last executing test programs: 44.178062025s ago: executing program 4 (id=1989): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x189040, 0x0) dup3(r2, r1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r3, 0x0) r4 = epoll_create1(0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x2003}) epoll_wait(0xffffffffffffffff, &(0x7f0000002cc0)=[{}], 0x1, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000010000000000000e0200000000000000000000000000000604000080002e3b"], &(0x7f00000004c0)=""/214, 0x38, 0xd6, 0x1}, 0x20) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000001800)=0x7, 0x4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000040)={0x4000201a}) 44.086095525s ago: executing program 4 (id=1991): r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 44.006185837s ago: executing program 4 (id=1993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x103) listen(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x5421, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) epoll_create(0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5450, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) 43.789386471s ago: executing program 4 (id=1996): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000029c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) 42.590298372s ago: executing program 4 (id=2004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@tcx={@prog_fd}}, 0x40) 33.630152719s ago: executing program 2 (id=2040): setuid(0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kvm_fpu\x00'}, 0x10) r6 = io_uring_setup(0x2662, &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x19, 0x20000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x80010, r9, 0xe16af000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000340)='contention_end\x00', r10}, 0x10) r11 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000680)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?,(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16\x02\x00\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000380)='\x80p\xa3\x01\xbd\xa6S\x9b\xc0?\xc6l3AA\x12\xden\xec\b\x00\x00\x00\xfe\xe3\xa1\x15\xd8d\fZx\xbaU\xc7\b\x8d\x94', 0x0) read(r11, 0x0, 0x0) io_setup(0x200, &(0x7f0000000280)) 33.503285439s ago: executing program 2 (id=2041): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000029c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) 32.410247508s ago: executing program 2 (id=2045): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004a037608e8040166589701020301090212000100000000090400000092a412002a62b38950a09cc9ac5d0ce8f096252398b3bf3e1d993ecd6a788244b879ef8e743646852f0f17d33d8d81922c64730b4fc8bb881238df436951edbee54eac3cd7f09d01d08b0e6a8ff34a937f2a79312f2ce8ca016af39172749594d9f4a674efa8495edda99fe911195f8949f793ce6a4391c08a625bfea372eab9bd88d340237a5572226f964eb403"], 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x1e6, 0xd10, 0x0, 0x822]}) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x200000100000011, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) capset(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 13.574024508s ago: executing program 4 (id=2043): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\trmw'], 0xa) 6.20590442s ago: executing program 3 (id=2094): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b0877f0000ff66de000000eeff1e267fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x82fa, 0x0, "0911000000000300"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 5.861079915s ago: executing program 3 (id=2097): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) 5.738259983s ago: executing program 3 (id=2099): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGRAB(r0, 0x40084503, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 5.532816498s ago: executing program 3 (id=2101): syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) userfaultfd(0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x138, 0x1b, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 2.761663302s ago: executing program 1 (id=2111): r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xdc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x9}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x20000000}) 2.641405561s ago: executing program 2 (id=2067): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r1, 0xee01, 0x0) 2.569759365s ago: executing program 2 (id=2113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(0xffffffffffffffff) ftruncate(r0, 0x8001) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @private0}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000001080)) 2.426809694s ago: executing program 2 (id=2116): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.290248818s ago: executing program 1 (id=2117): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="f5", 0x1}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd) 2.289644801s ago: executing program 3 (id=2118): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r0, 0x3, 0x20000000, 0x4, 0x0, 0x0, {0x2}}) r1 = memfd_secret(0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000094132d40b2140233fe1b000000010902120001000000000904000000740731000b92c253d08aef5038284f348a2d09ca7858b09c299f6a32524d539bbaf2f3545f00008b165200fe25a07cd7df0f78f1eeebe6d28abfd232d5f3f90bbf8e2b85b6764c2ccfdd2373eaf54f6f80583008215497f8"], 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$isdn(0x22, 0x3, 0x23) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'vlan1\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='nilfs2_segment_usage_freed\x00'}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000ed000095", @ANYRESOCT=r5], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='devfreq_monitor\x00', r6}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000530400000000000000810000"], 0x10}}, 0x0) chmod(0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) r9 = fcntl$dupfd(r8, 0x406, r1) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x6) inotify_add_watch(r9, &(0x7f0000000140)='./file0\x00', 0x2600080c) 2.237968771s ago: executing program 0 (id=2119): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGRAB(r0, 0x40084503, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.144076523s ago: executing program 1 (id=2120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180003d235ec4716900a67d05cca00001a000000bd000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000004c0)=""/121, &(0x7f0000000540)=0x79) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x0, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @private}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x2, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x6, 0x1f, 0x1f, 0x661, 0x0, @private2, @private2, 0x8, 0x8000, 0x5d6e, 0x8}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) iopl(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000f66e99e600000000020000130200000001004000000000000000f700000000000000000000002e000000"], 0x0, 0x3f}, 0x20) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x0, '\x00', r8, r9, 0x2}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1.968494116s ago: executing program 0 (id=2121): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002300)=""/228, 0xe4}], 0x7}}], 0x1, 0x0, 0x0) 1.851614208s ago: executing program 0 (id=2122): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xef, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.850170633s ago: executing program 1 (id=2123): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r1, 0xee01, 0x0) 1.643699559s ago: executing program 1 (id=2124): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000040)=""/49, 0x31) ioctl$BTRFS_IOC_DEV_INFO(r1, 0x891c, 0x0) 1.570324495s ago: executing program 0 (id=2125): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="b00000000314010026bd7000fedbdf250900020073797a320000000008004100727865001400330076657468315f766c616e0000000000000900020073797a3200000000080041007278650014003300766972745f7769666930000000000000090002"], 0xb0}}, 0x0) 1.468581516s ago: executing program 0 (id=2126): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'team_slave_1\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, r3}}], 0x30}, 0x4005) 1.33404861s ago: executing program 0 (id=2127): syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) userfaultfd(0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x138, 0x1b, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 207.763229ms ago: executing program 1 (id=2128): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)=@overlay={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9bcb9172"}}) 0s ago: executing program 3 (id=2129): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="f5", 0x1}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): ous mode [ 295.649856][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.685708][ T9142] program syz.4.1487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.696164][ T53] Bluetooth: hci4: command tx timeout [ 295.737557][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.869993][ T5139] libceph: connect (1)[c::]:6789 error -101 [ 295.891659][ T5139] libceph: mon0 (1)[c::]:6789 connect error [ 296.166888][ T5263] hsr_slave_0: left promiscuous mode [ 296.188275][ T45] libceph: connect (1)[c::]:6789 error -101 [ 296.200596][ T5263] hsr_slave_1: left promiscuous mode [ 296.204710][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 296.237699][ T5263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.253509][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.271146][ T5263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.307535][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.426065][ T5263] veth1_macvtap: left promiscuous mode [ 296.448104][ T9136] ceph: No mds server is up or the cluster is laggy [ 296.461351][ T5263] veth0_macvtap: left promiscuous mode [ 296.638316][ T5263] veth1_vlan: left promiscuous mode [ 296.643795][ T5263] veth0_vlan: left promiscuous mode [ 297.014522][ T45] libceph: connect (1)[c::]:6789 error -101 [ 297.021276][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 297.775929][ T5091] Bluetooth: hci4: command tx timeout [ 298.006497][ T9163] program syz.4.1493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.343052][ T9163] loop0: detected capacity change from 0 to 7 [ 298.376929][ T9163] loop0: [POWERTEC] p1 p2 p3 [ 298.388312][ T9163] loop0: p1 start 1869768547 is beyond EOD, truncated [ 298.421147][ T29] audit: type=1326 audit(1720109186.021:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9164 comm="syz.2.1494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5642375bd9 code=0x0 [ 298.454162][ T9163] loop0: p2 size 16 extends beyond EOD, truncated [ 298.503149][ T9163] loop0: p3 size 8436070 extends beyond EOD, truncated [ 298.836060][ T5091] Bluetooth: hci1: command 0x0405 tx timeout [ 299.022732][ T9181] 9pnet_fd: Insufficient options for proto=fd [ 299.859518][ T53] Bluetooth: hci4: command tx timeout [ 300.762447][ T9201] futex_wake_op: syz.4.1503 tries to shift op by -1; fix this program [ 301.026003][ T5263] team0 (unregistering): Port device team_slave_1 removed [ 301.113053][ T5263] team0 (unregistering): Port device team_slave_0 removed [ 301.166667][ T5084] libceph: connect (1)[c::]:6789 error -101 [ 301.181883][ T5084] libceph: mon0 (1)[c::]:6789 connect error [ 301.417625][ T9203] ceph: No mds server is up or the cluster is laggy [ 301.466357][ T5084] libceph: connect (1)[c::]:6789 error -101 [ 301.472482][ T5084] libceph: mon0 (1)[c::]:6789 connect error [ 301.938110][ T9054] team0: Port device team_slave_0 added [ 302.096242][ T9054] team0: Port device team_slave_1 added [ 302.414133][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.445219][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.478380][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.706038][ T5219] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 303.096092][ T5219] usb 5-1: Using ep0 maxpacket: 16 [ 303.204079][ T29] audit: type=1326 audit(1720109190.751:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9238 comm="syz.3.1517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f3cb75bd9 code=0x0 [ 303.250892][ T5219] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 303.314773][ T5219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.409053][ T5219] usb 5-1: Product: syz [ 303.449552][ T5219] usb 5-1: Manufacturer: syz [ 303.454285][ T5219] usb 5-1: SerialNumber: syz [ 303.556500][ T5219] usb 5-1: config 0 descriptor?? [ 303.581593][ T5219] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 303.772893][ T9244] 9pnet_fd: Insufficient options for proto=fd [ 304.051557][ T5219] usb 5-1: USB disconnect, device number 13 [ 304.888203][ T9252] xt_NFQUEUE: number of total queues is 0 [ 305.735503][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.746454][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.784208][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.841623][ T9254] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1522'. [ 306.005636][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 306.058643][ T9054] hsr_slave_0: entered promiscuous mode [ 306.091159][ T9054] hsr_slave_1: entered promiscuous mode [ 306.121880][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.133758][ T9054] Cannot create hsr debugfs directory [ 306.391523][ T9279] xt_NFQUEUE: number of total queues is 0 [ 306.427949][ T9274] netlink: 'syz.3.1527': attribute type 4 has an invalid length. [ 306.494755][ T9283] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1533'. [ 306.914957][ T9274] syz.3.1527 (9274) used greatest stack depth: 19024 bytes left [ 306.969865][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 307.156949][ T9300] netlink: 'syz.3.1540': attribute type 3 has an invalid length. [ 307.224269][ T9300] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1540'. [ 307.464142][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 307.633929][ T9054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.782285][ T9316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.894939][ T29] audit: type=1326 audit(1720109195.501:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9318 comm="syz.1.1548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9a2175bd9 code=0x0 [ 308.510090][ T9324] 9pnet_fd: Insufficient options for proto=fd [ 308.722518][ T9316] bond0: (slave bond1): Enslaving as an active interface with an up link [ 308.890873][ T9054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.954450][ T9054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.023932][ T9054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.316199][ T9332] netlink: 'syz.3.1550': attribute type 4 has an invalid length. [ 309.362185][ T9341] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 309.397017][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.406614][ T9341] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1556'. [ 309.577293][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.615227][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.622505][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.719202][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.726528][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.975470][ T9357] Smack: duplicate mount options [ 310.168066][ T9054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.427057][ T9378] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1571'. [ 310.697953][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.842529][ T9054] veth0_vlan: entered promiscuous mode [ 310.872082][ T9054] veth1_vlan: entered promiscuous mode [ 310.886696][ T5141] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 311.025923][ T5219] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 311.031006][ T9054] veth0_macvtap: entered promiscuous mode [ 311.062559][ T9054] veth1_macvtap: entered promiscuous mode [ 311.088450][ T5141] usb 5-1: Using ep0 maxpacket: 32 [ 311.139399][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.153123][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.163686][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.176521][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.187420][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.198291][ T5137] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 311.214765][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.227585][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.240987][ T5219] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 311.250454][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.260832][ T5219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.269176][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.283283][ T5219] usb 4-1: config 0 descriptor?? [ 311.289659][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.307564][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.359527][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.370960][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.382152][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.396676][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.406997][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.424150][ T5137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 311.425232][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.444211][ T5137] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 311.452377][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.472467][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.475086][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.482357][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.482383][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.484448][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.501717][ T5137] usb 2-1: config 0 descriptor?? [ 311.538863][ T5219] mxuport 4-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 311.548940][ T5219] mxuport 4-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 311.566956][ T5219] mxuport 4-1:0.0: probe with driver mxuport failed with error -71 [ 311.592375][ T5219] usb 4-1: USB disconnect, device number 13 [ 311.598109][ T9054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.612633][ T9054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.642090][ T9054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.654524][ T9054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.808589][ T5137] (null): keene_cmd_main failed (-71) [ 311.830974][ T5137] video4linux radio32: keene_cmd_main failed (-71) [ 311.843483][ T5137] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 311.862104][ T5137] usb 2-1: USB disconnect, device number 14 [ 311.869321][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.887168][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.947752][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.962514][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.542721][ T9419] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 312.590752][ T5141] usb 5-1: unable to get BOS descriptor or descriptor too short [ 312.599389][ T9419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 312.619799][ T5141] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 312.645932][ T5141] usb 5-1: can't read configurations, error -71 [ 313.696226][ T784] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 313.851243][ T9449] overlayfs: unescaped trailing colons in lowerdir mount option. [ 313.901563][ T784] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 313.925885][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.951408][ T784] usb 1-1: config 0 descriptor?? [ 314.076048][ T5141] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 314.175900][ T784] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 314.179796][ T9461] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 314.186317][ T784] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 314.221261][ T9461] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.226361][ T784] mxuport 1-1:0.0: probe with driver mxuport failed with error -71 [ 314.256410][ T784] usb 1-1: USB disconnect, device number 14 [ 314.283343][ T5141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.313579][ T5141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.326248][ T5141] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.339650][ T5141] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 314.348869][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.371697][ T5141] usb 5-1: config 0 descriptor?? [ 314.451174][ T9466] netlink: 'syz.3.1610': attribute type 2 has an invalid length. [ 314.647435][ T53] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 315.588855][ T5141] betop 0003:11C0:5506.000D: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.4-1/input0 [ 315.661230][ T5141] betop 0003:11C0:5506.000D: no inputs found [ 315.741025][ T5141] usb 5-1: USB disconnect, device number 16 [ 316.392093][ T9491] input: syz1 as /devices/virtual/input/input13 [ 316.411130][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.423464][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.436392][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.448758][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.458127][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.466434][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.583744][ T9491] input: syz0 as /devices/virtual/input/input14 [ 317.086102][ T784] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 317.145649][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.319116][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 317.351562][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.380191][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.406204][ T784] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.424165][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.434535][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 317.481910][ T784] usb 5-1: config 0 descriptor?? [ 317.500550][ T784] hub 5-1:0.0: USB hub found [ 317.724330][ T784] hub 5-1:0.0: 1 port detected [ 317.771779][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.799301][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.827098][ T9492] bridge_slave_0: entered allmulticast mode [ 317.840736][ T9492] bridge_slave_0: entered promiscuous mode [ 317.869377][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.886009][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.905513][ T9492] bridge_slave_1: entered allmulticast mode [ 317.927994][ T784] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 317.929020][ T9492] bridge_slave_1: entered promiscuous mode [ 317.939447][ T784] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 317.962212][ T784] usbhid 5-1:0.0: can't add hid device: -71 [ 317.968564][ T9525] tap0: tun_chr_ioctl cmd 1074025677 [ 317.996110][ T784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.007386][ T9525] tap0: linktype set to 6 [ 318.050566][ T784] usb 5-1: USB disconnect, device number 17 [ 318.112812][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 318.226509][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.296711][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.387641][ T9539] input: syz1 as /devices/virtual/input/input15 [ 318.415284][ T9492] team0: Port device team_slave_0 added [ 318.439970][ T9492] team0: Port device team_slave_1 added [ 318.447511][ T9540] input: syz0 as /devices/virtual/input/input16 [ 318.497481][ T5091] Bluetooth: hci1: command tx timeout [ 318.512429][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.536048][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.616036][ T9492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.657357][ T5091] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 318.666682][ T5091] Bluetooth: hci2: Injecting HCI hardware error event [ 318.676465][ T5091] Bluetooth: hci2: hardware error 0x00 [ 318.694672][ T9543] netlink: 'syz.4.1635': attribute type 2 has an invalid length. [ 318.715597][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.728741][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.756016][ T9492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.877887][ T9492] hsr_slave_0: entered promiscuous mode [ 318.892442][ T9492] hsr_slave_1: entered promiscuous mode [ 318.911850][ T9492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.934109][ T9492] Cannot create hsr debugfs directory [ 319.263190][ T9492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.433213][ T9492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.761838][ T9492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.053046][ T9492] bond0: (slave netdevsim0): Releasing backup interface [ 320.091612][ T9492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.149541][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 320.667322][ T53] Bluetooth: hci1: command tx timeout [ 320.736109][ T5091] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 321.438666][ T9492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.874077][ T5091] Bluetooth: hci1: command tx timeout [ 323.146558][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 323.157332][ T9492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.240130][ T9492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.348272][ T9492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.761873][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.842861][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.859627][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.866995][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.888789][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.896064][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.170479][ T9601] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 324.895965][ T5091] Bluetooth: hci1: command tx timeout [ 325.019533][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.871388][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1672'. [ 325.955603][ T9660] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 325.967166][ T9492] veth0_vlan: entered promiscuous mode [ 325.983636][ T9660] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 326.009363][ T9660] ALSA: mixer_oss: invalid OSS volume 'DIGI' [ 326.019128][ T9492] veth1_vlan: entered promiscuous mode [ 326.139743][ T9667] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 326.159897][ T9492] veth0_macvtap: entered promiscuous mode [ 326.199958][ T9492] veth1_macvtap: entered promiscuous mode [ 326.262219][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.296723][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.331280][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.343961][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.369661][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.416089][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.444487][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.462782][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.473110][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.487105][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.499923][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.521027][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.542970][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.583315][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.626246][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.826058][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.860525][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.586172][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.597455][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.612214][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.625686][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.638292][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.649555][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.659953][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.671011][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.687635][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.717910][ T9492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.727211][ T9492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.736158][ T9492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.745107][ T9492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.048780][ T5263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.095882][ T5263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.199517][ T5263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.219107][ T5263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.454199][ T9695] overlayfs: unescaped trailing colons in lowerdir mount option. [ 328.552014][ T9691] IPVS: persistence engine module ip_vs_pe_si not found [ 330.055084][ T9735] IPVS: persistence engine module ip_vs_pe_si not found [ 330.288412][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.968818][ T9769] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1714'. [ 331.329044][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063d86000: rx timeout, send abort [ 331.340261][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888063d86000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 332.332048][ T955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.562841][ T955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.682897][ T9813] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 332.764050][ T955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.765902][ T5139] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 332.907479][ T9819] input: syz1 as /devices/virtual/input/input18 [ 332.949296][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.962400][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.965522][ T955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.984650][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.998956][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.018600][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.026576][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.052002][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.063427][ T5139] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.077074][ T5139] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.086344][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.101726][ T5139] usb 5-1: config 0 descriptor?? [ 333.523425][ T5139] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 333.588542][ T5139] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 333.692382][ T955] bridge_slave_1: left allmulticast mode [ 333.700736][ T955] bridge_slave_1: left promiscuous mode [ 333.706937][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.730382][ T955] bridge_slave_0: left allmulticast mode [ 333.739415][ T955] bridge_slave_0: left promiscuous mode [ 333.745396][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.808936][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.820295][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.851433][ T5139] usb 5-1: USB disconnect, device number 18 [ 333.895980][ T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 334.107764][ T9] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 334.153476][ T9] usb 2-1: string descriptor 0 read error: -22 [ 334.169364][ T9] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 334.201130][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.233161][ T9] usb 2-1: config 0 descriptor?? [ 334.589052][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 334.758388][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 335.111154][ T5091] Bluetooth: hci1: command tx timeout [ 335.530367][ T9] dib0700: firmware download failed at 7 with -22 [ 335.608961][ T9] usb 2-1: USB disconnect, device number 15 [ 335.771436][ T5091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.796837][ T5091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.814560][ T5091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.837667][ T5091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.845799][ T5091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.853275][ T5091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.047892][ T955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.062741][ T955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.115049][ T955] bond0 (unregistering): Released all slaves [ 336.240410][ T9867] netlink: 'syz.4.1758': attribute type 4 has an invalid length. [ 336.428376][ T9822] chnl_net:caif_netlink_parms(): no params data found [ 336.794572][ T955] hsr_slave_0: left promiscuous mode [ 336.875303][ T955] hsr_slave_1: left promiscuous mode [ 336.882310][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.916001][ T955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.975337][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.000285][ T9899] netlink: 'syz.1.1767': attribute type 29 has an invalid length. [ 337.006006][ T955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.085105][ T955] veth1_macvtap: left promiscuous mode [ 337.090954][ T955] veth0_macvtap: left promiscuous mode [ 337.096873][ T955] veth1_vlan: left promiscuous mode [ 337.102284][ T955] veth0_vlan: left promiscuous mode [ 337.136182][ T53] Bluetooth: hci1: command tx timeout [ 337.936146][ T53] Bluetooth: hci4: command tx timeout [ 338.078433][ T955] team0 (unregistering): Port device team_slave_1 removed [ 338.185179][ T955] team0 (unregistering): Port device team_slave_0 removed [ 338.466966][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd6a400: rx timeout, send abort [ 338.475488][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cd6a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.958963][ T9899] netlink: 'syz.1.1767': attribute type 29 has an invalid length. [ 339.215935][ T53] Bluetooth: hci1: command tx timeout [ 339.687989][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.708129][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 339.878471][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.892827][ T9822] bridge_slave_0: entered allmulticast mode [ 339.941198][ T9822] bridge_slave_0: entered promiscuous mode [ 339.997290][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.015997][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.025997][ T5091] Bluetooth: hci4: command tx timeout [ 340.032586][ T9822] bridge_slave_1: entered allmulticast mode [ 340.048411][ T9822] bridge_slave_1: entered promiscuous mode [ 340.211870][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.282566][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.402142][ T9822] team0: Port device team_slave_0 added [ 340.449250][ T9822] team0: Port device team_slave_1 added [ 340.602125][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 340.626594][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.675183][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.765682][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.802097][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.809706][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.839972][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.047044][ T9822] hsr_slave_0: entered promiscuous mode [ 341.054517][ T9822] hsr_slave_1: entered promiscuous mode [ 341.066675][ T9822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.081168][ T9822] Cannot create hsr debugfs directory [ 341.114223][ T9875] chnl_net:caif_netlink_parms(): no params data found [ 341.168380][ T9948] netlink: 'syz.1.1785': attribute type 29 has an invalid length. [ 341.207099][ T9948] netlink: 'syz.1.1785': attribute type 29 has an invalid length. [ 341.220673][ T9948] netlink: 'syz.1.1785': attribute type 29 has an invalid length. [ 341.305942][ T5091] Bluetooth: hci1: command tx timeout [ 341.382852][ T955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.447989][ T9950] ptrace attach of "./syz-executor exec"[7804] was attempted by "./syz-executor exec"[9950] [ 341.666863][ T955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.971553][ T955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.097939][ T5091] Bluetooth: hci4: command tx timeout [ 343.135922][ T955] bond0: (slave netdevsim0): Releasing backup interface [ 343.161505][ T955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.241224][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.259904][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.269975][ T9875] bridge_slave_0: entered allmulticast mode [ 343.281262][ T9875] bridge_slave_0: entered promiscuous mode [ 343.308610][ T9982] nicvf0: tun_chr_ioctl cmd 1074025677 [ 343.314412][ T9982] nicvf0: linktype set to 827 [ 343.336039][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.343329][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.365475][ T9875] bridge_slave_1: entered allmulticast mode [ 343.396421][ T9875] bridge_slave_1: entered promiscuous mode [ 343.572031][ T9875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.592068][ T9875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.825318][ T9875] team0: Port device team_slave_0 added [ 343.841910][ T9875] team0: Port device team_slave_1 added [ 343.901400][ T29] audit: type=1326 audit(1720109231.511:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10000 comm="syz.4.1805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c52775bd9 code=0x0 [ 344.004576][ T955] bridge_slave_1: left allmulticast mode [ 344.012892][ T955] bridge_slave_1: left promiscuous mode [ 344.030416][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.066722][ T955] bridge_slave_0: left allmulticast mode [ 344.072429][ T955] bridge_slave_0: left promiscuous mode [ 344.117071][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.177911][ T5091] Bluetooth: hci4: command tx timeout [ 344.616530][ T955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.651171][ T955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.672130][ T955] bond0 (unregistering): Released all slaves [ 344.704457][ T955] bond1 (unregistering): Released all slaves [ 344.744090][ T9875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.766154][ T9875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.802756][ T9875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.995254][T10017] nicvf0: tun_chr_ioctl cmd 1074025677 [ 345.006088][T10017] nicvf0: linktype set to 827 [ 345.076413][ T9875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.083428][ T9875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.128220][ T9875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.203176][T10027] binder: 10026:10027 ioctl c018620b 20000240 returned -14 [ 345.412732][ T9875] hsr_slave_0: entered promiscuous mode [ 345.433728][ T9875] hsr_slave_1: entered promiscuous mode [ 345.446273][ T9875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.464812][ T9875] Cannot create hsr debugfs directory [ 345.569590][ T955] hsr_slave_0: left promiscuous mode [ 345.577374][ T955] hsr_slave_1: left promiscuous mode [ 345.599269][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.606881][ T955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.627118][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.656139][ T955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.712109][ T955] veth1_macvtap: left promiscuous mode [ 345.725246][ T955] veth0_macvtap: left promiscuous mode [ 345.736877][ T955] veth1_vlan: left promiscuous mode [ 345.742391][ T955] veth0_vlan: left promiscuous mode [ 347.020584][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 347.522646][ T955] team0 (unregistering): Port device team_slave_1 removed [ 347.575574][ T955] team0 (unregistering): Port device team_slave_0 removed [ 348.634478][ T9822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.748103][ T9822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.787384][T10072] netlink: 'syz.2.1831': attribute type 21 has an invalid length. [ 348.795442][T10072] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1831'. [ 348.822708][T10072] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 348.840965][T10072] netlink: 'syz.2.1831': attribute type 3 has an invalid length. [ 348.859955][T10072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1831'. [ 348.882083][ T9822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.930867][T10073] netlink: 'syz.2.1831': attribute type 21 has an invalid length. [ 348.946030][T10073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1831'. [ 348.986169][T10073] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 349.007693][T10073] netlink: 'syz.2.1831': attribute type 5 has an invalid length. [ 349.035242][T10073] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1831'. [ 349.067640][ T9822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.630871][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.825295][ T9822] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.871644][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.878903][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.929283][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.936551][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.983388][ T9875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.041438][ T9875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.072893][ T9875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.100580][ T9875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.978375][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 351.295949][ T9875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.367572][ T9875] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.398365][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.398550][T10098] netlink: 'syz.2.1840': attribute type 21 has an invalid length. [ 351.420389][T10098] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1840'. [ 351.430859][T10098] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 351.438803][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.445390][T10098] netlink: 'syz.2.1840': attribute type 3 has an invalid length. [ 351.471473][T10098] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1840'. [ 351.481492][ T25] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 351.506029][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.508358][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.521309][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.529294][ T25] usb 5-1: config 0 descriptor?? [ 351.589896][T10099] netlink: 'syz.2.1840': attribute type 21 has an invalid length. [ 351.609574][T10099] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1840'. [ 351.626236][T10099] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1840'. [ 351.646255][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.653460][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.753677][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.957852][ T9822] veth0_vlan: entered promiscuous mode [ 352.984723][ T9822] veth1_vlan: entered promiscuous mode [ 353.067921][ T62] bridge_slave_1: left allmulticast mode [ 353.092444][ T62] bridge_slave_1: left promiscuous mode [ 353.098814][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.120204][ T62] bridge_slave_0: left allmulticast mode [ 353.135356][ T62] bridge_slave_0: left promiscuous mode [ 353.141733][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.252523][T10110] UBIFS error (pid: 10110): cannot open "ub ", error -22 [ 353.299198][ T62] bridge_slave_1: left allmulticast mode [ 353.315192][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 353.321510][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 353.333449][ T25] usb 5-1: USB disconnect, device number 19 [ 353.356641][ T62] bridge_slave_1: left promiscuous mode [ 353.362473][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.395292][ T62] bridge_slave_0: left allmulticast mode [ 353.422792][ T62] bridge_slave_0: left promiscuous mode [ 353.437396][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.425053][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.446704][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.459645][ T62] bond0 (unregistering): Released all slaves [ 355.626915][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.641254][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.652898][ T62] bond0 (unregistering): Released all slaves [ 355.845219][ T9822] veth0_macvtap: entered promiscuous mode [ 355.901327][ T9822] veth1_macvtap: entered promiscuous mode [ 355.921570][ T62] tipc: Left network mode [ 355.964364][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.006168][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.046373][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.082050][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.112781][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.137076][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.157853][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.185855][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.207038][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.232406][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.268413][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.436263][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.457204][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.465401][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.487326][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.496089][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.504542][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.640327][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.661219][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.672793][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.683554][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.700957][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.711858][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.721963][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.732586][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.743896][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.756626][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.768867][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.847650][ T9875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.869970][ T9822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.895194][ T9822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.904274][ T9822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.909687][T10155] UBIFS error (pid: 10155): cannot open "ub ", error -22 [ 356.913363][ T9822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.375252][ T9875] veth0_vlan: entered promiscuous mode [ 357.419618][ T9875] veth1_vlan: entered promiscuous mode [ 357.497264][ T9875] veth0_macvtap: entered promiscuous mode [ 357.518846][ T9875] veth1_macvtap: entered promiscuous mode [ 357.557237][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.576067][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.593666][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.605364][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.616015][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.636867][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.648692][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.659395][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.669281][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.680813][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.691587][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.702133][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.714385][ T9875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.730183][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.740824][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.751869][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.763050][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.773379][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.784593][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.795669][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.806304][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.816788][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.827301][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.837404][ T9875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.847961][ T9875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.859827][T10157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.869065][ T9875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.877452][T10157] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 357.899688][ T9875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.910333][ T9875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.919778][ T9875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.928709][ T9875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.252776][T10157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.271624][T10157] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 358.301836][T10157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.311759][T10157] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 358.323705][T10157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.340139][T10157] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 358.595595][ T5262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.608586][ T5262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.624126][ T62] hsr_slave_0: left promiscuous mode [ 358.645430][ T62] hsr_slave_1: left promiscuous mode [ 358.681202][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.696001][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.716956][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.747545][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.804930][ T62] hsr_slave_0: left promiscuous mode [ 358.815294][ T62] hsr_slave_1: left promiscuous mode [ 358.831585][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.862080][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.888991][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.905927][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.988834][ T62] veth1_macvtap: left promiscuous mode [ 358.994456][ T62] veth0_macvtap: left promiscuous mode [ 359.009346][ T62] veth1_vlan: left promiscuous mode [ 359.015008][ T62] veth0_vlan: left allmulticast mode [ 359.025531][ T62] veth0_vlan: left promiscuous mode [ 359.043213][ T62] veth1_macvtap: left promiscuous mode [ 359.061654][ T62] veth0_macvtap: left promiscuous mode [ 359.082043][ T62] veth1_vlan: left promiscuous mode [ 359.102272][ T62] veth0_vlan: left promiscuous mode [ 359.774445][ T62] team0 (unregistering): Port device vlan0 removed [ 359.941218][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 360.094284][ T62] team0 (unregistering): Port device team_slave_1 removed [ 360.135973][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 360.143111][ T62] team0 (unregistering): Port device team_slave_0 removed [ 360.154685][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 360.172595][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.183286][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.202253][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.213294][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.226382][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.235525][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.463355][ T9] usb 2-1: usb_control_msg returned -32 [ 360.481099][ T9] usbtmc 2-1:16.0: can't read capabilities [ 361.185557][ T62] team0 (unregistering): Port device team_slave_1 removed [ 361.235620][ T62] team0 (unregistering): Port device team_slave_0 removed [ 361.812958][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1863'. [ 361.901505][T10142] chnl_net:caif_netlink_parms(): no params data found [ 361.943131][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.980467][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.996638][T10228] afs: Unexpected value for 'dyn' [ 362.150089][ T5262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.162288][ T5262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.322914][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.341372][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.361050][T10142] bridge_slave_0: entered allmulticast mode [ 362.407240][T10142] bridge_slave_0: entered promiscuous mode [ 363.108869][ T5137] usb 2-1: USB disconnect, device number 16 [ 363.241509][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.261759][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.270997][T10142] bridge_slave_1: entered allmulticast mode [ 363.283046][T10142] bridge_slave_1: entered promiscuous mode [ 363.326330][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.334504][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.383266][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.418370][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.571279][T10142] team0: Port device team_slave_0 added [ 363.659079][T10142] team0: Port device team_slave_1 added [ 363.683276][ T29] audit: type=1326 audit(1720109251.291:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10251 comm="syz.1.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9a2175bd9 code=0x0 [ 363.780412][T10259] vivid-003: disconnect [ 363.816445][ T29] audit: type=1326 audit(1720109251.431:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.4.1868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c52775bd9 code=0x0 [ 363.946070][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.953163][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.059369][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.112791][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.146028][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.252564][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.376930][T10251] vivid-003: reconnect [ 364.541483][T10142] hsr_slave_0: entered promiscuous mode [ 364.590782][T10142] hsr_slave_1: entered promiscuous mode [ 364.620054][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.637977][T10142] Cannot create hsr debugfs directory [ 364.643928][T10283] afs: Unexpected value for 'dyn' [ 364.725061][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 364.897978][ T62] IPVS: stop unused estimator thread 0... [ 365.151247][T10305] loop0: detected capacity change from 0 to 7 [ 365.174313][T10305] Dev loop0: unable to read RDB block 7 [ 365.188163][T10305] loop0: unable to read partition table [ 365.208060][T10305] loop0: partition table beyond EOD, truncated [ 365.228454][ T29] audit: type=1326 audit(1720109252.841:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10301 comm="syz.0.1881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecb5575bd9 code=0x0 [ 365.267091][T10305] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 365.267091][T10305] ) failed (rc=-5) [ 365.294002][ T29] audit: type=1326 audit(1720109252.901:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.3.1882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2488175bd9 code=0x0 [ 365.304216][T10142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.391131][T10310] vivid-002: disconnect [ 365.447463][T10142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.471252][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 365.542877][T10142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.607939][T10142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.674476][ T62] bridge_slave_1: left allmulticast mode [ 365.683002][ T62] bridge_slave_1: left promiscuous mode [ 365.701683][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.717399][ T62] bridge_slave_0: left allmulticast mode [ 365.723102][ T62] bridge_slave_0: left promiscuous mode [ 365.729660][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.862351][T10317] afs: Unexpected value for 'dyn' [ 365.966875][T10303] vivid-002: reconnect [ 366.613231][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.671969][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.721039][ T62] bond0 (unregistering): (slave bond1): Releasing backup interface [ 366.735053][ T62] bond0 (unregistering): Released all slaves [ 366.931295][ T62] bond1 (unregistering): Released all slaves [ 367.192128][T10142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 367.240915][T10142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 367.284425][T10142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 367.330295][T10142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.257761][T10353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1898'. [ 368.500470][ T62] hsr_slave_0: left promiscuous mode [ 368.530957][ T62] hsr_slave_1: left promiscuous mode [ 368.550047][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.572199][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.603117][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.624280][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.719557][ T62] veth1_macvtap: left promiscuous mode [ 368.735345][ T62] veth0_macvtap: left promiscuous mode [ 368.745569][ T62] veth1_vlan: left promiscuous mode [ 368.755649][ T62] veth0_vlan: left promiscuous mode [ 369.590133][ T29] audit: type=1326 audit(1720109257.191:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10377 comm="syz.3.1907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2488175bd9 code=0x0 [ 369.978209][ T62] team0 (unregistering): Port device team_slave_1 removed [ 370.070585][ T62] team0 (unregistering): Port device team_slave_0 removed [ 371.002099][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.089818][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.145326][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.152573][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.203546][ T29] audit: type=1326 audit(1720109258.811:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.0.1910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecb5575bd9 code=0x0 [ 371.250099][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.257396][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.307515][T10392] vivid-001: disconnect [ 371.930014][T10387] vivid-001: reconnect [ 372.038658][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.184810][T10142] veth0_vlan: entered promiscuous mode [ 372.327170][T10142] veth1_vlan: entered promiscuous mode [ 372.432600][T10142] veth0_macvtap: entered promiscuous mode [ 372.464784][T10142] veth1_macvtap: entered promiscuous mode [ 372.512813][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.529137][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.550236][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.585535][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.611870][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.635918][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.663365][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.684307][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.685844][ T784] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 372.714835][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.738966][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.755109][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.773549][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.784847][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.813848][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.842715][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.859570][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.873692][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.892542][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.915917][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 372.921467][T10142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.934100][ T784] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 372.940714][ T5084] kernel write not supported for file /45/loginuid (pid: 5084 comm: kworker/1:3) [ 372.955794][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.971480][T10142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.986208][ T784] usb 1-1: config 0 descriptor?? [ 372.994971][T10142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.014744][T10142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.210802][ T784] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 373.264550][ T784] asix 1-1:0.0: probe with driver asix failed with error -71 [ 373.273351][ T5262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.298783][ T5262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.340543][ T784] usb 1-1: USB disconnect, device number 15 [ 373.394221][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.424527][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.585936][ T5139] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 374.823207][ T5139] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 375.138136][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.301633][ T5139] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 375.321125][ T5139] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 375.367558][ T5139] usb 1-1: Manufacturer: syz [ 375.385316][ T5139] usb 1-1: config 0 descriptor?? [ 375.505848][ T5139] rc_core: IR keymap rc-hauppauge not found [ 375.512385][ T5139] Registered IR keymap rc-empty [ 375.529044][ T5139] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 375.563199][ T5139] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 376.116065][ T5139] usb 1-1: USB disconnect, device number 16 [ 376.265672][T10489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.104724][T10515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.716507][ T5139] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 377.975943][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 377.991738][ T5139] usb 2-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 378.027899][ T5139] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.068277][ T5139] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.157327][ T5139] usb 2-1: New USB device found, idVendor=0325, idProduct=0000, bcdDevice= 0.00 [ 378.192753][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.428047][T10541] program syz.0.1963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.595919][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.031369][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 380.926705][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 381.566489][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 382.036109][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 382.044832][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 382.127591][ T5139] usb 2-1: string descriptor 0 read error: -71 [ 382.135246][ T5139] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 382.143993][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.170527][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.180500][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 382.191171][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.204737][ T5139] usb 2-1: USB disconnect, device number 17 [ 382.219117][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 382.228632][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.239360][ T45] usb 3-1: config 0 descriptor?? [ 382.296681][ T45] usb 3-1: can't set config #0, error -71 [ 382.317127][ T45] usb 3-1: USB disconnect, device number 7 [ 382.714359][T10572] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 383.252250][T10590] Bluetooth: hci3: unsupported parameter 49150 [ 383.274438][T10590] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 383.606086][ T29] audit: type=1326 audit(1720109274.213:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10600 comm="syz.0.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecb5575bd9 code=0x0 [ 383.940690][T10616] Bluetooth: hci3: unsupported parameter 49150 [ 383.949506][T10616] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 385.427058][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2006'. [ 386.697362][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.719207][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.727708][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.741459][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.751720][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.767480][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.811438][T10670] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 388.060631][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.149017][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 388.239021][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.395315][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.422293][T10667] chnl_net:caif_netlink_parms(): no params data found [ 388.533183][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.580053][T10702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 388.596362][T10702] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 388.626218][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.636419][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.644476][T10667] bridge_slave_0: entered allmulticast mode [ 388.651964][T10667] bridge_slave_0: entered promiscuous mode [ 388.663040][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.670994][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.678320][T10667] bridge_slave_1: entered allmulticast mode [ 388.686412][T10667] bridge_slave_1: entered promiscuous mode [ 388.725629][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.745234][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.814750][ T35] bridge_slave_1: left allmulticast mode [ 388.820860][ T5091] Bluetooth: hci1: command tx timeout [ 388.828300][ T35] bridge_slave_1: left promiscuous mode [ 388.834402][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.849676][ T35] bridge_slave_0: left allmulticast mode [ 388.855475][ T35] bridge_slave_0: left promiscuous mode [ 388.862185][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.389837][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.398333][T10710] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 389.420010][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.442479][ T35] bond0 (unregistering): Released all slaves [ 389.473777][T10667] team0: Port device team_slave_0 added [ 389.521494][T10667] team0: Port device team_slave_1 added [ 389.616543][ T29] audit: type=1326 audit(1720109280.223:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10715 comm="syz.2.2029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe682f75bd9 code=0x0 [ 389.654666][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.684158][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.720158][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.733241][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.740503][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.769389][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.426541][T10667] hsr_slave_0: entered promiscuous mode [ 390.453382][T10667] hsr_slave_1: entered promiscuous mode [ 390.476026][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.502293][T10667] Cannot create hsr debugfs directory [ 390.722200][ T35] hsr_slave_0: left promiscuous mode [ 390.731049][ T35] hsr_slave_1: left promiscuous mode [ 390.742073][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.749638][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.758453][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.772982][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.803680][ T35] veth1_macvtap: left promiscuous mode [ 390.809374][ T35] veth0_macvtap: left promiscuous mode [ 390.814965][ T35] veth1_vlan: left promiscuous mode [ 390.820472][ T35] veth0_vlan: left promiscuous mode [ 390.908059][ T5091] Bluetooth: hci1: command tx timeout [ 392.072142][ T35] team0 (unregistering): Port device team_slave_1 removed [ 392.114917][ T35] team0 (unregistering): Port device team_slave_0 removed [ 392.601781][T10730] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 392.841150][T10735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 392.861309][T10735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 392.986027][ T5091] Bluetooth: hci1: command tx timeout [ 393.088631][T10667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.098928][T10667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.113047][T10667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.124122][T10667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.220098][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.244967][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.261466][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.268700][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.284199][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.291399][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.523163][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.600925][T10667] veth0_vlan: entered promiscuous mode [ 393.620712][T10667] veth1_vlan: entered promiscuous mode [ 393.673946][T10667] veth0_macvtap: entered promiscuous mode [ 393.690838][T10667] veth1_macvtap: entered promiscuous mode [ 393.720215][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.731126][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.741701][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.752766][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.763173][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.773776][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.784742][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.800989][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.812968][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.828898][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.839867][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.849757][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.861860][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.872536][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.883907][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.894233][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.905392][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.924471][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.947785][T10667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.964401][T10667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.974811][T10667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.983870][T10667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.109839][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.124048][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.171430][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.182286][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.193516][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 394.261433][ T29] audit: type=1326 audit(1720109284.873:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x0 [ 395.136727][ T5091] Bluetooth: hci1: command tx timeout [ 395.731893][T10771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 395.741820][T10771] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 395.765215][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.774649][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.788286][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.803676][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.812841][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 395.821918][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.904857][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.999487][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.103091][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.174877][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.198835][T10772] chnl_net:caif_netlink_parms(): no params data found [ 396.340700][T10772] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.352521][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.359856][T10772] bridge_slave_0: entered allmulticast mode [ 396.371837][T10772] bridge_slave_0: entered promiscuous mode [ 396.387618][T10772] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.397426][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.405792][T10772] bridge_slave_1: entered allmulticast mode [ 396.413345][T10772] bridge_slave_1: entered promiscuous mode [ 396.509705][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.540867][ T62] bridge_slave_1: left allmulticast mode [ 396.550352][ T62] bridge_slave_1: left promiscuous mode [ 396.558004][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.577058][ T62] bridge_slave_0: left allmulticast mode [ 396.582822][ T62] bridge_slave_0: left promiscuous mode [ 396.588769][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.086776][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.103765][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.117019][ T62] bond0 (unregistering): Released all slaves [ 397.136042][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.186915][T10772] team0: Port device team_slave_0 added [ 397.198005][T10772] team0: Port device team_slave_1 added [ 397.284949][T10772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.292181][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.319292][T10772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.333188][T10772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.345561][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.371919][T10772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.448835][T10772] hsr_slave_0: entered promiscuous mode [ 397.455486][T10772] hsr_slave_1: entered promiscuous mode [ 397.463156][T10772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.473912][T10772] Cannot create hsr debugfs directory [ 397.504515][ T62] hsr_slave_0: left promiscuous mode [ 397.510855][ T62] hsr_slave_1: left promiscuous mode [ 397.519594][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.527236][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.535211][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.543471][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.584036][ T62] veth1_macvtap: left promiscuous mode [ 397.589892][ T62] veth0_macvtap: left promiscuous mode [ 397.595565][ T62] veth1_vlan: left promiscuous mode [ 397.602656][ T62] veth0_vlan: left promiscuous mode [ 397.856175][ T5091] Bluetooth: hci2: command tx timeout [ 398.352521][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.371825][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.387607][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.400544][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.408991][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 398.424432][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.653769][ T62] team0 (unregistering): Port device team_slave_1 removed [ 398.704151][ T62] team0 (unregistering): Port device team_slave_0 removed [ 398.787594][ T5137] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 399.002054][ T5137] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 399.011402][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.026343][ T5137] usb 4-1: config 0 descriptor?? [ 399.408207][T10803] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 399.945873][ T53] Bluetooth: hci2: command tx timeout [ 400.105115][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.145531][T10802] chnl_net:caif_netlink_parms(): no params data found [ 400.221423][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.322786][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.360875][T10802] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.370764][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.378157][T10802] bridge_slave_0: entered allmulticast mode [ 400.386172][T10802] bridge_slave_0: entered promiscuous mode [ 400.452783][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.470804][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.480773][ T5137] pegasus 4-1:0.0: can't reset MAC [ 400.487004][ T5137] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 400.489048][T10802] bridge_slave_1: entered allmulticast mode [ 400.498598][ T5137] usb 4-1: USB disconnect, device number 14 [ 400.501144][ T53] Bluetooth: hci4: command tx timeout [ 400.517801][T10802] bridge_slave_1: entered promiscuous mode [ 400.547100][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.613067][T10772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.624446][T10772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.646870][T10802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.666270][T10802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.712197][T10772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.723841][T10772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.754551][T10802] team0: Port device team_slave_0 added [ 400.766712][T10802] team0: Port device team_slave_1 added [ 400.832391][T10802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.840311][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.866897][T10802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.887120][T10802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.894118][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.925019][T10802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.984736][ T62] bridge_slave_1: left allmulticast mode [ 400.991368][ T62] bridge_slave_1: left promiscuous mode [ 400.997564][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.008782][ T62] bridge_slave_0: left allmulticast mode [ 401.014477][ T62] bridge_slave_0: left promiscuous mode [ 401.020298][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.634079][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.648772][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.658459][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.682241][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.712013][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.728049][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.015984][ T53] Bluetooth: hci2: command tx timeout [ 402.086442][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.101967][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.119821][ T62] bond0 (unregistering): Released all slaves [ 402.301998][ T29] audit: type=1326 audit(1720109292.913:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.346748][ T29] audit: type=1326 audit(1720109292.913:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.390325][T10802] hsr_slave_0: entered promiscuous mode [ 402.397640][ T29] audit: type=1326 audit(1720109292.913:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.423960][T10802] hsr_slave_1: entered promiscuous mode [ 402.431125][T10802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.439473][T10802] Cannot create hsr debugfs directory [ 402.445536][ T29] audit: type=1326 audit(1720109292.913:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.467741][ T29] audit: type=1326 audit(1720109292.913:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.494884][ T29] audit: type=1326 audit(1720109292.913:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.523808][ T29] audit: type=1326 audit(1720109292.913:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.553480][ T29] audit: type=1326 audit(1720109292.913:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.577478][ T29] audit: type=1326 audit(1720109292.913:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.582535][ T53] Bluetooth: hci4: command tx timeout [ 402.606771][ T29] audit: type=1326 audit(1720109292.913:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10821 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7fc00000 [ 402.920296][ T62] hsr_slave_0: left promiscuous mode [ 402.931153][ T62] hsr_slave_1: left promiscuous mode [ 402.939911][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.948568][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.957316][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.964764][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.995200][ T62] veth1_macvtap: left promiscuous mode [ 403.000970][ T62] veth0_macvtap: left promiscuous mode [ 403.007587][ T62] veth1_vlan: left promiscuous mode [ 403.012995][ T62] veth0_vlan: left promiscuous mode [ 403.694011][ T62] team0 (unregistering): Port device team_slave_1 removed [ 403.777217][ T53] Bluetooth: hci3: command tx timeout [ 403.851901][T10840] 9pnet_fd: Insufficient options for proto=fd [ 403.906429][ T62] team0 (unregistering): Port device team_slave_0 removed [ 404.095942][ T53] Bluetooth: hci2: command tx timeout [ 404.655893][ T53] Bluetooth: hci4: command tx timeout [ 405.865964][ T53] Bluetooth: hci3: command tx timeout [ 405.990171][T10850] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.245105][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.299708][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.320093][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.337397][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.358065][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.370720][T10815] chnl_net:caif_netlink_parms(): no params data found [ 406.377835][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.390564][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.440699][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.587911][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.595462][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.739937][ T53] Bluetooth: hci4: command tx timeout [ 406.850034][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.857312][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.915792][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.941474][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.963011][T10815] bridge_slave_0: entered allmulticast mode [ 406.977961][T10815] bridge_slave_0: entered promiscuous mode [ 407.014281][T10802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.028720][T10802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.084673][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.110359][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.119185][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.127887][T10815] bridge_slave_1: entered allmulticast mode [ 407.138737][T10815] bridge_slave_1: entered promiscuous mode [ 407.177783][T10802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.189255][T10802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.235590][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.294967][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.397360][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.419987][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.492092][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.554224][T10815] team0: Port device team_slave_0 added [ 407.621091][T10815] team0: Port device team_slave_1 added [ 407.678222][T10772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.701286][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.714685][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.741203][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.774603][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.793472][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.830134][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.853983][T10854] chnl_net:caif_netlink_parms(): no params data found [ 407.936291][ T53] Bluetooth: hci3: command tx timeout [ 408.089717][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.170628][T10815] hsr_slave_0: entered promiscuous mode [ 408.178835][T10815] hsr_slave_1: entered promiscuous mode [ 408.185333][T10815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.195569][T10815] Cannot create hsr debugfs directory [ 408.240596][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.269434][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.277456][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.284865][T10854] bridge_slave_0: entered allmulticast mode [ 408.293091][T10854] bridge_slave_0: entered promiscuous mode [ 408.355564][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.373309][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.380789][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.388337][T10854] bridge_slave_1: entered allmulticast mode [ 408.395447][T10854] bridge_slave_1: entered promiscuous mode [ 408.461984][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.483805][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.496305][ T53] Bluetooth: hci0: command tx timeout [ 408.508591][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.536249][T10772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.652804][T10854] team0: Port device team_slave_0 added [ 408.687388][T10854] team0: Port device team_slave_1 added [ 408.753287][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.770031][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.796638][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.812838][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.820675][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.849214][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.968543][T10802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.002015][T10854] hsr_slave_0: entered promiscuous mode [ 409.010505][T10854] hsr_slave_1: entered promiscuous mode [ 409.017214][T10854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.024783][T10854] Cannot create hsr debugfs directory [ 409.071576][ T62] bridge_slave_1: left allmulticast mode [ 409.077564][ T62] bridge_slave_1: left promiscuous mode [ 409.083304][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.093435][ T62] bridge_slave_0: left allmulticast mode [ 409.102205][ T62] bridge_slave_0: left promiscuous mode [ 409.108180][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.121583][ T62] bridge_slave_1: left allmulticast mode [ 409.127342][ T62] bridge_slave_1: left promiscuous mode [ 409.133021][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.144337][ T62] bridge_slave_0: left allmulticast mode [ 409.150960][ T62] bridge_slave_0: left promiscuous mode [ 409.159191][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.917975][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.930291][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.953337][ T62] bond0 (unregistering): Released all slaves [ 410.016098][ T53] Bluetooth: hci3: command tx timeout [ 410.089873][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.101992][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.114660][ T62] bond0 (unregistering): Released all slaves [ 410.131652][ T62] bond1 (unregistering): Released all slaves [ 410.311944][T10802] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.357968][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.365249][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.455355][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.462563][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.576906][ T53] Bluetooth: hci0: command tx timeout [ 410.610027][T10772] veth0_vlan: entered promiscuous mode [ 410.727356][T10772] veth1_vlan: entered promiscuous mode [ 410.841547][T10772] veth0_macvtap: entered promiscuous mode [ 410.907800][T10772] veth1_macvtap: entered promiscuous mode [ 410.994908][ T62] hsr_slave_0: left promiscuous mode [ 411.002416][ T62] hsr_slave_1: left promiscuous mode [ 411.010885][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.018575][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.027216][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.035035][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.046850][ T62] hsr_slave_0: left promiscuous mode [ 411.052953][ T62] hsr_slave_1: left promiscuous mode [ 411.059261][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.066953][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.074880][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.082514][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.128933][ T62] veth1_macvtap: left promiscuous mode [ 411.134513][ T62] veth0_macvtap: left promiscuous mode [ 411.140558][ T62] veth1_vlan: left promiscuous mode [ 411.146179][ T62] veth0_vlan: left promiscuous mode [ 411.156700][ T62] veth1_macvtap: left promiscuous mode [ 411.162265][ T62] veth0_macvtap: left promiscuous mode [ 411.168414][ T62] veth1_vlan: left promiscuous mode [ 411.173734][ T62] veth0_vlan: left promiscuous mode [ 411.836108][ T62] team0 (unregistering): Port device team_slave_1 removed [ 411.885425][ T62] team0 (unregistering): Port device team_slave_0 removed [ 412.659148][ T53] Bluetooth: hci0: command tx timeout [ 412.821799][ T62] team0 (unregistering): Port device team_slave_1 removed [ 412.873772][ T62] team0 (unregistering): Port device team_slave_0 removed [ 413.363638][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.374241][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.386242][T10772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.401257][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.413832][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.425649][T10772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.450113][T10772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.467130][T10772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.477472][T10772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.486466][T10772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.653942][T10815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.682244][T10815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.710230][T10802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.736977][T10815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.753427][T10815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.867415][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 413.902157][ T5263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.912577][ T5263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.025317][T10854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.038562][T10854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.055674][T10802] veth0_vlan: entered promiscuous mode [ 414.064743][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.065942][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 414.077366][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.087068][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.102223][T10854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.122744][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.124314][T10854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.139315][ T45] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 414.148927][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.162835][ T45] usb 4-1: config 0 descriptor?? [ 414.178608][T10802] veth1_vlan: entered promiscuous mode [ 414.354324][T10802] veth0_macvtap: entered promiscuous mode [ 414.462144][T10802] veth1_macvtap: entered promiscuous mode [ 414.685124][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.725385][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.738556][ T53] Bluetooth: hci0: command tx timeout [ 414.754366][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.817550][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.888017][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.923599][T10802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.039485][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.064945][T10894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 415.085842][ T5091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.098290][ T5091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.109170][ T5091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.118058][ T5091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.128214][ T5091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.137922][ T5091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.147183][T10894] validate_nla: 2 callbacks suppressed [ 415.147203][T10894] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 415.185477][T10896] batadv_slave_0: entered allmulticast mode [ 415.209021][T10896] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 415.240326][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.251993][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.262500][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.273144][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.299536][T10802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.435478][T10802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.450758][T10802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.465352][T10802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.477473][T10802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.569285][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.712553][ T1568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.761620][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.856914][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.864165][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.910079][ T1568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.999139][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.006644][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.020096][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 416.026321][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 416.036363][ T45] usb 4-1: USB disconnect, device number 15 [ 416.061555][ T1568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.093172][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.147765][ T1568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.193125][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.200393][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.260960][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.268162][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.320877][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.328956][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.517728][ T1568] bridge_slave_1: left allmulticast mode [ 416.523489][ T1568] bridge_slave_1: left promiscuous mode [ 416.530402][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.544769][ T1568] bridge_slave_0: left allmulticast mode [ 416.553064][ T1568] bridge_slave_0: left promiscuous mode [ 416.561101][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.156329][ T1568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.169710][ T1568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.181515][ T1568] bond0 (unregistering): Released all slaves [ 417.225130][ T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.261565][ T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.296836][ T5091] Bluetooth: hci5: command tx timeout [ 417.323774][T10898] chnl_net:caif_netlink_parms(): no params data found [ 417.852944][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.879248][ T1568] hsr_slave_0: left promiscuous mode [ 417.895182][ T1568] hsr_slave_1: left promiscuous mode [ 417.923587][ T1568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.931598][ T1568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.954424][ T1568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.984653][ T1568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.065438][ T1568] veth1_macvtap: left promiscuous mode [ 418.086112][ T1568] veth0_macvtap: left promiscuous mode [ 418.091857][ T1568] veth1_vlan: left promiscuous mode [ 418.114215][ T1568] veth0_vlan: left promiscuous mode [ 418.227229][T10942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2085'. [ 419.302673][ T1568] team0 (unregistering): Port device team_slave_1 removed [ 419.386192][ T5091] Bluetooth: hci5: command tx timeout [ 419.400153][ T1568] team0 (unregistering): Port device team_slave_0 removed [ 420.448744][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.458344][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.473567][T10898] bridge_slave_0: entered allmulticast mode [ 420.482022][T10898] bridge_slave_0: entered promiscuous mode [ 420.503103][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.523864][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.540906][T10898] bridge_slave_1: entered allmulticast mode [ 420.551988][T10898] bridge_slave_1: entered promiscuous mode [ 420.711757][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.752773][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.884512][T10898] team0: Port device team_slave_0 added [ 420.931992][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.980275][T10898] team0: Port device team_slave_1 added [ 421.108166][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.115178][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.163279][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.187674][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.194792][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.221944][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.246330][T10815] veth0_vlan: entered promiscuous mode [ 421.264823][T10815] veth1_vlan: entered promiscuous mode [ 421.465568][ T5091] Bluetooth: hci5: command tx timeout [ 421.500570][T10898] hsr_slave_0: entered promiscuous mode [ 421.520874][T10898] hsr_slave_1: entered promiscuous mode [ 421.594155][T10854] veth0_vlan: entered promiscuous mode [ 421.694090][T10815] veth0_macvtap: entered promiscuous mode [ 421.708351][T10854] veth1_vlan: entered promiscuous mode [ 421.749850][T10815] veth1_macvtap: entered promiscuous mode [ 421.898930][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.913210][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.928033][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.944490][T10854] veth0_macvtap: entered promiscuous mode [ 422.049487][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.063874][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.076794][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.102052][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.115387][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.185234][T10854] veth1_macvtap: entered promiscuous mode [ 422.220574][T10815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.232699][T10815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.241919][T10815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.250943][T10815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.313719][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.335851][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.353185][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.373517][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.387825][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.511938][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.560873][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.640137][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.659884][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.724041][T10986] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2101'. [ 422.849886][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.953764][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.036135][ T5135] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 423.054887][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.152486][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.256092][ T5135] usb 4-1: device descriptor read/64, error -71 [ 423.274960][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.348153][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.433705][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.464599][T10854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.504436][T10854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.513694][T10854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.522747][T10854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.536112][ T5091] Bluetooth: hci5: command tx timeout [ 423.617342][ T5135] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 423.734435][ T5091] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 423.786756][ T5135] usb 4-1: device descriptor read/64, error -71 [ 423.853567][T10898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.876674][T10898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 423.921307][T10898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 423.942925][ T5135] usb usb4-port1: attempt power cycle [ 423.965565][T10898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.046714][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.054561][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.705363][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.985226][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.115844][ T5135] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 425.166012][ T5135] usb 4-1: device descriptor read/8, error -71 [ 425.220814][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.269789][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.315394][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.322645][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.351345][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.358638][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.765895][ T5136] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 425.792286][T11038] IPVS: length: 121 != 24 [ 425.980188][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.985925][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 425.994294][ T5136] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 426.023230][ T5136] usb 3-1: config 179 has no interface number 0 [ 426.054661][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 426.075526][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 426.078648][ T5135] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 426.100564][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.119635][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 426.143868][ T5135] usb 4-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 426.153417][ T5136] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 426.166680][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.172309][ T5135] usb 4-1: config 0 descriptor?? [ 426.195165][ T5136] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 426.211299][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.216706][ T5135] r8712u: register rtl8712_netdev_ops to netdev_ops [ 426.224597][T11026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.233574][ T5135] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 426.304167][T11057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2125'. [ 426.409827][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 426.409850][ T29] audit: type=1326 audit(1720109317.013:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 426.514449][ T29] audit: type=1326 audit(1720109317.013:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 426.562397][ T5135] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 426.584031][ T5135] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 426.602069][ T29] audit: type=1326 audit(1720109317.013:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0b1774610 code=0x7ffc0000 [ 426.692817][ T5136] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22 [ 426.801273][ T29] audit: type=1326 audit(1720109317.013:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe0b1777367 code=0x7ffc0000 [ 426.857741][ T5135] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 426.871480][ T5135] usb 4-1: USB disconnect, device number 19 [ 426.932053][ T29] audit: type=1326 audit(1720109317.013:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 426.999586][T11067] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2127'. [ 427.548956][ T29] audit: type=1326 audit(1720109317.023:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe0b1777367 code=0x7ffc0000 [ 427.615338][ T29] audit: type=1326 audit(1720109317.023:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0b177490a code=0x7ffc0000 [ 427.646720][ T5137] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 427.663624][ T5206] usb 3-1: USB disconnect, device number 8 [ 427.663683][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 427.677791][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 427.686689][ T5206] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 427.689973][ T29] audit: type=1326 audit(1720109317.023:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 427.722146][ T29] audit: type=1326 audit(1720109317.053:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 427.751103][ T29] audit: type=1326 audit(1720109317.053:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1775bd9 code=0x7ffc0000 [ 427.795039][ T5091] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 427.805251][ T5091] Bluetooth: hci4: Injecting HCI hardware error event [ 427.815115][ T53] Bluetooth: hci4: hardware error 0x00 [ 427.840304][ T53] ------------[ cut here ]------------ [ 427.846098][ T5137] usb 1-1: device descriptor read/64, error -71 [ 427.846744][ T53] ida_free called for id=8192 which is not allocated. [ 427.864147][ T53] WARNING: CPU: 1 PID: 53 at lib/idr.c:525 ida_free+0x370/0x420 [ 427.872058][ T53] Modules linked in: [ 427.876151][ T53] CPU: 1 PID: 53 Comm: kworker/u9:0 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 427.886387][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 427.896963][ T53] Workqueue: hci4 hci_error_reset [ 427.902087][ T53] RIP: 0010:ida_free+0x370/0x420 [ 427.907850][ T53] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d [ 427.927631][ T53] RSP: 0018:ffffc90000bd7960 EFLAGS: 00010246 [ 427.934391][ T53] RAX: 94fa610f19fcb800 RBX: 0000000000002000 RCX: ffff888016350000 [ 427.944649][ T53] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 427.953323][ T53] RBP: ffffc90000bd7a58 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 427.961446][ T53] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90000bd79a0 [ 427.969615][ T53] R13: dffffc0000000000 R14: ffff888023e180a0 R15: 0000000000000246 [ 427.978046][ T53] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 427.987130][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.993938][ T53] CR2: 00007fba5e200020 CR3: 000000006587e000 CR4: 00000000003506f0 [ 428.002037][ T53] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.010409][ T53] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.019095][ T53] Call Trace: [ 428.022431][ T53] [ 428.025410][ T53] ? __warn+0x163/0x4e0 [ 428.029969][ T53] ? ida_free+0x370/0x420 [ 428.034975][ T53] ? report_bug+0x2b3/0x500 [ 428.040197][ T53] ? ida_free+0x370/0x420 [ 428.044640][ T53] ? handle_bug+0x3e/0x70 [ 428.049131][ T53] ? exc_invalid_op+0x1a/0x50 [ 428.053855][ T53] ? asm_exc_invalid_op+0x1a/0x20 [ 428.059001][ T53] ? __warn_printk+0x292/0x360 [ 428.063826][ T53] ? ida_free+0x370/0x420 [ 428.068314][ T53] ? __pfx_ida_free+0x10/0x10 [ 428.073042][ T53] ? synchronize_rcu+0x11b/0x360 [ 428.078121][ T53] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.084163][ T53] hci_conn_del+0x746/0xc40 [ 428.088913][ T53] hci_conn_hash_flush+0x18e/0x240 [ 428.094347][ T53] hci_dev_close_sync+0x911/0xf60 [ 428.099800][ T53] hci_error_reset+0x12c/0x3f0 [ 428.104725][ T53] ? process_scheduled_works+0x945/0x1830 [ 428.110643][ T53] process_scheduled_works+0xa2c/0x1830 [ 428.116342][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.122388][ T53] ? assign_work+0x364/0x3d0 [ 428.127121][ T53] worker_thread+0x86d/0xd50 [ 428.128765][ T5137] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 428.131853][ T53] ? __kthread_parkme+0x169/0x1d0 [ 428.145135][ T53] ? __pfx_worker_thread+0x10/0x10 [ 428.150969][ T53] kthread+0x2f0/0x390 [ 428.155150][ T53] ? __pfx_worker_thread+0x10/0x10 [ 428.160613][ T53] ? __pfx_kthread+0x10/0x10 [ 428.165261][ T53] ret_from_fork+0x4b/0x80 [ 428.169811][ T53] ? __pfx_kthread+0x10/0x10 [ 428.174458][ T53] ret_from_fork_asm+0x1a/0x30 [ 428.179790][ T53] [ 428.182845][ T53] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 428.190242][ T53] CPU: 1 PID: 53 Comm: kworker/u9:0 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 428.200354][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 428.210448][ T53] Workqueue: hci4 hci_error_reset [ 428.215537][ T53] Call Trace: [ 428.218857][ T53] [ 428.221830][ T53] dump_stack_lvl+0x241/0x360 [ 428.226632][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.231975][ T53] ? __pfx__printk+0x10/0x10 [ 428.236625][ T53] ? vscnprintf+0x5d/0x90 [ 428.241003][ T53] panic+0x349/0x860 [ 428.244949][ T53] ? __warn+0x172/0x4e0 [ 428.249149][ T53] ? __pfx_panic+0x10/0x10 [ 428.253630][ T53] ? ret_from_fork_asm+0x1a/0x30 [ 428.258641][ T53] __warn+0x346/0x4e0 [ 428.262673][ T53] ? ida_free+0x370/0x420 [ 428.267060][ T53] report_bug+0x2b3/0x500 [ 428.271437][ T53] ? ida_free+0x370/0x420 [ 428.275820][ T53] handle_bug+0x3e/0x70 [ 428.280009][ T53] exc_invalid_op+0x1a/0x50 [ 428.284554][ T53] asm_exc_invalid_op+0x1a/0x20 [ 428.289450][ T53] RIP: 0010:ida_free+0x370/0x420 [ 428.294435][ T53] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d [ 428.314151][ T53] RSP: 0018:ffffc90000bd7960 EFLAGS: 00010246 [ 428.320237][ T53] RAX: 94fa610f19fcb800 RBX: 0000000000002000 RCX: ffff888016350000 [ 428.328393][ T53] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 428.336469][ T53] RBP: ffffc90000bd7a58 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 428.344491][ T53] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90000bd79a0 [ 428.352484][ T53] R13: dffffc0000000000 R14: ffff888023e180a0 R15: 0000000000000246 [ 428.360477][ T53] ? __warn_printk+0x292/0x360 [ 428.365298][ T53] ? __pfx_ida_free+0x10/0x10 [ 428.369998][ T53] ? synchronize_rcu+0x11b/0x360 [ 428.374959][ T53] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.380965][ T53] hci_conn_del+0x746/0xc40 [ 428.385516][ T53] hci_conn_hash_flush+0x18e/0x240 [ 428.390655][ T53] hci_dev_close_sync+0x911/0xf60 [ 428.395724][ T53] hci_error_reset+0x12c/0x3f0 [ 428.400516][ T53] ? process_scheduled_works+0x945/0x1830 [ 428.406245][ T53] process_scheduled_works+0xa2c/0x1830 [ 428.411829][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.417832][ T53] ? assign_work+0x364/0x3d0 [ 428.422438][ T53] worker_thread+0x86d/0xd50 [ 428.427054][ T53] ? __kthread_parkme+0x169/0x1d0 [ 428.432186][ T53] ? __pfx_worker_thread+0x10/0x10 [ 428.437406][ T53] kthread+0x2f0/0x390 [ 428.441502][ T53] ? __pfx_worker_thread+0x10/0x10 [ 428.446648][ T53] ? __pfx_kthread+0x10/0x10 [ 428.451270][ T53] ret_from_fork+0x4b/0x80 [ 428.455712][ T53] ? __pfx_kthread+0x10/0x10 [ 428.460319][ T53] ret_from_fork_asm+0x1a/0x30 [ 428.465113][ T53] [ 428.468593][ T53] Kernel Offset: disabled [ 428.473081][ T53] Rebooting in 86400 seconds..