Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. 2024/05/15 20:06:44 fuzzer started 2024/05/15 20:06:44 dialing manager at 10.128.0.169:30010 [ 73.537737][ T5094] cgroup: Unknown subsys name 'net' [ 73.788881][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/05/15 20:06:46 starting 5 executor processes [ 75.267808][ T5102] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.221846][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.239909][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.251097][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.275242][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.296684][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.304444][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.311011][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.312614][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.320253][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.330231][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.340452][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.348847][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.351885][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.356423][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.364714][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.373185][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.379022][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.384766][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.391155][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.401246][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.406928][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.421815][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.426727][ T4488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.439909][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.445413][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.456671][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.469058][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.477107][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.478412][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.485062][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.006751][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 77.129177][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 77.284407][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 77.306175][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.314383][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.321936][ T5128] bridge_slave_0: entered allmulticast mode [ 77.329607][ T5128] bridge_slave_0: entered promiscuous mode [ 77.339841][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.347042][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.354385][ T5128] bridge_slave_1: entered allmulticast mode [ 77.361705][ T5128] bridge_slave_1: entered promiscuous mode [ 77.473913][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 77.491251][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.552329][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.574931][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.583472][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.591973][ T5129] bridge_slave_0: entered allmulticast mode [ 77.599869][ T5129] bridge_slave_0: entered promiscuous mode [ 77.607418][ T5130] chnl_net:caif_netlink_parms(): no params data found [ 77.664591][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.674888][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.683255][ T5129] bridge_slave_1: entered allmulticast mode [ 77.693777][ T5129] bridge_slave_1: entered promiscuous mode [ 77.755586][ T5128] team0: Port device team_slave_0 added [ 77.805633][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.813013][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.821565][ T5131] bridge_slave_0: entered allmulticast mode [ 77.829647][ T5131] bridge_slave_0: entered promiscuous mode [ 77.839644][ T5128] team0: Port device team_slave_1 added [ 77.848862][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.889557][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.896798][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.904460][ T5131] bridge_slave_1: entered allmulticast mode [ 77.912641][ T5131] bridge_slave_1: entered promiscuous mode [ 77.959872][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.012696][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.023448][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.031114][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.058510][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.106760][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.114134][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.126094][ T5132] bridge_slave_0: entered allmulticast mode [ 78.133399][ T5132] bridge_slave_0: entered promiscuous mode [ 78.143127][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.150375][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.157573][ T5132] bridge_slave_1: entered allmulticast mode [ 78.165113][ T5132] bridge_slave_1: entered promiscuous mode [ 78.174917][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.197448][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.204946][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.231033][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.264419][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.271713][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.280117][ T5130] bridge_slave_0: entered allmulticast mode [ 78.287254][ T5130] bridge_slave_0: entered promiscuous mode [ 78.337248][ T5129] team0: Port device team_slave_0 added [ 78.347102][ T5129] team0: Port device team_slave_1 added [ 78.353647][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.361439][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.369784][ T5130] bridge_slave_1: entered allmulticast mode [ 78.376935][ T5130] bridge_slave_1: entered promiscuous mode [ 78.411109][ T5131] team0: Port device team_slave_0 added [ 78.434700][ T5128] hsr_slave_0: entered promiscuous mode [ 78.441246][ T5128] hsr_slave_1: entered promiscuous mode [ 78.478686][ T5130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.490845][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.502784][ T5131] team0: Port device team_slave_1 added [ 78.519432][ T5117] Bluetooth: hci3: command tx timeout [ 78.522561][ T5118] Bluetooth: hci1: command tx timeout [ 78.525064][ T53] Bluetooth: hci0: command tx timeout [ 78.553768][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.560856][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.586985][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.598563][ T53] Bluetooth: hci4: command tx timeout [ 78.604356][ T5117] Bluetooth: hci2: command tx timeout [ 78.609094][ T5130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.634185][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.671004][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.678024][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.704764][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.717680][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.725186][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.751280][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.786253][ T5130] team0: Port device team_slave_0 added [ 78.817847][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.825008][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.851308][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.885607][ T5130] team0: Port device team_slave_1 added [ 78.899104][ T5132] team0: Port device team_slave_0 added [ 78.950837][ T5129] hsr_slave_0: entered promiscuous mode [ 78.957366][ T5129] hsr_slave_1: entered promiscuous mode [ 78.964122][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.972296][ T5129] Cannot create hsr debugfs directory [ 78.992833][ T5132] team0: Port device team_slave_1 added [ 79.073239][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.080404][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.107559][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.137431][ T5131] hsr_slave_0: entered promiscuous mode [ 79.144817][ T5131] hsr_slave_1: entered promiscuous mode [ 79.151495][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.159476][ T5131] Cannot create hsr debugfs directory [ 79.184099][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.191174][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.218172][ T5130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.230372][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.237411][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.264133][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.304779][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.311976][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.338138][ T5130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.477038][ T5132] hsr_slave_0: entered promiscuous mode [ 79.485352][ T5132] hsr_slave_1: entered promiscuous mode [ 79.492675][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.500403][ T5132] Cannot create hsr debugfs directory [ 79.586214][ T5130] hsr_slave_0: entered promiscuous mode [ 79.593301][ T5130] hsr_slave_1: entered promiscuous mode [ 79.600010][ T5130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.607582][ T5130] Cannot create hsr debugfs directory [ 79.976028][ T5128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.995034][ T5128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.036924][ T5128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.054567][ T5128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.090036][ T5130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.102113][ T5130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.112584][ T5130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.136773][ T5130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.210619][ T5131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.267112][ T5131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.288986][ T5131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.321161][ T5131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.425234][ T5129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.438429][ T5129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.480303][ T5129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.491823][ T5129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.599006][ T5117] Bluetooth: hci1: command tx timeout [ 80.609409][ T5117] Bluetooth: hci3: command tx timeout [ 80.614872][ T5117] Bluetooth: hci0: command tx timeout [ 80.681418][ T53] Bluetooth: hci4: command tx timeout [ 80.686968][ T5117] Bluetooth: hci2: command tx timeout [ 80.703723][ T5132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.716059][ T5132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.747780][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.755309][ T5132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.791552][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.809075][ T5132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.879140][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.914262][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.926362][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.934025][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.981507][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.988751][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.998183][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.005444][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.016256][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.023446][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.105732][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.133776][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.186726][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.221900][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.251677][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.258923][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.271631][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.278807][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.299209][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.354011][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.361308][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.395994][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.403175][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.440778][ T5130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.480180][ T5129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.492937][ T5129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.587401][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.635897][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.657559][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.683653][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.705318][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.736062][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.743257][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.756799][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.764557][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.884504][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.953639][ T5128] veth0_vlan: entered promiscuous mode [ 81.990961][ T5129] veth0_vlan: entered promiscuous mode [ 82.013472][ T5128] veth1_vlan: entered promiscuous mode [ 82.043254][ T5130] veth0_vlan: entered promiscuous mode [ 82.066452][ T5130] veth1_vlan: entered promiscuous mode [ 82.131394][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.142356][ T5129] veth1_vlan: entered promiscuous mode [ 82.224977][ T5131] veth0_vlan: entered promiscuous mode [ 82.256124][ T5130] veth0_macvtap: entered promiscuous mode [ 82.297695][ T5130] veth1_macvtap: entered promiscuous mode [ 82.323297][ T5131] veth1_vlan: entered promiscuous mode [ 82.379944][ T5128] veth0_macvtap: entered promiscuous mode [ 82.412436][ T5128] veth1_macvtap: entered promiscuous mode [ 82.440974][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.470747][ T5129] veth0_macvtap: entered promiscuous mode [ 82.510412][ T5131] veth0_macvtap: entered promiscuous mode [ 82.523354][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.550859][ T5129] veth1_macvtap: entered promiscuous mode [ 82.566303][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.579117][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.593928][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.609039][ T5132] veth0_vlan: entered promiscuous mode [ 82.638129][ T5131] veth1_macvtap: entered promiscuous mode [ 82.656137][ T5130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670089][ T5130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.681579][ T5130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.691241][ T5130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.691626][ T5117] Bluetooth: hci0: command tx timeout [ 82.708631][ T53] Bluetooth: hci3: command tx timeout [ 82.709900][ T5118] Bluetooth: hci1: command tx timeout [ 82.721650][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.733688][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.746159][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.760639][ T5118] Bluetooth: hci2: command tx timeout [ 82.760649][ T5117] Bluetooth: hci4: command tx timeout [ 82.791075][ T5132] veth1_vlan: entered promiscuous mode [ 82.821724][ T5128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.833484][ T5128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.843972][ T5128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853036][ T5128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.884763][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.896145][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.907272][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.918433][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.933427][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.973932][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.989650][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.000831][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.011945][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.022205][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.033026][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.045113][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.076775][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.091671][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.102416][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.113252][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.125567][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.173607][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.185905][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.196232][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.211420][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.221814][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.232537][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.244972][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.270679][ T5129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279824][ T5129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289178][ T5129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.297937][ T5129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.322376][ T5131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.333355][ T5131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.342308][ T5131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352787][ T5131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392062][ T5132] veth0_macvtap: entered promiscuous mode [ 83.435923][ T5132] veth1_macvtap: entered promiscuous mode [ 83.447930][ T2457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.459830][ T2457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.520054][ T5169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.534931][ T5169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.561280][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.576660][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.587201][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.598170][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.608687][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.619706][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.629717][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.643128][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.655214][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.672150][ T5155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.680653][ T5155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.733062][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.743887][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.754275][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.765279][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.775729][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.786287][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.796385][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.809744][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.823394][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.836291][ T5132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847697][ T5132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.849194][ T5170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.857161][ T5132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.870488][ T5170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.876972][ T5132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.951170][ T2457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.961959][ T2457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) [ 84.072739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.092016][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)) dup2(r1, r2) [ 84.234133][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.261316][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.293697][ T5176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 84.340967][ T2800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.351903][ T2800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\n'], 0x52) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 84.476693][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.503970][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: open(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 84.699041][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)) [ 84.740647][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.745963][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.778441][ T5117] Bluetooth: hci1: command tx timeout [ 84.784054][ T5118] Bluetooth: hci0: command tx timeout executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=0x9, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000100)=""/202, &(0x7f0000000000)=0xca) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x400, &(0x7f0000000300)) [ 84.784075][ T53] Bluetooth: hci3: command tx timeout [ 84.838931][ T53] Bluetooth: hci4: command tx timeout [ 84.845010][ T53] Bluetooth: hci2: command tx timeout executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x560f, &(0x7f00000006c0)=0xa) [ 84.911191][ T5192] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x5609, &(0x7f0000001900)={0x2, {0xc, 0xa00}}) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa566e86f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7580400b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e40840600000068d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070041e69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3e01000080ca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf94a1b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f72"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$binfmt_script(r0, &(0x7f00000001c0), 0x6a) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/56, 0x38}], 0x1) executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0xf3e, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0xfdef) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) executing program 0: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'wrr\x00'}, {@loopback}}, 0x44) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000096000040"]) executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000058500000017000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0xe8, 0x148, 0x190, 0x240, 0x240, 0x190, 0x215, 0x3, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'rose0\x00', 'veth0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {0xff0f000000000000}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@pkttype={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xec010000, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) [ 85.468036][ T5209] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 1: setregid(0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000002180)='./file0\x00', 0x0) executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x800, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x29f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x7, {0xfffffffffffffd84, 0x2, "000300819f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000080a010200000000000000000200000908000940000000025200074094bbf52e36b9390f3bc1ff71613fc4e8a8395f0b9536c52886ba605079751f826fdb58a69be46b0ba63d4a20336b366bf55662406450c1594dd2888d6ce9c5eb5fba006ba2029c3cfdaac8ed95b800000c00034000000000000000040900020073797a3000000000f80000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30"], 0x1c8}}, 0x0) executing program 4: sched_setscheduler(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x694b, &(0x7f0000000440)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x10, 0x0, 0x0, 0x0}) [ 86.130822][ T5227] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x5451, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}}, 0x0) executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$9p(r0, &(0x7f0000001400)="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", 0xfffffff1) executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$binfmt_script(r0, &(0x7f00000001c0), 0x6a) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/56, 0x38}], 0x1) [ 86.409276][ T5168] usb 3-1: new high-speed USB device number 2 using dummy_hcd executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f00000000c0)="e7ec59a900000000000000000000000000003339beebb4441a54258975cb7b47df04de7351d1dd7d060217ccfd9663a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a000f01"], 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) dup(0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) [ 86.798715][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 4: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x3}}, 0x118) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) [ 86.840409][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.882106][ T5168] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 86.921101][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.957476][ T5168] usb 3-1: config 0 descriptor?? executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) [ 87.018767][ T5248] net_ratelimit: 2 callbacks suppressed [ 87.018788][ T5248] netlink: zone id is out of range [ 87.033815][ T5168] usbhid 3-1:0.0: can't add hid device: -22 [ 87.043183][ T5168] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 87.061791][ T5131] syz-executor.1 (5131) used greatest stack depth: 19544 bytes left [ 87.092289][ T45] cfg80211: failed to load regulatory.db [ 87.101535][ T5248] netlink: set zone limit has 4 unknown bytes executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f00000000c0)) [ 87.262628][ T150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e230005", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a000003940000000000000001"], 0x428}}, 0x0) executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) [ 87.465822][ T150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.529201][ T5255] netlink: 820 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/154, 0x9a) [ 87.688292][ T150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: setregid(0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000002180)='./file0\x00', 0x0) [ 87.824506][ T29] audit: type=1326 audit(1715803619.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 executing program 3: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) [ 87.936792][ T29] audit: type=1326 audit(1715803619.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 87.946110][ T150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.002601][ T29] audit: type=1326 audit(1715803619.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40084503, &(0x7f0000001500)=""/4103) [ 88.067821][ T29] audit: type=1326 audit(1715803619.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.155441][ T29] audit: type=1326 audit(1715803619.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf72f3579 code=0x7ffc0000 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f00000000c0)="e7ec59a900000000000000000000000000003339beebb4441a54258975cb7b47df04de7351d1dd7d060217ccfd9663a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a000f01"], 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 88.216477][ T29] audit: type=1326 audit(1715803619.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.319249][ T29] audit: type=1326 audit(1715803619.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.381119][ T150] bridge_slave_1: left allmulticast mode [ 88.392060][ T150] bridge_slave_1: left promiscuous mode [ 88.423063][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.426463][ T29] audit: type=1326 audit(1715803619.350:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.483244][ T150] bridge_slave_0: left allmulticast mode [ 88.490919][ T29] audit: type=1326 audit(1715803619.350:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.506352][ T150] bridge_slave_0: left promiscuous mode [ 88.555548][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.559354][ T29] audit: type=1326 audit(1715803619.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf72f3579 code=0x7ffc0000 [ 88.718907][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.729629][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.738131][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.747581][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.756436][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.764683][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program 4: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = dup2(r0, r1) write$cgroup_devices(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="0101483a2a207209"], 0xa) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x10, 0x0, 0x0, 0x0}) [ 89.133267][ T784] usb 3-1: USB disconnect, device number 2 executing program 2: pipe2(&(0x7f0000000d40)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) [ 89.393899][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.432370][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.456726][ T150] bond0 (unregistering): Released all slaves [ 89.595099][ T5280] ipvlan2: entered promiscuous mode [ 89.607438][ T5280] ipvlan2: entered allmulticast mode [ 89.627038][ T5280] syz_tun: entered allmulticast mode executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @win={{}, 0x0, 0x4, 0x0, 0x0, 0x0}}}) executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x4376ea830d5fd49b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) dup3(r0, r1, 0x0) executing program 4: r0 = io_uring_setup(0x79bf, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x5100, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ad2ae4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="cc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) [ 90.419663][ T783] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.445619][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008000100001e"], 0x24}}, 0x0) executing program 0: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) getgid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000008780)) [ 90.778483][ T150] hsr_slave_0: left promiscuous mode [ 90.791052][ T150] hsr_slave_1: left promiscuous mode [ 90.817018][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.839109][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.839306][ T53] Bluetooth: hci3: command tx timeout [ 90.852236][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.878475][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.890302][ T783] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 90.899959][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.909963][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.912306][ T783] usb 4-1: config 0 descriptor?? [ 90.930276][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.044051][ T150] veth1_macvtap: left promiscuous mode [ 91.066878][ T150] veth0_macvtap: left promiscuous mode [ 91.087012][ T150] veth1_vlan: left promiscuous mode [ 91.106644][ T150] veth0_vlan: left promiscuous mode [ 91.115109][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.126250][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.138759][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.147608][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 executing program 2: sched_setscheduler(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x694b, &(0x7f0000000440)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) [ 91.162289][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.172826][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 executing program 2: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 91.475794][ T5327] vivid-007: ================= START STATUS ================= [ 91.489214][ T783] usbhid 4-1:0.0: can't add hid device: -71 [ 91.489273][ T5327] vivid-007: Volume: [ 91.495257][ T783] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.495539][ T5327] [ 91.509412][ T5327] ====================================================== [ 91.516455][ T5327] WARNING: possible circular locking dependency detected [ 91.518240][ T783] usb 4-1: USB disconnect, device number 2 [ 91.523473][ T5327] 6.9.0-syzkaller-05151-g1b294a1f3561 #0 Not tainted [ 91.523489][ T5327] ------------------------------------------------------ [ 91.523497][ T5327] syz-executor.2/5327 is trying to acquire lock: [ 91.523510][ T5327] ffff888027600950 (vivid_ctrls:1610:(hdl_user_aud)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 91.561848][ T5327] [ 91.561848][ T5327] but task is already holding lock: [ 91.569241][ T5327] ffff888027601d30 (vivid_ctrls:1622:(hdl_vid_out)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0x11f/0x540 [ 91.581529][ T5327] [ 91.581529][ T5327] which lock already depends on the new lock. [ 91.581529][ T5327] [ 91.591962][ T5327] [ 91.591962][ T5327] the existing dependency chain (in reverse order) is: [ 91.600981][ T5327] [ 91.600981][ T5327] -> #1 (vivid_ctrls:1622:(hdl_vid_out)->_lock){+.+.}-{3:3}: [ 91.610565][ T5327] lock_acquire+0x1ed/0x550 [ 91.615608][ T5327] __mutex_lock+0x136/0xd70 [ 91.620707][ T5327] find_ref_lock+0x5b/0x470 [ 91.625749][ T5327] handler_new_ref+0x102/0x940 [ 91.631051][ T5327] v4l2_ctrl_add_handler+0x1a1/0x290 [ 91.636911][ T5327] vivid_create_controls+0x26bb/0x3580 [ 91.642904][ T5327] vivid_probe+0x4289/0x6fa0 [ 91.648023][ T5327] platform_probe+0x13a/0x1c0 [ 91.653249][ T5327] really_probe+0x2b8/0xad0 [ 91.658377][ T5327] __driver_probe_device+0x1a2/0x390 [ 91.664188][ T5327] driver_probe_device+0x50/0x430 [ 91.669737][ T5327] __driver_attach+0x45f/0x710 [ 91.675034][ T5327] bus_for_each_dev+0x239/0x2b0 [ 91.680502][ T5327] bus_add_driver+0x347/0x620 [ 91.685709][ T5327] driver_register+0x23a/0x320 [ 91.691005][ T5327] vivid_init+0x3d/0x70 [ 91.695714][ T5327] do_one_initcall+0x248/0x880 [ 91.701023][ T5327] do_initcall_level+0x157/0x210 [ 91.706504][ T5327] do_initcalls+0x3f/0x80 [ 91.711463][ T5327] kernel_init_freeable+0x435/0x5d0 [ 91.717218][ T5327] kernel_init+0x1d/0x2b0 [ 91.722080][ T5327] ret_from_fork+0x4b/0x80 [ 91.727032][ T5327] ret_from_fork_asm+0x1a/0x30 [ 91.732332][ T5327] [ 91.732332][ T5327] -> #0 (vivid_ctrls:1610:(hdl_user_aud)->_lock){+.+.}-{3:3}: [ 91.741987][ T5327] validate_chain+0x18cb/0x58e0 [ 91.747407][ T5327] __lock_acquire+0x1346/0x1fd0 [ 91.752788][ T5327] lock_acquire+0x1ed/0x550 [ 91.757827][ T5327] __mutex_lock+0x136/0xd70 [ 91.762873][ T5327] v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 91.769297][ T5327] v4l2_ctrl_log_status+0xe3/0x100 [ 91.774938][ T5327] vidioc_log_status+0x63/0x110 [ 91.780325][ T5327] v4l_log_status+0x8f/0x110 [ 91.785447][ T5327] __video_do_ioctl+0xc26/0xde0 [ 91.790926][ T5327] video_usercopy+0x899/0x1180 [ 91.796228][ T5327] v4l2_ioctl+0x18c/0x1e0 [ 91.801096][ T5327] v4l2_compat_ioctl32+0x1da/0x260 [ 91.806738][ T5327] __se_compat_sys_ioctl+0x51c/0xca0 [ 91.812552][ T5327] __do_fast_syscall_32+0xb8/0x120 [ 91.818193][ T5327] do_fast_syscall_32+0x34/0x80 [ 91.823659][ T5327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.830514][ T5327] [ 91.830514][ T5327] other info that might help us debug this: [ 91.830514][ T5327] [ 91.840744][ T5327] Possible unsafe locking scenario: [ 91.840744][ T5327] [ 91.848193][ T5327] CPU0 CPU1 [ 91.853557][ T5327] ---- ---- [ 91.858944][ T5327] lock(vivid_ctrls:1622:(hdl_vid_out)->_lock); [ 91.865285][ T5327] lock(vivid_ctrls:1610:(hdl_user_aud)->_lock); [ 91.874229][ T5327] lock(vivid_ctrls:1622:(hdl_vid_out)->_lock); [ 91.883084][ T5327] lock(vivid_ctrls:1610:(hdl_user_aud)->_lock); [ 91.889515][ T5327] [ 91.889515][ T5327] *** DEADLOCK *** [ 91.889515][ T5327] [ 91.897660][ T5327] 2 locks held by syz-executor.2/5327: [ 91.903129][ T5327] #0: ffff888027605aa8 (&dev->mutex#3){+.+.}-{3:3}, at: __video_do_ioctl+0x4ed/0xde0 [ 91.912837][ T5327] #1: ffff888027601d30 (vivid_ctrls:1622:(hdl_vid_out)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0x11f/0x540 [ 91.925652][ T5327] [ 91.925652][ T5327] stack backtrace: [ 91.931560][ T5327] CPU: 1 PID: 5327 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-05151-g1b294a1f3561 #0 [ 91.941568][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 91.951723][ T5327] Call Trace: [ 91.955015][ T5327] [ 91.957957][ T5327] dump_stack_lvl+0x241/0x360 [ 91.962761][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.967986][ T5327] ? print_circular_bug+0x130/0x1a0 [ 91.973203][ T5327] check_noncircular+0x36a/0x4a0 [ 91.978155][ T5327] ? __lock_acquire+0x1346/0x1fd0 [ 91.983196][ T5327] ? __pfx_check_noncircular+0x10/0x10 [ 91.988670][ T5327] ? lockdep_lock+0x123/0x2b0 [ 91.993381][ T5327] ? _find_first_zero_bit+0xd4/0x100 [ 91.998698][ T5327] validate_chain+0x18cb/0x58e0 [ 92.003700][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.010049][ T5327] ? do_raw_spin_unlock+0x13c/0x8b0 [ 92.015265][ T5327] ? lockdep_hardirqs_on+0x99/0x150 [ 92.020478][ T5327] ? __pfx_validate_chain+0x10/0x10 [ 92.025720][ T5327] ? finish_task_switch+0x1e5/0x870 [ 92.030969][ T5327] ? __schedule+0x17f0/0x4a50 [ 92.035669][ T5327] ? console_flush_all+0x9e5/0xfd0 [ 92.040815][ T5327] ? console_flush_all+0x152/0xfd0 [ 92.045945][ T5327] ? __lock_acquire+0x1346/0x1fd0 [ 92.051008][ T5327] ? __pfx___schedule+0x10/0x10 [ 92.055877][ T5327] ? mark_lock+0x9a/0x350 [ 92.060223][ T5327] __lock_acquire+0x1346/0x1fd0 [ 92.065111][ T5327] lock_acquire+0x1ed/0x550 [ 92.069639][ T5327] ? v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 92.075723][ T5327] ? __pfx_lock_acquire+0x10/0x10 [ 92.080758][ T5327] ? __pfx___might_resched+0x10/0x10 [ 92.086054][ T5327] ? vprintk_emit+0x3cf/0x770 [ 92.090745][ T5327] ? __wake_up_klogd+0xd5/0x110 [ 92.095616][ T5327] ? vprintk_emit+0x631/0x770 [ 92.100319][ T5327] ? __pfx_vprintk_emit+0x10/0x10 [ 92.105378][ T5327] __mutex_lock+0x136/0xd70 [ 92.109901][ T5327] ? v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 92.115983][ T5327] ? _printk+0xd5/0x120 [ 92.120151][ T5327] ? v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 92.126226][ T5327] ? __pfx_vprintk_emit+0x10/0x10 [ 92.131270][ T5327] ? __pfx___mutex_lock+0x10/0x10 [ 92.136326][ T5327] ? rcu_is_watching+0x15/0xb0 [ 92.141107][ T5327] v4l2_ctrl_handler_log_status+0x2f3/0x540 [ 92.147052][ T5327] v4l2_ctrl_log_status+0xe3/0x100 [ 92.152180][ T5327] vidioc_log_status+0x63/0x110 [ 92.157051][ T5327] v4l_log_status+0x8f/0x110 [ 92.161657][ T5327] __video_do_ioctl+0xc26/0xde0 [ 92.167053][ T5327] ? __pfx___video_do_ioctl+0x10/0x10 [ 92.172441][ T5327] ? tomoyo_path_number_perm+0x208/0x880 [ 92.178090][ T5327] video_usercopy+0x899/0x1180 [ 92.182873][ T5327] ? __pfx___video_do_ioctl+0x10/0x10 [ 92.188262][ T5327] ? __pfx_video_usercopy+0x10/0x10 [ 92.193489][ T5327] ? __fget_files+0x28/0x470 [ 92.198092][ T5327] v4l2_ioctl+0x18c/0x1e0 [ 92.202451][ T5327] v4l2_compat_ioctl32+0x1da/0x260 [ 92.207596][ T5327] __se_compat_sys_ioctl+0x51c/0xca0 [ 92.212922][ T5327] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 92.218744][ T5327] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.224734][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.231073][ T5327] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 92.237671][ T5327] ? lockdep_hardirqs_on+0x99/0x150 [ 92.242877][ T5327] __do_fast_syscall_32+0xb8/0x120 [ 92.248015][ T5327] ? ret_from_fork_asm+0x1a/0x30 [ 92.253203][ T5327] ? lockdep_hardirqs_on+0x99/0x150 [ 92.258427][ T5327] do_fast_syscall_32+0x34/0x80 [ 92.263303][ T5327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.269661][ T5327] RIP: 0023:0xf725f579 [ 92.273735][ T5327] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.293349][ T5327] RSP: 002b:00000000f5e515ac EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 92.301772][ T5327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005646 [ 92.309752][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.317730][ T5327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.325706][ T5327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.333703][ T5327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.341689][ T5327] [ 92.378022][ T5327] 200 [ 92.382508][ T5327] vivid-007: Mute: false [ 92.391000][ T5327] vivid-007: Boolean: true [ 92.395617][ T5327] vivid-007: Integer 32 Bits: 0 [ 92.401493][ T5327] vivid-007: Integer 64 Bits: 0 [ 92.406607][ T5327] vivid-007: Menu: Menu Item 3 [ 92.419938][ T5327] vivid-007: String: [ 92.424289][ T5327] vivid-007: Bitmask: 0x80002000 [ 92.429762][ T5327] vivid-007: Integer Menu: 5 [ 92.434615][ T5327] vivid-007: U32 1 Element Array: [1] 24 [ 92.442211][ T5327] vivid-007: U16 8x16 Matrix: [8][16] 24 [ 92.448028][ T5327] vivid-007: U8 2x3x4x5 Array: [2][3][4][5] 24 [ 92.456557][ T5327] vivid-007: Area: unknown type 262 [ 92.462186][ T5327] vivid-007: Read-Only Integer 32 Bits: 0 [ 92.468049][ T5327] vivid-007: U32 Dynamic Array: [100] 50 [ 92.475130][ T5327] vivid-007: U8 Pixel Array: [640][368] 128 [ 92.486138][ T5327] vivid-007: S32 2 Element Array: [2] 2 [ 92.493437][ T5327] vivid-007: S64 5 Element Array: [5] 4 [ 92.499412][ T5327] vivid-007: Hotplug Present: 0x00000001 [ 92.505164][ T5327] vivid-007: RxSense Present: 0x00000001 [ 92.515128][ T5327] vivid-007: EDID Present: 0x00000001 [ 92.521032][ T5327] vivid-007: Transmit Mode: HDMI [ 92.526308][ T5327] vivid-007: Tx RGB Quantization Range: Automatic [ 92.533611][ T5327] vivid-007: Enable Output Cropping: true [ 92.539892][ T5327] vivid-007: Enable Output Composing: true [ 92.545886][ T5327] vivid-007: Enable Output Scaler: true [ 92.552009][ T5327] vivid-007: Wrap Sequence Number: false [ 92.557938][ T5327] vivid-007: Wrap Timestamp: None [ 92.563636][ T5327] vivid-007: Display Present: true inactive [ 92.569989][ T5327] vivid-007: Percentage of Dropped Buffers: 0 [ 92.576260][ T5327] vivid-007: ================== END STATUS ================== [ 92.736395][ T150] team0 (unregistering): Port device team_slave_1 removed [ 92.774042][ T150] team0 (unregistering): Port device team_slave_0 removed [ 92.920763][ T53] Bluetooth: hci3: command tx timeout [ 93.018723][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.240783][ T53] Bluetooth: hci4: command tx timeout [ 93.389440][ T25] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 93.400819][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.460751][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.494965][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 93.541988][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.575977][ T25] usb 4-1: config 0 descriptor?? [ 93.600643][ T5278] chnl_net:caif_netlink_parms(): no params data found [ 93.728235][ T5323] chnl_net:caif_netlink_parms(): no params data found [ 93.936205][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.956692][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.965280][ T5278] bridge_slave_0: entered allmulticast mode [ 93.978604][ T5278] bridge_slave_0: entered promiscuous mode [ 93.987782][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.999302][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.006539][ T5278] bridge_slave_1: entered allmulticast mode [ 94.028199][ T5278] bridge_slave_1: entered promiscuous mode [ 94.069332][ T25] hid (null): report_id 1323697912 is invalid [ 94.113762][ T25] wacom 0003:056A:00BB.0001: report_id 1323697912 is invalid [ 94.180496][ T25] wacom 0003:056A:00BB.0001: item 0 4 1 8 parsing failed [ 94.197004][ T25] wacom 0003:056A:00BB.0001: parse failed [ 94.214429][ T25] wacom 0003:056A:00BB.0001: probe with driver wacom failed with error -22 [ 94.280278][ T5278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.285674][ T9] usb 4-1: USB disconnect, device number 3 [ 94.315359][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.333468][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.341678][ T5323] bridge_slave_0: entered allmulticast mode [ 94.349052][ T5323] bridge_slave_0: entered promiscuous mode [ 94.361148][ T5278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.384391][ T150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.427624][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.446638][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.464217][ T5323] bridge_slave_1: entered allmulticast mode [ 94.476007][ T5323] bridge_slave_1: entered promiscuous mode [ 94.507473][ T150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.539291][ T5323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.550480][ T5278] team0: Port device team_slave_0 added [ 94.595842][ T5323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.606650][ T5278] team0: Port device team_slave_1 added [ 94.624847][ T5129] syz-executor.0 (5129) used greatest stack depth: 19408 bytes left [ 94.640000][ T150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.816701][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.824907][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.851378][ T5278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.869004][ T150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.892311][ T5323] team0: Port device team_slave_0 added [ 94.899432][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.906490][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.933187][ T5278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.950143][ T5323] team0: Port device team_slave_1 added [ 95.007691][ T5278] hsr_slave_0: entered promiscuous mode [ 95.013580][ T53] Bluetooth: hci3: command tx timeout [ 95.022227][ T5278] hsr_slave_1: entered promiscuous mode [ 95.028820][ T5278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.036403][ T5278] Cannot create hsr debugfs directory [ 95.043892][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.051038][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.080262][ T5323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.111343][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.121453][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.147494][ T5323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.258684][ T150] bridge_slave_1: left allmulticast mode [ 95.264391][ T150] bridge_slave_1: left promiscuous mode [ 95.271494][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.282107][ T150] bridge_slave_0: left allmulticast mode [ 95.287788][ T150] bridge_slave_0: left promiscuous mode [ 95.294136][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.321102][ T53] Bluetooth: hci4: command tx timeout [ 95.475562][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.495750][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.510234][ T150] bond0 (unregistering): Released all slaves [ 95.531205][ T5323] hsr_slave_0: entered promiscuous mode [ 95.537600][ T5323] hsr_slave_1: entered promiscuous mode [ 95.543963][ T5323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.552748][ T5323] Cannot create hsr debugfs directory [ 95.884437][ T150] hsr_slave_0: left promiscuous mode [ 95.893634][ T150] hsr_slave_1: left promiscuous mode [ 95.900517][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.907950][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.922903][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.932790][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.943766][ T150] veth1_macvtap: left promiscuous mode [ 95.951369][ T150] veth0_macvtap: left promiscuous mode [ 95.957016][ T150] veth1_vlan: left promiscuous mode [ 95.963789][ T150] veth0_vlan: left promiscuous mode [ 96.187676][ T150] team0 (unregistering): Port device team_slave_1 removed [ 96.213997][ T150] team0 (unregistering): Port device team_slave_0 removed [ 96.455055][ T5278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.485313][ T5278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.506592][ T5278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.533310][ T5278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.747953][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.789019][ T5278] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.819913][ T150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.842541][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.849721][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.861819][ T5323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.874701][ T5323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.899381][ T150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.915309][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.922524][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.932995][ T5323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.943677][ T5323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.003534][ T150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.059923][ T150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.078525][ T53] Bluetooth: hci3: command tx timeout [ 97.123472][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.155440][ T5323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.206826][ T5323] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.246626][ T150] bridge_slave_1: left allmulticast mode [ 97.253061][ T150] bridge_slave_1: left promiscuous mode [ 97.259490][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.271188][ T150] bridge_slave_0: left allmulticast mode [ 97.276873][ T150] bridge_slave_0: left promiscuous mode [ 97.283049][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.398794][ T53] Bluetooth: hci4: command tx timeout [ 97.458697][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.471718][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.484605][ T150] bond0 (unregistering): Released all slaves [ 97.510567][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.517746][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.554780][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.561995][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.608999][ T5278] veth0_vlan: entered promiscuous mode [ 97.668578][ T5278] veth1_vlan: entered promiscuous mode [ 97.807615][ T150] hsr_slave_0: left promiscuous mode [ 97.828564][ T150] hsr_slave_1: left promiscuous mode [ 97.837080][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.847588][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.856153][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.866614][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.877038][ T150] veth1_macvtap: left promiscuous mode [ 97.885030][ T150] veth0_macvtap: left promiscuous mode [ 97.890826][ T150] veth1_vlan: left promiscuous mode [ 97.896168][ T150] veth0_vlan: left promiscuous mode [ 98.183909][ T150] team0 (unregistering): Port device team_slave_1 removed [ 98.216281][ T150] team0 (unregistering): Port device team_slave_0 removed [ 98.367420][ T5278] veth0_macvtap: entered promiscuous mode [ 98.391966][ T5278] veth1_macvtap: entered promiscuous mode [ 98.413050][ T5323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.493425][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.505144][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.515081][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.528883][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.540488][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.572228][ T5323] veth0_vlan: entered promiscuous mode [ 98.583047][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.593859][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.609911][ T5278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.620739][ T5278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.636039][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.654908][ T5278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.666826][ T5278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.675905][ T5278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.690922][ T5278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.742919][ T5323] veth1_vlan: entered promiscuous mode [ 98.781217][ T5278] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 98.832149][ T5323] veth0_macvtap: entered promiscuous mode [ 98.843816][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.856606][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.877443][ T5278] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 98.893591][ T5323] veth1_macvtap: entered promiscuous mode [ 98.932849][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.943735][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.953633][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.965168][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.975207][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.988082][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.003080][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.012173][ T2800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.023894][ T2800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.034092][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.045929][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.055888][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.067346][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.077389][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.088252][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.101513][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.115752][ T5323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.127989][ T5323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.137360][ T5323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.147279][ T5323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.216596][ T5323] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 99.273767][ T5169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.277100][ T5323] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 99.283907][ T5169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.341539][ T5169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.351890][ T5169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.478571][ T53] Bluetooth: hci4: command tx timeout