last executing test programs: 4m58.385366677s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 4m24.952100192s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 3m45.208016059s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 1m44.028622487s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 1m5.731454366s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 52.346681066s ago: executing program 0 (id=1292): r0 = memfd_create(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x6, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x261, 0x4800003e, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x61, 0x40001002, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 51.672108997s ago: executing program 0 (id=1295): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 46.47737085s ago: executing program 0 (id=1302): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffe, @broadcast}, {0x0, @random="8702c9eb02e5"}, 0x4, {0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_vlan\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000001008500000028000000850000002a000000950000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) truncate(&(0x7f0000000340)='./file0\x00', 0x8000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES16=r2], 0x0) 45.698271481s ago: executing program 0 (id=1304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x0, 0xffff, 0x0, 0x4}, {0x0, 0x1, 0x200, 0x8, 0x0, 0x40000000}, 0x0, 0x0, 0x1c44}}, @TCA_TBF_RATE64={0xc}]}}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @mptcp=@generic={0x1, 0xa, "9142cc2b04d4917f"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x7, "cf6af75d5c"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x43}}}}}}}, 0x0) 43.913927682s ago: executing program 0 (id=1309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x8001) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 37.332072675s ago: executing program 0 (id=1320): rmdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0x4, 0x182}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac", 0xb4, 0x1, 0x0, 0x0) 24.156166s ago: executing program 2 (id=227): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 16.648177273s ago: executing program 4 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000540)=""/225, 0xe1}], 0x2}, 0xfffffffb}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/87, 0x57}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/229, 0xe5}, {&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000400)=""/39, 0x27}, {0x0}], 0x9}, 0x28000}], 0x2, 0x40012001, &(0x7f0000000d80)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) 15.583158061s ago: executing program 4 (id=1353): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x401, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x2}, {@broadcast}, {@empty}, {@multicast1, 0xffd300}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000003c0)={0x6, [], 0x7, "75428ac1382411"}) 13.669683149s ago: executing program 4 (id=1357): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0xf, 0x11012, r4, 0xe5708000) 10.915109117s ago: executing program 4 (id=1361): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) iopl(0x3) r1 = open(0x0, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000045c0), 0x8, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011fd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f7200"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "cb96a945ab526fe377145584b62491050e011f5e1c8614016f7591f00bd59d1396798a98902d3fafc9e09a29e6671ad9f5f25693b12e5d0ac30e15fd59e58f72"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 9.476096258s ago: executing program 4 (id=1364): socket$netlink(0x10, 0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000140)='nolazytime\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7.53176475s ago: executing program 4 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r9, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000808000300", @ANYRES32=r1], 0x1c}}, 0x0) 6.409388939s ago: executing program 3 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 6.408108586s ago: executing program 1 (id=1377): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = userfaultfd(0x80001) keyctl$set_timeout(0xa, 0x0, 0x20ffffff) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000063c000/0x3000)=nil) sendto$unix(r0, &(0x7f0000000340)="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", 0x800, 0x880, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.405965572s ago: executing program 3 (id=1369): sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x508000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c054) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8d28}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.348770612s ago: executing program 1 (id=1370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050080005a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 5.091839343s ago: executing program 1 (id=1371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.229503625s ago: executing program 3 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.99876024s ago: executing program 1 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 3.839525793s ago: executing program 1 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) recvmsg$inet_nvme(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) close_range(r1, 0xffffffffffffffff, 0x0) 2.587536249s ago: executing program 1 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ceb000/0x2000)=nil, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0xd1, 0x7, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x10, 0x4, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x841}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x3c}}, 0x0) 2.328770601s ago: executing program 3 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a10318000aff6000000002000020d3"]) mkdir(0x0, 0x0) 1.318553071s ago: executing program 3 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r5, &(0x7f0000002800)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 3 (id=1379): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x7, 0x3f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) kernel console output (not intermixed with test programs): ave_1 removed [ 732.365785][ T7498] team0 (unregistering): Port device team_slave_0 removed [ 732.916384][ T4617] Bluetooth: hci0: command tx timeout [ 733.722468][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 734.791487][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 735.080868][ T4617] Bluetooth: hci0: command tx timeout [ 735.411232][ T46] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 736.408013][ T46] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 736.433741][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 736.456141][ T46] usb 2-1: Product: syz [ 736.484131][ T46] usb 2-1: Manufacturer: syz [ 736.488820][ T46] usb 2-1: SerialNumber: syz [ 736.518361][T10268] chnl_net:caif_netlink_parms(): no params data found [ 736.542114][ T46] usb 2-1: config 0 descriptor?? [ 736.566164][ T46] cdc_acm 2-1:0.0: Zero length descriptor references [ 736.599938][ T46] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 736.848664][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.858355][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.866045][T10268] bridge_slave_0: entered allmulticast mode [ 736.873899][T10268] bridge_slave_0: entered promiscuous mode [ 736.883738][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.893994][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.902278][T10268] bridge_slave_1: entered allmulticast mode [ 736.909979][T10268] bridge_slave_1: entered promiscuous mode [ 736.924376][ T5363] usb 2-1: USB disconnect, device number 17 [ 737.016982][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.044261][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.145216][T10268] team0: Port device team_slave_0 added [ 737.159857][ T4617] Bluetooth: hci0: command tx timeout [ 737.174766][T10268] team0: Port device team_slave_1 added [ 737.287623][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.305011][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.343567][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.366648][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.388236][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.428144][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.659592][T10268] hsr_slave_0: entered promiscuous mode [ 737.725204][T10268] hsr_slave_1: entered promiscuous mode [ 737.751041][T10268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.778890][T10268] Cannot create hsr debugfs directory [ 740.485292][T10382] kvm: kvm [10377]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 741.175319][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 741.402856][T10409] loop0: detected capacity change from 0 to 128 [ 742.057271][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 742.351162][ T5363] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 742.420530][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 742.434976][ T25] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 742.457764][ T25] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 742.487866][ T25] usb 2-1: config 135 has no interface number 0 [ 742.509140][ T25] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.649626][ T25] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 743.286773][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.337746][ T25] usb 2-1: Product: syz [ 743.397057][ T25] usb 2-1: Manufacturer: syz [ 743.411625][ T5363] usb 4-1: Using ep0 maxpacket: 8 [ 743.427483][ T25] usb 2-1: SerialNumber: syz [ 743.451989][ T5363] usb 4-1: config 0 has an invalid interface number: 37 but max is 2 [ 743.467671][ T25] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 743.502599][ T25] usb 2-1: No valid video chain found. [ 743.527678][ T5363] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 743.586070][ T5363] usb 4-1: config 0 has no interface number 1 [ 743.625980][ T5363] usb 4-1: too many endpoints for config 0 interface 0 altsetting 152: 165, using maximum allowed: 30 [ 743.676398][ T5363] usb 4-1: config 0 interface 0 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 743.701304][ T25] usb 2-1: USB disconnect, device number 18 [ 743.708937][ T5363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.749573][ T5363] usb 4-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=be.0e [ 743.793239][ T5363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.809826][T10268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 743.820574][ T5363] usb 4-1: Product: syz [ 743.825106][ T5363] usb 4-1: Manufacturer: syz [ 743.841016][T10268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.866775][ T5363] usb 4-1: SerialNumber: syz [ 743.915814][ T5363] usb 4-1: config 0 descriptor?? [ 743.918476][T10268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 743.956951][T10268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 744.199609][ T5363] kaweth 4-1:0.37: Firmware present in device. [ 744.390691][ T5363] kaweth 4-1:0.37: Error reading configuration (-71), no net device created [ 744.441525][ T5363] kaweth 4-1:0.37: probe with driver kaweth failed with error -5 [ 744.582346][ T5363] kaweth 4-1:0.0: Firmware present in device. [ 744.596032][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.612407][ T5363] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 744.644976][ T5363] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 744.724360][T10268] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.750605][ T5363] usb 4-1: USB disconnect, device number 11 [ 744.793748][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.801354][ T7498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.245000][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.252592][ T7498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.153757][T10268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.165710][T10268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.279347][ T29] audit: type=1326 audit(1725479319.521:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10458 comm="syz.3.872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff356f7cef9 code=0x0 [ 748.929796][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.258661][T10268] veth0_vlan: entered promiscuous mode [ 749.336526][T10268] veth1_vlan: entered promiscuous mode [ 749.573319][T10268] veth0_macvtap: entered promiscuous mode [ 749.589411][T10268] veth1_macvtap: entered promiscuous mode [ 749.742955][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.805221][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.859697][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.880578][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.910792][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.954255][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.999224][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.022569][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.035219][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.048833][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.071235][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.138825][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.212498][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.260635][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.340297][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.385366][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.421654][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.450441][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.478565][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.499339][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.516200][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.398255][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.508941][T10268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.571838][T10268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.638873][T10268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.683285][T10268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.908132][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.931270][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.990843][ T5363] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 751.999792][ T9077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.008190][ T941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 752.038252][ T9077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.195572][ T5363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.216180][ T5363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.231295][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 752.240460][ T5363] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 752.265401][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.277539][ T5363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.305838][ T5363] usb 1-1: config 0 descriptor?? [ 752.363643][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.411018][ T941] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 752.450604][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.491654][ T941] usb 5-1: config 0 descriptor?? [ 752.759541][ T5363] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 752.820111][ T5363] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 752.905267][ T2547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.040135][T10528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'. [ 753.211819][T10528] tipc: Can't bind to reserved service type 1 [ 753.278599][ T5363] corsair 0003:1B1C:1B02.000A: Failed to get K90 initial state (error -71). [ 753.400201][ T5363] usb 1-1: USB disconnect, device number 17 [ 753.744994][ T2547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.975363][ T2547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.103336][ T2547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.405780][ T2547] bridge_slave_1: left allmulticast mode [ 754.431709][ T2547] bridge_slave_1: left promiscuous mode [ 754.444804][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.465158][ T2547] bridge_slave_0: left allmulticast mode [ 754.471295][ T2547] bridge_slave_0: left promiscuous mode [ 754.477380][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.945244][ T941] usbhid 5-1:0.0: can't add hid device: -71 [ 755.042082][ T941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 755.057866][ T941] usb 5-1: USB disconnect, device number 12 [ 756.372500][T10598] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 756.699785][T10603] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 757.019928][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.051588][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.060425][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.069044][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.094222][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 757.105516][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.439168][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.461339][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.475236][ T2547] bond0 (unregistering): Released all slaves [ 757.512202][T10610] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 757.520922][T10595] tipc: Enabling of bearer rejected, failed to enable media [ 757.550728][T10613] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 757.570670][T10613] bond0: (slave bond_slave_0): Releasing backup interface [ 757.760576][T10610] nvme_fabrics: missing parameter 'transport=%s' [ 757.801916][T10610] nvme_fabrics: missing parameter 'nqn=%s' [ 759.230921][ T5247] Bluetooth: hci0: command tx timeout [ 759.590509][ T2547] hsr_slave_0: left promiscuous mode [ 759.639890][ T2547] hsr_slave_1: left promiscuous mode [ 759.702772][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.702819][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.719110][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.719151][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.800913][ T2547] veth1_macvtap: left promiscuous mode [ 759.801016][ T2547] veth0_macvtap: left promiscuous mode [ 759.801222][ T2547] veth1_vlan: left promiscuous mode [ 759.801363][ T2547] veth0_vlan: left promiscuous mode [ 760.232757][T10657] binder: 10652:10657 ioctl c0306201 20000380 returned -14 [ 760.514761][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.321168][ T5247] Bluetooth: hci0: command tx timeout [ 761.709035][ T5363] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 761.887015][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 761.896279][ T5363] usb 4-1: Using ep0 maxpacket: 16 [ 761.909428][ T5363] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 761.921886][ T5363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.938365][ T5363] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 761.947712][ T5363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.956553][ T5363] usb 4-1: Product: syz [ 761.970761][ T5363] usb 4-1: Manufacturer: syz [ 761.975634][ T5363] usb 4-1: SerialNumber: syz [ 761.985867][ T5363] usb 4-1: config 0 descriptor?? [ 762.002188][ T5363] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 762.016752][ T5363] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 762.031866][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 762.633250][ T5363] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 762.640820][ T5363] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 762.859354][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 762.870270][T10640] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 762.982017][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.991590][T10654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.251222][ T5363] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 763.465416][ T5247] Bluetooth: hci0: command tx timeout [ 763.496181][ T5363] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 763.536241][ T5363] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 763.584075][ T5363] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 763.618394][ T5363] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 763.760149][T10605] chnl_net:caif_netlink_parms(): no params data found [ 763.851898][T10684] netlink: 'syz.4.912': attribute type 4 has an invalid length. [ 763.871378][ T5363] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 763.934032][ T5363] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 764.085685][ T5363] usb 4-1: USB disconnect, device number 12 [ 764.936155][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.091992][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.219425][T10605] bridge_slave_0: entered allmulticast mode [ 765.270523][T10605] bridge_slave_0: entered promiscuous mode [ 765.336754][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.379762][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.424519][T10605] bridge_slave_1: entered allmulticast mode [ 765.434218][T10605] bridge_slave_1: entered promiscuous mode [ 765.550872][ T5247] Bluetooth: hci0: command tx timeout [ 765.585552][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.635235][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.842309][T10605] team0: Port device team_slave_0 added [ 765.879257][T10605] team0: Port device team_slave_1 added [ 765.996283][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.021126][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.120501][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.163162][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.178874][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.274538][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.402375][T10605] hsr_slave_0: entered promiscuous mode [ 767.439768][T10605] hsr_slave_1: entered promiscuous mode [ 767.469303][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.491375][T10605] Cannot create hsr debugfs directory [ 770.311201][T10752] 9pnet_virtio: no channels available for device 127.0.0.1 [ 773.305226][T10786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.315221][T10605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 773.339613][T10605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.346816][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 773.474459][T10605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.523579][T10605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.559967][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 773.594063][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.626994][ T8] usb 2-1: Product: syz [ 773.642260][ T8] usb 2-1: Manufacturer: syz [ 773.658011][ T8] usb 2-1: SerialNumber: syz [ 773.709059][ T8] usb 2-1: config 0 descriptor?? [ 773.748512][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 773.775497][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 773.804443][ T8] f81232 2-1:0.0: f81534a converter detected [ 774.011890][ T8] usb 2-1: f81534a converter now attached to ttyUSB0 [ 774.078964][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.226336][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.300283][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.307581][ T9075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.412672][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.420174][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.727133][ T9375] usb 2-1: USB disconnect, device number 19 [ 774.807026][ T9375] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 775.166379][ T9375] f81232 2-1:0.0: device disconnected [ 776.776026][T10823] netlink: 136 bytes leftover after parsing attributes in process `syz.1.940'. [ 776.803490][T10823] netlink: 136 bytes leftover after parsing attributes in process `syz.1.940'. [ 776.921721][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.130906][ T4617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 777.143749][ T4617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 777.215839][ T4617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 777.224716][ T4617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 777.233995][ T4617] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 777.242052][ T4617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 777.408871][T10605] veth0_vlan: entered promiscuous mode [ 777.430965][T10605] veth1_vlan: entered promiscuous mode [ 778.454523][T10605] veth0_macvtap: entered promiscuous mode [ 778.575004][T10605] veth1_macvtap: entered promiscuous mode [ 778.650784][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.700382][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.710283][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.721072][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.731017][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.741514][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.751573][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.762212][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.772141][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.782821][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.796083][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.823961][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.863822][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.888817][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.910439][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.931789][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.950822][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.968323][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.979420][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.007901][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.031459][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.052601][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.380274][T10605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.390894][ T4617] Bluetooth: hci4: command tx timeout [ 779.430295][T10605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.450769][T10605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.469973][T10605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.026126][T10829] chnl_net:caif_netlink_parms(): no params data found [ 780.815937][T10884] netlink: 308 bytes leftover after parsing attributes in process `syz.1.950'. [ 781.014585][T10884] netlink: 'syz.1.950': attribute type 3 has an invalid length. [ 781.124981][T10884] netlink: 'syz.1.950': attribute type 7 has an invalid length. [ 781.218681][T10884] netlink: 'syz.1.950': attribute type 8 has an invalid length. [ 781.470543][ T4617] Bluetooth: hci4: command tx timeout [ 782.492263][ T8295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.500159][ T8295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.652872][T10829] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.660110][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.708796][T10829] bridge_slave_0: entered allmulticast mode [ 782.742209][T10829] bridge_slave_0: entered promiscuous mode [ 782.794976][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.814489][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.840809][T10829] bridge_slave_1: entered allmulticast mode [ 782.848704][T10829] bridge_slave_1: entered promiscuous mode [ 783.162627][T10829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.215779][T10829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.272801][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.328672][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.605429][ T4617] Bluetooth: hci4: command tx timeout [ 784.466618][T10829] team0: Port device team_slave_0 added [ 784.492955][T10829] team0: Port device team_slave_1 added [ 785.416382][T10829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.450435][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.540563][T10829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.650479][ T4617] Bluetooth: hci4: command tx timeout [ 785.834930][T10829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.850945][T10829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.027292][T10829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.960577][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.249101][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.303058][T10829] hsr_slave_0: entered promiscuous mode [ 787.322331][T10829] hsr_slave_1: entered promiscuous mode [ 787.336073][T10829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.350412][T10829] Cannot create hsr debugfs directory [ 787.413287][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.580670][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.984050][ T1105] bridge_slave_1: left allmulticast mode [ 787.989788][ T1105] bridge_slave_1: left promiscuous mode [ 788.002162][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.014256][ T1105] bridge_slave_0: left allmulticast mode [ 788.021652][ T1105] bridge_slave_0: left promiscuous mode [ 788.027504][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.262081][T10937] ptrace attach of "./syz-executor exec"[9434] was attempted by ""[10937] [ 789.824698][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.939827][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.021905][ T1105] bond0 (unregistering): Released all slaves [ 790.234526][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 790.250939][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 790.268608][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 790.324343][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 790.360967][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 790.368671][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 790.464698][T10829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.900291][T10829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.257081][T10965] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 792.327132][T10829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.441776][ T4617] Bluetooth: hci0: command tx timeout [ 792.813347][T10829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.189936][ T1105] hsr_slave_0: left promiscuous mode [ 794.047133][ T1105] hsr_slave_1: left promiscuous mode [ 794.160803][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.172934][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.221578][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.239528][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.439939][ T1105] veth1_macvtap: left promiscuous mode [ 794.522312][ T4617] Bluetooth: hci0: command tx timeout [ 794.948059][ T1105] veth0_macvtap: left promiscuous mode [ 794.987201][ T1105] veth1_vlan: left promiscuous mode [ 795.020608][ T1105] veth0_vlan: left promiscuous mode [ 797.220579][ T4617] Bluetooth: hci0: command tx timeout [ 799.240624][ T5247] Bluetooth: hci0: command tx timeout [ 799.313692][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 799.402800][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 800.962250][T11013] netlink: 'syz.3.977': attribute type 6 has an invalid length. [ 801.428268][T11027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.475409][T10945] chnl_net:caif_netlink_parms(): no params data found [ 803.082904][T10829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.209468][T10829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.291647][T10829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.351477][T10829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.520274][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.773054][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.023389][T10945] bridge_slave_0: entered allmulticast mode [ 804.112563][T10945] bridge_slave_0: entered promiscuous mode [ 804.141455][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.148664][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.191092][T10945] bridge_slave_1: entered allmulticast mode [ 804.217910][T10945] bridge_slave_1: entered promiscuous mode [ 805.328759][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.421571][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.721125][T10945] team0: Port device team_slave_0 added [ 805.836156][T10945] team0: Port device team_slave_1 added [ 806.034490][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.060424][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.134534][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.227212][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.260473][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.372348][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.461929][T10945] hsr_slave_0: entered promiscuous mode [ 807.487165][T10945] hsr_slave_1: entered promiscuous mode [ 807.518413][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.538778][T10945] Cannot create hsr debugfs directory [ 807.680402][ T5363] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 807.707929][T10829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.913597][ T5363] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 807.938716][ T5363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.990417][ T5363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.011089][T10829] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.031941][ T5363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.069140][ T5363] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.110715][ T5363] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 808.141979][ T5363] usb 4-1: Product: syz [ 808.159001][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.166843][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.176041][ T5363] usb 4-1: Manufacturer: syz [ 808.241534][ T5363] cdc_wdm 4-1:1.0: skipping garbage [ 808.275863][ T5363] cdc_wdm 4-1:1.0: skipping garbage [ 808.327889][ T5363] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 808.365942][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.373142][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.389932][ T5363] cdc_wdm 4-1:1.0: Unknown control protocol [ 808.608079][ T9375] usb 4-1: USB disconnect, device number 13 [ 809.564067][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 811.038706][T10945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 811.117283][T10945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 811.270953][T10945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 811.312952][T10945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 812.692582][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.287264][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.749392][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.857321][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.864610][ T8295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.004390][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.011715][ T8295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.086977][T10829] veth0_vlan: entered promiscuous mode [ 814.375934][T10829] veth1_vlan: entered promiscuous mode [ 815.347765][T10945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 815.553794][T10829] veth0_macvtap: entered promiscuous mode [ 815.613992][T10829] veth1_macvtap: entered promiscuous mode [ 815.755749][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.839721][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.891510][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.923148][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.944883][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.964001][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.011434][T11177] XFS (nullb0): Invalid superblock magic number [ 816.031292][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.070584][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.103239][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.160441][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.234845][T10829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.278110][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.348580][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.367062][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.378109][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.399478][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.421395][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.444976][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.465847][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.496671][T10829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.524922][T10829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.545951][T10829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.634875][T10829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.689700][T10829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.728668][T10829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.780744][T10829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.072574][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.235040][ T8295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.279108][ T8295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.533199][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.575510][T10945] veth0_vlan: entered promiscuous mode [ 817.583372][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.672572][T10945] veth1_vlan: entered promiscuous mode [ 817.708505][T11215] netlink: 'syz.4.1012': attribute type 2 has an invalid length. [ 817.893581][T10945] veth0_macvtap: entered promiscuous mode [ 817.954909][T10945] veth1_macvtap: entered promiscuous mode [ 819.676150][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 819.962612][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.060882][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.095955][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.106592][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.116679][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.127483][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.138188][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.148952][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.167449][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.179801][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.190007][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.205438][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.217593][T10945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.180632][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.232017][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.280436][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.313052][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.440650][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.490542][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.554159][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.644735][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.071222][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.390828][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.443553][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.539304][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 823.301132][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.370390][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.403153][T10945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.456408][T10945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.500148][T10945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.520449][T10945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.546971][T10945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.184777][ T9077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.074453][ T9077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.254111][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.271157][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.720819][ T1192] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 825.766395][T11287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 825.911818][ T1192] usb 2-1: Using ep0 maxpacket: 32 [ 825.942417][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.996946][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.056520][ T1129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.065524][ T1192] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 826.153001][ T1192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.224192][ T1192] usb 2-1: config 0 descriptor?? [ 826.546223][ T1129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.695579][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.711046][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.732890][ T1129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.767237][ T1192] konepure 0003:1E7D:2DB4.000B: item fetching failed at offset 0/2 [ 826.802418][ T1192] konepure 0003:1E7D:2DB4.000B: parse failed [ 826.808576][ T1192] konepure 0003:1E7D:2DB4.000B: probe with driver konepure failed with error -22 [ 826.911846][ T1129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.046190][ T8] usb 2-1: USB disconnect, device number 20 [ 827.221058][ T1129] bridge_slave_1: left allmulticast mode [ 827.226786][ T1129] bridge_slave_1: left promiscuous mode [ 827.260810][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.291212][ T1129] bridge_slave_0: left allmulticast mode [ 827.297372][ T1129] bridge_slave_0: left promiscuous mode [ 827.320933][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.229999][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.305790][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.382803][ T4617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 829.404462][ T4617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 829.418345][ T4617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 829.428718][ T4617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 829.439991][ T4617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 829.453319][ T4617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 829.462566][ T4617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 829.474497][ T4617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 829.517424][ T7933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 829.528678][ T1129] bond0 (unregistering): Released all slaves [ 829.541167][ T7933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 829.552912][ T7933] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 829.560664][ T7933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 829.986150][T11338] netlink: 'syz.4.1031': attribute type 16 has an invalid length. [ 829.995141][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1031'. [ 830.115412][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.600823][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 830.681937][T11345] nbd: illegal input index 15335424 [ 830.852445][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.870427][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 830.888998][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.950820][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.991099][ T9] usb 4-1: Product: syz [ 830.995346][ T9] usb 4-1: Manufacturer: syz [ 831.018736][ T9] usb 4-1: SerialNumber: syz [ 831.557577][ T7933] Bluetooth: hci0: command tx timeout [ 831.632279][ T7933] Bluetooth: hci5: command tx timeout [ 831.729099][T11343] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.140436][ T9375] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 832.342517][ T9375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 832.359250][ T9375] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 832.391876][ T9375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 832.430417][ T9375] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 832.467053][ T9375] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 832.511400][ T9375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.540462][ T9375] usb 5-1: Product: syz [ 832.544725][ T9375] usb 5-1: Manufacturer: syz [ 832.549372][ T9375] usb 5-1: SerialNumber: syz [ 832.592961][ T1129] hsr_slave_0: left promiscuous mode [ 832.610495][ T9375] usb 5-1: config 0 descriptor?? [ 832.652164][ T1129] hsr_slave_1: left promiscuous mode [ 832.662824][ T9375] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 832.678541][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.699258][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.730076][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.760505][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.783027][ T9] cdc_ncm 4-1:1.0: bind() failure [ 832.825864][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 832.863664][ T9] cdc_ncm 4-1:1.1: bind() failure [ 832.880238][ T1129] veth1_macvtap: left promiscuous mode [ 832.899409][ T1129] veth0_macvtap: left promiscuous mode [ 832.910562][ T1129] veth1_vlan: left promiscuous mode [ 832.916292][ T1129] veth0_vlan: left promiscuous mode [ 833.005965][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.045349][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.065807][ T25] usb 4-1: USB disconnect, device number 14 [ 833.158297][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.206281][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.390694][ T9375] scsi host1: usb-storage 5-1:0.0 [ 833.459557][ T9375] usb 5-1: USB disconnect, device number 13 [ 833.630985][ T7933] Bluetooth: hci0: command tx timeout [ 833.710772][ T7933] Bluetooth: hci5: command tx timeout [ 834.240534][ T9375] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 836.470554][ T5236] Bluetooth: hci5: command tx timeout [ 836.480177][ T7933] Bluetooth: hci0: command tx timeout [ 837.267796][ T9375] usb 4-1: Using ep0 maxpacket: 16 [ 838.521365][T11334] Bluetooth: hci0: command tx timeout [ 838.527506][T11334] Bluetooth: hci5: command tx timeout [ 838.662743][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 838.732545][T11393] fuse: Bad value for 'user_id' [ 838.737480][T11393] fuse: Bad value for 'user_id' [ 838.873173][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 839.392135][T11395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 840.572586][ T9375] usb 4-1: device descriptor read/all, error -71 [ 841.909623][T11331] chnl_net:caif_netlink_parms(): no params data found [ 842.699724][T11424] xt_CT: No such helper "snmp_trap" [ 843.060571][T11330] chnl_net:caif_netlink_parms(): no params data found [ 843.080770][ T7933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 843.092398][ T7933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 843.103396][ T7933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.121055][ T7933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.140659][ T7933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 843.148284][ T7933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 844.175053][T11435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1049'. [ 844.645594][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.672111][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.702452][T11331] bridge_slave_0: entered allmulticast mode [ 844.710065][T11331] bridge_slave_0: entered promiscuous mode [ 844.774136][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.797568][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.820777][T11331] bridge_slave_1: entered allmulticast mode [ 844.828487][T11331] bridge_slave_1: entered promiscuous mode [ 845.013857][ T1129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.348692][ T1129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.423899][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.440801][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.448128][T11330] bridge_slave_0: entered allmulticast mode [ 845.495776][T11330] bridge_slave_0: entered promiscuous mode [ 845.620678][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.703201][ T1129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.800530][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.807765][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.850614][T11330] bridge_slave_1: entered allmulticast mode [ 845.870665][ T7933] Bluetooth: hci3: command tx timeout [ 845.887437][T11330] bridge_slave_1: entered promiscuous mode [ 846.057533][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.313184][ T1129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.404096][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.426802][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.268619][T11331] team0: Port device team_slave_0 added [ 847.303804][T11331] team0: Port device team_slave_1 added [ 847.378002][T11330] team0: Port device team_slave_0 added [ 848.370438][ T7933] Bluetooth: hci3: command tx timeout [ 848.630184][T11330] team0: Port device team_slave_1 added [ 848.879209][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.061241][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.120439][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.131414][T11482] delete_channel: no stack [ 849.139275][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.146745][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.190911][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.399846][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.418815][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.530359][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.686591][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.714219][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.793070][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.431118][ T7933] Bluetooth: hci3: command tx timeout [ 850.994802][T11513] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 851.060886][ T1129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.295123][T11331] hsr_slave_0: entered promiscuous mode [ 851.338231][T11331] hsr_slave_1: entered promiscuous mode [ 851.359467][T11331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.387804][T11331] Cannot create hsr debugfs directory [ 851.518195][ T1129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.662669][T11330] hsr_slave_0: entered promiscuous mode [ 851.696249][T11330] hsr_slave_1: entered promiscuous mode [ 851.758941][T11330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.780526][T11330] Cannot create hsr debugfs directory [ 852.009178][ T1129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.226231][ T1129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.358126][T11430] chnl_net:caif_netlink_parms(): no params data found [ 852.510444][ T7933] Bluetooth: hci3: command tx timeout [ 854.387427][T11430] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.400121][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.418122][T11430] bridge_slave_0: entered allmulticast mode [ 854.437725][T11430] bridge_slave_0: entered promiscuous mode [ 854.453349][ T1129] bridge_slave_1: left allmulticast mode [ 854.468430][ T1129] bridge_slave_1: left promiscuous mode [ 854.491723][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.520163][ T1129] bridge_slave_0: left promiscuous mode [ 854.527358][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.560790][ T1129] bridge_slave_1: left allmulticast mode [ 854.576762][ T1129] bridge_slave_1: left promiscuous mode [ 854.597188][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.626980][ T1129] bridge_slave_0: left allmulticast mode [ 854.637631][ T1129] bridge_slave_0: left promiscuous mode [ 854.654994][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.339610][ T1129] bridge0 (unregistering): left promiscuous mode [ 860.943413][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.969436][T11584] netlink: 'syz.1.1080': attribute type 4 has an invalid length. [ 860.991588][T11584] netlink: 'syz.1.1080': attribute type 4 has an invalid length. [ 860.999384][T11584] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1080'. [ 861.031441][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.053317][ T1129] bond0 (unregistering): Released all slaves [ 862.150447][T11593] sg_write: data in/out 721008/1 bytes for SCSI command 0xcb-- guessing data in; [ 862.150447][T11593] program syz.3.1081 not setting count and/or reply_len properly [ 862.975874][ T1129] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 863.011628][ T1129] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 863.054505][ T1129] bond1 (unregistering): Released all slaves [ 863.821240][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.896470][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.924113][ T1129] bond0 (unregistering): Released all slaves [ 864.959318][T11430] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.980493][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.987902][T11430] bridge_slave_1: entered allmulticast mode [ 864.996711][T11430] bridge_slave_1: entered promiscuous mode [ 866.071379][T11430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.094466][T11430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.325957][T11430] team0: Port device team_slave_0 added [ 868.335851][T11430] team0: Port device team_slave_1 added [ 868.684311][T11430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.720063][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.749414][T11430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.805910][T11645] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 868.814686][T11645] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 868.996024][T11430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.031158][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.078108][T11430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.130426][ T29] audit: type=1326 audit(1725479442.421:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11652 comm="syz.1.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f710557cef9 code=0x0 [ 869.518428][ T1129] team0: left promiscuous mode [ 869.530027][ T1129] team_slave_0: left promiscuous mode [ 869.545310][ T1129] team_slave_1: left promiscuous mode [ 869.571121][ T1129] hsr_slave_0: left promiscuous mode [ 869.587936][ T1129] hsr_slave_1: left promiscuous mode [ 869.610088][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.632929][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.655691][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.675357][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.712745][ T1129] hsr_slave_0: left promiscuous mode [ 869.727620][ T1129] hsr_slave_1: left promiscuous mode [ 869.742992][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.760651][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.776790][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.796229][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.935832][ T1129] veth1_macvtap: left promiscuous mode [ 869.970607][ T1129] veth0_macvtap: left promiscuous mode [ 870.006036][ T1129] veth1_vlan: left promiscuous mode [ 870.013699][ T1129] veth0_vlan: left promiscuous mode [ 870.061019][ T1129] veth1_macvtap: left promiscuous mode [ 870.068002][ T1129] veth0_macvtap: left promiscuous mode [ 870.080642][ T1129] veth1_vlan: left promiscuous mode [ 870.093569][ T1129] veth0_vlan: left promiscuous mode [ 874.955630][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 875.070785][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 879.773004][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 879.991298][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 880.893957][T11717] kvm: kvm [11716]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 880.919679][T11717] kvm: kvm [11716]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 880.952866][T11717] kvm: kvm [11716]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 880.981228][T11717] kvm: kvm [11716]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 881.769993][T11430] hsr_slave_0: entered promiscuous mode [ 881.781354][T11430] hsr_slave_1: entered promiscuous mode [ 881.789439][T11430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.799057][T11430] Cannot create hsr debugfs directory [ 881.870774][T11691] vlan2: entered promiscuous mode [ 881.876274][T11691] vlan2: entered allmulticast mode [ 882.085602][T11331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.107848][T11331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 883.060503][T11331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.122625][T11331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 883.393678][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.376405][T11330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.434318][T11330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.527836][T11331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.691068][T11330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.732141][T11330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.876572][T11331] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.100625][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.107941][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.174056][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.181312][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.766635][T11765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.398457][T11430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 887.683614][T11430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 887.817655][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.874937][T11430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 887.908111][T11430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.055146][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.155402][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.162715][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.222606][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.229870][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.512936][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.519330][T11786] kvm: kvm [11785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 888.565530][T11786] kvm: kvm [11785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 888.626635][T11786] kvm: kvm [11785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 888.798681][T11430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.943110][T11430] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.003858][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.011198][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.111308][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.118507][ T9056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.788637][T11334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 889.809133][T11334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.824220][T11334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.856811][T11334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.871849][T11334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 889.879503][T11334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.265722][T11430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.787071][T11334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 891.799119][T11334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 891.810465][T11334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 891.822095][T11334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 891.831768][T11334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 891.839274][T11334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 891.887681][ T1105] bridge_slave_1: left allmulticast mode [ 892.077642][ T7933] Bluetooth: hci0: command tx timeout [ 892.102828][ T1105] bridge_slave_1: left promiscuous mode [ 892.108703][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.395754][ T1105] bridge_slave_0: left allmulticast mode [ 893.422154][ T1105] bridge_slave_0: left promiscuous mode [ 893.439435][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.102874][ T7933] Bluetooth: hci4: command tx timeout [ 894.117474][T11334] Bluetooth: hci0: command tx timeout [ 896.164589][T11861] atomic_op ffff888076e9b198 conn xmit_atomic 0000000000000000 [ 896.191618][ T7933] Bluetooth: hci4: command tx timeout [ 896.197648][T11334] Bluetooth: hci0: command tx timeout [ 896.224288][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.237399][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.249981][ T1105] bond0 (unregistering): Released all slaves [ 896.531399][ T1105] hsr_slave_0: left promiscuous mode [ 896.537732][ T1105] hsr_slave_1: left promiscuous mode [ 896.573214][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.599812][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.270504][T11334] Bluetooth: hci0: command tx timeout [ 898.270667][ T7933] Bluetooth: hci4: command tx timeout [ 898.310149][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 898.433554][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 899.818711][T11805] chnl_net:caif_netlink_parms(): no params data found [ 899.902242][T11430] veth0_vlan: entered promiscuous mode [ 899.962283][T11890] fuse: Bad value for 'group_id' [ 899.998106][T11890] fuse: Bad value for 'group_id' [ 900.164795][T11893] qnx6: unable to read the first superblock [ 900.363228][ T7933] Bluetooth: hci4: command tx timeout [ 901.098977][T11430] veth1_vlan: entered promiscuous mode [ 901.326035][T11805] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.343024][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.370788][T11805] bridge_slave_0: entered allmulticast mode [ 901.392288][T11805] bridge_slave_0: entered promiscuous mode [ 901.500703][T11805] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.508052][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.539002][T11805] bridge_slave_1: entered allmulticast mode [ 901.562703][T11805] bridge_slave_1: entered promiscuous mode [ 902.932569][T11805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.069874][T11805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.588408][T11805] team0: Port device team_slave_0 added [ 903.635215][T11805] team0: Port device team_slave_1 added [ 903.891199][T11334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.903320][T11334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.920838][T11334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.946287][T11334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 903.961490][T11334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 903.969341][T11334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.448337][T11805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.480422][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.549409][T11805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.598608][T11805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.619020][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.720639][T11805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.042964][T11842] chnl_net:caif_netlink_parms(): no params data found [ 905.677799][T11805] hsr_slave_0: entered promiscuous mode [ 905.746804][T11805] hsr_slave_1: entered promiscuous mode [ 905.774109][T11805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.810113][T11805] Cannot create hsr debugfs directory [ 906.030542][ T7933] Bluetooth: hci3: command tx timeout [ 906.811522][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.818892][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.864543][T11842] bridge_slave_0: entered allmulticast mode [ 906.898064][T11842] bridge_slave_0: entered promiscuous mode [ 906.936868][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.950876][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.958257][T11842] bridge_slave_1: entered allmulticast mode [ 906.992777][T11842] bridge_slave_1: entered promiscuous mode [ 907.397729][T12013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.408726][ T1105] bridge_slave_1: left allmulticast mode [ 907.448419][ T1105] bridge_slave_1: left promiscuous mode [ 907.466008][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.546589][ T1105] bridge_slave_0: left allmulticast mode [ 907.561872][ T1105] bridge_slave_0: left promiscuous mode [ 907.580021][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.612910][T12015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.150397][ T7933] Bluetooth: hci3: command tx timeout [ 910.370394][ T7933] Bluetooth: hci3: command tx timeout [ 910.790110][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.814216][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.834263][ T1105] bond0 (unregistering): Released all slaves [ 910.872925][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.942114][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.211148][ T1105] hsr_slave_0: left promiscuous mode [ 911.236518][ T1105] hsr_slave_1: left promiscuous mode [ 911.246825][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.272603][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.433963][ T7933] Bluetooth: hci3: command tx timeout [ 912.981065][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 913.083239][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 914.482551][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 915.661359][T11842] team0: Port device team_slave_0 added [ 915.673430][T11842] team0: Port device team_slave_1 added [ 917.151745][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.179682][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.224702][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.327362][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.365724][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.465649][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.868114][T11842] hsr_slave_0: entered promiscuous mode [ 917.906198][T11842] hsr_slave_1: entered promiscuous mode [ 918.388176][T12118] Bluetooth: MGMT ver 1.23 [ 919.630992][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.638732][T11842] Cannot create hsr debugfs directory [ 919.846385][T11946] chnl_net:caif_netlink_parms(): no params data found [ 921.631528][ T7933] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 921.710993][ T7933] Bluetooth: hci0: command 0x0c1a tx timeout [ 922.655166][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.676798][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.695448][T11946] bridge_slave_0: entered allmulticast mode [ 922.719004][T11946] bridge_slave_0: entered promiscuous mode [ 922.742813][T12145] netlink: 'syz.1.1167': attribute type 16 has an invalid length. [ 922.759902][T12145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1167'. [ 922.788904][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.931356][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.950553][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.952763][T12152] netlink: 'syz.3.1169': attribute type 11 has an invalid length. [ 922.957866][T11946] bridge_slave_1: entered allmulticast mode [ 923.002152][T11946] bridge_slave_1: entered promiscuous mode [ 923.049598][T11805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 923.072687][T11805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 923.237338][T11805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 923.289874][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.338633][T11805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 923.363937][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.617933][T11946] team0: Port device team_slave_0 added [ 923.676513][T11946] team0: Port device team_slave_1 added [ 923.838495][ T1105] bridge_slave_1: left allmulticast mode [ 923.857990][ T1105] bridge_slave_1: left promiscuous mode [ 923.864513][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.900013][ T1105] bridge_slave_0: left allmulticast mode [ 923.920445][ T1105] bridge_slave_0: left promiscuous mode [ 923.926255][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.735620][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.942268][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.100553][ T1105] bond0 (unregistering): Released all slaves [ 928.167554][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.186584][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.224438][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.282882][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.660110][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.068081][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.216298][ T1105] hsr_slave_0: left promiscuous mode [ 929.370403][ T1105] hsr_slave_1: left promiscuous mode [ 929.389790][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.420205][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.484939][ T1105] veth1_vlan: left promiscuous mode [ 929.490664][ T1105] veth0_vlan: left promiscuous mode [ 930.771757][T12194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.967129][ T5363] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 932.179466][ T5363] usb 4-1: Using ep0 maxpacket: 8 [ 932.190093][ T5363] usb 4-1: config 0 has no interfaces? [ 932.207510][ T5363] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.235692][ T5363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.273327][ T5363] usb 4-1: config 0 descriptor?? [ 932.314556][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 932.895670][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 933.254846][ T5214] usb 4-1: USB disconnect, device number 17 [ 934.946602][T11946] hsr_slave_0: entered promiscuous mode [ 935.019722][T11946] hsr_slave_1: entered promiscuous mode [ 935.043874][T11946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.057354][T11946] Cannot create hsr debugfs directory [ 935.285772][T11842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 935.386271][T11842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 935.433606][T11842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 935.564985][T11842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 935.981807][T11805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.175934][T11805] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.836425][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.843724][ T9056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.292230][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.299501][ T8295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.786493][T12254] No such timeout policy "syz0" [ 938.296584][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.527766][T11842] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.627863][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.635191][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.721917][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.729339][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.816670][T12262] Bluetooth: MGMT ver 1.23 [ 938.830462][T12262] Bluetooth: hci3: unsupported parameter 65535 [ 938.845126][T12262] Bluetooth: hci3: unsupported parameter 208 [ 938.878636][T12262] Bluetooth: hci3: unsupported parameter 65535 [ 938.890349][T12262] Bluetooth: hci3: unsupported parameter 208 [ 939.643488][T11946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 939.757374][T11946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 939.806861][T11946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 939.990778][T11946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 940.062630][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 940.383480][T11805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.625375][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.401098][T11805] veth0_vlan: entered promiscuous mode [ 941.517965][T11805] veth1_vlan: entered promiscuous mode [ 941.644125][T12291] syz.1.1195: attempt to access beyond end of device [ 941.644125][T12291] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 941.706412][T11842] veth0_vlan: entered promiscuous mode [ 941.798478][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.934692][T11842] veth1_vlan: entered promiscuous mode [ 942.041617][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.059173][T11805] veth0_macvtap: entered promiscuous mode [ 942.225076][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.232325][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.313425][T11805] veth1_macvtap: entered promiscuous mode [ 943.444160][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.451435][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.614289][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.661121][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.693318][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.716936][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.730299][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.760111][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.790649][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.829631][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.862478][T11805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.897529][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.925969][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.946491][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.968267][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.991986][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.026751][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.050754][T11805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.074838][T11805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.109103][T11805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.161398][T11805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.192691][T11805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.210955][T11805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.220053][T11805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.283952][T11842] veth0_macvtap: entered promiscuous mode [ 944.305821][T11842] veth1_macvtap: entered promiscuous mode [ 944.488573][T11946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 944.539564][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.570482][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.620424][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.650829][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.680536][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.712572][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.739759][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.771261][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.792439][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.819156][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.846603][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.860897][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.946205][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.980691][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.020488][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.080576][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.110613][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.139781][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.164351][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.179949][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.200384][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.231305][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.271310][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.407566][T11842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.484129][T11842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.528915][T11842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.577781][T11842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.849035][ T8295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.879927][ T8295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.893253][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.987884][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.018491][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.201759][ T9075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.224383][ T9075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.367877][ T9075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.391135][ T9075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.974191][T12349] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 947.135102][ T9075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.411100][ T9075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.516136][T11946] veth0_vlan: entered promiscuous mode [ 947.587456][T11946] veth1_vlan: entered promiscuous mode [ 947.698662][ T9075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.847006][ T9075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.931302][T11946] veth0_macvtap: entered promiscuous mode [ 947.948563][T11946] veth1_macvtap: entered promiscuous mode [ 947.992784][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.005285][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.025724][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.042787][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.052985][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.064096][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.079752][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.105097][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.121384][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.140291][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.161691][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.175613][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.188163][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.212666][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.228120][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.241688][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.252758][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.263129][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.276759][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.287900][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.298396][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.308655][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.319247][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.329853][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.344451][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.372123][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.413553][T11946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.422868][T11946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.433412][T11946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.444992][T11946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.697149][ T8295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.719583][ T9075] bridge_slave_1: left allmulticast mode [ 948.725295][ T8295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.730476][ T9075] bridge_slave_1: left promiscuous mode [ 948.739253][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.759372][ T9075] bridge_slave_0: left allmulticast mode [ 948.765857][ T9075] bridge_slave_0: left promiscuous mode [ 948.772561][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.994052][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 952.145014][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 952.156057][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 952.202869][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 952.213251][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 952.224178][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 952.429299][ T9075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.563888][ T9075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.899911][ T9075] bond0 (unregistering): Released all slaves [ 953.604616][ C0] vkms_vblank_simulate: vblank timer overrun [ 953.708544][ T9084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.770880][ T9084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.280555][ T5236] Bluetooth: hci4: command tx timeout [ 955.234059][ T9075] hsr_slave_0: left promiscuous mode [ 955.270543][ T9075] hsr_slave_1: left promiscuous mode [ 955.307245][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.354266][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.409908][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.458336][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.695299][ T9075] veth1_macvtap: left promiscuous mode [ 955.835027][ T9075] veth0_macvtap: left promiscuous mode [ 955.870744][ T9075] veth1_vlan: left promiscuous mode [ 956.352792][ T5236] Bluetooth: hci4: command tx timeout [ 956.760135][ T9075] veth0_vlan: left promiscuous mode [ 958.009313][T12445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1218'. [ 958.433671][ T5236] Bluetooth: hci4: command tx timeout [ 959.881858][ T9075] team0 (unregistering): Port device team_slave_1 removed [ 959.991437][ T9075] team0 (unregistering): Port device team_slave_0 removed [ 960.521234][ T5236] Bluetooth: hci4: command tx timeout [ 961.338512][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1218'. [ 961.545785][T12381] chnl_net:caif_netlink_parms(): no params data found [ 963.586817][T12381] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.650761][T12381] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.658142][T12381] bridge_slave_0: entered allmulticast mode [ 963.680373][ T5214] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 963.692596][T12381] bridge_slave_0: entered promiscuous mode [ 963.750934][T12381] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.790863][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.798178][T12381] bridge_slave_1: entered allmulticast mode [ 963.852910][T12381] bridge_slave_1: entered promiscuous mode [ 963.906930][ T5214] usb 4-1: config 0 interface 0 has no altsetting 0 [ 963.971713][ T5214] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 964.002120][ T5214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.026805][T12381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.077567][ T5214] usb 4-1: Product: syz [ 964.094917][ T5214] usb 4-1: Manufacturer: syz [ 964.097368][T12381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.126846][ T5214] usb 4-1: SerialNumber: syz [ 964.169623][ T5214] usb 4-1: config 0 descriptor?? [ 964.181000][ T5214] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 964.205291][ T5214] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 965.354589][T12381] team0: Port device team_slave_0 added [ 965.506110][T12381] team0: Port device team_slave_1 added [ 965.520769][ T941] usb 4-1: USB disconnect, device number 18 [ 965.832065][T12381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.860425][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.945764][T12381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.969423][T12381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.982326][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.064023][T12381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.461487][T12381] hsr_slave_0: entered promiscuous mode [ 966.735878][T12381] hsr_slave_1: entered promiscuous mode [ 971.540425][T12381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.548103][T12381] Cannot create hsr debugfs directory [ 971.982721][T12536] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 972.077838][T12536] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 972.320410][ T5280] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 972.577393][ T5280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.610656][ T5280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 972.674231][ T5280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 972.694951][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.726501][ T5280] usb 5-1: Product: syz [ 972.744196][ T5280] usb 5-1: Manufacturer: syz [ 972.763147][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 972.773086][ T5280] usb 5-1: SerialNumber: syz [ 973.094539][T12542] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.890512][ T941] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 973.986383][ T5280] cdc_ncm 5-1:1.0: bind() failure [ 974.034728][ T5280] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 974.058862][ T5280] cdc_ncm 5-1:1.1: bind() failure [ 974.120513][ T941] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 974.160864][ T941] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 974.226233][ T941] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 974.278091][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.305359][ T5214] usb 5-1: USB disconnect, device number 14 [ 974.308924][T12381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 974.354137][ T941] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 974.357405][T12381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 974.443590][T12381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 974.572973][T12595] Cannot find add_set index 0 as target [ 974.948487][ T941] gspca_sn9c2028: read1 error -110 [ 975.011607][ T941] gspca_sn9c2028: read1 error -32 [ 975.041795][ T941] gspca_sn9c2028: read1 error -32 [ 975.062776][ T941] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -32 [ 975.316731][T12381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 975.751401][T12381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.774423][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 975.857847][T12381] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.895795][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.903458][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.947313][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.955085][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.000392][ T8] usb 2-1: USB disconnect, device number 21 [ 977.188429][T12381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 977.225532][T12381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.562298][T12623] netlink: 'syz.4.1255': attribute type 4 has an invalid length. [ 979.408696][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'. [ 979.446689][T12381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.687211][T12381] veth0_vlan: entered promiscuous mode [ 979.737898][T12381] veth1_vlan: entered promiscuous mode [ 979.867412][T12381] veth0_macvtap: entered promiscuous mode [ 979.917752][T12381] veth1_macvtap: entered promiscuous mode [ 980.094033][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.176751][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.241486][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.300451][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.327643][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.366258][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.400118][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.420552][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.490397][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.559281][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.616242][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.687674][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.742418][T12381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.889883][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.971839][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.004226][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.053168][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.088919][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.131109][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.167749][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.243505][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.287910][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.344009][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.410630][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.452367][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.494163][T12381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.549136][T12381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.580408][T12381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.594126][T12381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.640465][T12381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.040388][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.048290][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.558715][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.204412][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.843989][ T9075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.214095][ T9075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.385973][ T9075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.633379][ T9075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.026889][ T9075] bridge_slave_1: left allmulticast mode [ 987.036734][ T9075] bridge_slave_1: left promiscuous mode [ 987.061828][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.131415][ T9075] bridge_slave_0: left allmulticast mode [ 987.137350][ T9075] bridge_slave_0: left promiscuous mode [ 987.170797][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.550726][ T7933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 992.606077][ T7933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 992.620507][ T7933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 992.631488][ T7933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 992.639659][ T7933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 992.648145][ T7933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.056504][ T9075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.069946][ T9075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.076941][T12810] nbd: device at index 4 is going down [ 994.133623][ T9075] bond0 (unregistering): Released all slaves [ 994.286536][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 994.753232][ T5236] Bluetooth: hci4: command tx timeout [ 994.934975][ T9075] hsr_slave_0: left promiscuous mode [ 994.956224][ T9075] hsr_slave_1: left promiscuous mode [ 994.964043][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.000786][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.017856][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.030755][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.068473][ T9075] veth1_macvtap: left promiscuous mode [ 995.075055][ T9075] veth0_macvtap: left promiscuous mode [ 995.104529][ T9075] veth1_vlan: left promiscuous mode [ 995.109955][ T9075] veth0_vlan: left promiscuous mode [ 997.281400][ T5236] Bluetooth: hci4: command tx timeout [ 998.102118][T12843] netlink: 'syz.1.1287': attribute type 7 has an invalid length. [ 998.110123][T12843] netlink: 'syz.1.1287': attribute type 8 has an invalid length. [ 998.118067][T12843] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1287'. [ 999.311579][ T5236] Bluetooth: hci4: command tx timeout [ 999.673944][ T9075] team0 (unregistering): Port device team_slave_1 removed [ 999.845490][ T5214] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 999.970816][ T9075] team0 (unregistering): Port device team_slave_0 removed [ 1000.040541][ T5214] usb 1-1: Using ep0 maxpacket: 8 [ 1000.111591][ T5214] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1000.182355][ T5214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.199157][ T5214] usb 1-1: Product: syz [ 1000.207059][ T5214] usb 1-1: Manufacturer: syz [ 1000.212391][ T5214] usb 1-1: SerialNumber: syz [ 1000.224873][ T5214] usb 1-1: config 0 descriptor?? [ 1000.590603][ T5214] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1001.951478][ T5214] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1001.995122][ T5236] Bluetooth: hci4: command tx timeout [ 1004.481574][ T5214] usb 1-1: USB disconnect, device number 18 [ 1004.885098][T12847] vlan2: entered promiscuous mode [ 1004.915561][T12847] team_slave_0: entered promiscuous mode [ 1004.921378][T12847] team_slave_1: entered promiscuous mode [ 1004.981427][T12847] team0: entered promiscuous mode [ 1005.070569][T12847] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1005.284665][T12787] chnl_net:caif_netlink_parms(): no params data found [ 1005.818798][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.838374][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.850978][T12787] bridge_slave_0: entered allmulticast mode [ 1005.858860][T12787] bridge_slave_0: entered promiscuous mode [ 1005.881578][T12908] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 1005.968440][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.993847][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.013958][T12787] bridge_slave_1: entered allmulticast mode [ 1006.303248][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1006.929531][T12787] bridge_slave_1: entered promiscuous mode [ 1007.224404][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.466713][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.258893][ T941] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1008.916477][T12787] team0: Port device team_slave_0 added [ 1008.940674][T12787] team0: Port device team_slave_1 added [ 1008.943827][ T941] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1009.007467][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.083257][ T941] usb 4-1: config 0 descriptor?? [ 1009.124178][T12787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.141237][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.192237][T12787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.237033][T12787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.255791][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.297365][T12787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.484985][T12787] hsr_slave_0: entered promiscuous mode [ 1009.518720][T12787] hsr_slave_1: entered promiscuous mode [ 1009.542540][T12787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.553761][T12787] Cannot create hsr debugfs directory [ 1010.745851][T12952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1323'. [ 1010.771074][ T941] pegasus 4-1:0.0: can't reset MAC [ 1010.776672][ T941] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1010.788086][T12952] netlink: 'syz.1.1323': attribute type 2 has an invalid length. [ 1010.834408][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1323'. [ 1010.889087][ T941] usb 4-1: USB disconnect, device number 19 [ 1011.780561][T12787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1011.814347][T12787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1011.895664][T12787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1012.864538][T12787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1013.089235][T12991] capability: warning: `syz.1.1318' uses 32-bit capabilities (legacy support in use) [ 1013.382018][T12993] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1318'. [ 1013.530548][ T7933] Bluetooth: hci0: command 0x0c1a tx timeout [ 1014.346892][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.503902][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.548713][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.555977][ T7498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.633434][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.640703][ T7498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.773358][T13011] xt_hashlimit: size too large, truncated to 1048576 [ 1014.800933][T13014] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 1017.836153][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.150842][T12787] veth0_vlan: entered promiscuous mode [ 1018.225251][T12787] veth1_vlan: entered promiscuous mode [ 1018.436691][T12787] veth0_macvtap: entered promiscuous mode [ 1018.514404][T12787] veth1_macvtap: entered promiscuous mode [ 1018.761376][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.808765][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.857733][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.914667][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.947937][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.981505][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.017844][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.053845][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.071338][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.108492][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.139582][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.174569][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.220432][ T5363] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1019.233756][T12787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.330815][T13057] bridge0: entered promiscuous mode [ 1019.354349][T13057] macsec1: entered promiscuous mode [ 1019.370163][T13057] macsec1: entered allmulticast mode [ 1019.387234][T13057] bridge0: entered allmulticast mode [ 1019.403657][T13057] bridge0: left allmulticast mode [ 1019.412680][T13057] bridge0: left promiscuous mode [ 1019.509476][ T5363] usb 2-1: string descriptor 0 read error: -22 [ 1019.525979][ T5363] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1019.536074][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 1019.562027][ T5363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.568552][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 1019.601470][ T5363] usb 2-1: config 0 descriptor?? [ 1019.626921][ T5363] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 1019.640326][ T5363] usb 2-1: No valid video chain found. [ 1019.703010][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.717093][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.727366][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.738962][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.751728][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.772902][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.800438][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.870262][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.910324][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.970293][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.980190][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.955103][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.004372][T12787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.297537][T13060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 1022.955708][T12787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.967754][T12787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.977211][T12787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.986053][T12787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.049439][ T5280] usb 2-1: USB disconnect, device number 22 [ 1024.122674][ T9084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.170571][ T9084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.211850][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1024.318376][T13090] vlan0: entered promiscuous mode [ 1024.329001][T13090] dummy0: entered promiscuous mode [ 1024.391369][T13090] team0: Port device vlan0 added [ 1024.421206][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.430473][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1024.448489][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.450464][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.483605][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.542138][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1024.572155][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.606516][ T9] usb 4-1: config 0 descriptor?? [ 1026.332054][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1026.338654][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1026.359958][ T9] usb 4-1: USB disconnect, device number 20 [ 1026.689483][ T7933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1026.951560][ T7933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1026.972919][ T7933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1026.992744][ T7933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1027.006724][ T7933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1027.022727][ T7933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1027.815436][T13111] syz.3.1342: attempt to access beyond end of device [ 1027.815436][T13111] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1028.109583][ T9084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.448463][ T9084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.614987][ T9084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.745028][ T9084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.837361][ T7933] Bluetooth: hci3: command 0x0406 tx timeout [ 1029.231093][T11334] Bluetooth: hci4: command tx timeout [ 1029.273970][ T9084] bridge_slave_1: left allmulticast mode [ 1029.279890][ T9084] bridge_slave_1: left promiscuous mode [ 1029.311603][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.324376][ T9084] bridge_slave_0: left allmulticast mode [ 1029.330096][ T9084] bridge_slave_0: left promiscuous mode [ 1029.360539][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.580534][T11334] Bluetooth: hci4: command tx timeout [ 1031.863355][T13135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1031.871762][T13135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1032.135395][T13135] vhci_hcd vhci_hcd.0: Device attached [ 1032.950918][ T5363] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 1032.971302][ T9084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.093938][ T9084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.105278][ T7933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.118725][ T7933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.130563][ T7933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.155425][ T7933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.167515][ T7933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1033.175600][ T7933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.235287][T13136] vhci_hcd: connection reset by peer [ 1033.285370][ T8295] vhci_hcd: stop threads [ 1033.309977][ T8295] vhci_hcd: release socket [ 1033.333129][ T9084] bond0 (unregistering): Released all slaves [ 1033.340678][ T8295] vhci_hcd: disconnect device [ 1033.403471][T13101] chnl_net:caif_netlink_parms(): no params data found [ 1033.670863][ T7933] Bluetooth: hci4: command tx timeout [ 1035.310816][ T7933] Bluetooth: hci0: command tx timeout [ 1035.713215][ T7933] Bluetooth: hci4: command tx timeout [ 1035.765296][ T9084] hsr_slave_0: left promiscuous mode [ 1035.808086][ T9084] hsr_slave_1: left promiscuous mode [ 1035.879128][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.910877][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.934566][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.956690][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.603987][ T9084] veth1_macvtap: left promiscuous mode [ 1036.732769][ T9084] veth0_macvtap: left promiscuous mode [ 1036.866189][ T9084] veth1_vlan: left promiscuous mode [ 1036.892800][ T9084] veth0_vlan: left promiscuous mode [ 1037.393012][ T7933] Bluetooth: hci0: command tx timeout [ 1037.878464][T13195] Cannot find add_set index 0 as target [ 1038.292060][ T5363] vhci_hcd: vhci_device speed not set [ 1039.520404][ T7933] Bluetooth: hci0: command tx timeout [ 1041.794259][ T7933] Bluetooth: hci0: command tx timeout [ 1042.983109][T13227] Bluetooth: MGMT ver 1.23 [ 1043.511826][T13235] Cannot find del_set index 0 as target [ 1044.813001][T13246] Cannot find add_set index 0 as target [ 1045.948592][T13249] kvm: kvm [13248]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1046.105964][ T9084] team0 (unregistering): Port device team_slave_1 removed [ 1046.790678][ T9084] team0 (unregistering): Port device team_slave_0 removed [ 1047.251932][ T29] audit: type=1326 audit(1725479620.551:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13266 comm="syz.1.1374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f710557cef9 code=0x0 [ 1047.517012][T13268] dccp_close: ABORT with 104 bytes unread [ 1048.861689][T13278] usb usb9: usbfs: process 13278 (syz.3.1376) did not claim interface 10 before use [ 1050.277573][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1050.453954][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1050.780157][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1051.363841][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.397736][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.431820][T13101] bridge_slave_0: entered allmulticast mode [ 1051.454759][T13101] bridge_slave_0: entered promiscuous mode [ 1051.594753][T13239] ------------[ cut here ]------------ [ 1051.601159][T13239] WARNING: CPU: 1 PID: 13239 at kernel/kcov.c:871 kcov_remote_start+0x542/0x7d0 [ 1051.611499][T13239] Modules linked in: [ 1051.615532][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.4.1367 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 1051.626977][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1051.637624][T13239] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 1051.643778][T13239] Code: 4c 89 ff be 03 00 00 00 e8 9b 52 16 03 e9 04 fb ff ff e8 81 6f 1d 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 a6 8c 1d 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 50 [ 1051.664763][T13239] RSP: 0018:ffffc90008ca6bf0 EFLAGS: 00010002 [ 1051.671459][T13239] RAX: 0000000080000200 RBX: ffff88801d3fda00 RCX: 0000000000000002 [ 1051.680543][T13239] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fb940 [ 1051.688929][T13239] RBP: 0000000000000000 R08: ffffffff93fa68af R09: 1ffffffff27f4d15 [ 1051.697851][T13239] R10: dffffc0000000000 R11: fffffbfff27f4d16 R12: ffffffff81939607 [ 1051.706230][T13239] R13: ffff888029933780 R14: 0000000000000246 R15: ffff8880b892d4c8 [ 1051.716207][T13239] FS: 00007f2a57b056c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1051.725750][T13239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1051.733347][T13239] CR2: 00007ffe5974b378 CR3: 0000000031ee8000 CR4: 00000000003526f0 [ 1051.741913][T13239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1051.750898][T13239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1051.759022][T13239] Call Trace: [ 1051.762837][T13239] [ 1051.765985][T13239] ? __warn+0x163/0x4e0 [ 1051.770735][T13239] ? kcov_remote_start+0x542/0x7d0 [ 1051.776687][T13239] ? report_bug+0x2b3/0x500 [ 1051.781453][T13239] ? kcov_remote_start+0x542/0x7d0 [ 1051.786896][T13239] ? handle_bug+0x3e/0x70 [ 1051.791294][T13239] ? exc_invalid_op+0x1a/0x50 [ 1051.796632][T13239] ? asm_exc_invalid_op+0x1a/0x20 [ 1051.801721][T13239] ? kcov_remote_start+0x97/0x7d0 [ 1051.807269][T13239] ? kcov_remote_start+0x542/0x7d0 [ 1051.812540][T13239] ? mark_lock+0x9a/0x350 [ 1051.817494][T13239] ieee80211_rx_list+0x799/0x3780 [ 1051.822627][T13239] ? __lock_acquire+0x137a/0x2040 [ 1051.828902][T13239] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1051.834453][T13239] ? __pfx_lock_acquire+0x10/0x10 [ 1051.840053][T13239] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1051.846414][T13239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1051.853312][T13239] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1051.858599][T13239] ieee80211_rx_napi+0x18a/0x3c0 [ 1051.864383][T13239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1051.871690][T13239] ? __local_bh_disable_ip+0x179/0x220 [ 1051.878021][T13239] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1051.883947][T13239] ? skb_dequeue+0x113/0x150 [ 1051.889101][T13239] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1051.895685][T13239] ? ieee80211_stop_device+0x2a/0xf0 [ 1051.901040][T13239] ieee80211_stop_device+0x3f/0xf0 [ 1051.906669][T13239] ieee80211_do_stop+0x1917/0x1f40 [ 1051.912464][T13239] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1051.918941][T13239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1051.926650][T13239] ? wiphy_work_cancel+0x1f0/0x3e0 [ 1051.932296][T13239] ieee80211_stop+0x436/0x4a0 [ 1051.937399][T13239] ? __pfx_ieee80211_stop+0x10/0x10 [ 1051.942646][T13239] __dev_close_many+0x219/0x300 [ 1051.947662][T13239] ? __pfx___dev_close_many+0x10/0x10 [ 1051.954269][T13239] ? nl80211_del_interface+0xa3/0x140 [ 1051.959736][T13239] ? __pfx_lock_release+0x10/0x10 [ 1051.965664][T13239] dev_close_many+0x24e/0x4c0 [ 1051.970596][T13239] ? __mutex_lock+0x2ef/0xd70 [ 1051.975344][T13239] ? ref_tracker_alloc+0x332/0x490 [ 1051.980512][T13239] ? __pfx_dev_close_many+0x10/0x10 [ 1051.986134][T13239] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1051.991914][T13239] ? nl80211_pre_doit+0x59f/0x8b0 [ 1051.997372][T13239] dev_close+0x1c0/0x2c0 [ 1052.002575][T13239] ? __pfx_dev_close+0x10/0x10 [ 1052.007674][T13239] ? __nla_parse+0x40/0x60 [ 1052.012293][T13239] nl80211_del_interface+0xd5/0x140 [ 1052.017760][T13239] genl_rcv_msg+0xb14/0xec0 [ 1052.023136][T13239] ? mark_lock+0x9a/0x350 [ 1052.027727][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.032932][T13239] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1052.039300][T13239] ? __pfx_lock_acquire+0x10/0x10 [ 1052.044403][T13239] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1052.049853][T13239] ? __pfx_nl80211_del_interface+0x10/0x10 [ 1052.056087][T13239] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1052.062630][T13239] ? __pfx___might_resched+0x10/0x10 [ 1052.068086][T13239] netlink_rcv_skb+0x1e3/0x430 [ 1052.073266][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.079483][T13239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1052.086086][T13239] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1052.091727][T13239] genl_rcv+0x28/0x40 [ 1052.096364][T13239] netlink_unicast+0x7f6/0x990 [ 1052.101415][T13239] ? __pfx_netlink_unicast+0x10/0x10 [ 1052.106776][T13239] ? __virt_addr_valid+0x183/0x530 [ 1052.112560][T13239] ? __check_object_size+0x49c/0x900 [ 1052.118322][T13239] ? bpf_lsm_netlink_send+0x9/0x10 [ 1052.123854][T13239] netlink_sendmsg+0x8e4/0xcb0 [ 1052.128813][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.134326][T13239] ? __import_iovec+0x536/0x820 [ 1052.140170][T13239] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1052.145528][T13239] ? security_socket_sendmsg+0x87/0xb0 [ 1052.151147][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.156510][T13239] __sock_sendmsg+0x221/0x270 [ 1052.161260][T13239] ____sys_sendmsg+0x525/0x7d0 [ 1052.166622][T13239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.172004][T13239] __sys_sendmsg+0x2b0/0x3a0 [ 1052.176675][T13239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1052.182449][T13239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1052.189193][T13239] ? do_syscall_64+0x100/0x230 [ 1052.194380][T13239] ? do_syscall_64+0xb6/0x230 [ 1052.199377][T13239] do_syscall_64+0xf3/0x230 [ 1052.203950][T13239] ? clear_bhb_loop+0x35/0x90 [ 1052.208865][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.215102][T13239] RIP: 0033:0x7f2a56d7cef9 [ 1052.220281][T13239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.242142][T13239] RSP: 002b:00007f2a57b05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.252441][T13239] RAX: ffffffffffffffda RBX: 00007f2a56f36208 RCX: 00007f2a56d7cef9 [ 1052.261137][T13239] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1052.269433][T13239] RBP: 00007f2a56def01e R08: 0000000000000000 R09: 0000000000000000 [ 1052.279290][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.288622][T13239] R13: 0000000000000000 R14: 00007f2a56f36208 R15: 00007ffcd528ec88 [ 1052.296802][T13239] [ 1052.300144][T13239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1052.309314][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.4.1367 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 1052.321278][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1052.332926][T13239] Call Trace: [ 1052.336348][T13239] [ 1052.340397][T13239] dump_stack_lvl+0x241/0x360 [ 1052.346396][T13239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.351690][T13239] ? __pfx__printk+0x10/0x10 [ 1052.356358][T13239] ? _printk+0xd5/0x120 [ 1052.360709][T13239] ? vscnprintf+0x5d/0x90 [ 1052.365108][T13239] panic+0x349/0x860 [ 1052.369314][T13239] ? __warn+0x172/0x4e0 [ 1052.373803][T13239] ? __pfx_panic+0x10/0x10 [ 1052.378430][T13239] ? show_trace_log_lvl+0x4e6/0x520 [ 1052.383737][T13239] __warn+0x346/0x4e0 [ 1052.388312][T13239] ? kcov_remote_start+0x542/0x7d0 [ 1052.393879][T13239] report_bug+0x2b3/0x500 [ 1052.399183][T13239] ? kcov_remote_start+0x542/0x7d0 [ 1052.405100][T13239] handle_bug+0x3e/0x70 [ 1052.409819][T13239] exc_invalid_op+0x1a/0x50 [ 1052.414495][T13239] asm_exc_invalid_op+0x1a/0x20 [ 1052.419407][T13239] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 1052.425297][T13239] Code: 4c 89 ff be 03 00 00 00 e8 9b 52 16 03 e9 04 fb ff ff e8 81 6f 1d 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 a6 8c 1d 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 50 [ 1052.447228][T13239] RSP: 0018:ffffc90008ca6bf0 EFLAGS: 00010002 [ 1052.453974][T13239] RAX: 0000000080000200 RBX: ffff88801d3fda00 RCX: 0000000000000002 [ 1052.462139][T13239] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fb940 [ 1052.471222][T13239] RBP: 0000000000000000 R08: ffffffff93fa68af R09: 1ffffffff27f4d15 [ 1052.479786][T13239] R10: dffffc0000000000 R11: fffffbfff27f4d16 R12: ffffffff81939607 [ 1052.487987][T13239] R13: ffff888029933780 R14: 0000000000000246 R15: ffff8880b892d4c8 [ 1052.496191][T13239] ? kcov_remote_start+0x97/0x7d0 [ 1052.501308][T13239] ? mark_lock+0x9a/0x350 [ 1052.505719][T13239] ieee80211_rx_list+0x799/0x3780 [ 1052.510858][T13239] ? __lock_acquire+0x137a/0x2040 [ 1052.516710][T13239] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1052.522334][T13239] ? __pfx_lock_acquire+0x10/0x10 [ 1052.527578][T13239] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1052.534744][T13239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1052.541814][T13239] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1052.548214][T13239] ieee80211_rx_napi+0x18a/0x3c0 [ 1052.553276][T13239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1052.560300][T13239] ? __local_bh_disable_ip+0x179/0x220 [ 1052.566192][T13239] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1052.572101][T13239] ? skb_dequeue+0x113/0x150 [ 1052.577237][T13239] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1052.584103][T13239] ? ieee80211_stop_device+0x2a/0xf0 [ 1052.589586][T13239] ieee80211_stop_device+0x3f/0xf0 [ 1052.594966][T13239] ieee80211_do_stop+0x1917/0x1f40 [ 1052.600559][T13239] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1052.606323][T13239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1052.612938][T13239] ? wiphy_work_cancel+0x1f0/0x3e0 [ 1052.618145][T13239] ieee80211_stop+0x436/0x4a0 [ 1052.623622][T13239] ? __pfx_ieee80211_stop+0x10/0x10 [ 1052.629423][T13239] __dev_close_many+0x219/0x300 [ 1052.634343][T13239] ? __pfx___dev_close_many+0x10/0x10 [ 1052.639786][T13239] ? nl80211_del_interface+0xa3/0x140 [ 1052.645253][T13239] ? __pfx_lock_release+0x10/0x10 [ 1052.650375][T13239] dev_close_many+0x24e/0x4c0 [ 1052.655288][T13239] ? __mutex_lock+0x2ef/0xd70 [ 1052.660394][T13239] ? ref_tracker_alloc+0x332/0x490 [ 1052.666085][T13239] ? __pfx_dev_close_many+0x10/0x10 [ 1052.671513][T13239] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1052.678019][T13239] ? nl80211_pre_doit+0x59f/0x8b0 [ 1052.683174][T13239] dev_close+0x1c0/0x2c0 [ 1052.687863][T13239] ? __pfx_dev_close+0x10/0x10 [ 1052.693031][T13239] ? __nla_parse+0x40/0x60 [ 1052.697507][T13239] nl80211_del_interface+0xd5/0x140 [ 1052.703206][T13239] genl_rcv_msg+0xb14/0xec0 [ 1052.707846][T13239] ? mark_lock+0x9a/0x350 [ 1052.713210][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.718456][T13239] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1052.724713][T13239] ? __pfx_lock_acquire+0x10/0x10 [ 1052.729905][T13239] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1052.735701][T13239] ? __pfx_nl80211_del_interface+0x10/0x10 [ 1052.741925][T13239] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1052.747739][T13239] ? __pfx___might_resched+0x10/0x10 [ 1052.753197][T13239] netlink_rcv_skb+0x1e3/0x430 [ 1052.758068][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.763691][T13239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1052.769240][T13239] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1052.776373][T13239] genl_rcv+0x28/0x40 [ 1052.780620][T13239] netlink_unicast+0x7f6/0x990 [ 1052.785661][T13239] ? __pfx_netlink_unicast+0x10/0x10 [ 1052.792435][T13239] ? __virt_addr_valid+0x183/0x530 [ 1052.797591][T13239] ? __check_object_size+0x49c/0x900 [ 1052.803289][T13239] ? bpf_lsm_netlink_send+0x9/0x10 [ 1052.808753][T13239] netlink_sendmsg+0x8e4/0xcb0 [ 1052.813635][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.820129][T13239] ? __import_iovec+0x536/0x820 [ 1052.825055][T13239] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1052.830939][T13239] ? security_socket_sendmsg+0x87/0xb0 [ 1052.836555][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.842441][T13239] __sock_sendmsg+0x221/0x270 [ 1052.847363][T13239] ____sys_sendmsg+0x525/0x7d0 [ 1052.852222][T13239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.858243][T13239] __sys_sendmsg+0x2b0/0x3a0 [ 1052.863438][T13239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1052.868876][T13239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1052.875980][T13239] ? do_syscall_64+0x100/0x230 [ 1052.880810][T13239] ? do_syscall_64+0xb6/0x230 [ 1052.885545][T13239] do_syscall_64+0xf3/0x230 [ 1052.890440][T13239] ? clear_bhb_loop+0x35/0x90 [ 1052.895170][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.901209][T13239] RIP: 0033:0x7f2a56d7cef9 [ 1052.905675][T13239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.926832][T13239] RSP: 002b:00007f2a57b05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.935389][T13239] RAX: ffffffffffffffda RBX: 00007f2a56f36208 RCX: 00007f2a56d7cef9 [ 1052.944563][T13239] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1052.952610][T13239] RBP: 00007f2a56def01e R08: 0000000000000000 R09: 0000000000000000 [ 1052.960719][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.968834][T13239] R13: 0000000000000000 R14: 00007f2a56f36208 R15: 00007ffcd528ec88 [ 1052.976888][T13239] [ 1052.980336][T13239] Kernel Offset: disabled [ 1052.984955][T13239] Rebooting in 86400 seconds..