'. [ 412.272756][T13402] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 412.321446][T13045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.357097][T13045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.364468][T13408] kernel read not supported for file /blkio.bfq.io_merged_recursive (pid: 13408 comm: syz.2.2306) [ 412.382870][ T29] audit: type=1800 audit(1721655062.639:312): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2306" name="blkio.bfq.io_merged_recursive" dev="mqueue" ino=62512 res=0 errno=0 [ 412.392402][T13045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.414083][T13045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.537858][T13208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.588802][T13208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.622911][ T930] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 412.698670][T13208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.826241][T13208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.842962][ T930] usb 1-1: Using ep0 maxpacket: 32 [ 412.869496][ T930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.904775][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.914276][ T930] usb 1-1: config 0 has no interfaces? [ 412.920259][ T930] usb 1-1: New USB device found, idVendor=06e1, idProduct=0009, bcdDevice=8b.dc [ 412.984132][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.998200][ T930] usb 1-1: config 0 descriptor?? [ 413.142976][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.166202][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.254512][ T46] usb 1-1: USB disconnect, device number 24 [ 413.351010][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.390991][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.480755][T13109] veth0_vlan: entered promiscuous mode [ 413.572279][T13109] veth1_vlan: entered promiscuous mode [ 413.742016][T13208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.763691][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'. [ 413.788184][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 413.887364][T13435] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 413.917751][T13435] ipvlan1: entered promiscuous mode [ 413.990683][T13435] team0: Device ipvlan1 failed to register rx_handler [ 414.117428][T13109] veth0_macvtap: entered promiscuous mode [ 414.197326][T13109] veth1_macvtap: entered promiscuous mode [ 414.298978][T13208] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.366579][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.404810][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.418831][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.429869][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.439809][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.450694][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.460674][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.471200][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.481583][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.492241][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.502355][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.519420][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.533508][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.553207][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.563718][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.575483][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.585900][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.596844][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.606882][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.621870][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.668070][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.679045][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.689361][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.700388][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.713612][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.730247][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.737427][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.764830][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.782175][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.792439][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.804028][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.813910][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.830197][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.884747][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.920713][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.955305][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.002673][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.022642][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.047737][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.072821][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.092970][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.105238][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.116615][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.130139][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.142611][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.155998][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.166987][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.177390][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.179597][T13472] kernel read not supported for file /blkio.bfq.io_merged_recursive (pid: 13472 comm: syz.2.2324) [ 415.188463][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.209722][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.222094][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.239024][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.250900][ T29] audit: type=1800 audit(1721655065.509:313): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2324" name="blkio.bfq.io_merged_recursive" dev="mqueue" ino=62512 res=0 errno=0 [ 415.280328][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.287526][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.292727][ T5199] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 415.348705][T13109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.358561][T13109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.367940][T13109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.377377][T13109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.493955][ T5199] usb 1-1: Using ep0 maxpacket: 32 [ 415.522397][ T5199] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.533354][ T5199] usb 1-1: config 0 has no interfaces? [ 415.540279][ T5199] usb 1-1: New USB device found, idVendor=06e1, idProduct=0009, bcdDevice=8b.dc [ 415.551304][ T5199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.565296][ T5199] usb 1-1: config 0 descriptor?? [ 415.674207][T13208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.708209][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.723381][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.753338][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 415.834004][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.864712][T13208] veth0_vlan: entered promiscuous mode [ 415.874702][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.880707][T13208] veth1_vlan: entered promiscuous mode [ 415.905506][ T5199] usb 1-1: USB disconnect, device number 25 [ 415.955356][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 415.972421][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 415.999656][T13208] veth0_macvtap: entered promiscuous mode [ 416.006908][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.024284][T13208] veth1_macvtap: entered promiscuous mode [ 416.030844][ T8] usb 3-1: Product: syz [ 416.037250][ T8] usb 3-1: Manufacturer: syz [ 416.051251][ T8] usb 3-1: SerialNumber: syz [ 416.065357][ T8] usb 3-1: config 0 descriptor?? [ 416.069973][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.095852][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.109364][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.146744][T13480] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2248'. [ 416.162660][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.175629][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.216475][T11431] udevd[11431]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.220658][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.266100][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.291201][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.313529][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.326583][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.337870][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.367537][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.398479][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.410097][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.420721][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.432213][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.442778][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.454485][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.470176][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.482279][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.492291][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.502783][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.513040][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.524195][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.534838][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.546070][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.565084][T13208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.763286][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.788410][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.801259][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.811839][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.821758][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.832204][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.842145][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.865606][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.905956][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.917864][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.928131][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.939313][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.949842][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.961300][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.975549][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.986685][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.997361][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.008505][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.020466][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.038510][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.048627][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.059755][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.070243][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.085981][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.096508][T13208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.107828][T13208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.123422][ T5152] usb 3-1: USB disconnect, device number 27 [ 417.180087][T13208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.220901][T13208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.229759][T13208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.241199][T13208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.251189][T13208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.432063][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.442346][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.501781][T13500] kernel read not supported for file /blkio.bfq.io_merged_recursive (pid: 13500 comm: syz.3.2333) [ 417.505856][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.536197][ T29] audit: type=1800 audit(1721655067.799:314): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2333" name="blkio.bfq.io_merged_recursive" dev="mqueue" ino=63044 res=0 errno=0 [ 417.556440][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.897344][ T5110] Bluetooth: hci9: SCO packet for unknown connection handle 0 [ 417.985516][ T29] audit: type=1326 audit(1721655068.249:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13513 comm="syz.0.2340" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 417.990590][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 418.050069][ T25] IPVS: starting estimator thread 0... [ 418.182716][T13521] IPVS: using max 25 ests per chain, 60000 per kthread [ 418.295164][T13526] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2343'. [ 418.372854][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.553700][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 418.605666][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.621663][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 418.633837][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.644378][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 418.672696][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.682704][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 418.690888][ T25] usb 5-1: SerialNumber: syz [ 418.703829][T13520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 419.060019][ T58] usb 5-1: USB disconnect, device number 33 [ 419.251223][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 419.444981][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.448893][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 419.475614][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.514365][ T8] usb 1-1: config 0 descriptor?? [ 420.008855][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 420.051617][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 420.062050][ T8] [drm] Initialized udl on minor 2 [ 420.083171][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.108933][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 420.132157][ T5153] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.163044][ T8] usb 1-1: USB disconnect, device number 26 [ 420.193446][ T5153] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 420.466320][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 421.193298][ T930] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 421.384628][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 421.393339][ T930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.417061][ T930] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 421.430996][T13603] macsec1: entered promiscuous mode [ 421.432131][ T930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.446606][ T930] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 421.461007][T13603] macvlan0: entered promiscuous mode [ 421.468000][ T930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.481950][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.492206][T13603] macsec1: entered allmulticast mode [ 421.499899][ T930] usb 5-1: SerialNumber: syz [ 421.507204][T13603] macvlan0: entered allmulticast mode [ 421.514519][T13586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.525085][T13603] veth1_vlan: entered allmulticast mode [ 421.551479][T13603] macvlan0: left allmulticast mode [ 421.557463][T13603] veth1_vlan: left allmulticast mode [ 421.564156][T13603] macvlan0: left promiscuous mode [ 421.676997][ T30] INFO: task syz.1.1573:10571 blocked for more than 143 seconds. [ 421.689919][ T30] Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 421.701323][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.719239][ T30] task:syz.1.1573 state:D stack:25208 pid:10571 tgid:10570 ppid:9188 flags:0x20000004 [ 421.853503][ T30] Call Trace: [ 421.867310][ T30] [ 421.870277][ T30] __schedule+0x1800/0x4a60 [ 421.883653][ T8] usb 5-1: USB disconnect, device number 34 [ 421.911915][ T30] ? __pfx___schedule+0x10/0x10 [ 421.924131][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.930719][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.937141][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.944196][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 421.949350][ T30] ? schedule+0x90/0x320 [ 421.955438][ T30] schedule+0x14b/0x320 [ 421.960471][ T30] ? down_read+0x6a5/0xa40 [ 421.965826][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.971656][ T30] down_read+0x705/0xa40 [ 421.978300][ T30] ? __pfx_down_read+0x10/0x10 [ 421.983783][ T30] ? __filemap_get_folio+0x984/0xc10 [ 421.992426][ T30] filemap_fault+0xb5b/0x1760 [ 421.997736][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 422.003406][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 422.009041][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.015091][ T30] ? pte_alloc_one+0x443/0x5d0 [ 422.019896][ T30] __do_fault+0x135/0x460 [ 422.024326][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 422.029548][ T30] handle_pte_fault+0x3b18/0x6eb0 [ 422.035311][ T30] ? schedule+0x155/0x320 [ 422.039660][ T30] ? futex_wait_queue+0x27/0x1d0 [ 422.045132][ T30] ? futex_wait_queue+0x14e/0x1d0 [ 422.050515][ T30] ? mark_lock+0x9a/0x350 [ 422.055366][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 422.060826][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 422.069143][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 422.078756][ T30] ? __thp_vma_allowable_orders+0x844/0x8f0 [ 422.097786][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 422.105544][ T30] handle_mm_fault+0x1021/0x1990 [ 422.110569][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 422.116439][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 422.121692][ T30] ? exc_page_fault+0x113/0x8c0 [ 422.127381][ T30] exc_page_fault+0x459/0x8c0 [ 422.132494][ T30] asm_exc_page_fault+0x26/0x30 [ 422.138155][ T30] RIP: 0023:0xf7224612 [ 422.142833][ T30] RSP: 002b:00000000f5ce6150 EFLAGS: 00010246 [ 422.149335][ T30] RAX: 00000000f5ce6170 RBX: 00000000000003ff RCX: 0000000000000000 [ 422.158677][ T30] RDX: 00000000f7108d10 RSI: 0000000020000340 RDI: 00000000f5ce6170 [ 422.167382][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.178646][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 422.187088][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.200094][ T30] [ 422.203886][ T30] INFO: task syz.1.1573:10575 blocked for more than 143 seconds. [ 422.212102][ T30] Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 422.220755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.230237][ T30] task:syz.1.1573 state:D stack:26968 pid:10575 tgid:10570 ppid:9188 flags:0x20000004 [ 422.242094][ T30] Call Trace: [ 422.246132][ T30] [ 422.249087][ T30] __schedule+0x1800/0x4a60 [ 422.254140][ T30] ? __pfx___schedule+0x10/0x10 [ 422.259467][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.265014][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.271029][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.277934][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 422.287069][ T30] ? schedule+0x90/0x320 [ 422.291877][ T30] schedule+0x14b/0x320 [ 422.317846][ T30] ? down_read+0x6a5/0xa40 [ 422.322858][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.328340][ T30] down_read+0x705/0xa40 [ 422.337836][ T30] ? __pfx_down_read+0x10/0x10 [ 422.353700][ T30] ? __filemap_get_folio+0x984/0xc10 [ 422.359068][ T30] filemap_fault+0xb5b/0x1760 [ 422.392850][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 422.409910][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 422.422936][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.429038][ T30] ? pte_alloc_one+0x443/0x5d0 [ 422.434415][ T30] __do_fault+0x135/0x460 [ 422.438773][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 422.449206][ T30] handle_pte_fault+0x3b18/0x6eb0 [ 422.454549][ T30] ? mark_lock+0x9a/0x350 [ 422.459257][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 422.465457][ T30] ? __thp_vma_allowable_orders+0x844/0x8f0 [ 422.471742][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.477301][ T30] handle_mm_fault+0x1021/0x1990 [ 422.482302][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 422.488690][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.495804][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 422.505504][ T30] exc_page_fault+0x2b9/0x8c0 [ 422.510658][ T30] asm_exc_page_fault+0x26/0x30 [ 422.518227][ T30] RIP: 0010:strnlen_user+0xab/0x1f0 [ 422.524219][ T30] Code: e1 a9 fc 48 89 d8 4c 01 f8 0f 88 35 01 00 00 4c 39 f8 0f 82 2c 01 00 00 48 89 6c 24 08 0f 01 cb 0f ae e8 4c 89 f8 48 83 e0 f8 <48> 8b 28 45 89 fc 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 422.544717][ T30] RSP: 0018:ffffc90004b87e50 EFLAGS: 00050202 [ 422.550814][ T30] RAX: 0000000020002840 RBX: 00000000000000fa RCX: ffff88802c93da00 [ 422.561514][ T30] RDX: ffffc9000bac1000 RSI: 0000000020002840 RDI: 000000002000293a [ 422.569892][ T30] RBP: 00000000000000fa R08: ffffffff84e9a284 R09: 1ffffffff1f5f505 [ 422.578218][ T30] R10: dffffc0000000000 R11: fffffbfff1f5f506 R12: 000000002000293a [ 422.586923][ T30] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000020002840 [ 422.595728][ T30] ? strnlen_user+0x84/0x1f0 [ 422.600779][ T30] __se_sys_memfd_create+0x20a/0x850 [ 422.610727][ T30] __do_fast_syscall_32+0xb4/0x110 [ 422.616704][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 422.622143][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 422.629166][ T30] do_fast_syscall_32+0x34/0x80 [ 422.635666][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.642071][ T30] RIP: 0023:0xf7f31579 [ 422.651929][ T30] RSP: 002b:00000000f5cc557c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 422.662261][ T30] RAX: ffffffffffffffda RBX: 0000000020002840 RCX: 0000000000000000 [ 422.670617][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.683278][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.691718][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 422.700320][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.713635][ T30] [ 422.722679][ T30] INFO: task syz.2.1603:10714 blocked for more than 144 seconds. [ 422.730460][ T30] Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 422.768070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.802690][ T30] task:syz.2.1603 state:D stack:25600 pid:10714 tgid:10712 ppid:10497 flags:0x20000004 [ 422.816839][ T30] Call Trace: [ 422.820145][ T30] [ 422.832774][ T30] __schedule+0x1800/0x4a60 [ 422.837348][ T30] ? __pfx___schedule+0x10/0x10 [ 422.842259][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.849882][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.855965][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.928723][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 422.934255][ T30] ? schedule+0x90/0x320 [ 422.938524][ T30] schedule+0x14b/0x320 [ 422.943141][ T30] ? down_read+0x6a5/0xa40 [ 422.947597][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.958393][ T30] down_read+0x705/0xa40 [ 422.962843][ T30] ? __pfx_down_read+0x10/0x10 [ 422.968010][ T30] ? __filemap_get_folio+0x984/0xc10 [ 422.973455][ T30] filemap_fault+0xb5b/0x1760 [ 422.978187][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 422.983438][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 422.988661][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.993875][ T30] ? pte_alloc_one+0x443/0x5d0 [ 422.998764][ T30] __do_fault+0x135/0x460 [ 423.003189][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 423.008474][ T30] handle_pte_fault+0x3b18/0x6eb0 [ 423.017395][ T30] ? schedule+0x155/0x320 [ 423.021770][ T30] ? futex_wait_queue+0x27/0x1d0 [ 423.026795][ T30] ? futex_wait_queue+0x14e/0x1d0 [ 423.031848][ T30] ? mark_lock+0x9a/0x350 [ 423.037207][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 423.042722][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 423.048112][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 423.064539][ T30] ? __thp_vma_allowable_orders+0x844/0x8f0 [ 423.070919][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 423.082688][ T30] handle_mm_fault+0x1021/0x1990 [ 423.092697][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 423.098017][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 423.103339][ T30] ? exc_page_fault+0x113/0x8c0 [ 423.108243][ T30] exc_page_fault+0x459/0x8c0 [ 423.117353][ T30] asm_exc_page_fault+0x26/0x30 [ 423.122498][ T30] RIP: 0023:0xf71f4612 [ 423.127139][ T30] RSP: 002b:00000000f5cb6150 EFLAGS: 00010246 [ 423.133307][ T30] RAX: 00000000f5cb6170 RBX: 00000000000003ff RCX: 0000000000000000 [ 423.141323][ T30] RDX: 00000000f70d8d10 RSI: 0000000020000340 RDI: 00000000f5cb6170 [ 423.149837][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.157980][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.166231][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.176770][ T30] [ 423.179917][ T30] INFO: task syz.2.1603:10717 blocked for more than 144 seconds. [ 423.188695][ T30] Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 423.196830][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.205648][ T30] task:syz.2.1603 state:D stack:27008 pid:10717 tgid:10712 ppid:10497 flags:0x20000004 [ 423.219580][ T30] Call Trace: [ 423.222991][ T30] [ 423.226060][ T30] __schedule+0x1800/0x4a60 [ 423.230606][ T30] ? __pfx___schedule+0x10/0x10 [ 423.235596][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.240683][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.246742][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.257836][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 423.265774][ T30] ? schedule+0x90/0x320 [ 423.270047][ T30] schedule+0x14b/0x320 [ 423.278558][ T30] ? down_read+0x6a5/0xa40 [ 423.286204][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.292622][ T30] down_read+0x705/0xa40 [ 423.296904][ T30] ? __pfx_down_read+0x10/0x10 [ 423.301780][ T30] ? __filemap_get_folio+0x984/0xc10 [ 423.307455][ T30] filemap_fault+0xb5b/0x1760 [ 423.312716][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 423.333306][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 423.339581][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.353202][ T30] ? pte_alloc_one+0x443/0x5d0 [ 423.358087][ T30] __do_fault+0x135/0x460 [ 423.362441][ T30] ? handle_pte_fault+0x21d9/0x6eb0 [ 423.390780][ T30] handle_pte_fault+0x3b18/0x6eb0 [ 423.396005][ T30] ? mark_lock+0x9a/0x350 [ 423.400360][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 423.406472][ T30] ? __thp_vma_allowable_orders+0x844/0x8f0 [ 423.412406][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.418245][ T30] handle_mm_fault+0x1021/0x1990 [ 423.425415][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 423.431385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.439964][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 423.447617][ T30] exc_page_fault+0x2b9/0x8c0 [ 423.452900][ T30] asm_exc_page_fault+0x26/0x30 [ 423.458023][ T30] RIP: 0010:strnlen_user+0xab/0x1f0 [ 423.463392][ T30] Code: e1 a9 fc 48 89 d8 4c 01 f8 0f 88 35 01 00 00 4c 39 f8 0f 82 2c 01 00 00 48 89 6c 24 08 0f 01 cb 0f ae e8 4c 89 f8 48 83 e0 f8 <48> 8b 28 45 89 fc 41 83 e4 07 42 8d 0c e5 00 00 00 00 48 c7 c0 ff [ 423.483149][ T30] RSP: 0018:ffffc900030d7e50 EFLAGS: 00050202 [ 423.489251][ T30] RAX: 0000000020002840 RBX: 00000000000000fa RCX: ffff88802b29bc00 [ 423.498528][ T30] RDX: ffffc9000a273000 RSI: 0000000020002840 RDI: 000000002000293a [ 423.509410][ T30] RBP: 00000000000000fa R08: ffffffff84e9a284 R09: 1ffffffff1f5f505 [ 423.517990][ T30] R10: dffffc0000000000 R11: fffffbfff1f5f506 R12: 000000002000293a [ 423.530104][ T30] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000020002840 [ 423.538648][ T30] ? strnlen_user+0x84/0x1f0 [ 423.543871][ T30] __se_sys_memfd_create+0x20a/0x850 [ 423.549515][ T30] __do_fast_syscall_32+0xb4/0x110 [ 423.555151][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 423.560160][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 423.565555][ T30] do_fast_syscall_32+0x34/0x80 [ 423.570447][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.577239][ T30] RIP: 0023:0xf7f02579 [ 423.581924][ T30] RSP: 002b:00000000f5c9557c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 423.590709][ T30] RAX: ffffffffffffffda RBX: 0000000020002840 RCX: 0000000000000000 [ 423.602218][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.610946][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.619447][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.631109][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.639631][ T30] [ 423.643196][ T30] [ 423.643196][ T30] Showing all locks held in the system: [ 423.686006][ T30] 1 lock held by pool_workqueue_/3: [ 423.691692][ T30] #0: ffffffff8e33c938 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 423.711729][ T30] 3 locks held by kworker/1:0/25: [ 423.724689][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 423.737806][ T30] #1: ffffc900001f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 423.748980][ T30] #2: ffffffff8f608988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 423.758847][ T30] 1 lock held by khungtaskd/30: [ 423.765357][ T30] #0: ffffffff8e337560 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 423.777722][ T30] 2 locks held by kworker/u8:7/2795: [ 423.783563][ T30] 1 lock held by klogd/4546: [ 423.788281][ T30] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 423.799300][ T30] 2 locks held by getty/4858: [ 423.804489][ T30] #0: ffff88801e5d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 423.814800][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 423.825333][ T30] 1 lock held by syz.3.1540/10324: [ 423.832310][ T30] 2 locks held by syz.1.1573/10571: [ 423.838264][ T30] #0: ffff88802616b220 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 423.849144][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 423.860199][ T30] 2 locks held by syz.1.1573/10575: [ 423.865949][ T30] #0: ffff88807d9a3a98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 423.877298][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 423.890248][ T30] 2 locks held by syz.2.1603/10714: [ 423.895931][ T30] #0: ffff88806b04b2f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 423.906885][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 423.918043][ T30] 2 locks held by syz.2.1603/10717: [ 423.923839][ T30] #0: ffff88807db56a18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 423.936018][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 423.947015][ T30] 1 lock held by syz.3.1646/10833: [ 423.952481][ T30] #0: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 423.964251][ T30] 2 locks held by syz.0.1691/10959: [ 423.969849][ T30] #0: ffff88807d6d7658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 423.980647][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 423.992084][ T30] 2 locks held by syz.0.1691/10962: [ 423.999589][ T30] #0: ffff88801e4dc418 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.009837][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 424.020950][ T30] 1 lock held by syz.1.1717/11046: [ 424.026528][ T30] #0: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 424.039807][ T30] 1 lock held by syz.4.1906/11889: [ 424.045423][ T30] #0: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 424.057126][ T30] 3 locks held by syz-executor/12571: [ 424.062988][ T30] #0: ffff88804cca0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 424.073728][ T30] #1: ffff88804cca0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 424.084025][ T30] #2: ffffffff8f774168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 424.095151][ T30] 3 locks held by syz-executor/12623: [ 424.101344][ T30] #0: ffff888053210d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 424.112414][ T30] #1: ffff888053210078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 424.123179][ T30] #2: ffffffff8f774168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 424.133387][ T30] 2 locks held by syz.4.2239/13018: [ 424.142278][ T30] #0: ffff88807ce4cbd8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_getsockopt+0x1633/0x2f70 [ 424.152902][ T30] #1: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 424.166611][ T30] 3 locks held by syz-executor/13109: [ 424.172427][ T30] #0: ffff888051c18d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 424.184811][ T30] #1: ffff888051c18078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 424.195084][ T30] #2: ffffffff8f774168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 424.205271][ T30] 1 lock held by syz.1.2327/13483: [ 424.210440][ T30] #0: ffff88801d53e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 424.222121][ T30] 2 locks held by syz.4.2364/13579: [ 424.227827][ T30] #0: ffffffff8f608988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 424.243628][ T30] #1: ffffffff8e33c938 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 424.282291][ T30] [ 424.294038][ T30] ============================================= [ 424.294038][ T30] [ 424.302486][ T30] NMI backtrace for cpu 0 [ 424.306833][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 424.317004][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 424.327073][ T30] Call Trace: [ 424.330341][ T30] [ 424.333255][ T30] dump_stack_lvl+0x241/0x360 [ 424.337920][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.343114][ T30] ? __pfx__printk+0x10/0x10 [ 424.347795][ T30] ? vprintk_emit+0x631/0x770 [ 424.352458][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 424.357473][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 424.362418][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 424.367864][ T30] ? _printk+0xd5/0x120 [ 424.372006][ T30] ? __pfx__printk+0x10/0x10 [ 424.376580][ T30] ? __wake_up_klogd+0xcc/0x110 [ 424.381496][ T30] ? __pfx__printk+0x10/0x10 [ 424.386066][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 424.391074][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.397038][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 424.403017][ T30] watchdog+0xfee/0x1030 [ 424.407267][ T30] ? watchdog+0x1ea/0x1030 [ 424.411673][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.416333][ T30] kthread+0x2f0/0x390 [ 424.420383][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.425041][ T30] ? __pfx_kthread+0x10/0x10 [ 424.429608][ T30] ret_from_fork+0x4b/0x80 [ 424.434009][ T30] ? __pfx_kthread+0x10/0x10 [ 424.438578][ T30] ret_from_fork_asm+0x1a/0x30 [ 424.443333][ T30] [ 424.447687][ T30] Sending NMI from CPU 0 to CPUs 1: [ 424.453854][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 424.458656][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 424.473628][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 424.483758][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 424.493792][ T30] Call Trace: [ 424.497067][ T30] [ 424.499978][ T30] dump_stack_lvl+0x241/0x360 [ 424.504645][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.509826][ T30] ? __pfx__printk+0x10/0x10 [ 424.514408][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.520416][ T30] ? vscnprintf+0x5d/0x90 [ 424.524767][ T30] panic+0x349/0x860 [ 424.528676][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 424.534833][ T30] ? __pfx_panic+0x10/0x10 [ 424.539250][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 424.544618][ T30] ? __irq_work_queue_local+0x137/0x410 [ 424.550159][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 424.555556][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 424.561706][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 424.567943][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 424.574097][ T30] watchdog+0x102d/0x1030 [ 424.578421][ T30] ? watchdog+0x1ea/0x1030 [ 424.582832][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.587499][ T30] kthread+0x2f0/0x390 [ 424.591559][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.596228][ T30] ? __pfx_kthread+0x10/0x10 [ 424.600805][ T30] ret_from_fork+0x4b/0x80 [ 424.605213][ T30] ? __pfx_kthread+0x10/0x10 [ 424.609790][ T30] ret_from_fork_asm+0x1a/0x30 [ 424.614644][ T30] [ 424.617863][ T30] Kernel Offset: disabled [ 424.622174][ T30] Rebooting in 86400 seconds..