last executing test programs: 12.709477285s ago: executing program 2 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) ioctl$TIOCCONS(r3, 0x541d) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xb}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x94}}, 0x24000400) 11.590888199s ago: executing program 1 (id=1848): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x10000, 0x5, "3e6870d2ea8d"}}) 11.329420232s ago: executing program 2 (id=1850): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xadfd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10.535184846s ago: executing program 4 (id=1851): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x40000000, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0xa1c) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ff0700"/29], 0xfdef) 9.159154948s ago: executing program 4 (id=1853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x58, 0x0}}], 0x6c00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) 8.690019944s ago: executing program 2 (id=1854): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0xd, 0x12, 0xffffffffffffffff, 0xfffff000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060"], 0xffe) 7.864042082s ago: executing program 0 (id=1856): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) 7.697880475s ago: executing program 0 (id=1857): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 6.766801934s ago: executing program 1 (id=1858): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x1c}}, 0x0) 6.716574283s ago: executing program 2 (id=1859): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) ioctl$KVM_NMI(r3, 0xae9a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() prlimit64(0x0, 0x4, &(0x7f0000000040)={0x4, 0x800}, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000002d000000000000005504000001ed0a0025000000170000001c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2429d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73cd83625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dba718cd9c498998de5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fe4f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6cc448e05d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44ce288b4b27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.687507587s ago: executing program 0 (id=1860): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xffffffffffffffd0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x6d) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) 6.678529274s ago: executing program 3 (id=1861): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xe, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) 6.577711706s ago: executing program 1 (id=1862): socket$kcm(0x10, 0x2, 0x0) socket(0x2b, 0x3, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 5.016975119s ago: executing program 3 (id=1863): r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x82fc, 0xc8081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000340)=""/4096) 4.96386862s ago: executing program 1 (id=1864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) execve(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53049cc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') write$tcp_mem(r5, &(0x7f0000000180)={0xfffffffffffffffd}, 0x48) write$binfmt_script(r0, &(0x7f00000002c0), 0x191) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x103400, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) 4.896900004s ago: executing program 3 (id=1865): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000001e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3.868677797s ago: executing program 0 (id=1867): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) userfaultfd(0x801) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) 2.923762718s ago: executing program 2 (id=1868): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x10000, 0x5, "3e6870d2ea8d"}}) 2.482194011s ago: executing program 3 (id=1869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) 2.398568817s ago: executing program 4 (id=1870): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 2.176016563s ago: executing program 3 (id=1871): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @loopback, 0x10000}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r2, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/236, 0xfffffffffffffdf8}, 0x80000000}], 0x1, 0x40002000, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f04e0ff80070000000300000004000080000000000000000000040004"], &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x15, 0x2}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0}) 1.449218998s ago: executing program 4 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x1c}}, 0x0) 1.290356613s ago: executing program 4 (id=1873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) dup(0xffffffffffffffff) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2002, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x2000, 0x401}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0xa}], 0x1) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) 976.376243ms ago: executing program 4 (id=1874): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x30bc03, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) 943.726065ms ago: executing program 2 (id=1875): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/87, 0x57) finit_module(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00', @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00'/21], 0x48) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x4161, 0x0) gettid() 759.197958ms ago: executing program 1 (id=1876): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xffffffffffffffd0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x6d) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) 183.434962ms ago: executing program 1 (id=1877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000000800000030000000004000006140600", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 49.859733ms ago: executing program 3 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 0s ago: executing program 0 (id=1879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x9, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): nregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.413927][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.421685][ T5277] usb 4-1: Product: syz [ 455.428426][ T5277] usb 4-1: Manufacturer: syz [ 455.433153][ T5277] usb 4-1: SerialNumber: syz [ 455.439231][ T5278] usb 5-1: config 0 descriptor?? [ 455.459167][ T5277] usb 4-1: config 0 descriptor?? [ 455.525108][ T9786] chnl_net:caif_netlink_parms(): no params data found [ 455.575223][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.698287][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.728024][ T5277] usb 4-1: USB disconnect, device number 16 [ 455.793025][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.867918][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.882352][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.890492][ T9786] bridge_slave_0: entered allmulticast mode [ 455.910579][ T9786] bridge_slave_0: entered promiscuous mode [ 455.944839][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.984186][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.991458][ T9786] bridge_slave_1: entered allmulticast mode [ 456.021373][ T9786] bridge_slave_1: entered promiscuous mode [ 456.146718][ T9786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.175800][ T12] bridge_slave_1: left allmulticast mode [ 456.182357][ T12] bridge_slave_1: left promiscuous mode [ 456.195359][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.212399][ T12] bridge_slave_0: left allmulticast mode [ 456.221272][ T12] bridge_slave_0: left promiscuous mode [ 456.239206][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.254000][ T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 456.587636][ T5278] usb 5-1: Cannot set autoneg [ 456.592485][ T5278] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 456.626877][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.844768][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.996637][ T5242] Bluetooth: hci0: command tx timeout [ 457.035212][ T46] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 457.166722][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.277220][ T46] usb 2-1: config 0 descriptor?? [ 457.519664][ T12] bridge0 (unregistering): left allmulticast mode [ 457.749182][ T46] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 457.803004][ T5300] usb 5-1: USB disconnect, device number 26 [ 457.989095][ T940] usb 2-1: USB disconnect, device number 26 [ 458.022413][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.030759][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.033031][ T12] bond0 (unregistering): Released all slaves [ 458.054420][ T9786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.894064][ T9822] tty tty29: ldisc open failed (-12), clearing slot 28 [ 459.032368][ T9786] team0: Port device team_slave_0 added [ 459.034174][ T5242] Bluetooth: hci0: command tx timeout [ 460.987238][ T9786] team0: Port device team_slave_1 added [ 461.104098][ T5242] Bluetooth: hci0: command tx timeout [ 462.245051][ T9863] bridge0: entered allmulticast mode [ 462.281238][ T12] hsr_slave_0: left promiscuous mode [ 462.317793][ T12] hsr_slave_1: left promiscuous mode [ 462.333657][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.333996][ T5277] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 462.344480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.365179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.372777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.429761][ T12] veth1_macvtap: left promiscuous mode [ 462.436264][ T12] veth0_macvtap: left promiscuous mode [ 462.442017][ T12] veth1_vlan: left promiscuous mode [ 462.447411][ T12] veth0_vlan: left promiscuous mode [ 462.464203][ T46] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 462.513830][ T9869] fuse: Unknown parameter '00000000000000000000004' [ 462.563985][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 462.579041][ T5277] usb 5-1: config 0 has no interfaces? [ 462.590677][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 462.601687][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.621007][ T5277] usb 5-1: Product: syz [ 462.635762][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.640942][ T5277] usb 5-1: Manufacturer: syz [ 462.646991][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.660631][ T5277] usb 5-1: SerialNumber: syz [ 462.669559][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 462.679137][ T5277] usb 5-1: config 0 descriptor?? [ 462.728908][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.807847][ T46] usb 3-1: config 0 descriptor?? [ 462.993238][ T5277] usb 5-1: USB disconnect, device number 27 [ 463.197282][ T5242] Bluetooth: hci0: command tx timeout [ 463.706077][ T46] lg-g15 0003:046D:C222.000A: unknown main item tag 0x7 [ 463.713113][ T46] lg-g15 0003:046D:C222.000A: item fetching failed at offset 7/11 [ 463.725727][ T46] lg-g15 0003:046D:C222.000A: probe with driver lg-g15 failed with error -22 [ 463.927950][ T5277] usb 3-1: USB disconnect, device number 35 [ 464.702414][ T12] team0 (unregistering): Port device team_slave_1 removed [ 464.902894][ T12] team0 (unregistering): Port device team_slave_0 removed [ 466.218348][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.226709][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.252650][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.259603][ T9786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.271897][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.287328][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.320710][ T9786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.575853][ T9900] fuse: Unknown parameter '00000000000000000000004' [ 466.700938][ T9786] hsr_slave_0: entered promiscuous mode [ 466.715993][ T9786] hsr_slave_1: entered promiscuous mode [ 466.722614][ T9786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.742358][ T9786] Cannot create hsr debugfs directory [ 466.920319][ T5300] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 467.232995][ T5300] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.438400][ T5277] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 467.456248][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.574148][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.602830][ T5300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.615189][ T5277] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 467.621899][ T5300] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 467.641679][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.689362][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.741557][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.805017][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.819352][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.821638][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.844437][ T5300] usb 3-1: config 0 descriptor?? [ 467.880277][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.893512][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.908133][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.928996][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.950504][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 468.596197][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.609277][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.619110][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.619238][ T5300] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 468.630516][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 468.646918][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.674288][ T5300] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 468.681394][ T5300] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 468.694692][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.698441][ T9786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.716576][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.726755][ T5300] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 468.736474][ T9786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.743646][ T5300] hid-rmi 0003:17EF:6085.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 468.746694][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 468.783988][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.800473][ T9786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.820786][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.827566][ T5300] usb 3-1: USB disconnect, device number 36 [ 468.846177][ T9786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.876510][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.913295][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 468.950185][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.960706][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.986359][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.996860][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.003083][ T9786] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.007329][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 469.033249][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.063930][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 469.076950][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.084201][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.102055][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.131719][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 469.154651][ T5277] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.185178][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.192395][ T5471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.196793][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 470.455680][ T9786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.506216][ T9786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.610123][ T9926] ptrace attach of "./syz-executor exec"[5241] was attempted by "./syz-executor exec"[9926] [ 470.731886][ T5277] usb 4-1: string descriptor 0 read error: -71 [ 470.738249][ T5277] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 470.747351][ T5277] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 470.758481][ T5277] usb 4-1: config 0 descriptor?? [ 470.765636][ T5277] usb 4-1: can't set config #0, error -71 [ 470.781807][ T5277] usb 4-1: USB disconnect, device number 17 [ 472.135468][ T9950] fuse: Unknown parameter '00000000000000000000004' [ 472.420403][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.022140][ T9786] veth0_vlan: entered promiscuous mode [ 473.033381][ T9786] veth1_vlan: entered promiscuous mode [ 473.056327][ T9786] veth0_macvtap: entered promiscuous mode [ 473.065296][ T9786] veth1_macvtap: entered promiscuous mode [ 473.080075][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.090693][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.100734][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.111739][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.121738][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.132286][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.142245][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.152892][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.162955][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.173476][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.185188][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.195000][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.205641][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.215562][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.227048][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.240679][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.251255][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.261253][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.271827][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.281773][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.292411][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.479970][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.921751][ T9786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.957700][ T9786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.031206][ T9786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.048349][ T9786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.222593][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.231037][ T9920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.339820][ T9920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.393174][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.592391][ T9975] netlink: 'syz.0.1295': attribute type 4 has an invalid length. [ 476.286099][ T9980] fuse: Unknown parameter '00000000000000000000004' [ 476.408274][ T9984] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 476.884064][ T1173] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 477.901680][ T1173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 479.352571][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 479.893967][ T1173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.263717][T10019] Cannot find add_set index 0 as target [ 482.632024][T10029] fuse: Unknown parameter '00000000000000000000004' [ 483.525408][T10034] veth0_vlan: entered allmulticast mode [ 483.680124][T10034] veth0_vlan: left promiscuous mode [ 483.695352][T10034] veth0_vlan: entered promiscuous mode [ 484.959123][ T1173] usb 3-1: string descriptor 0 read error: -32 [ 485.168488][ T1173] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.181059][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.197459][ T1173] usb 3-1: config 0 descriptor?? [ 485.203020][ T1173] usb 3-1: can't set config #0, error -32 [ 485.298535][T10053] 9pnet_fd: Insufficient options for proto=fd [ 486.328210][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 487.670933][T10065] x_tables: duplicate underflow at hook 2 [ 487.683199][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 487.683216][ T29] audit: type=1326 audit(1729149603.392:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.724269][ T29] audit: type=1326 audit(1729149603.392:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.746231][ T29] audit: type=1326 audit(1729149603.392:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.768364][ T29] audit: type=1326 audit(1729149603.392:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.790102][ T29] audit: type=1326 audit(1729149603.392:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.812099][ T29] audit: type=1326 audit(1729149603.392:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.834017][ T29] audit: type=1326 audit(1729149603.392:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.855695][ T29] audit: type=1326 audit(1729149603.392:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.877446][ T29] audit: type=1326 audit(1729149603.392:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.899478][ T29] audit: type=1326 audit(1729149603.392:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10064 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 487.937516][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.104098][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 488.130355][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 488.139116][T10061] bridge_slave_0 (unregistering): left allmulticast mode [ 488.146501][T10061] bridge_slave_0 (unregistering): left promiscuous mode [ 488.153555][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.191669][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 488.193816][T10074] fuse: Unknown parameter '00000000000000000000004' [ 488.201252][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.214194][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 488.222994][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.414363][ T5277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 489.233998][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 489.241382][ T5277] usb 5-1: config 0 has no interfaces? [ 489.249649][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 489.268079][T10069] chnl_net:caif_netlink_parms(): no params data found [ 489.284715][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.307582][ T5277] usb 5-1: Product: syz [ 489.311791][ T5277] usb 5-1: Manufacturer: syz [ 489.333997][ T5277] usb 5-1: SerialNumber: syz [ 489.460227][ T5277] usb 5-1: config 0 descriptor?? [ 490.187624][ T940] usb 5-1: USB disconnect, device number 28 [ 490.304198][ T5242] Bluetooth: hci5: command tx timeout [ 490.910948][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.934067][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.970927][T10069] bridge_slave_0: entered allmulticast mode [ 490.985313][T10069] bridge_slave_0: entered promiscuous mode [ 490.993113][T10100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.000416][T10100] IPv6: NLM_F_CREATE should be set when creating new route [ 491.020450][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.044214][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.024121][T10069] bridge_slave_1: entered allmulticast mode [ 492.031601][T10069] bridge_slave_1: entered promiscuous mode [ 492.546527][ T5242] Bluetooth: hci5: command tx timeout [ 492.938504][T10113] fuse: Unknown parameter 'fd00000000000000000000004' [ 492.977455][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 492.977475][ T29] audit: type=1326 audit(1729149608.702:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.017505][T10119] x_tables: duplicate underflow at hook 2 [ 493.053961][ T29] audit: type=1326 audit(1729149608.702:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.139695][ T29] audit: type=1326 audit(1729149608.742:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.161635][ T29] audit: type=1326 audit(1729149608.742:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.184404][ T29] audit: type=1326 audit(1729149608.742:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.872315][ T29] audit: type=1326 audit(1729149608.742:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.894302][ T29] audit: type=1326 audit(1729149608.742:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.915843][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.922085][ T29] audit: type=1326 audit(1729149608.742:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.944266][ T29] audit: type=1326 audit(1729149608.742:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 493.965829][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.973390][ T29] audit: type=1326 audit(1729149608.742:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ac57dff9 code=0x7ffc0000 [ 494.209416][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.221655][ T5300] usb 3-1: USB disconnect, device number 37 [ 494.266866][ T5276] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 494.274486][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.635681][ T5242] Bluetooth: hci5: command tx timeout [ 494.655300][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 494.768368][ T5276] usb 4-1: config 0 has no interfaces? [ 494.805608][ T5276] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 494.817695][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.832569][ T5276] usb 4-1: Product: syz [ 494.840474][ T5276] usb 4-1: Manufacturer: syz [ 494.851287][T10141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.858619][T10141] IPv6: NLM_F_CREATE should be set when creating new route [ 494.868158][ T5276] usb 4-1: SerialNumber: syz [ 494.898515][T10069] team0: Port device team_slave_0 added [ 494.942008][ T5276] usb 4-1: config 0 descriptor?? [ 495.824167][ T2899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.238199][ T46] usb 4-1: USB disconnect, device number 18 [ 496.422922][T10069] team0: Port device team_slave_1 added [ 496.642733][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.670888][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.723961][ T5242] Bluetooth: hci5: command tx timeout [ 496.777324][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.825437][T10159] fuse: Unknown parameter 'fd00000000000000000000004' [ 496.869885][ T2899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.926739][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.958818][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.996047][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.109462][ T2899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.379284][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 499.558794][ T2899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.704619][T10181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.711886][T10181] IPv6: NLM_F_CREATE should be set when creating new route [ 499.801012][T10069] hsr_slave_0: entered promiscuous mode [ 499.832373][T10069] hsr_slave_1: entered promiscuous mode [ 499.849948][T10069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.858244][T10069] Cannot create hsr debugfs directory [ 499.980946][T10192] fuse: Unknown parameter 'fd00000000000000000000004' [ 500.996255][ T2899] erspan0: left allmulticast mode [ 501.011753][ T2899] erspan0: left promiscuous mode [ 501.018556][ T2899] bridge0: port 3(erspan0) entered disabled state [ 501.050138][ T2899] bridge_slave_1: left allmulticast mode [ 501.063688][ T2899] bridge_slave_1: left promiscuous mode [ 501.073071][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.089335][ T2899] bridge_slave_0: left allmulticast mode [ 501.112977][ T2899] bridge_slave_0: left promiscuous mode [ 501.132173][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.224113][ T5300] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 501.384371][ T5300] usb 5-1: Using ep0 maxpacket: 16 [ 501.426302][ T5300] usb 5-1: config 0 has no interfaces? [ 501.446633][ T5300] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 501.464265][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.476411][ T5300] usb 5-1: Product: syz [ 501.480723][ T5300] usb 5-1: Manufacturer: syz [ 501.489151][ T5300] usb 5-1: SerialNumber: syz [ 501.508012][ T5300] usb 5-1: config 0 descriptor?? [ 501.666494][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.672939][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.774514][ T5300] usb 5-1: USB disconnect, device number 29 [ 502.703136][T10215] syz.4.1417[10215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.703602][T10215] syz.4.1417[10215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.715840][T10215] syz.4.1417[10215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.346803][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.470176][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.557068][ T2899] bond0 (unregistering): Released all slaves [ 505.798182][T10225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.024372][ T5277] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 506.042546][ T2899] hsr_slave_0: left promiscuous mode [ 506.077690][ T2899] hsr_slave_1: left promiscuous mode [ 506.078502][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.078570][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.079503][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.079531][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.265727][ T2899] veth1_macvtap: left promiscuous mode [ 506.265967][ T2899] veth0_macvtap: left promiscuous mode [ 506.266236][ T2899] veth1_vlan: left promiscuous mode [ 506.271777][ T2899] veth0_vlan: left promiscuous mode [ 506.895675][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.906865][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.928493][ T5277] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 506.954801][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.987746][ T5277] usb 5-1: config 0 descriptor?? [ 508.189352][ T5277] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 508.198475][ T5277] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 508.230920][ T5277] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 508.268241][ T5277] usb 5-1: USB disconnect, device number 30 [ 508.753509][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 509.217965][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 509.581589][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 509.581644][ T29] audit: type=1326 audit(1729149625.302:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.4.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f697dff9 code=0x0 [ 511.736076][T10069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.901141][T10069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 512.782225][T10069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 512.885657][T10069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.146747][T10289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.061606][T10069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.098234][T10069] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.113274][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.120420][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.197867][ T2899] bridge_slave_1: left allmulticast mode [ 516.211614][ T2899] bridge_slave_1: left promiscuous mode [ 516.231497][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.254077][ T2899] bridge_slave_0: left allmulticast mode [ 516.263089][ T2899] bridge_slave_0: left promiscuous mode [ 516.274496][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.679950][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.689841][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.697936][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.708425][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.727898][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.735352][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.828786][ T5233] Bluetooth: hci1: command tx timeout [ 519.892324][ T29] audit: type=1326 audit(1729149635.602:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.4.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f697dff9 code=0x0 [ 520.857264][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.875573][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.888218][ T2899] bond0 (unregistering): Released all slaves [ 520.911442][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.918574][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.096340][T10338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.555107][ T2899] hsr_slave_0: left promiscuous mode [ 521.579681][ T2899] hsr_slave_1: left promiscuous mode [ 521.594411][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.634062][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.675958][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.717640][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.780494][ T2899] veth1_macvtap: left promiscuous mode [ 521.798479][ T2899] veth0_macvtap: left promiscuous mode [ 521.813308][ T2899] veth1_vlan: left promiscuous mode [ 521.826360][ T2899] veth0_vlan: left promiscuous mode [ 521.904008][ T5233] Bluetooth: hci1: command tx timeout [ 523.957370][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 523.984162][ T5233] Bluetooth: hci1: command tx timeout [ 524.046177][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 525.437911][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 525.633794][T10352] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 525.682200][T10369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.084168][ T5233] Bluetooth: hci1: command tx timeout [ 527.315714][T10310] chnl_net:caif_netlink_parms(): no params data found [ 527.742701][ T29] audit: type=1326 audit(1729149643.372:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.0.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46c677dff9 code=0x0 [ 529.430897][T10069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.663340][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.704565][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.721528][T10310] bridge_slave_0: entered allmulticast mode [ 529.729746][T10310] bridge_slave_0: entered promiscuous mode [ 529.748227][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.762805][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.770750][T10310] bridge_slave_1: entered allmulticast mode [ 529.785715][T10310] bridge_slave_1: entered promiscuous mode [ 530.638338][ T2899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.737824][T10069] veth0_vlan: entered promiscuous mode [ 530.826509][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.849601][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 530.940060][ T2899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.963190][T10069] veth1_vlan: entered promiscuous mode [ 530.970934][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.525502][T10069] veth0_macvtap: entered promiscuous mode [ 533.405193][ T2899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.446058][T10310] team0: Port device team_slave_0 added [ 533.454188][T10310] team0: Port device team_slave_1 added [ 533.499410][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.507393][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.535551][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.664082][ T29] audit: type=1326 audit(1729149649.342:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10441 comm="syz.0.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46c677dff9 code=0x0 [ 533.877731][T10069] veth1_macvtap: entered promiscuous mode [ 533.882823][T10450] Bluetooth: MGMT ver 1.23 [ 534.095992][ T2899] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.217616][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.226003][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.263149][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.407520][T10310] hsr_slave_0: entered promiscuous mode [ 534.454496][T10310] hsr_slave_1: entered promiscuous mode [ 534.463013][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.474974][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.485117][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.496298][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.509010][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.519948][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.530094][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.540868][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.555999][T10069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.734727][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.813535][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.824415][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.836027][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.846179][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.857123][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.867707][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 535.914583][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.925200][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.937441][T10069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.953563][T10069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.964521][T10069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.973720][T10069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.983326][T10069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.714096][ T2899] bridge_slave_1: left allmulticast mode [ 536.719921][ T2899] bridge_slave_1: left promiscuous mode [ 536.725862][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.750491][ T2899] bridge_slave_0: left allmulticast mode [ 536.760349][ T2899] bridge_slave_0: left promiscuous mode [ 536.766703][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.903707][ T29] audit: type=1326 audit(1729149653.622:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.4.1488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f697dff9 code=0x0 [ 538.484017][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.496738][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.509261][ T2899] bond0 (unregistering): Released all slaves [ 539.644118][ T2899] hsr_slave_0: left promiscuous mode [ 539.704715][ T2899] hsr_slave_1: left promiscuous mode [ 539.712747][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.724501][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.743828][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.751963][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.810710][ T2899] veth1_macvtap: left promiscuous mode [ 539.835056][ T2899] veth0_macvtap: left promiscuous mode [ 539.840922][ T2899] veth1_vlan: left promiscuous mode [ 539.850365][ T2899] veth0_vlan: left promiscuous mode [ 564.074261][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.080599][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.326636][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 597.297203][ T4615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.306978][ T4615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.315560][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.327660][ T4615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.337130][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.345816][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.364912][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.375492][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.383390][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 597.392120][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 597.399779][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.408893][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 597.653762][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.674111][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.683389][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.706723][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.718637][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 597.734134][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.900610][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 597.961523][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 598.000510][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.037398][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 598.041203][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.054824][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 598.055219][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.075613][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.083733][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 598.094260][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 598.102831][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.108618][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 598.132786][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 598.142103][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 599.504358][ T5242] Bluetooth: hci4: command tx timeout [ 599.510121][ T5233] Bluetooth: hci2: command tx timeout [ 599.607810][T10534] chnl_net:caif_netlink_parms(): no params data found [ 599.682947][T10538] chnl_net:caif_netlink_parms(): no params data found [ 599.721293][ T2899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.747486][T10548] chnl_net:caif_netlink_parms(): no params data found [ 599.824408][ T5233] Bluetooth: hci0: command tx timeout [ 599.832985][ T2899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.853032][T10546] chnl_net:caif_netlink_parms(): no params data found [ 599.900718][T10544] chnl_net:caif_netlink_parms(): no params data found [ 599.962972][ T2899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.066209][ T2899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.109569][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.122595][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.130371][T10534] bridge_slave_0: entered allmulticast mode [ 600.138649][T10534] bridge_slave_0: entered promiscuous mode [ 600.147934][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.155556][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.162802][T10534] bridge_slave_1: entered allmulticast mode [ 600.169695][T10534] bridge_slave_1: entered promiscuous mode [ 600.212071][T10538] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.222239][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.224468][ T5233] Bluetooth: hci7: command tx timeout [ 600.235216][T10538] bridge_slave_0: entered allmulticast mode [ 600.235880][ T5233] Bluetooth: hci3: command tx timeout [ 600.242672][T10538] bridge_slave_0: entered promiscuous mode [ 600.255132][T10538] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.262194][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.269904][T10538] bridge_slave_1: entered allmulticast mode [ 600.279172][T10538] bridge_slave_1: entered promiscuous mode [ 600.329533][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.336847][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.344680][T10548] bridge_slave_0: entered allmulticast mode [ 600.351697][T10548] bridge_slave_0: entered promiscuous mode [ 600.403064][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.410431][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.418304][T10548] bridge_slave_1: entered allmulticast mode [ 600.425413][T10548] bridge_slave_1: entered promiscuous mode [ 600.448677][T10538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.460998][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.473053][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.491424][T10546] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.498795][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.506054][T10546] bridge_slave_0: entered allmulticast mode [ 600.512641][T10546] bridge_slave_0: entered promiscuous mode [ 600.552468][T10538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.577293][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.584837][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.592165][T10546] bridge_slave_1: entered allmulticast mode [ 600.599371][T10546] bridge_slave_1: entered promiscuous mode [ 600.613077][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.620624][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.628777][T10544] bridge_slave_0: entered allmulticast mode [ 600.636262][T10544] bridge_slave_0: entered promiscuous mode [ 600.645492][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.722955][T10546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.733002][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.740493][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.748848][T10544] bridge_slave_1: entered allmulticast mode [ 600.756525][T10544] bridge_slave_1: entered promiscuous mode [ 600.765048][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.792135][T10538] team0: Port device team_slave_0 added [ 600.805828][T10538] team0: Port device team_slave_1 added [ 600.819580][T10534] team0: Port device team_slave_0 added [ 600.841614][T10546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.915393][T10534] team0: Port device team_slave_1 added [ 600.921692][T10538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.933943][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.961245][T10538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.029295][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.040670][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.055159][T10548] team0: Port device team_slave_0 added [ 601.070027][T10538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.077348][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.103825][T10538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.140528][ T2899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.162162][T10546] team0: Port device team_slave_0 added [ 601.178828][T10548] team0: Port device team_slave_1 added [ 601.202663][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.210446][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.243901][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.268166][T10546] team0: Port device team_slave_1 added [ 601.290251][T10544] team0: Port device team_slave_0 added [ 601.315851][ T2899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.350278][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.357844][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.387033][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.415377][T10544] team0: Port device team_slave_1 added [ 601.421582][T10546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.429374][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.455632][T10546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.479759][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.486843][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.514444][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.527259][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.534328][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.560365][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.584204][ T5233] Bluetooth: hci4: command tx timeout [ 601.596963][ T5233] Bluetooth: hci2: command tx timeout [ 601.609574][ T2899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.639573][T10546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.646860][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.677129][T10546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.700030][T10538] hsr_slave_0: entered promiscuous mode [ 601.707980][T10538] hsr_slave_1: entered promiscuous mode [ 601.715527][T10538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.723132][T10538] Cannot create hsr debugfs directory [ 601.776767][ T2899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.849291][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.857111][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.883715][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.896940][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.904081][ T5233] Bluetooth: hci0: command tx timeout [ 601.904088][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.936886][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.979039][T10546] hsr_slave_0: entered promiscuous mode [ 601.986009][T10546] hsr_slave_1: entered promiscuous mode [ 601.992433][T10546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.000597][T10546] Cannot create hsr debugfs directory [ 602.010944][T10534] hsr_slave_0: entered promiscuous mode [ 602.018942][T10534] hsr_slave_1: entered promiscuous mode [ 602.034276][T10534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.041863][T10534] Cannot create hsr debugfs directory [ 602.076633][T10548] hsr_slave_0: entered promiscuous mode [ 602.083312][T10548] hsr_slave_1: entered promiscuous mode [ 602.089524][T10548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.097202][T10548] Cannot create hsr debugfs directory [ 602.280698][T10544] hsr_slave_0: entered promiscuous mode [ 602.290382][T10544] hsr_slave_1: entered promiscuous mode [ 602.298630][T10544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.306358][ T5233] Bluetooth: hci3: command tx timeout [ 602.306419][T10544] Cannot create hsr debugfs directory [ 602.311747][ T5233] Bluetooth: hci7: command tx timeout [ 602.514580][ T2899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.599632][ T2899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.667577][ T2899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.743192][ T2899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.872074][ T2899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.930392][ T2899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.021129][ T2899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.061862][T10538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.070714][T10538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.103189][ T2899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.117746][T10538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.137905][T10538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.248053][ T2899] bridge_slave_1: left allmulticast mode [ 603.253734][ T2899] bridge_slave_1: left promiscuous mode [ 603.274276][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.282934][ T2899] bridge_slave_0: left allmulticast mode [ 603.294309][ T2899] bridge_slave_0: left promiscuous mode [ 603.300003][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.311292][ T2899] bridge_slave_1: left allmulticast mode [ 603.317094][ T2899] bridge_slave_1: left promiscuous mode [ 603.322790][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.331485][ T2899] bridge_slave_0: left allmulticast mode [ 603.337483][ T2899] bridge_slave_0: left promiscuous mode [ 603.343108][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.354289][ T2899] bridge_slave_1: left allmulticast mode [ 603.359970][ T2899] bridge_slave_1: left promiscuous mode [ 603.366989][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.377746][ T2899] bridge_slave_1: left allmulticast mode [ 603.383406][ T2899] bridge_slave_1: left promiscuous mode [ 603.390393][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.398983][ T2899] bridge_slave_0: left allmulticast mode [ 603.405889][ T2899] bridge_slave_0: left promiscuous mode [ 603.412294][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.426954][ T2899] bridge_slave_1: left allmulticast mode [ 603.432596][ T2899] bridge_slave_1: left promiscuous mode [ 603.438859][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.447519][ T2899] bridge_slave_0: left allmulticast mode [ 603.453158][ T2899] bridge_slave_0: left promiscuous mode [ 603.460727][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.664220][ T5242] Bluetooth: hci4: command tx timeout [ 603.669789][ T5233] Bluetooth: hci2: command tx timeout [ 603.985947][ T5233] Bluetooth: hci0: command tx timeout [ 604.384097][ T5242] Bluetooth: hci3: command tx timeout [ 604.388063][ T5233] Bluetooth: hci7: command tx timeout [ 604.425564][ T2899] bridge0 (unregistering): left allmulticast mode [ 604.491580][ T2899] bridge0 (unregistering): left allmulticast mode [ 604.628515][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.639419][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.651473][ T2899] bond0 (unregistering): Released all slaves [ 604.773734][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.792061][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.802747][ T2899] bond0 (unregistering): Released all slaves [ 604.937932][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.950026][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.961328][ T2899] bond0 (unregistering): Released all slaves [ 605.088406][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.100308][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.113685][ T2899] bond0 (unregistering): Released all slaves [ 605.241929][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.252982][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.263527][ T2899] bond0 (unregistering): Released all slaves [ 605.479464][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.603086][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.626807][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.633951][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.653696][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.660864][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.744622][ T5233] Bluetooth: hci2: command tx timeout [ 605.750080][ T5233] Bluetooth: hci4: command tx timeout [ 605.825385][T10546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 605.883077][T10546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 605.900864][T10546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 605.923821][T10546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.066030][ T5233] Bluetooth: hci0: command tx timeout [ 606.226815][T10546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.255059][T10546] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.326686][T10538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.397089][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.404248][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.413524][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.420639][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.470254][ T5233] Bluetooth: hci3: command tx timeout [ 606.476030][ T5242] Bluetooth: hci7: command tx timeout [ 606.487359][ T2899] hsr_slave_0: left promiscuous mode [ 606.497251][ T2899] hsr_slave_1: left promiscuous mode [ 606.503243][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.515524][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.532099][ T2899] hsr_slave_0: left promiscuous mode [ 606.539200][ T2899] hsr_slave_1: left promiscuous mode [ 606.555792][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.563220][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.573589][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.581145][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.597987][ T2899] hsr_slave_0: left promiscuous mode [ 606.604634][ T2899] hsr_slave_1: left promiscuous mode [ 606.611362][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.618962][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.627510][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.635109][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.647039][ T2899] hsr_slave_0: left promiscuous mode [ 606.652853][ T2899] hsr_slave_1: left promiscuous mode [ 606.659813][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.667588][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.677065][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.685087][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.696919][ T2899] hsr_slave_0: left promiscuous mode [ 606.702594][ T2899] hsr_slave_1: left promiscuous mode [ 606.709170][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.717141][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.729003][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.737077][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.792688][ T2899] veth1_macvtap: left promiscuous mode [ 606.798596][ T2899] veth0_macvtap: left promiscuous mode [ 606.804401][ T2899] veth1_vlan: left promiscuous mode [ 606.809708][ T2899] veth0_vlan: left promiscuous mode [ 606.816381][ T2899] veth1_macvtap: left promiscuous mode [ 606.821891][ T2899] veth0_macvtap: left promiscuous mode [ 606.827744][ T2899] veth1_vlan: left promiscuous mode [ 606.833057][ T2899] veth0_vlan: left promiscuous mode [ 606.839736][ T2899] team0: left promiscuous mode [ 606.844796][ T2899] team_slave_0: left promiscuous mode [ 606.850791][ T2899] team_slave_1: left promiscuous mode [ 606.856715][ T2899] veth1_macvtap: left promiscuous mode [ 606.862230][ T2899] veth0_macvtap: left promiscuous mode [ 606.868680][ T2899] veth1_vlan: left promiscuous mode [ 606.874535][ T2899] veth0_vlan: left promiscuous mode [ 606.880890][ T2899] veth1_macvtap: left promiscuous mode [ 606.887035][ T2899] veth0_macvtap: left promiscuous mode [ 606.892651][ T2899] veth1_vlan: left promiscuous mode [ 606.898919][ T2899] veth0_vlan: left promiscuous mode [ 607.353675][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 607.387160][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 607.929294][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 607.980014][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 608.796181][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 608.849098][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 609.671540][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 609.719418][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 610.568075][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 610.618215][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 611.170219][T10538] veth0_vlan: entered promiscuous mode [ 611.216069][T10538] veth1_vlan: entered promiscuous mode [ 611.278645][T10538] veth0_macvtap: entered promiscuous mode [ 611.303231][T10538] veth1_macvtap: entered promiscuous mode [ 611.351989][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.395809][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.424773][T10538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.433515][T10538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.445008][T10538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.453752][T10538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.476889][T10544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 611.487230][T10544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 611.496673][T10544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 611.526333][T10546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.560250][T10544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 611.653132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.682206][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.706062][T10546] veth0_vlan: entered promiscuous mode [ 611.728174][T10534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 611.805378][T10534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 611.816212][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.833221][T10534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 611.840171][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.851932][T10546] veth1_vlan: entered promiscuous mode [ 611.880663][T10534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.905199][T10548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.915740][T10548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.976738][T10548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.996027][T10548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.026584][T10593] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 612.052888][T10546] veth0_macvtap: entered promiscuous mode [ 612.063417][T10593] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 612.100145][T10593] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 612.138720][T10593] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 612.165561][T10546] veth1_macvtap: entered promiscuous mode [ 612.185338][T10546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.199754][T10546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.211847][T10546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.232145][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.247592][T10546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.258871][T10546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.270768][T10546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.311874][T10546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.324913][T10546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.341742][T10546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.351972][T10546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.407191][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.512213][T10534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.539382][T10534] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.731158][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.738332][ T9920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.807986][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.815164][ T9920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.911510][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.918698][ T9920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.005243][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.012390][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.168635][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.873118][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.903169][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.920824][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.981274][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.988474][ T5474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.037244][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.044417][ T5474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.099549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.130782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.294803][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.319545][T10534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.559651][T10534] veth0_vlan: entered promiscuous mode [ 614.611612][T10534] veth1_vlan: entered promiscuous mode [ 614.704474][ T1173] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 614.708285][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.764638][T10534] veth0_macvtap: entered promiscuous mode [ 614.810486][T10534] veth1_macvtap: entered promiscuous mode [ 614.935791][ T1173] usb 4-1: config 0 has no interfaces? [ 614.946275][T10544] veth0_vlan: entered promiscuous mode [ 614.952855][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.964695][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.975271][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.986251][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.999497][ T1173] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 615.000323][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.020986][ T1173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.037471][T10544] veth1_vlan: entered promiscuous mode [ 615.048558][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.060691][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.071321][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.087882][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.099662][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.113479][ T1173] usb 4-1: Product: syz [ 615.123615][T10548] veth0_vlan: entered promiscuous mode [ 615.132347][ T1173] usb 4-1: Manufacturer: syz [ 615.163411][T10544] veth0_macvtap: entered promiscuous mode [ 615.169328][ T1173] usb 4-1: SerialNumber: syz [ 615.190413][T10534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.208172][T10534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.209082][ T1173] usb 4-1: config 0 descriptor?? [ 615.222360][T10534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.231648][T10534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.257575][T10544] veth1_macvtap: entered promiscuous mode [ 615.335507][T10548] veth1_vlan: entered promiscuous mode [ 615.429075][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.458048][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.499668][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.514148][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.536400][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.547050][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.567942][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.602503][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.614210][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.624677][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.635662][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.647271][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.663412][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.677151][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.697444][T10548] veth0_macvtap: entered promiscuous mode [ 615.718948][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.728673][T10544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.739176][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.747661][T10544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.760357][T10544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.769662][T10544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.782895][T10548] veth1_macvtap: entered promiscuous mode [ 615.821431][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.867489][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.892127][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.944024][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.955182][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.982997][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.370851][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.381577][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.397711][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.433991][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.974724][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.998060][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.008770][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.018753][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.029296][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.039484][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.050256][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.060247][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.070898][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.082279][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.147159][T10548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.157117][T10548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.166305][T10548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.186284][T10548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.659971][ T9920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.670588][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.682007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.695467][ T9920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.789856][ T9920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.827087][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.831289][ T9920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.835019][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.284888][T10590] usb 4-1: USB disconnect, device number 19 [ 618.744089][ T29] audit: type=1326 audit(1729149734.352:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.4.1501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d437dff9 code=0x0 [ 618.935797][T10680] Bluetooth: MGMT ver 1.23 [ 620.442544][T10689] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 622.016536][ T5278] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 622.722219][ T5278] usb 2-1: config 0 has no interfaces? [ 622.750076][ T5278] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 622.763430][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.779474][ T5278] usb 2-1: Product: syz [ 622.784496][ T5278] usb 2-1: Manufacturer: syz [ 622.789228][ T5278] usb 2-1: SerialNumber: syz [ 622.850808][ T5278] usb 2-1: config 0 descriptor?? [ 624.547066][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.553491][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.957078][T10771] loop7: detected capacity change from 0 to 16384 [ 625.254720][T10771] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 625.335859][T10771] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 0 [ 625.406539][T10773] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 625.415449][T10771] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 625.478463][T10771] Buffer I/O error on dev loop7, logical block 160, async page read [ 625.567646][ T5278] usb 2-1: USB disconnect, device number 27 [ 625.658856][T10770] I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 625.737566][T10770] Buffer I/O error on dev loop7, logical block 32, lost async page write [ 625.763782][T10770] Buffer I/O error on dev loop7, logical block 33, lost async page write [ 625.871554][ T29] audit: type=1326 audit(1729149741.592:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10779 comm="syz.2.1544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x0 [ 625.892676][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.918369][T10770] Buffer I/O error on dev loop7, logical block 34, lost async page write [ 626.028703][T10770] Buffer I/O error on dev loop7, logical block 35, lost async page write [ 626.089275][T10770] Buffer I/O error on dev loop7, logical block 36, lost async page write [ 626.193664][T10770] Buffer I/O error on dev loop7, logical block 37, lost async page write [ 626.434145][T10770] Buffer I/O error on dev loop7, logical block 38, lost async page write [ 626.469280][T10770] Buffer I/O error on dev loop7, logical block 39, lost async page write [ 626.484251][T10770] Buffer I/O error on dev loop7, logical block 40, lost async page write [ 626.660114][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 627.714043][ T1173] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 627.912683][ T1173] usb 3-1: config 0 has no interfaces? [ 627.921512][ T1173] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.931005][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.940580][ T1173] usb 3-1: Product: syz [ 627.945483][ T1173] usb 3-1: Manufacturer: syz [ 627.950480][ T1173] usb 3-1: SerialNumber: syz [ 627.985126][ T1173] usb 3-1: config 0 descriptor?? [ 628.297281][ T1173] IPVS: starting estimator thread 0... [ 628.404169][T10844] IPVS: using max 23 ests per chain, 55200 per kthread [ 630.058017][ T29] audit: type=1326 audit(1729149745.482:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.1.1565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f479997dff9 code=0x0 [ 630.079167][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.053952][T10878] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 631.922685][ T1173] usb 3-1: USB disconnect, device number 38 [ 633.049670][T10921] random: crng reseeded on system resumption [ 635.774401][ T29] audit: type=1326 audit(1729149751.342:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10962 comm="syz.3.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f6b7dff9 code=0x0 [ 637.239650][T10991] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 637.269679][T11001] ALSA: mixer_oss: invalid OSS volume '' [ 637.282357][T10991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 637.300191][T10989] Cannot find add_set index 0 as target [ 637.732614][ T29] audit: type=1326 audit(1729149753.452:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11012 comm="syz.4.1618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d437dff9 code=0x0 [ 637.994241][ T29] audit: type=1326 audit(1729149753.532:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11008 comm="syz.0.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb4ab7dff9 code=0x0 [ 638.672554][T11026] loop7: detected capacity change from 0 to 16384 [ 638.824152][T11030] loop7: detected capacity change from 16384 to 16383 [ 639.748388][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 639.954599][T11041] ALSA: mixer_oss: invalid OSS volume '' [ 641.188603][T11055] Cannot find add_set index 0 as target [ 641.254161][ T29] audit: type=1326 audit(1729149756.952:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f6b7dff9 code=0x0 [ 641.553991][ T5278] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 641.792236][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.802732][ T5278] usb 3-1: config 0 has no interfaces? [ 641.842822][ T5278] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 641.867585][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.875724][ T5278] usb 3-1: Product: syz [ 641.879948][ T5278] usb 3-1: Manufacturer: syz [ 641.885080][ T5278] usb 3-1: SerialNumber: syz [ 641.925018][ T5278] usb 3-1: config 0 descriptor?? [ 643.024721][T11074] ALSA: mixer_oss: invalid OSS volume '' [ 644.424263][ T5278] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 644.599290][ T5278] usb 5-1: config index 0 descriptor too short (expected 48285, got 77) [ 644.639736][ T5278] usb 5-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 644.655344][ T9] usb 3-1: USB disconnect, device number 39 [ 644.694070][ T5278] usb 5-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 644.751141][ T5278] usb 5-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 644.791054][ T5278] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 644.803326][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.852242][ T5278] usb 5-1: Product: syz [ 644.903564][ T5278] usb 5-1: Manufacturer: syz [ 644.922461][ T5278] usb 5-1: SerialNumber: syz [ 645.604331][T11105] ALSA: mixer_oss: invalid OSS volume '' [ 646.763619][T11123] openvswitch: netlink: Actions may not be safe on all matching packets [ 646.824096][T10590] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 647.084165][T10590] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 647.117992][T10590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.140477][T10590] usb 3-1: Product: syz [ 647.224439][T10590] usb 3-1: Manufacturer: syz [ 648.006425][T10590] usb 3-1: SerialNumber: syz [ 648.058778][T10590] usb 3-1: config 0 descriptor?? [ 648.728431][T10590] hso 3-1:0.0: Failed to find BULK IN ep [ 648.737180][T10590] usb-storage 3-1:0.0: USB Mass Storage device detected [ 649.525107][ T5278] usb 5-1: USB disconnect, device number 31 [ 650.234420][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 650.343974][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 650.458397][ T5278] usb 3-1: USB disconnect, device number 40 [ 651.919808][T11167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.157967][T11167] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 653.302666][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.361009][T11167] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 653.672786][T11167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 653.915734][T11167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 653.936519][T11167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 653.995752][T11181] sp0: Synchronizing with TNC [ 654.004554][T11167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 654.004626][T11167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 654.024681][T11167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 654.034410][T11167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 654.034942][T11167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 654.039584][T11167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 654.041919][T11167] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 654.042001][T11167] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 654.046740][T11167] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 654.619569][T11202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.344069][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout [ 655.745110][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout [ 656.065223][ T5233] Bluetooth: hci7: command 0x0c1a tx timeout [ 656.072225][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.079270][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.162541][T10590] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 657.424317][ T5242] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.666667][T10590] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 657.706657][T10590] usb 4-1: config 0 has no interface number 0 [ 657.744028][T10590] usb 4-1: config 0 interface 112 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 657.779825][T10590] usb 4-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 657.826800][ T5242] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.844503][T10590] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 657.853599][T10590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.873907][T10590] usb 4-1: Product: syz [ 657.878380][T10590] usb 4-1: Manufacturer: syz [ 657.883003][T10590] usb 4-1: SerialNumber: syz [ 657.896486][T10590] usb 4-1: config 0 descriptor?? [ 657.903485][T11223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.968607][T10590] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 658.144882][T11223] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 658.149132][ T5242] Bluetooth: hci0: command 0x0c1a tx timeout [ 658.158780][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 658.165044][ T5233] Bluetooth: hci7: command 0x0c1a tx timeout [ 658.209713][ T46] usb 4-1: USB disconnect, device number 20 [ 659.998611][ T4615] Bluetooth: hci4: command 0x0c1a tx timeout [ 660.225274][ T4615] Bluetooth: hci0: command 0x0c1a tx timeout [ 660.231440][ T5242] Bluetooth: hci7: command 0x0c1a tx timeout [ 660.241562][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.876928][ T29] audit: type=1326 audit(1729149778.532:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11268 comm="syz.2.1700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x0 [ 663.027309][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 663.043098][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 663.052220][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 663.060187][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.068348][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 663.076969][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.267250][T11282] fuse: Bad value for 'fd' [ 663.468707][T11269] chnl_net:caif_netlink_parms(): no params data found [ 663.593978][ T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 663.774009][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 663.783365][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.795038][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.814006][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 663.833698][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.053511][ T46] usb 2-1: config 0 descriptor?? [ 664.075041][ T46] hub 2-1:0.0: USB hub found [ 664.128464][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.164222][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.202214][T11269] bridge_slave_0: entered allmulticast mode [ 664.226055][T11269] bridge_slave_0: entered promiscuous mode [ 664.276214][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.297002][ T46] hub 2-1:0.0: 1 port detected [ 664.326480][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.364779][T11269] bridge_slave_1: entered allmulticast mode [ 664.389710][T11269] bridge_slave_1: entered promiscuous mode [ 664.609702][T11269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.750365][T11269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.972025][T11269] team0: Port device team_slave_0 added [ 665.021579][T11269] team0: Port device team_slave_1 added [ 665.167855][T11269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.214141][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.275374][ T5233] Bluetooth: hci1: command tx timeout [ 665.433921][T11269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.455864][T11269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.462858][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.523954][T11269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.587265][ T46] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 665.594577][T11303] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 665.605046][ T46] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 665.661494][ T46] usbhid 2-1:0.0: can't add hid device: -32 [ 665.667927][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 666.734068][T11328] usb usb8: usbfs: process 11328 (syz.3.1710) did not claim interface 0 before use [ 666.800797][T11269] hsr_slave_0: entered promiscuous mode [ 666.857311][T11269] hsr_slave_1: entered promiscuous mode [ 667.348614][ T5233] Bluetooth: hci1: command tx timeout [ 667.499162][T11269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.874340][ T5276] usb 2-1: USB disconnect, device number 28 [ 668.034498][T11269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.351511][T11269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.619883][T11269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.953076][ T9920] bridge_slave_1: left allmulticast mode [ 668.983918][ T9920] bridge_slave_1: left promiscuous mode [ 669.024295][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.072177][ T9920] bridge_slave_0: left allmulticast mode [ 669.087567][ T9920] bridge_slave_0: left promiscuous mode [ 669.107969][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.430437][ T5233] Bluetooth: hci1: command tx timeout [ 670.729343][ T5276] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 670.964168][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 671.032325][ T5276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.045603][ T5276] usb 4-1: config 0 has no interfaces? [ 671.056361][ T5276] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 671.069991][ T9920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.080242][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 671.099965][ T9920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.108715][ T5276] usb 4-1: Product: syz [ 671.114511][ T5276] usb 4-1: Manufacturer: syz [ 671.133681][ T5276] usb 4-1: SerialNumber: syz [ 671.140911][ T9920] bond0 (unregistering): Released all slaves [ 671.141032][T11363] fuse: root generation should be zero [ 671.167034][ T5276] usb 4-1: config 0 descriptor?? [ 671.504009][ T5233] Bluetooth: hci1: command tx timeout [ 671.513768][T11269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 671.567806][T11269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 671.679830][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.714896][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.039214][T11269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 672.140441][T11368] bridge0: port 3(ipvlan2) entered blocking state [ 672.171283][T11368] bridge0: port 3(ipvlan2) entered disabled state [ 672.194308][T11368] ipvlan2: entered allmulticast mode [ 672.227023][T11368] bridge0: entered allmulticast mode [ 672.234377][T11368] ipvlan2: left allmulticast mode [ 672.239694][T11368] bridge0: left allmulticast mode [ 672.397667][ T46] usb 4-1: USB disconnect, device number 21 [ 672.449027][ T9920] hsr_slave_0: left promiscuous mode [ 672.489003][ T9920] hsr_slave_1: left promiscuous mode [ 672.527403][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.546170][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.598618][ T9920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.656608][ T9920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.695305][ T9920] veth1_macvtap: left promiscuous mode [ 672.757819][ T9920] veth0_macvtap: left promiscuous mode [ 673.021805][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 673.614007][ T9920] veth1_vlan: left promiscuous mode [ 673.619368][ T9920] veth0_vlan: left promiscuous mode [ 674.601587][T11392] binder: 11391:11392 ioctl c0046209 0 returned -22 [ 676.822845][ T9920] team0 (unregistering): Port device team_slave_1 removed [ 676.984696][ T9920] team0 (unregistering): Port device team_slave_0 removed [ 678.579932][T11269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.828078][T11269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.999440][T11269] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.010725][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.017884][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.075431][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.082539][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.421461][T11269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.505614][T11269] veth0_vlan: entered promiscuous mode [ 679.518772][T11269] veth1_vlan: entered promiscuous mode [ 679.538607][T11269] veth0_macvtap: entered promiscuous mode [ 680.368098][T11269] veth1_macvtap: entered promiscuous mode [ 680.392904][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.409987][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.433937][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.457055][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.467980][ T5307] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 680.490170][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.518924][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.544997][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.569929][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.594981][T11269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.629620][ T5307] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 680.639831][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.670156][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.692486][ T5307] usb 3-1: Product: syz [ 680.701412][ T5307] usb 3-1: Manufacturer: syz [ 680.711440][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.729424][ T5307] usb 3-1: SerialNumber: syz [ 680.740415][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.766175][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.790510][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.802367][ T5307] usb 3-1: config 0 descriptor?? [ 680.822483][ T5307] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 680.836688][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.861729][T11269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.891933][T11269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.919687][T11269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.941804][T11269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.953436][T11269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.967597][T11269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.977587][T11269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.055980][T11442] kernel read not supported for file / œ7³ÏüâW)ëÇ-ë (pid: 11442 comm: syz.2.1746) [ 681.073620][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.095327][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.142109][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.178406][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.269977][T11456] syzkaller0: entered promiscuous mode [ 681.275802][ T29] audit: type=1800 audit(1729149796.812:707): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1746" name=20019C1437B3CFFCC3A25729EBC72DEB dev="mqueue" ino=43090 res=0 errno=0 [ 681.297761][T11456] syzkaller0: entered allmulticast mode [ 681.354107][ T5307] sonixb 3-1:0.0: Error reading register 00: -110 [ 682.131466][ T5276] usb 3-1: USB disconnect, device number 41 [ 682.308644][ T29] audit: type=1326 audit(1729149798.022:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.377892][ T29] audit: type=1326 audit(1729149798.022:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.454686][ T29] audit: type=1326 audit(1729149798.032:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.517465][ T29] audit: type=1326 audit(1729149798.032:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.580974][ T29] audit: type=1326 audit(1729149798.032:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.639078][ T29] audit: type=1326 audit(1729149798.032:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e2257c990 code=0x7ffc0000 [ 682.688440][ T29] audit: type=1326 audit(1729149798.032:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.743074][ T29] audit: type=1326 audit(1729149798.032:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 682.794965][ T29] audit: type=1326 audit(1729149798.032:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11468 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 685.599041][ T4615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 685.608589][ T4615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 685.618324][ T4615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 685.627669][ T4615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 685.635479][ T4615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 685.643479][ T4615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 685.991297][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.997956][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.014789][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'. [ 686.981466][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.191537][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.821542][ T4615] Bluetooth: hci2: command tx timeout [ 687.946806][T11486] chnl_net:caif_netlink_parms(): no params data found [ 688.268393][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.585722][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.602013][ T5307] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 689.851137][T11486] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.862364][ T5307] usb 2-1: config 0 has no interfaces? [ 689.868626][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.880315][ T5307] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 689.898624][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.909079][ T4615] Bluetooth: hci2: command tx timeout [ 689.944477][T11486] bridge_slave_0: entered allmulticast mode [ 689.965311][T11486] bridge_slave_0: entered promiscuous mode [ 689.969042][ T5307] usb 2-1: Product: syz [ 689.973217][T11486] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.975481][ T5307] usb 2-1: Manufacturer: syz [ 689.987520][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.987551][ T5307] usb 2-1: SerialNumber: syz [ 690.024160][T11486] bridge_slave_1: entered allmulticast mode [ 690.030739][T11486] bridge_slave_1: entered promiscuous mode [ 690.057720][ T5307] usb 2-1: config 0 descriptor?? [ 690.248176][T11486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.271357][T11486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.513410][T11486] team0: Port device team_slave_0 added [ 690.569242][T11486] team0: Port device team_slave_1 added [ 690.607388][ T35] bridge_slave_1: left allmulticast mode [ 690.630922][ T35] bridge_slave_1: left promiscuous mode [ 690.687151][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.694127][ T5307] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 690.738376][ T35] bridge_slave_0: left allmulticast mode [ 690.744802][ T35] bridge_slave_0: left promiscuous mode [ 690.767112][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.864900][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 690.872329][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.894019][ T5307] usb 5-1: config 0 has no interfaces? [ 690.914758][ T5307] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 690.932254][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 690.964113][ T5307] usb 5-1: Product: syz [ 690.968331][ T5307] usb 5-1: Manufacturer: syz [ 690.991243][ T5307] usb 5-1: SerialNumber: syz [ 691.004956][ T5307] usb 5-1: config 0 descriptor?? [ 691.787256][ T5278] usb 2-1: USB disconnect, device number 29 [ 691.887226][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.964531][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.984757][ T4615] Bluetooth: hci2: command tx timeout [ 692.005978][ T35] bond0 (unregistering): Released all slaves [ 692.096910][T11486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.187923][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.213969][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.474892][T11486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.767591][T11486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.778937][T11486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.906516][T11486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.998820][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.021529][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.074605][T11549] bridge0: port 3(ipvlan2) entered blocking state [ 693.081661][T11549] bridge0: port 3(ipvlan2) entered disabled state [ 693.095838][T11549] ipvlan2: entered allmulticast mode [ 693.280304][T11549] bridge0: entered allmulticast mode [ 693.521194][T11549] ipvlan2: left allmulticast mode [ 693.583031][T11549] bridge0: left allmulticast mode [ 693.986633][T11486] hsr_slave_0: entered promiscuous mode [ 694.098511][ T4615] Bluetooth: hci2: command tx timeout [ 694.958682][T11486] hsr_slave_1: entered promiscuous mode [ 694.991111][T11486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.020688][T11486] Cannot create hsr debugfs directory [ 695.415693][T10590] usb 5-1: USB disconnect, device number 32 [ 695.528427][ T35] hsr_slave_0: left promiscuous mode [ 695.540418][ T35] hsr_slave_1: left promiscuous mode [ 695.546896][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.558076][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.567532][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.580210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.642302][ T35] veth1_macvtap: left promiscuous mode [ 695.660068][ T35] veth0_macvtap: left promiscuous mode [ 695.667338][ T35] veth1_vlan: left promiscuous mode [ 695.672669][ T35] veth0_vlan: left promiscuous mode [ 695.857575][ T5278] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 696.095537][ T5278] usb 2-1: config 0 has no interfaces? [ 696.122127][ T5278] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 696.134600][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.142715][ T5278] usb 2-1: Product: syz [ 696.163941][ T5278] usb 2-1: Manufacturer: syz [ 696.168596][ T5278] usb 2-1: SerialNumber: syz [ 696.205923][ T5278] usb 2-1: config 0 descriptor?? [ 697.120841][ T35] team0 (unregistering): Port device team_slave_1 removed [ 697.175315][ T35] team0 (unregistering): Port device team_slave_0 removed [ 697.832257][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 698.183249][ T46] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 698.349040][ T5276] usb 2-1: USB disconnect, device number 30 [ 698.355312][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 698.371894][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.386331][T11486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.400553][ T46] usb 3-1: config 0 has no interfaces? [ 698.432526][T11486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.444541][ T46] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 698.457624][ T46] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 698.475061][T11486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.496477][ T46] usb 3-1: Product: syz [ 698.501550][ T46] usb 3-1: Manufacturer: syz [ 698.515233][T11486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.522899][ T46] usb 3-1: SerialNumber: syz [ 698.537577][ T46] usb 3-1: config 0 descriptor?? [ 698.636166][T11486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.683109][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 698.701745][T11486] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.739548][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1807'. [ 698.751316][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.758554][ T5476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.802149][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.837146][T11623] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.939432][T11643] bridge0: port 3(ipvlan2) entered blocking state [ 698.956511][T11643] bridge0: port 3(ipvlan2) entered disabled state [ 698.963790][T11643] ipvlan2: entered allmulticast mode [ 698.972393][T11643] bridge0: entered allmulticast mode [ 698.982541][T11643] ipvlan2: left allmulticast mode [ 698.990444][T11643] bridge0: left allmulticast mode [ 699.031948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.039176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.072246][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 699.235597][ T5307] usb 3-1: USB disconnect, device number 42 [ 699.287252][T11649] rdma_op ffff88807edbe1f0 conn xmit_rdma 0000000000000000 [ 699.509748][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 699.573092][T11486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.435475][T11486] veth0_vlan: entered promiscuous mode [ 700.446820][T11486] veth1_vlan: entered promiscuous mode [ 700.470831][T11486] veth0_macvtap: entered promiscuous mode [ 700.479793][T11486] veth1_macvtap: entered promiscuous mode [ 700.497001][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.507907][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.518757][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.529690][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.540314][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.551282][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.561409][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.572302][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.585593][T11486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.598040][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.608618][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.618574][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.629424][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.639415][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.649957][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.659885][T11486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.670404][T11486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.681486][T11486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.694596][T11486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.703359][T11486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.712770][T11486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.722615][T11486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.832333][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.849681][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.887357][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.906304][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.334605][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 701.490510][T11690] bridge0: port 3(ipvlan2) entered blocking state [ 701.515692][T11690] bridge0: port 3(ipvlan2) entered disabled state [ 701.522566][T11690] ipvlan2: entered allmulticast mode [ 701.532731][T11690] bridge0: entered allmulticast mode [ 701.539244][ T5276] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 701.556273][T11690] ipvlan2: left allmulticast mode [ 701.561647][T11690] bridge0: left allmulticast mode [ 701.707247][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 701.725727][ T5276] usb 2-1: config 0 has no interfaces? [ 701.733967][ T5276] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 701.743813][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.752506][ T5276] usb 2-1: Product: syz [ 701.854025][ T5276] usb 2-1: Manufacturer: syz [ 701.868759][ T5276] usb 2-1: SerialNumber: syz [ 701.905689][ T5276] usb 2-1: config 0 descriptor?? [ 702.746258][ T5307] usb 2-1: USB disconnect, device number 31 [ 703.254172][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 703.254215][ T29] audit: type=1326 audit(1729149818.972:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11714 comm="syz.4.1826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d437dff9 code=0x0 [ 703.684251][T11724] loop9: detected capacity change from 0 to 7 [ 703.733545][T11724] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 703.767198][T11724] loop9: partition table partially beyond EOD, truncated [ 703.775680][T11724] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 709.194349][ T29] audit: type=1326 audit(1729149824.552:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.231689][ T29] audit: type=1326 audit(1729149824.552:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.253400][ T29] audit: type=1326 audit(1729149824.552:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.275181][ T29] audit: type=1326 audit(1729149824.912:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.297072][ T29] audit: type=1326 audit(1729149824.912:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.318836][ T29] audit: type=1326 audit(1729149824.922:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e2257c990 code=0x7ffc0000 [ 709.340501][ T29] audit: type=1326 audit(1729149824.922:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.364047][ T29] audit: type=1326 audit(1729149824.922:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.385890][ T29] audit: type=1326 audit(1729149825.022:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.408068][ T29] audit: type=1326 audit(1729149825.022:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2257dff9 code=0x7ffc0000 [ 709.435072][T11762] wg2: entered promiscuous mode [ 709.439940][T11762] wg2: entered allmulticast mode [ 715.161402][T11829] syz.3.1861[11829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.163400][T11829] syz.3.1861[11829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.178190][T11829] syz.3.1861[11829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.237113][T11822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.255772][T11822] IPv6: NLM_F_CREATE should be set when creating new route [ 717.508228][ T5278] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 718.446452][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.456617][ T5278] usb 2-1: config 0 has no interfaces? [ 718.466497][ T5278] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 718.475595][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.483603][ T5278] usb 2-1: Product: syz [ 718.487880][ T5278] usb 2-1: Manufacturer: syz [ 718.492641][ T5278] usb 2-1: SerialNumber: syz [ 718.531657][ T5278] usb 2-1: config 0 descriptor?? [ 720.433285][ T5277] usb 2-1: USB disconnect, device number 32 [ 720.617720][T11878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.625126][T11878] IPv6: NLM_F_CREATE should be set when creating new route [ 721.094090][ T5279] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 721.311888][T11883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 722.016423][T11886] [ 722.018770][T11886] ====================================================== [ 722.025772][T11886] WARNING: possible circular locking dependency detected [ 722.032782][T11886] 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 Not tainted [ 722.039880][T11886] ------------------------------------------------------ [ 722.046907][T11886] syz.0.1879/11886 is trying to acquire lock: [ 722.052959][T11886] ffff8880b8729430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 722.061570][T11886] [ 722.061570][T11886] but task is already holding lock: [ 722.068924][T11886] ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 722.077789][T11886] [ 722.077789][T11886] which lock already depends on the new lock. [ 722.077789][T11886] [ 722.088176][T11886] [ 722.088176][T11886] the existing dependency chain (in reverse order) is: [ 722.097348][T11886] [ 722.097348][T11886] -> #1 (&base->lock){-.-.}-{2:2}: [ 722.104639][T11886] lock_acquire+0x1ed/0x550 [ 722.109659][T11886] _raw_spin_lock_irqsave+0xd5/0x120 [ 722.115461][T11886] lock_timer_base+0x112/0x240 [ 722.120734][T11886] __mod_timer+0x1ca/0xeb0 [ 722.125926][T11886] queue_delayed_work_on+0x1ca/0x390 [ 722.131724][T11886] kvfree_call_rcu+0x47f/0x790 [ 722.137000][T11886] pwq_release_workfn+0x664/0x800 [ 722.142532][T11886] kthread_worker_fn+0x500/0xb70 [ 722.147986][T11886] kthread+0x2f0/0x390 [ 722.152564][T11886] ret_from_fork+0x4b/0x80 [ 722.157489][T11886] ret_from_fork_asm+0x1a/0x30 [ 722.162763][T11886] [ 722.162763][T11886] -> #0 (krc.lock){..-.}-{2:2}: [ 722.169799][T11886] validate_chain+0x18ef/0x5920 [ 722.175157][T11886] __lock_acquire+0x1384/0x2050 [ 722.180603][T11886] lock_acquire+0x1ed/0x550 [ 722.185784][T11886] _raw_spin_lock+0x2e/0x40 [ 722.190791][T11886] kvfree_call_rcu+0x18a/0x790 [ 722.196068][T11886] trie_delete_elem+0x546/0x6a0 [ 722.201445][T11886] bpf_prog_d46ba5bef82912c0+0x46/0x4a [ 722.207432][T11886] bpf_trace_run2+0x2ec/0x540 [ 722.212622][T11886] enqueue_timer+0x3ce/0x570 [ 722.217718][T11886] __mod_timer+0xa0e/0xeb0 [ 722.222637][T11886] sk_reset_timer+0x23/0xc0 [ 722.227647][T11886] tipc_sk_finish_conn+0x16b/0x820 [ 722.233293][T11886] tipc_socketpair+0x25c/0x4b0 [ 722.238573][T11886] __sys_socketpair+0x40f/0x720 [ 722.243931][T11886] __x64_sys_socketpair+0x9b/0xb0 [ 722.249482][T11886] do_syscall_64+0xf3/0x230 [ 722.254500][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.260919][T11886] [ 722.260919][T11886] other info that might help us debug this: [ 722.260919][T11886] [ 722.271129][T11886] Possible unsafe locking scenario: [ 722.271129][T11886] [ 722.278562][T11886] CPU0 CPU1 [ 722.283909][T11886] ---- ---- [ 722.289263][T11886] lock(&base->lock); [ 722.293314][T11886] lock(krc.lock); [ 722.299633][T11886] lock(&base->lock); [ 722.306220][T11886] lock(krc.lock); [ 722.310023][T11886] [ 722.310023][T11886] *** DEADLOCK *** [ 722.310023][T11886] [ 722.318157][T11886] 2 locks held by syz.0.1879/11886: [ 722.323336][T11886] #0: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 722.332642][T11886] #1: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 722.342037][T11886] [ 722.342037][T11886] stack backtrace: [ 722.347929][T11886] CPU: 1 UID: 0 PID: 11886 Comm: syz.0.1879 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 722.358683][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 722.368739][T11886] Call Trace: [ 722.372006][T11886] [ 722.374924][T11886] dump_stack_lvl+0x241/0x360 [ 722.379594][T11886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.384779][T11886] ? __pfx__printk+0x10/0x10 [ 722.389366][T11886] print_circular_bug+0x13a/0x1b0 [ 722.394381][T11886] check_noncircular+0x36a/0x4a0 [ 722.399311][T11886] ? __pfx_check_noncircular+0x10/0x10 [ 722.404778][T11886] ? lockdep_lock+0x123/0x2b0 [ 722.409471][T11886] ? mark_lock+0x9a/0x360 [ 722.413793][T11886] validate_chain+0x18ef/0x5920 [ 722.418647][T11886] ? __pfx_validate_chain+0x10/0x10 [ 722.423831][T11886] ? stack_depot_save_flags+0x6e4/0x830 [ 722.429375][T11886] ? do_raw_spin_lock+0x14f/0x370 [ 722.434409][T11886] ? __pfx_lock_release+0x10/0x10 [ 722.439418][T11886] ? do_raw_spin_unlock+0x13c/0x8b0 [ 722.444636][T11886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 722.450602][T11886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 722.456926][T11886] ? stack_trace_save+0x118/0x1d0 [ 722.462039][T11886] ? mark_lock+0x9a/0x360 [ 722.466355][T11886] __lock_acquire+0x1384/0x2050 [ 722.471198][T11886] lock_acquire+0x1ed/0x550 [ 722.475689][T11886] ? kvfree_call_rcu+0x18a/0x790 [ 722.480614][T11886] ? __pfx_lock_acquire+0x10/0x10 [ 722.485628][T11886] ? __phys_addr+0xba/0x170 [ 722.490114][T11886] _raw_spin_lock+0x2e/0x40 [ 722.494621][T11886] ? kvfree_call_rcu+0x18a/0x790 [ 722.499548][T11886] kvfree_call_rcu+0x18a/0x790 [ 722.504303][T11886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 722.510190][T11886] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 722.515471][T11886] ? longest_prefix_match+0x330/0x650 [ 722.520848][T11886] trie_delete_elem+0x546/0x6a0 [ 722.525776][T11886] ? bpf_trace_run2+0x1fc/0x540 [ 722.530624][T11886] bpf_prog_d46ba5bef82912c0+0x46/0x4a [ 722.536079][T11886] bpf_trace_run2+0x2ec/0x540 [ 722.540740][T11886] ? __pfx_bpf_trace_run2+0x10/0x10 [ 722.545923][T11886] ? __pfx_debug_object_activate+0x10/0x10 [ 722.551721][T11886] ? __lock_acquire+0x1384/0x2050 [ 722.556732][T11886] enqueue_timer+0x3ce/0x570 [ 722.561315][T11886] __mod_timer+0xa0e/0xeb0 [ 722.565730][T11886] ? __pfx___mod_timer+0x10/0x10 [ 722.570649][T11886] ? __pfx_lock_acquire+0x10/0x10 [ 722.575660][T11886] ? net_generic+0x1f/0x240 [ 722.580147][T11886] ? __pfx_lock_release+0x10/0x10 [ 722.585156][T11886] sk_reset_timer+0x23/0xc0 [ 722.589645][T11886] tipc_sk_finish_conn+0x16b/0x820 [ 722.594740][T11886] tipc_socketpair+0x25c/0x4b0 [ 722.599489][T11886] __sys_socketpair+0x40f/0x720 [ 722.604328][T11886] ? __pfx___sys_socketpair+0x10/0x10 [ 722.609704][T11886] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 722.615677][T11886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 722.621995][T11886] ? do_syscall_64+0x100/0x230 [ 722.626744][T11886] __x64_sys_socketpair+0x9b/0xb0 [ 722.631749][T11886] do_syscall_64+0xf3/0x230 [ 722.636236][T11886] ? clear_bhb_loop+0x35/0x90 [ 722.640894][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.646783][T11886] RIP: 0033:0x7f948cf7dff9 [ 722.651180][T11886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.670779][T11886] RSP: 002b:00007f948ddad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 722.679178][T11886] RAX: ffffffffffffffda RBX: 00007f948d135f80 RCX: 00007f948cf7dff9 [ 722.687137][T11886] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 722.695105][T11886] RBP: 00007f948cff0296 R08: 0000000000000000 R09: 0000000000000000 [ 722.703060][T11886] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 722.711018][T11886] R13: 0000000000000000 R14: 00007f948d135f80 R15: 00007fff054d62c8 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 722.719004][T11886] [ 722.875756][ T5279] usb 5-1: config 0 has no interfaces? [ 723.640722][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.739732][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.801768][ T5279] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 723.811357][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.820479][ T5279] usb 5-1: config 0 descriptor?? [ 723.835487][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.846963][ T5279] usb 5-1: can't set config #0, error -71 [ 723.905837][ T5279] usb 5-1: USB disconnect, device number 33 [ 723.914421][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.002648][ T11] bridge_slave_1: left allmulticast mode [ 724.008758][ T11] bridge_slave_1: left promiscuous mode [ 724.016238][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.024635][ T11] bridge_slave_0: left allmulticast mode [ 724.030294][ T11] bridge_slave_0: left promiscuous mode [ 724.036338][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.118759][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.129643][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.139375][ T11] bond0 (unregistering): Released all slaves [ 724.351762][ T11] hsr_slave_0: left promiscuous mode [ 724.357533][ T11] hsr_slave_1: left promiscuous mode [ 724.363291][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.370796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.379184][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.387334][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.395949][ T11] veth1_macvtap: left promiscuous mode [ 724.401432][ T11] veth0_macvtap: left promiscuous mode [ 724.407074][ T11] veth1_vlan: left promiscuous mode [ 724.412315][ T11] veth0_vlan: left promiscuous mode [ 724.537064][ T11] team0 (unregistering): Port device team_slave_1 removed [ 724.565683][ T11] team0 (unregistering): Port device team_slave_0 removed [ 725.029704][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.067892][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.106919][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.167870][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.258591][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.297745][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.337543][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.427089][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.489565][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.537624][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.597627][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.668112][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.768585][ T11] bridge_slave_1: left allmulticast mode [ 725.775967][ T11] bridge_slave_1: left promiscuous mode [ 725.781776][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.790277][ T11] bridge_slave_0: left allmulticast mode [ 725.796140][ T11] bridge_slave_0: left promiscuous mode [ 725.801767][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.810464][ T11] bridge_slave_1: left allmulticast mode [ 725.816186][ T11] bridge_slave_1: left promiscuous mode [ 725.821785][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.830440][ T11] bridge_slave_0: left allmulticast mode [ 725.836308][ T11] bridge_slave_0: left promiscuous mode [ 725.841953][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.850389][ T11] bridge_slave_1: left allmulticast mode [ 725.856196][ T11] bridge_slave_1: left promiscuous mode [ 725.861943][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.870447][ T11] bridge_slave_0: left allmulticast mode [ 725.876249][ T11] bridge_slave_0: left promiscuous mode [ 725.882076][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.149619][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.159751][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.169379][ T11] bond0 (unregistering): Released all slaves [ 726.180643][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.191182][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.201224][ T11] bond0 (unregistering): Released all slaves [ 726.212518][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.222928][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.233149][ T11] bond0 (unregistering): Released all slaves [ 726.691652][ T11] hsr_slave_0: left promiscuous mode [ 726.697453][ T11] hsr_slave_1: left promiscuous mode [ 726.703329][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.710899][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.718508][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.726504][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.736105][ T11] hsr_slave_0: left promiscuous mode [ 726.741827][ T11] hsr_slave_1: left promiscuous mode [ 726.748294][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.755726][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.763267][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.770851][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.780313][ T11] hsr_slave_0: left promiscuous mode [ 726.786436][ T11] hsr_slave_1: left promiscuous mode [ 726.792140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.799658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.807466][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.814943][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.825708][ T11] veth1_macvtap: left promiscuous mode [ 726.831230][ T11] veth0_macvtap: left promiscuous mode [ 726.836823][ T11] veth1_vlan: left promiscuous mode [ 726.842065][ T11] veth0_vlan: left promiscuous mode [ 726.848045][ T11] veth1_macvtap: left promiscuous mode [ 726.853518][ T11] veth0_macvtap: left promiscuous mode [ 726.859102][ T11] veth1_vlan: left promiscuous mode [ 726.864434][ T11] veth0_vlan: left promiscuous mode [ 726.870211][ T11] veth1_macvtap: left promiscuous mode [ 726.875763][ T11] veth0_macvtap: left promiscuous mode [ 726.881294][ T11] veth1_vlan: left promiscuous mode [ 726.886624][ T11] veth0_vlan: left promiscuous mode [ 727.088369][ T11] team0 (unregistering): Port device team_slave_1 removed [ 727.112042][ T11] team0 (unregistering): Port device team_slave_0 removed [ 727.352213][ T11] team0 (unregistering): Port device team_slave_1 removed [ 727.377735][ T11] team0 (unregistering): Port device team_slave_0 removed [ 727.540637][ T11] team0 (unregistering): Port device team_slave_1 removed [ 727.567383][ T11] team0 (unregistering): Port device team_slave_0 removed [ 728.287391][ T11] IPVS: stop unused estimator thread 0...