last executing test programs: 8.020375489s ago: executing program 0 (id=662): r0 = socket$can_j1939(0x1d, 0x2, 0x7) fsetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 7.752713444s ago: executing program 0 (id=664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x10000000, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7.418829311s ago: executing program 2 (id=668): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xb, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x8000000}) 7.197284657s ago: executing program 2 (id=672): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r2, 0x0, 0xffffffffffffff7b, 0x1001, &(0x7f0000000240)="9d", 0x4}) 6.912474424s ago: executing program 2 (id=674): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/122, 0xffffffffffffff61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001000014700000000000000000a000000060001002a000000e707d6441f8c5691a336b9029ec06c138ee1e8c29e47cc968a378b2ee78b82f0fd49647d6e72fee7689143ab7fd95003927c06414731ac223f3c98ab82bc87122cfc37e814804ceab7999fcac56bec701b4eed1e1782daf054c85db4e9767b0cbadb6e79ff31b81737156566dd7fc0d016fa861d29fee6af5cf1741b8077c07d9419e403f18ec0de90a292b7bfaebe273028f5b7756b69"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x1}}}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_vhci(0x0, 0x17) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x7, 0x11, r2, 0x0) mprotect(&(0x7f000071d000/0x3000)=nil, 0x3000, 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043106ffffffffffff1fbbc6f9a18f83310808b65e7f39c5c9fa92c65a7636daf715dae30a8e08c2b2d6444d80aecfb9315970d335b0ab921f8f522cffc14e76e7c820b5b5d0db5ddafcf0e651e6aa20579fc0d6c6cbcccc2686a85dc3acca37adfd1c5ecd150909833732643829c48bb82c8e753b9ccf6526df3cb686ade709419132800b6da80d004f5ecf668b1c06eaeb99a9e6e81ade8258603d0a09d496faeff2d699f790bb6a4ed8cd0fb088e0f0306f33a5a8"], 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value}) socket$nl_xfrm(0x10, 0x3, 0x6) 6.82603783s ago: executing program 0 (id=675): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd3, 0x75, 0x8, 0x20, 0xac8, 0x321, 0x6fbe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xfe, 0x89}}]}}]}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.108596142s ago: executing program 3 (id=677): sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000001840)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x1c, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) mq_notify(r0, 0x0) creat(&(0x7f0000000200)='.\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 6.077280978s ago: executing program 4 (id=678): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x3f}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) 5.864195585s ago: executing program 4 (id=679): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0}, 0x0) timerfd_create(0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x468801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x36, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000640)=0x20) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) pipe(0x0) gettid() 5.804523789s ago: executing program 3 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty}}}}}}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x10, @mcast2={0xfc}}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x54}}, 0x0) connect$inet6(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x2000529b, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) r7 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) pread64(r7, &(0x7f0000000180)=""/38, 0x26, 0x0) read$alg(r2, &(0x7f0000000340)=""/126, 0x7e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) 5.498128532s ago: executing program 2 (id=681): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x302) 5.124627232s ago: executing program 4 (id=682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000140)="155f7c2286273602232e2623dfd806ceb8c7010000000000080000000a04680d480cc4290600000000000000470f1d", 0x2f}, {&(0x7f0000000240)="d15b09", 0x3}, {&(0x7f0000000040)="9b06364b8587ec0a5c88a91a08636365e7f411cbbdf52b21d82d55d957a493346687f9de8c33b7c15f9d2ec45cc8a6150000000074", 0x35}, {&(0x7f0000000000)="efce55", 0x3}, {&(0x7f0000000280)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e43680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7b}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000000640)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083bdba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e058e747ad0bd87692ae9754a4490027c6b2d20452fc6ab4e977006acf799e3cd06b986e472b6354f8033bb98f696ecb7754df4c584f9dbde5c4ce082592638d690d6c3e31b945e34b65a3e47475f34c9688d84baf490ee5e244eefe6b2227502877935509c12cd8b793e2218935c037f", 0xee}, {&(0x7f0000001840)="75043a184c0f2d3250749a9c2a08bec30eb9a687c4b458492dbbed4b463f36303a31fdff15a6520963b18e497f54e35753d0d359b40a22cd1c48c02046a7641b1fb8546d8cf8e2abde9c90fad454cd496d8a82c5fbc8cc91ba2dffaa0a", 0x5d}, {&(0x7f00000003c0)="d34970e346b86c00a23964c23f4216328f2d5ce4482aecffed5096b9782ff4d87fdc68f035afb6c28c4c09e5e9c97c885f3a252b5cf320c7d00dd879625ba34e479fec6ed47bc0cf820a9999e8c58f1857b66509e41320", 0x57}], 0x9) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x9) 5.023814564s ago: executing program 1 (id=683): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) bind$xdp(r0, &(0x7f0000000000), 0x10) 4.924863277s ago: executing program 2 (id=684): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x709400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0x35, 0xb2, &(0x7f0000000b40)="3487188b17b83a1bceb0a4291273fee0dd76ce28a412b233570f9b2a7fd7b26f34647a3883b87f2187fccd4f35a681d0d7f80bd210557bcfd732f331c1e52da8631fe9a875ed91ecd1921be5cca6c4d59b7baf5b1c90e118f56992b394b33a331fd21957509290cc4e235cd7c37fa40052795b2483decfb7db6a8b240ab85403166195f08f1a3b3719409a9b7383aba1fbc1c9a5c8952fad5e057bfa0645fc1406324780484cc75d725e79f8326a058507910e4960a34bf28c5629c8dd4222e43bdd98d7d36d9da984a4bffe342a7103fdb765c9faca0659c89d576888b99ac672b65f13", &(0x7f0000000a80)=""/178, 0x2f00, 0x0, 0xb2, 0xa5, &(0x7f00000007c0)="b520610c75311127840b58a6e774c99d77a2786b5e40e99889424fbfc0176e825cd85cc8f395cc354a00ece16e23cd51984ae79fe0c634560c8f464090ce6439af15b4b269d3c63de01fb868c4ab750db87f3cc40f48caf494b88d4d332dcdad4a30b6d5f0c4a12a74a2d9d5600fa499513a6fa2fb6e973865e244bef4ba9c1290e7442c310436080fcaef33c26eab89dcd4237911034b8003ac93f1c2867de6b54ea530fa73610bbf08f1001b0ee02c0e68", &(0x7f0000000280)="4594193652f8997f4d29b3e8405a4466c300c63ff495e8c50c594b8d6d810087ac1dedc27528541a8b7d1eb0272035752624cf47d2ec5be8a5f08e8d45b19091ceb83a4f2665d95c616ca53641eaa5f607aa8619659f9dfc324ad0988188708276ac86c6ed8f5fe1a0bfdd5e8fa42bccb29234405ced7db7ca0f4a70f7d56a2b67c8a2f9aa1007b42a8e08ca54e01a0c96f169c16c46c1842cbc02ce3d2044acf47c43000000000000000000", 0x0, 0x1ff}, 0x28) io_setup(0x8, &(0x7f0000000280)) signalfd(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) gettid() io_setup(0x0, 0x0) 4.784636285s ago: executing program 1 (id=685): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) syz_io_uring_setup(0x16f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) 4.654336681s ago: executing program 2 (id=686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.618193479s ago: executing program 1 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.076478676s ago: executing program 4 (id=689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) 3.737607797s ago: executing program 4 (id=690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xda}}, './file0\x00'}) r5 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 3.642253394s ago: executing program 0 (id=691): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6ef1"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/198, 0xffffffffffffffcc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x3ff, 0x0, 0xffffffffffffffff, 0x1, '\x00', r1, r2, 0x0, 0x0, 0x0, 0x7}, 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001580)}], 0x2, &(0x7f0000003040)=ANY=[], 0x198}, 0x0) 3.357311384s ago: executing program 1 (id=692): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) syz_io_uring_setup(0x69a3, &(0x7f00000005c0)={0x0, 0x0, 0x1000, 0x0, 0xf8, 0x0, r0}, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000010c0)={0x30, r2, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x20}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x31, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x2) close(r3) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000013c0)=""/231) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0xfdfdffff}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = signalfd4(r3, &(0x7f0000000180)={[0xdbe6]}, 0x8, 0x80000) openat$cgroup_ro(r4, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0x13, 0x2d, 0x40, 0x14b2, 0x3302, 0x1bfe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x74, 0x7, 0x31}}]}}]}}, 0x0) 2.900889451s ago: executing program 3 (id=693): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) 2.65588469s ago: executing program 4 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81a000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3}, 0x90) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103"], 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff89}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x20000000000001ee, &(0x7f00000000c0)}) sysfs$1(0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x28, r8, 0x10ada85e65c25349, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe6, 0x7, 0x1, 0x0, "88fc646b6e9c5d72dd26d8667d8f8fa14b60fc442b8cb12f6bd81d415fba4fe285efeafa76cba70e18f74e8a574ffe4552ca6757ecb9d57e6f371d037a7deab38f98513c143e3cc02b341fa0aa4783209c06bc6dabee74c347bf93dac70da48a40982ec93f2cc3f134fd8b1c5c483a4845a5758662e327dcfb8a47b2b2dc68a1fa9bfaf7cccbcb9d0dad2728fbeea1af98144913521a11844cf4c20822291ec877c0472c2e7acf138413e49fa585938b67f4b55293ba883a897c8de9b12422da1584a72039a069a5a03a37fc80a9472d2cd6927bc772f0e0b2ca6c0dfa58986cc886"}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a4"}]}], {0x14}}, 0x174}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r10, 0xae9a) 2.654409206s ago: executing program 3 (id=703): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0620120c"], 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x10, @tick, {}, {0x0, 0xb7}, @raw32={[0x4]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x312, @tick=0xc0010020}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r5, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e}]}}}]}, 0x3c}}, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @broadcast, 'nr0\x00'}}) 1.586465244s ago: executing program 3 (id=695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) 1.514918682s ago: executing program 1 (id=696): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) accept4$packet(r2, 0x0, 0x0, 0x0) 1.427820723s ago: executing program 3 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4200}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xffffffffffffffff}}]}]}, @IFLA_MTU={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vivid(0x0, 0x1, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) write$apparmor_current(r4, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000003c0)="9963a6d278cf18fdf7bfa9c084c471ff071849ae79373818b3349771a7408ea443442be60ec265012197e1cff41e71de588f4af540590a8a90343c8b6d942401c2b74883cf9192b908e864c2a8e2acc1e1febe055015d6c5245138715361c7e596942850c8bcab156dc4053b18954bf2b9ba23fbda19ac4bc66ebd3ffdd84197324d55489afcaec67e0b2bbb1c99", 0x8e, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)="e98e0243043d633ee1c68863b5206767ea74a27f5f9a415dd66623e1c6", 0x1d, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r13, r12, 0x0) r14 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000400)={'fscrypt:', @auto=[0x64, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}, &(0x7f0000000440)={0x0, "550e8fa8ad9ebc90f37648b12d9d933517e3c5c648d1e97ef0fddb8aa2d9307f364ca459419865e1ee600d641e0ad6ca7dbe078a95cd5ffeb2e1130000000093"}, 0x48, r13) keyctl$KEYCTL_WATCH_KEY(0x20, r14, r11, 0x0) r15 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0"}, 0x48, r13) keyctl$KEYCTL_WATCH_KEY(0x20, r15, r11, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r9, r10, r15}, &(0x7f00000004c0)=""/147, 0x93, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 1.352606579s ago: executing program 1 (id=698): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x2) socket(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x0, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000140)="c1c872f5fe578a99a07e84aa7f3564dbd1973e71f29894ca9b8be15ac2db0588c4e723a26c8009d6bc5510ef763ce6c81180160a22637523b1d9a38b8be52b8adcd61366ca056413a88abee23535db5ff71523888158d144d3d4eb7ac6e87817fd9bf8de", 0x64}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d0804860bff06037c09e8fe5504000015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3162778e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db498262f3d40fad956000000000100000000000000000009d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000040)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x4, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xac, 0x84, 0x77, 0x10, 0x45e, 0x477, 0x78a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf9, 0x1, 0x50, 0x8}}]}}, 0x0) 464.751175ms ago: executing program 0 (id=699): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x4, 0x4, 0x0, @private, @rand_addr, {[@end, @generic={0x0, 0x6, "54120b71"}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@dev}]}, @generic={0x0, 0x4, "d630"}, @ssrr={0x89, 0xf, 0x0, [@dev, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@multicast2, @broadcast, @rand_addr]}]}}}}}) 0s ago: executing program 0 (id=700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x4, 0x5e}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x0, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) io_submit(r3, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x18, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], 0x0) kernel console output (not intermixed with test programs): sr_slave_0: entered promiscuous mode [ 194.633554][ T7116] hsr_slave_1: entered promiscuous mode [ 194.657388][ T7116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.664990][ T7116] Cannot create hsr debugfs directory [ 194.714054][ T1124] bridge_slave_1: left allmulticast mode [ 194.719938][ T1124] bridge_slave_1: left promiscuous mode [ 194.731381][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.747026][ T1124] bridge_slave_0: left allmulticast mode [ 194.752744][ T1124] bridge_slave_0: left promiscuous mode [ 194.761353][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.780603][ T1124] bridge_slave_1: left allmulticast mode [ 194.786798][ T1124] bridge_slave_1: left promiscuous mode [ 194.805263][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.821610][ T1124] bridge_slave_0: left allmulticast mode [ 194.829166][ T1124] bridge_slave_0: left promiscuous mode [ 194.845631][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.877529][ T1124] bridge_slave_1: left allmulticast mode [ 194.883268][ T1124] bridge_slave_1: left promiscuous mode [ 194.894595][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.911673][ T1124] bridge_slave_0: left allmulticast mode [ 194.918792][ T1124] bridge_slave_0: left promiscuous mode [ 194.930900][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.156401][ T54] Bluetooth: hci3: command tx timeout [ 196.519165][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.531527][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.542443][ T1124] bond0 (unregistering): Released all slaves [ 196.729323][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.753574][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.766796][ T1124] bond0 (unregistering): Released all slaves [ 196.958327][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.969713][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.994884][ T1124] bond0 (unregistering): Released all slaves [ 197.236443][ T54] Bluetooth: hci3: command tx timeout [ 197.359703][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.491336][ T7042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.551792][ T7042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.596267][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.675842][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.695294][ T7042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.725507][ T7042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.788903][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 197.806500][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.833505][ T25] usb 3-1: config 0 descriptor?? [ 197.900182][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.907398][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.931086][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.938333][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.371124][ T25] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 198.451483][ T6963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.671672][ T7076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.692103][ T7076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.777545][ T25] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 198.796875][ T25] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 198.805933][ T1124] hsr_slave_0: left promiscuous mode [ 198.827648][ T1124] hsr_slave_1: left promiscuous mode [ 198.864191][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.874391][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.884610][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.895573][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.917021][ T1124] hsr_slave_0: left promiscuous mode [ 198.926958][ T1124] hsr_slave_1: left promiscuous mode [ 198.942930][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.963756][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.972552][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.992263][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.023894][ T1124] hsr_slave_0: left promiscuous mode [ 199.033003][ T8] usb 3-1: USB disconnect, device number 11 [ 199.053379][ T1124] hsr_slave_1: left promiscuous mode [ 199.062372][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.070249][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.080099][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.087795][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.143335][ T1124] veth1_macvtap: left promiscuous mode [ 199.149020][ T1124] veth0_macvtap: left promiscuous mode [ 199.154613][ T1124] veth1_vlan: left promiscuous mode [ 199.161103][ T1124] veth0_vlan: left promiscuous mode [ 199.168985][ T1124] veth1_macvtap: left promiscuous mode [ 199.174558][ T1124] veth0_macvtap: left promiscuous mode [ 199.180661][ T1124] veth1_vlan: left promiscuous mode [ 199.185992][ T1124] veth0_vlan: left promiscuous mode [ 199.194073][ T1124] veth1_macvtap: left promiscuous mode [ 199.203453][ T1124] veth0_macvtap: left promiscuous mode [ 199.209769][ T1124] veth1_vlan: left promiscuous mode [ 199.215131][ T1124] veth0_vlan: left promiscuous mode [ 199.662419][ T7260] fuse: Bad value for 'fd' [ 199.685349][ T29] audit: type=1326 audit(1722904287.541:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.750394][ T29] audit: type=1326 audit(1722904287.541:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.797983][ T29] audit: type=1326 audit(1722904287.571:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.828926][ T29] audit: type=1326 audit(1722904287.571:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.851650][ T29] audit: type=1326 audit(1722904287.571:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.893200][ T29] audit: type=1326 audit(1722904287.571:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.929895][ T29] audit: type=1326 audit(1722904287.571:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.952978][ T29] audit: type=1326 audit(1722904287.571:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.975525][ T29] audit: type=1326 audit(1722904287.571:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 199.999474][ T29] audit: type=1326 audit(1722904287.571:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb839779f9 code=0x7ffc0000 [ 200.066266][ T5314] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 200.255406][ T5314] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 200.264681][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.279489][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 200.285130][ T5314] usb 3-1: config 0 descriptor?? [ 200.295723][ T5314] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 200.342240][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 200.924640][ T5314] gspca_stv06xx: vv6410 sensor detected [ 201.139723][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.166073][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.246511][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 201.312225][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 202.240855][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 202.300156][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 202.802549][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.843108][ T7076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.931244][ T5314] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 202.964203][ T5314] usb 3-1: USB disconnect, device number 12 [ 203.015621][ T7076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.104717][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.289599][ T7042] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.395213][ T6963] veth0_vlan: entered promiscuous mode [ 203.413773][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.421013][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.450677][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.457922][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.528471][ T6963] veth1_vlan: entered promiscuous mode [ 203.567223][ T5314] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.769270][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 203.783211][ T7042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.815700][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.827331][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.848729][ T5314] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 203.856822][ T7116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.878286][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.880937][ T7116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.922178][ T5314] usb 3-1: config 0 descriptor?? [ 203.937076][ T7116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.963531][ T6963] veth0_macvtap: entered promiscuous mode [ 203.984996][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.025069][ T7116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.095349][ T6963] veth1_macvtap: entered promiscuous mode [ 204.163735][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.229276][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.247500][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.264652][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.275684][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.298667][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.315909][ T7042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.344595][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.351832][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.394347][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.403704][ T5314] thrustmaster 0003:044F:B320.000B: unknown main item tag 0x0 [ 204.413794][ T5314] thrustmaster 0003:044F:B320.000B: unknown main item tag 0x0 [ 204.419965][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.428293][ T5314] thrustmaster 0003:044F:B320.000B: unknown main item tag 0x0 [ 204.436123][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.450387][ T5314] thrustmaster 0003:044F:B320.000B: unknown main item tag 0x0 [ 204.464181][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.466771][ T5314] thrustmaster 0003:044F:B320.000B: unknown main item tag 0x0 [ 204.476807][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.525872][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.533099][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.541919][ T5314] thrustmaster 0003:044F:B320.000B: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.2-1/input0 [ 204.559815][ T5314] thrustmaster 0003:044F:B320.000B: no inputs found [ 204.574836][ T6963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.594861][ T6963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.612749][ T6963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.623643][ T6963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.747144][ T8] usb 3-1: USB disconnect, device number 13 [ 204.987992][ T7042] veth0_vlan: entered promiscuous mode [ 205.013655][ T7042] veth1_vlan: entered promiscuous mode [ 205.104598][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.146726][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.268716][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.291007][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.318016][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.382077][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.467099][ T7042] veth0_macvtap: entered promiscuous mode [ 205.528455][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.594417][ T7042] veth1_macvtap: entered promiscuous mode [ 205.635267][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.642596][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.818530][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.825641][ T5317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.870604][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.908600][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.949680][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.037829][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.078686][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.103369][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.132537][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.204547][ T7076] veth0_vlan: entered promiscuous mode [ 206.223057][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.241007][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.251233][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.273945][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.286319][ T7042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.301015][ T7042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.315242][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.340983][ T7042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.354331][ T7042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.390882][ T7042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.413056][ T7042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.467913][ T7076] veth1_vlan: entered promiscuous mode [ 206.684826][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.766427][ T7321] netlink: 'syz.3.413': attribute type 4 has an invalid length. [ 206.800438][ T7076] veth0_macvtap: entered promiscuous mode [ 206.826051][ T7076] veth1_macvtap: entered promiscuous mode [ 206.833685][ T7321] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.034528][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.044517][ T7116] veth0_vlan: entered promiscuous mode [ 207.073382][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.123342][ T7116] veth1_vlan: entered promiscuous mode [ 207.155030][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.184990][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.205949][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.226399][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.247929][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.276447][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.294949][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.336402][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.351036][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.419779][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.465388][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.465479][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.526253][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.551825][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.585799][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.606234][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.625796][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.669993][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.684450][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.709586][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.778629][ T7076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.807023][ T7076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.831698][ T7076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.849341][ T7076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.907313][ T7116] veth0_macvtap: entered promiscuous mode [ 208.004896][ T7116] veth1_macvtap: entered promiscuous mode [ 208.124895][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.143517][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.165659][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.185225][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.195631][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.213165][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.223533][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.240557][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.252659][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.268738][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.312212][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.358263][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.372527][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.391199][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.413265][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.426194][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.450258][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.464787][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.477390][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.491753][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.506184][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.538656][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.575436][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.576538][ T7116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.593522][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.636712][ T7116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.645567][ T7116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.674443][ T7116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.846974][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.863688][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.949149][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 208.949165][ T29] audit: type=1326 audit(1722904296.811:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 208.994211][ T29] audit: type=1326 audit(1722904296.841:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.060710][ T29] audit: type=1326 audit(1722904296.841:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.064139][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.129537][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.178423][ T29] audit: type=1326 audit(1722904296.841:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.265536][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.290358][ T29] audit: type=1326 audit(1722904296.841:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.326549][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.430685][ T29] audit: type=1326 audit(1722904296.841:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.453424][ T29] audit: type=1326 audit(1722904296.841:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.477258][ T29] audit: type=1326 audit(1722904296.841:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x7ffc0000 [ 209.503096][ T29] audit: type=1326 audit(1722904296.851:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8793576390 code=0x7ffc0000 [ 209.528772][ T29] audit: type=1326 audit(1722904296.851:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8793576390 code=0x7ffc0000 [ 209.676287][ T1170] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.792268][ T7361] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 209.832635][ T7361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.423'. [ 209.888613][ T1170] usb 2-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 209.919688][ T1170] usb 2-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 209.950812][ T1170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.984122][ T1170] usb 2-1: Product: syz [ 209.991253][ T1170] usb 2-1: Manufacturer: syz [ 210.007882][ T1170] usb 2-1: SerialNumber: syz [ 210.082906][ T7363] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.291545][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 210.352402][ T1170] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 210.376461][ T1170] dvb_usb_af9035 2-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 210.397104][ T5319] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.447386][ T1170] usb 2-1: USB disconnect, device number 6 [ 210.609199][ T5319] usb 3-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 210.648354][ T5319] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 210.684531][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.708937][ T5319] usb 3-1: config 0 descriptor?? [ 210.719172][ T5319] usb 3-1: bad CDC descriptors [ 211.456217][ T25] usb 3-1: USB disconnect, device number 14 [ 212.442881][ T7414] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.463019][ T7414] vhci_hcd: invalid port number 129 [ 212.486445][ T7414] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 212.725198][ T7416] tipc: Started in network mode [ 212.746233][ T7416] tipc: Node identity ac1414aa, cluster identity 4711 [ 212.838481][ T7416] tipc: Enabled bearer , priority 10 [ 212.901170][ T7421] tipc: Disabling bearer [ 213.086208][ T5319] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.336272][ T5319] usb 5-1: Using ep0 maxpacket: 8 [ 213.383824][ T5319] usb 5-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 213.432528][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.466052][ T5319] usb 5-1: Product: syz [ 213.483650][ T5319] usb 5-1: Manufacturer: syz [ 213.496263][ T5319] usb 5-1: SerialNumber: syz [ 213.521446][ T5319] usb 5-1: config 0 descriptor?? [ 213.534569][ T5319] ipheth 5-1:0.0: Unable to find alternate settings interface [ 213.757922][ T9] usb 5-1: USB disconnect, device number 9 [ 213.869237][ T7440] loop0: detected capacity change from 0 to 3872 [ 214.121941][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.303752][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.531632][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.785566][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.230678][ T61] bridge_slave_1: left allmulticast mode [ 215.262738][ T61] bridge_slave_1: left promiscuous mode [ 215.279726][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.322849][ T61] bridge_slave_0: left allmulticast mode [ 215.346166][ T61] bridge_slave_0: left promiscuous mode [ 215.365711][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.414501][ T5271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.424744][ T5271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.432904][ T5271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.444144][ T5271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.452312][ T5271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.459781][ T5271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.231973][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 216.471774][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 216.471794][ T29] audit: type=1326 audit(1722904304.331:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87935779f9 code=0x0 [ 216.499970][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.735650][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.762104][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.782301][ T61] bond0 (unregistering): Released all slaves [ 216.827885][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 217.161005][ T7482] xt_cgroup: invalid path, errno=-2 [ 217.469175][ T29] audit: type=1326 audit(1722904305.331:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 217.501417][ T7487] bridge0: entered allmulticast mode [ 217.553049][ T61] hsr_slave_0: left promiscuous mode [ 217.558746][ T54] Bluetooth: hci4: command tx timeout [ 217.600076][ T61] hsr_slave_1: left promiscuous mode [ 217.630895][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.695545][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.714572][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.740821][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.909249][ T61] veth1_macvtap: left promiscuous mode [ 217.927058][ T61] veth0_macvtap: left promiscuous mode [ 217.952610][ T61] veth1_vlan: left promiscuous mode [ 217.974244][ T61] veth0_vlan: left promiscuous mode [ 218.022750][ T29] audit: type=1326 audit(1722904305.881:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.136999][ T29] audit: type=1326 audit(1722904305.911:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc16f779817 code=0x7fc00000 [ 218.240043][ T29] audit: type=1326 audit(1722904305.911:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.317001][ T29] audit: type=1326 audit(1722904305.911:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.391256][ T29] audit: type=1326 audit(1722904305.911:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.482091][ T29] audit: type=1326 audit(1722904305.911:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.522307][ T29] audit: type=1326 audit(1722904305.921:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 218.562897][ T29] audit: type=1326 audit(1722904305.921:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16f7779f9 code=0x7fc00000 [ 219.589328][ T61] team0 (unregistering): Port device team_slave_1 removed [ 219.636428][ T54] Bluetooth: hci4: command tx timeout [ 219.718115][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 219.747134][ T61] team0 (unregistering): Port device team_slave_0 removed [ 220.446391][ T5319] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.662947][ T5319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.694641][ T5319] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.715366][ T5319] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.754591][ T5319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.800325][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.826178][ T5319] usb 5-1: Product: syz [ 220.830437][ T5319] usb 5-1: Manufacturer: syz [ 220.835056][ T5319] usb 5-1: SerialNumber: syz [ 220.878535][ T7487] bridge0: left allmulticast mode [ 221.375458][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 221.435966][ T7540] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.472347][ T7537] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 221.562996][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.664461][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.716543][ T54] Bluetooth: hci4: command tx timeout [ 221.851359][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.885446][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.936451][ T7459] bridge_slave_0: entered allmulticast mode [ 221.963277][ T7459] bridge_slave_0: entered promiscuous mode [ 221.997314][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.023807][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.053859][ T7459] bridge_slave_1: entered allmulticast mode [ 222.082169][ T7459] bridge_slave_1: entered promiscuous mode [ 222.107654][ T5319] cdc_ncm 5-1:1.0: bind() failure [ 222.137797][ T5319] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 222.157720][ T5319] cdc_ncm 5-1:1.1: bind() failure [ 222.318175][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.369744][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.379859][ T5319] usb 5-1: USB disconnect, device number 10 [ 222.610279][ T7459] team0: Port device team_slave_0 added [ 222.631732][ T7459] team0: Port device team_slave_1 added [ 222.773211][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.784631][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.810601][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.828126][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.850193][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.863516][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.936029][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.317078][ T7459] hsr_slave_0: entered promiscuous mode [ 223.342586][ T7459] hsr_slave_1: entered promiscuous mode [ 223.369036][ T7459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.396196][ T7459] Cannot create hsr debugfs directory [ 223.796391][ T54] Bluetooth: hci4: command tx timeout [ 224.374537][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.630673][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.848044][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.195935][ T54] Bluetooth: hci3: unexpected event 0x30 length: 32 > 3 [ 225.264947][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.341423][ T5271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.365317][ T5271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.387785][ T5271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.402928][ T5271] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 225.410471][ T5268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.424785][ T5268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.432509][ T5268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.942574][ T35] bridge_slave_1: left allmulticast mode [ 225.968779][ T35] bridge_slave_1: left promiscuous mode [ 226.003051][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.043588][ T35] bridge_slave_0: left allmulticast mode [ 226.067940][ T35] bridge_slave_0: left promiscuous mode [ 226.080521][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.664325][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.677865][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.694163][ T35] bond0 (unregistering): Released all slaves [ 226.716331][ T7459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.728865][ T7459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.790913][ T7459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.888222][ T7459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.968492][ T35] tipc: Left network mode [ 227.409428][ T7654] libceph: resolve '0.0' (ret=-3): failed [ 227.477663][ T5268] Bluetooth: hci2: command tx timeout [ 227.506642][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 227.506664][ T29] audit: type=1326 audit(1722904315.331:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e8b5779f9 code=0x0 [ 227.673020][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.692064][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.700286][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.710047][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.719321][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.729078][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.910889][ T35] hsr_slave_0: left promiscuous mode [ 227.927149][ T35] hsr_slave_1: left promiscuous mode [ 227.946458][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.953919][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.967217][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.974945][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.013005][ T35] veth1_macvtap: left promiscuous mode [ 228.036672][ T35] veth0_macvtap: left promiscuous mode [ 228.046632][ T35] veth1_vlan: left promiscuous mode [ 228.052021][ T35] veth0_vlan: left promiscuous mode [ 229.022956][ T35] team0 (unregistering): Port device team_slave_1 removed [ 229.068123][ T35] team0 (unregistering): Port device team_slave_0 removed [ 229.562802][ T54] Bluetooth: hci2: command tx timeout [ 229.744692][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 229.796386][ T54] Bluetooth: hci0: command tx timeout [ 230.352560][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.372208][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.396904][ T7631] bridge_slave_0: entered allmulticast mode [ 230.409744][ T7631] bridge_slave_0: entered promiscuous mode [ 230.484823][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.506604][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.513913][ T7631] bridge_slave_1: entered allmulticast mode [ 230.548459][ T7631] bridge_slave_1: entered promiscuous mode [ 230.691517][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.743591][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.795413][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.839855][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 230.922531][ T5268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.933059][ T5268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.943588][ T5268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.953094][ T5268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.962130][ T5268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.970730][ T5268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.101610][ T7631] team0: Port device team_slave_0 added [ 231.114071][ T7631] team0: Port device team_slave_1 added [ 231.198048][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.244228][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.281010][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.290307][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.317238][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.330473][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.337598][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.363648][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.404813][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.453723][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.519829][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.554576][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.566629][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.574217][ T7663] bridge_slave_0: entered allmulticast mode [ 231.585462][ T7663] bridge_slave_0: entered promiscuous mode [ 231.595316][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.602532][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.621645][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.628924][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.646372][ T54] Bluetooth: hci2: command tx timeout [ 231.685475][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.693077][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.700948][ T7663] bridge_slave_1: entered allmulticast mode [ 231.714180][ T7663] bridge_slave_1: entered promiscuous mode [ 231.755163][ T7631] hsr_slave_0: entered promiscuous mode [ 231.762166][ T7631] hsr_slave_1: entered promiscuous mode [ 231.771110][ T7631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.779284][ T7631] Cannot create hsr debugfs directory [ 231.841896][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.876376][ T54] Bluetooth: hci0: command tx timeout [ 231.895775][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.137669][ T7663] team0: Port device team_slave_0 added [ 232.155638][ T7663] team0: Port device team_slave_1 added [ 232.315943][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.324188][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.350543][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.364176][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.371316][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.401404][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.781039][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.792391][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.805414][ T35] bond0 (unregistering): Released all slaves [ 232.950581][ T7663] hsr_slave_0: entered promiscuous mode [ 232.961768][ T7663] hsr_slave_1: entered promiscuous mode [ 232.970393][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.986168][ T7663] Cannot create hsr debugfs directory [ 232.996482][ T54] Bluetooth: hci3: command tx timeout [ 233.480796][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.515054][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 233.554127][ T35] hsr_slave_0: left promiscuous mode [ 233.562039][ T35] hsr_slave_1: left promiscuous mode [ 233.573569][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.581735][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.590493][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.598625][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.622506][ T35] veth1_macvtap: left promiscuous mode [ 233.628717][ T35] veth0_macvtap: left promiscuous mode [ 233.634399][ T35] veth1_vlan: left promiscuous mode [ 233.640001][ T35] veth0_vlan: left promiscuous mode [ 233.727179][ T54] Bluetooth: hci2: command tx timeout [ 233.956612][ T54] Bluetooth: hci0: command tx timeout [ 234.187051][ T35] team0 (unregistering): Port device team_slave_1 removed [ 234.225184][ T35] team0 (unregistering): Port device team_slave_0 removed [ 234.921075][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.955164][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.966331][ T7728] bridge_slave_0: entered allmulticast mode [ 234.977801][ T7728] bridge_slave_0: entered promiscuous mode [ 235.029161][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.038172][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.045528][ T7728] bridge_slave_1: entered allmulticast mode [ 235.064250][ T7728] bridge_slave_1: entered promiscuous mode [ 235.076338][ T54] Bluetooth: hci3: command tx timeout [ 235.255099][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.279157][ T7631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.381724][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.472323][ T7631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.533553][ T7459] veth0_vlan: entered promiscuous mode [ 235.563140][ T7728] team0: Port device team_slave_0 added [ 235.576725][ T7631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.600844][ T7631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.696005][ T7728] team0: Port device team_slave_1 added [ 235.725483][ T5268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.735148][ T5268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.758718][ T5268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.789189][ T5268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.797399][ T5268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.804935][ T5268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.817050][ T7459] veth1_vlan: entered promiscuous mode [ 235.909811][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.926224][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.963149][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.990858][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.005086][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.033551][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.047390][ T5268] Bluetooth: hci0: command tx timeout [ 236.215519][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.324212][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.349351][ T7728] hsr_slave_0: entered promiscuous mode [ 236.355945][ T7728] hsr_slave_1: entered promiscuous mode [ 236.364027][ T7728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.372430][ T7728] Cannot create hsr debugfs directory [ 236.384447][ T7459] veth0_macvtap: entered promiscuous mode [ 236.428767][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.471964][ T7459] veth1_macvtap: entered promiscuous mode [ 236.497846][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.667654][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.680889][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.691494][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.702955][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.713117][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.725008][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.740993][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.770678][ T7663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.811702][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.823926][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.834485][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.849579][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.859729][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.870695][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.884205][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.909168][ T7663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.921044][ T7663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.959592][ T7631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.970403][ T7459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.985013][ T7459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.997894][ T7459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.006958][ T7459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.029035][ T7663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.158877][ T5268] Bluetooth: hci3: command tx timeout [ 237.198686][ T7631] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.220256][ T7781] chnl_net:caif_netlink_parms(): no params data found [ 237.334599][ T7728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.440646][ T7728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.466718][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.473921][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.502897][ T35] bridge_slave_1: left allmulticast mode [ 237.518069][ T35] bridge_slave_1: left promiscuous mode [ 237.523929][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.545726][ T35] bridge_slave_0: left allmulticast mode [ 237.555108][ T35] bridge_slave_0: left promiscuous mode [ 237.578106][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.599501][ T35] bridge_slave_1: left allmulticast mode [ 237.605191][ T35] bridge_slave_1: left promiscuous mode [ 237.616683][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.636906][ T35] bridge_slave_0: left allmulticast mode [ 237.642595][ T35] bridge_slave_0: left promiscuous mode [ 237.665097][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.876694][ T5268] Bluetooth: hci1: command tx timeout [ 238.724154][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.749219][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.761740][ T35] bond0 (unregistering): Released all slaves [ 238.913939][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.929023][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.946379][ T35] bond0 (unregistering): Released all slaves [ 239.041986][ T7728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.129212][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.136408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.191441][ T7728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.242455][ T5268] Bluetooth: hci3: command tx timeout [ 239.249743][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.269828][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.368304][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.381594][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.389515][ T7781] bridge_slave_0: entered allmulticast mode [ 239.402223][ T7781] bridge_slave_0: entered promiscuous mode [ 239.412453][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.421000][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.428646][ T7781] bridge_slave_1: entered allmulticast mode [ 239.435733][ T7781] bridge_slave_1: entered promiscuous mode [ 239.468332][ T7631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.479390][ T7631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.557230][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.579329][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.667265][ T7781] team0: Port device team_slave_0 added [ 239.673691][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.707643][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.808098][ T7781] team0: Port device team_slave_1 added [ 239.956877][ T5268] Bluetooth: hci1: command tx timeout [ 239.997864][ T9] IPVS: starting estimator thread 0... [ 240.107186][ T7843] IPVS: using max 24 ests per chain, 57600 per kthread [ 240.108104][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.133123][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.146204][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.185119][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.234373][ T7728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.262890][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.270284][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.300148][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.330728][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.345368][ T7728] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.385493][ T7728] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.395829][ T7728] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.501886][ T35] hsr_slave_0: left promiscuous mode [ 240.513793][ T35] hsr_slave_1: left promiscuous mode [ 240.522805][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.532903][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.545073][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.553163][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.565284][ T35] hsr_slave_0: left promiscuous mode [ 240.573277][ T35] hsr_slave_1: left promiscuous mode [ 240.580399][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.588631][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.596995][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.604422][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.651169][ T35] veth1_macvtap: left promiscuous mode [ 240.656855][ T35] veth0_macvtap: left promiscuous mode [ 240.662456][ T35] veth1_vlan: left promiscuous mode [ 240.667961][ T35] veth0_vlan: left promiscuous mode [ 240.674296][ T35] veth1_macvtap: left promiscuous mode [ 240.680546][ T35] veth0_macvtap: left promiscuous mode [ 240.687601][ T35] veth1_vlan: left promiscuous mode [ 240.692959][ T35] veth0_vlan: left promiscuous mode [ 241.018581][ T7857] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 241.619056][ T35] team0 (unregistering): Port device team_slave_1 removed [ 241.661002][ T35] team0 (unregistering): Port device team_slave_0 removed [ 242.036515][ T5268] Bluetooth: hci1: command tx timeout [ 242.438687][ T35] team0 (unregistering): Port device team_slave_1 removed [ 242.502660][ T35] team0 (unregistering): Port device team_slave_0 removed [ 242.962337][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.975434][ T7781] hsr_slave_0: entered promiscuous mode [ 243.003797][ T7781] hsr_slave_1: entered promiscuous mode [ 243.065242][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.072502][ T5314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.225561][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.232810][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.469663][ T7871] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 243.507092][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 243.520195][ T7631] veth0_vlan: entered promiscuous mode [ 243.746916][ T7663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.786270][ T7663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.924906][ T7631] veth1_vlan: entered promiscuous mode [ 244.117322][ T5268] Bluetooth: hci1: command tx timeout [ 244.325535][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.370354][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.462746][ T7728] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.521904][ T7631] veth0_macvtap: entered promiscuous mode [ 244.530632][ T7887] [U]  [ 244.569198][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.576514][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.630496][ T7631] veth1_macvtap: entered promiscuous mode [ 244.657523][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.664885][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.714678][ T29] audit: type=1326 audit(1722904332.571:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.740472][ T29] audit: type=1326 audit(1722904332.571:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.778198][ T29] audit: type=1326 audit(1722904332.571:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.813693][ T29] audit: type=1326 audit(1722904332.571:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.858761][ T29] audit: type=1326 audit(1722904332.571:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.870008][ T7663] veth0_vlan: entered promiscuous mode [ 244.886722][ T29] audit: type=1326 audit(1722904332.571:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.931489][ T7781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.947491][ T29] audit: type=1326 audit(1722904332.571:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 244.995557][ T29] audit: type=1326 audit(1722904332.571:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 245.046841][ T29] audit: type=1326 audit(1722904332.571:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 245.070997][ T29] audit: type=1326 audit(1722904332.571:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f01971779f9 code=0x7ffc0000 [ 245.094479][ T7663] veth1_vlan: entered promiscuous mode [ 245.112981][ T7781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.142874][ T7781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.162834][ T7781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.202504][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.215014][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.225596][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.245157][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.258824][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.304545][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.326552][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.340230][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.351222][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.363312][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.419352][ T7631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.430183][ T7631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.439412][ T7631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.450424][ T7631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.703569][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.722992][ T7663] veth0_macvtap: entered promiscuous mode [ 245.761692][ T7663] veth1_macvtap: entered promiscuous mode [ 245.906511][ T942] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.939326][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.952242][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.971490][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.983560][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.995785][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.017815][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.037548][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.125524][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.126196][ T942] usb 4-1: Using ep0 maxpacket: 8 [ 246.144393][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.161640][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.166346][ T942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.174758][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.192707][ T942] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.199510][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.217672][ T942] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 246.225123][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.227010][ T942] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 246.227037][ T942] usb 4-1: Manufacturer: syz [ 246.262293][ T942] usb 4-1: config 0 descriptor?? [ 246.266211][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.274851][ T7728] veth0_vlan: entered promiscuous mode [ 246.296845][ T942] appledisplay 4-1:0.0: Could not find int-in endpoint [ 246.304899][ T942] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 246.311592][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.342189][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.352765][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.365723][ T7663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.388001][ T7663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.397316][ T7663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.408624][ T7663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.460366][ T7728] veth1_vlan: entered promiscuous mode [ 246.562377][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.620450][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.627647][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.685139][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.693268][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.715515][ T7728] veth0_macvtap: entered promiscuous mode [ 246.808463][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.815580][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.873556][ T7728] veth1_macvtap: entered promiscuous mode [ 246.912441][ T7925] bridge0: port 3(gretap0) entered blocking state [ 246.926003][ T7925] bridge0: port 3(gretap0) entered disabled state [ 246.966317][ T7925] gretap0: entered allmulticast mode [ 246.989353][ T7925] gretap0: entered promiscuous mode [ 246.995091][ T7925] bridge0: port 3(gretap0) entered blocking state [ 247.001751][ T7925] bridge0: port 3(gretap0) entered forwarding state [ 247.036363][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.048039][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.052110][ T7927] gretap0: left allmulticast mode [ 247.072607][ T7927] gretap0: left promiscuous mode [ 247.084807][ T7927] bridge0: port 3(gretap0) entered disabled state [ 247.260712][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.289577][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.300329][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.311895][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.335955][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.362024][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.379991][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.398756][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.420805][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.477763][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.499201][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.511438][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.521285][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.532797][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.544426][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.558441][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.591728][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.608692][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.619296][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.631519][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.674258][ T7728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.697837][ T7728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.709992][ T7728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.719504][ T7728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.065941][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.183421][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.195044][ T7941] syzkaller1: entered promiscuous mode [ 248.204637][ T7941] syzkaller1: entered allmulticast mode [ 248.215014][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.384874][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.441431][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.603701][ T7781] veth0_vlan: entered promiscuous mode [ 248.662987][ T7781] veth1_vlan: entered promiscuous mode [ 248.810490][ T1170] usb 4-1: USB disconnect, device number 14 [ 248.875881][ T7781] veth0_macvtap: entered promiscuous mode [ 248.933683][ T7781] veth1_macvtap: entered promiscuous mode [ 249.019977][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.034852][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.048334][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.059181][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.069425][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.081894][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.091763][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.103262][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.118333][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.132939][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.152459][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.234485][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.266297][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.280375][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.291408][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.306533][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.327303][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.339401][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.354136][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.365441][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.385665][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.415779][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.472138][ T7956] netlink: 'syz.0.534': attribute type 30 has an invalid length. [ 249.485058][ T7956] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 249.497130][ T7956] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 249.543630][ T7781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.559255][ T7781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.620904][ T7781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.647508][ T7781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.966181][ T5265] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 250.055241][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.076705][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.176312][ T5265] usb 5-1: Using ep0 maxpacket: 8 [ 250.193872][ T5265] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 250.207892][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.236012][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.236304][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.236332][ T5265] usb 5-1: Product: syz [ 250.236351][ T5265] usb 5-1: Manufacturer: syz [ 250.236368][ T5265] usb 5-1: SerialNumber: syz [ 250.244060][ T5265] usb 5-1: config 0 descriptor?? [ 250.462536][ T7975] netlink: 41 bytes leftover after parsing attributes in process `syz.1.520'. [ 250.531952][ T5265] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 250.542327][ T5265] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.584054][ T5265] usb 5-1: USB disconnect, device number 11 [ 250.653500][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.776317][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 250.804682][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.911087][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.976787][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 251.025779][ T8] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 251.043794][ T8] usb 2-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 251.072420][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.103703][ T8] usb 2-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 251.129075][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.133657][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.185720][ T8] usb 2-1: Product: syz [ 251.208026][ T8] usb 2-1: Manufacturer: syz [ 251.212685][ T8] usb 2-1: SerialNumber: syz [ 251.250098][ T8] usb 2-1: config 0 descriptor?? [ 251.268327][ T8] sierra 2-1:0.0: Sierra USB modem converter detected [ 251.618090][ T61] bridge_slave_1: left allmulticast mode [ 251.636599][ T61] bridge_slave_1: left promiscuous mode [ 251.660288][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.707649][ T61] bridge_slave_0: left allmulticast mode [ 251.729990][ T61] bridge_slave_0: left promiscuous mode [ 251.750060][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.762988][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.786526][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.839751][ T8] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 251.916792][ T8] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 252.198356][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.211308][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.220288][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.235362][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.287283][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.296766][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.379779][ T942] usb 2-1: USB disconnect, device number 7 [ 252.430016][ T942] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 252.478712][ T942] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 252.505257][ T942] sierra 2-1:0.0: device disconnected [ 253.041494][ T7997] libceph: resolve '0.0' (ret=-3): failed [ 253.060767][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 253.060785][ T29] audit: type=1326 audit(1722904340.921:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.2.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4475779f9 code=0x0 [ 253.105262][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.130500][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.147927][ T61] bond0 (unregistering): Released all slaves [ 253.894072][ T61] hsr_slave_0: left promiscuous mode [ 253.908183][ T61] hsr_slave_1: left promiscuous mode [ 253.914562][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.936368][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.987035][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.002037][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.105177][ T61] veth1_macvtap: left promiscuous mode [ 254.128587][ T61] veth0_macvtap: left promiscuous mode [ 254.134317][ T61] veth1_vlan: left promiscuous mode [ 254.191938][ T61] veth0_vlan: left promiscuous mode [ 254.359316][ T5268] Bluetooth: hci4: command tx timeout [ 254.772806][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.785094][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.804414][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.823194][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.833018][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.841490][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.135322][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 255.172183][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 255.424236][ T61] team0 (unregistering): Port device team_slave_1 removed [ 255.499731][ T61] team0 (unregistering): Port device team_slave_0 removed [ 255.892432][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.900017][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.322691][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 256.436596][ T54] Bluetooth: hci4: command tx timeout [ 256.773301][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.792584][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.801246][ T7988] bridge_slave_0: entered allmulticast mode [ 256.811160][ T7988] bridge_slave_0: entered promiscuous mode [ 256.850221][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.878413][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.885695][ T7988] bridge_slave_1: entered allmulticast mode [ 256.894459][ T8062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.916494][ T54] Bluetooth: hci3: command tx timeout [ 256.940942][ T7988] bridge_slave_1: entered promiscuous mode [ 257.141745][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.195715][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.515597][ T61] IPVS: stop unused estimator thread 0... [ 257.608108][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.646591][ T7988] team0: Port device team_slave_0 added [ 257.704904][ T7988] team0: Port device team_slave_1 added [ 257.762589][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 257.857194][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 257.900678][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 257.923976][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.017992][ T8] usb 3-1: Product: syz [ 258.030394][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.040559][ T8] usb 3-1: Manufacturer: syz [ 258.040585][ T8] usb 3-1: SerialNumber: syz [ 258.056562][ T8] usb 3-1: config 0 descriptor?? [ 258.081873][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.088045][ T8] usb 3-1: bad CDC descriptors [ 258.147932][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 258.186172][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.211164][ T8] usb-storage 3-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 258.245899][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.270813][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.358157][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.516550][ T54] Bluetooth: hci4: command tx timeout [ 258.631907][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.975466][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.000843][ T54] Bluetooth: hci3: command tx timeout [ 259.072237][ T7988] hsr_slave_0: entered promiscuous mode [ 259.124936][ T7988] hsr_slave_1: entered promiscuous mode [ 259.165833][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.196601][ T7988] Cannot create hsr debugfs directory [ 259.298525][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.692015][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.804506][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 259.849659][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 259.849814][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 259.849845][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 259.849862][ T54] Workqueue: hci1 hci_rx_work [ 259.849915][ T54] Call Trace: [ 259.849926][ T54] [ 259.849937][ T54] dump_stack_lvl+0x241/0x360 [ 259.849987][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.850038][ T54] ? __pfx__printk+0x10/0x10 [ 259.850073][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 259.850098][ T54] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 259.850131][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 259.850160][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 259.850208][ T54] kobject_add_internal+0x435/0x8d0 [ 259.850250][ T54] kobject_add+0x152/0x220 [ 259.850282][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 259.850308][ T54] ? device_add+0x3e7/0xbf0 [ 259.850330][ T54] ? __pfx_kobject_add+0x10/0x10 [ 259.850362][ T54] ? _raw_spin_unlock+0x28/0x50 [ 259.850393][ T54] ? get_device_parent+0x165/0x410 [ 259.850419][ T54] device_add+0x4e5/0xbf0 [ 259.850448][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 259.850487][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 259.850524][ T54] ? trace_contention_end+0x3c/0x120 [ 259.850551][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 259.850587][ T54] ? __mutex_unlock_slowpath+0x21d/0x750 [ 259.850621][ T54] ? __copy_skb_header+0x437/0x5b0 [ 259.850650][ T54] ? skb_pull_data+0x112/0x230 [ 259.850684][ T54] hci_le_enh_conn_complete_evt+0x185/0x420 [ 259.850722][ T54] hci_event_packet+0xa55/0x1540 [ 259.850750][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 259.850784][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 259.850805][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 259.850838][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 259.850868][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 259.850902][ T54] hci_rx_work+0x3e8/0xca0 [ 259.850953][ T54] ? process_scheduled_works+0x945/0x1830 [ 259.850983][ T54] process_scheduled_works+0xa2c/0x1830 [ 259.851048][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.851117][ T54] ? assign_work+0x364/0x3d0 [ 259.851153][ T54] worker_thread+0x86d/0xd40 [ 259.851202][ T54] ? __kthread_parkme+0x169/0x1d0 [ 259.851239][ T54] ? __pfx_worker_thread+0x10/0x10 [ 259.851270][ T54] kthread+0x2f0/0x390 [ 259.851305][ T54] ? __pfx_worker_thread+0x10/0x10 [ 259.851335][ T54] ? __pfx_kthread+0x10/0x10 [ 259.851371][ T54] ret_from_fork+0x4b/0x80 [ 259.851403][ T54] ? __pfx_kthread+0x10/0x10 [ 259.851428][ T54] ret_from_fork_asm+0x1a/0x30 [ 259.851462][ T54] [ 259.852811][ T54] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 259.852858][ T54] Bluetooth: hci1: failed to register connection device [ 259.854929][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.855004][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.855139][ T8039] bridge_slave_0: entered allmulticast mode [ 259.856372][ T8039] bridge_slave_0: entered promiscuous mode [ 259.861083][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.861165][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.861288][ T8039] bridge_slave_1: entered allmulticast mode [ 259.862478][ T8039] bridge_slave_1: entered promiscuous mode [ 259.945315][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.960604][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.961409][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.968815][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.080799][ T5314] usb 3-1: USB disconnect, device number 15 [ 260.180945][ T8039] team0: Port device team_slave_0 added [ 260.196470][ T5268] Bluetooth: hci2: command tx timeout [ 260.234719][ T8039] team0: Port device team_slave_1 added [ 260.536255][ T5314] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.596320][ T5268] Bluetooth: hci4: command tx timeout [ 260.766470][ T5314] usb 3-1: Using ep0 maxpacket: 16 [ 260.797050][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.822650][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.830792][ T8128] binder: 8125:8128 ioctl 4018620d 0 returned -22 [ 260.831068][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.841960][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.889991][ T5314] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 260.899781][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.918247][ T5314] usb 3-1: config 0 descriptor?? [ 260.921409][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.077022][ T5268] Bluetooth: hci3: command tx timeout [ 261.167363][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.198005][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.296653][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.335235][ T61] bridge_slave_1: left allmulticast mode [ 261.354065][ T61] bridge_slave_1: left promiscuous mode [ 261.369535][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.377831][ T5314] waltop 0003:172F:0037.000C: item fetching failed at offset 4/6 [ 261.400008][ T61] bridge_slave_0: left allmulticast mode [ 261.408893][ T61] bridge_slave_0: left promiscuous mode [ 261.410960][ T5314] waltop 0003:172F:0037.000C: probe with driver waltop failed with error -22 [ 261.414763][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.708995][ T5322] usb 3-1: USB disconnect, device number 16 [ 261.876517][ T5268] Bluetooth: hci1: command tx timeout [ 261.940699][ T8140] program syz.1.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.273756][ T8142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.609529][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.715798][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.745936][ T61] bond0 (unregistering): Released all slaves [ 263.111104][ T8162] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 263.158655][ T5268] Bluetooth: hci3: command tx timeout [ 263.451723][ T8039] hsr_slave_0: entered promiscuous mode [ 263.478455][ T8039] hsr_slave_1: entered promiscuous mode [ 263.524838][ T8039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.568847][ T8039] Cannot create hsr debugfs directory [ 263.919865][ T61] hsr_slave_0: left promiscuous mode [ 263.936901][ T61] hsr_slave_1: left promiscuous mode [ 263.945852][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.954163][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.964517][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.987805][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.132217][ T61] veth1_macvtap: left promiscuous mode [ 264.143111][ T61] veth0_macvtap: left promiscuous mode [ 264.153486][ T61] veth1_vlan: left promiscuous mode [ 264.163549][ T61] veth0_vlan: left promiscuous mode [ 265.276290][ T61] team0 (unregistering): Port device team_slave_1 removed [ 265.328659][ T942] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 265.360677][ T61] team0 (unregistering): Port device team_slave_0 removed [ 265.528784][ T942] usb 2-1: not running at top speed; connect to a high speed hub [ 265.556973][ T942] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 265.565326][ T942] usb 2-1: config 0 has no interface number 0 [ 265.589545][ T942] usb 2-1: config 0 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 265.625329][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 265.636780][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0xA has invalid maxpacket 544, setting to 64 [ 265.657533][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 265.675881][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 265.695163][ T942] usb 2-1: config 0 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 265.710459][ T942] usb 2-1: config 0 interface 180 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 265.731392][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0xC has invalid maxpacket 72, setting to 64 [ 265.742447][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 265.761633][ T942] usb 2-1: config 0 interface 180 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 265.772995][ T942] usb 2-1: config 0 interface 180 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 265.805850][ T942] usb 2-1: config 0 interface 180 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 265.827324][ T942] usb 2-1: config 0 interface 180 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 265.844144][ T942] usb 2-1: config 0 interface 180 has no altsetting 0 [ 265.855184][ T942] usb 2-1: New USB device found, idVendor=041e, idProduct=403b, bcdDevice=ef.98 [ 265.883647][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.892003][ T942] usb 2-1: Product: syz [ 265.896329][ T942] usb 2-1: Manufacturer: syz [ 265.911805][ T942] usb 2-1: SerialNumber: syz [ 265.940197][ T942] usb 2-1: config 0 descriptor?? [ 265.946186][ T8190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.954816][ T8190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.034535][ T8192] syz.2.590 uses obsolete (PF_INET,SOCK_PACKET) [ 266.368655][ T942] gspca_main: spca561-2.14.0 probing 041e:403b [ 266.388462][ T942] spca561 2-1:0.180: probe with driver spca561 failed with error -22 [ 266.432804][ T942] usb 2-1: USB disconnect, device number 8 [ 266.650730][ T7988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.720906][ T7988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.076727][ T7988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.156867][ T5268] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 267.165559][ T5268] Bluetooth: hci1: Injecting HCI hardware error event [ 267.175236][ T54] Bluetooth: hci1: hardware error 0x00 [ 267.221467][ T7988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.907195][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.010219][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.081954][ T8039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.120703][ T8039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.182167][ T8039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.210457][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.217653][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.260851][ T8039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.296671][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.303942][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.808462][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.038258][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.070664][ T7988] veth0_vlan: entered promiscuous mode [ 269.101222][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.156716][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.164037][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.214427][ T7988] veth1_vlan: entered promiscuous mode [ 269.222530][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.229708][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.321908][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 269.349094][ T7988] veth0_macvtap: entered promiscuous mode [ 269.419842][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.444352][ T7988] veth1_macvtap: entered promiscuous mode [ 269.567677][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.580505][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.591014][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.615149][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.647471][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.676934][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.720618][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.746794][ T942] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 269.769718][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.795465][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.821229][ T8039] veth0_vlan: entered promiscuous mode [ 269.871391][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.884314][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.895550][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.911472][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.923821][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.966287][ T942] usb 3-1: Using ep0 maxpacket: 16 [ 269.976715][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.005307][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.005497][ T942] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 270.027608][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.051580][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.059677][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.095625][ T942] usb 3-1: Product: syz [ 270.124017][ T942] usb 3-1: Manufacturer: syz [ 270.137385][ T7988] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.156715][ T942] usb 3-1: SerialNumber: syz [ 270.163668][ T942] usb 3-1: config 0 descriptor?? [ 270.168796][ T7988] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.195988][ T7988] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.220602][ T7988] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.294084][ T8039] veth1_vlan: entered promiscuous mode [ 270.551372][ T8253] syzkaller0: entered allmulticast mode [ 270.610471][ T8039] veth0_macvtap: entered promiscuous mode [ 270.641135][ T8257] syzkaller0 (unregistering): left allmulticast mode [ 270.699328][ T5265] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 270.751593][ T8039] veth1_macvtap: entered promiscuous mode [ 270.821944][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.847446][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.897910][ T5265] usb 2-1: Using ep0 maxpacket: 32 [ 270.945132][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.971705][ T5265] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 270.971976][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.001990][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.016111][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.023258][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.050320][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.065742][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.068335][ T5265] usb 2-1: Product: syz [ 271.092293][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.117622][ T5265] usb 2-1: Manufacturer: syz [ 271.118608][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.122376][ T5265] usb 2-1: SerialNumber: syz [ 271.137444][ T5265] usb 2-1: config 0 descriptor?? [ 271.177836][ T5265] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 271.188692][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.206622][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.225312][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.263781][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.293155][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.414397][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.527105][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.601289][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.723628][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.771342][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.788682][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.827321][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.853177][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.919612][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.956707][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.005214][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.083061][ T942] usb 3-1: USB disconnect, device number 17 [ 272.090191][ T8039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.131037][ T8039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.161069][ T8039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.178189][ T8039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.682193][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.716578][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.846557][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.868095][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.045379][ T5265] gspca_ov534_9: reg_w failed -71 [ 273.257115][ T8307] openvswitch: netlink: ct_state flags 00000300 unsupported [ 273.406627][ T5265] gspca_ov534_9: Unknown sensor 0000 [ 273.406740][ T5265] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 273.519762][ T5265] usb 2-1: USB disconnect, device number 9 [ 273.936230][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 274.184226][ T8308] delete_channel: no stack [ 274.192920][ T8308] delete_channel: no stack [ 274.248705][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.280968][ T8] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.306161][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.334438][ T8] usb 5-1: config 0 descriptor?? [ 274.780211][ T8] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 274.859482][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input7 [ 275.042363][ T8356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.617'. [ 275.094213][ T8] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 275.389938][ T942] usb 5-1: USB disconnect, device number 12 [ 275.729269][ T8372] netlink: 'syz.2.620': attribute type 12 has an invalid length. [ 278.247261][ T942] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 278.360430][ T8451] batadv0: mtu less than device minimum [ 278.486148][ T942] usb 3-1: Using ep0 maxpacket: 8 [ 278.499349][ T942] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 278.534942][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 278.569081][ T942] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 278.596803][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.626113][ T942] usb 3-1: Product: syz [ 278.636697][ T942] usb 3-1: Manufacturer: syz [ 278.641431][ T942] usb 3-1: SerialNumber: syz [ 278.668115][ T942] usb 3-1: config 0 descriptor?? [ 278.692287][ T942] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 278.750908][ T8466] netlink: 'syz.0.646': attribute type 12 has an invalid length. [ 278.760682][ T8466] netlink: 'syz.0.646': attribute type 11 has an invalid length. [ 278.769270][ T8466] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.646'. [ 278.806170][ T5320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.910907][ T942] usb 3-1: USB disconnect, device number 18 [ 279.018615][ T5320] usb 2-1: Using ep0 maxpacket: 16 [ 279.034671][ T5320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.069602][ T5320] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 279.086201][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.104176][ T5320] usb 2-1: Product: syz [ 279.116320][ T5320] usb 2-1: Manufacturer: syz [ 279.121187][ T5320] usb 2-1: SerialNumber: syz [ 279.145212][ T5320] usb 2-1: config 0 descriptor?? [ 279.767247][ T8488] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 279.784612][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 280.345258][ T8494] bridge0: port 3(bond0) entered blocking state [ 280.354435][ T8494] bridge0: port 3(bond0) entered disabled state [ 280.365060][ T8494] bond0: entered allmulticast mode [ 280.370816][ T8494] bond_slave_0: entered allmulticast mode [ 280.385590][ T8494] bond_slave_1: entered allmulticast mode [ 280.410743][ T8494] bond0: entered promiscuous mode [ 280.416310][ T8494] bond_slave_0: entered promiscuous mode [ 280.448288][ T8494] bond_slave_1: entered promiscuous mode [ 280.466777][ T8494] bridge0: port 3(bond0) entered blocking state [ 280.473356][ T8494] bridge0: port 3(bond0) entered forwarding state [ 281.537474][ T5316] usb 2-1: USB disconnect, device number 10 [ 281.792558][ T8513] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 281.939698][ T8519] netlink: 'syz.2.659': attribute type 29 has an invalid length. [ 281.960570][ T8519] netlink: 'syz.2.659': attribute type 37 has an invalid length. [ 281.974836][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 282.112000][ T8523] bridge0: port 3(syz_tun) entered blocking state [ 282.146269][ T942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 282.167212][ T8523] bridge0: port 3(syz_tun) entered disabled state [ 282.193868][ T8523] syz_tun: entered allmulticast mode [ 282.212988][ T8523] syz_tun: entered promiscuous mode [ 282.230814][ T8523] bridge0: port 3(syz_tun) entered blocking state [ 282.237553][ T8523] bridge0: port 3(syz_tun) entered forwarding state [ 282.386198][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 282.398939][ T942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.431057][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.481743][ T942] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 282.519171][ T942] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 282.536291][ T942] usb 2-1: Manufacturer: syz [ 282.553780][ T942] usb 2-1: config 0 descriptor?? [ 282.572839][ T942] appledisplay 2-1:0.0: Could not find int-in endpoint [ 282.598869][ T942] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 283.086027][ T8553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.673'. [ 283.115517][ T8553] ipt_ECN: cannot use operation on non-tcp rule [ 284.303563][ T29] audit: type=1326 audit(1722904372.161:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.326023][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.393442][ T29] audit: type=1326 audit(1722904372.191:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.469636][ T29] audit: type=1326 audit(1722904372.191:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff14b7764df code=0x7ffc0000 [ 284.540768][ T29] audit: type=1326 audit(1722904372.191:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.562976][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.583799][ T29] audit: type=1326 audit(1722904372.191:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.622163][ T29] audit: type=1326 audit(1722904372.191:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.644234][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.666552][ T29] audit: type=1326 audit(1722904372.191:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.694694][ T29] audit: type=1326 audit(1722904372.191:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 284.718048][ T29] audit: type=1326 audit(1722904372.201:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff14b776390 code=0x7ffc0000 [ 284.743103][ T8572] netlink: 'syz.3.680': attribute type 16 has an invalid length. [ 284.759098][ T29] audit: type=1326 audit(1722904372.201:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b7779f9 code=0x7ffc0000 [ 285.021286][ T5316] usb 2-1: USB disconnect, device number 11 [ 286.925109][ T5268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.940418][ T5268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.981486][ T5268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.010449][ T5268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.026698][ T5268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.043061][ T5268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.286276][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 287.519336][ T8] usb 2-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 287.531019][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.561458][ T8] usb 2-1: config 0 descriptor?? [ 287.575772][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 287.586647][ T8] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 287.589155][ T8611] netlink: 'syz.3.703': attribute type 30 has an invalid length. [ 287.602152][ T8611] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 287.611991][ T8611] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 287.666948][ T8601] chnl_net:caif_netlink_parms(): no params data found [ 287.782283][ T8] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 287.789320][ T8] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 287.800609][ T8] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 287.822061][ T8] usb 2-1: USB disconnect, device number 12 [ 287.867406][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.874919][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.891420][ T8601] bridge_slave_0: entered allmulticast mode [ 287.901763][ T8601] bridge_slave_0: entered promiscuous mode [ 287.928495][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.936926][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.945731][ T8601] bridge_slave_1: entered allmulticast mode [ 287.956479][ T8601] bridge_slave_1: entered promiscuous mode [ 287.967605][ T5265] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 288.098636][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.123974][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.203881][ T8601] team0: Port device team_slave_0 added [ 288.210060][ T5265] usb 5-1: Using ep0 maxpacket: 8 [ 288.218416][ T5265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.231485][ T8601] team0: Port device team_slave_1 added [ 288.238441][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.265212][ T5265] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 288.285680][ T5265] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 288.296988][ T5265] usb 5-1: Manufacturer: syz [ 288.310793][ T5265] usb 5-1: config 0 descriptor?? [ 288.336486][ T5265] appledisplay 5-1:0.0: Could not find int-in endpoint [ 288.353716][ T5265] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 288.402393][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.420207][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.446114][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.486182][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.513961][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.544261][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.626138][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.828342][ T8621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.933424][ T8601] hsr_slave_0: entered promiscuous mode [ 288.950616][ T8601] hsr_slave_1: entered promiscuous mode [ 288.964863][ T8601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.981225][ T8601] Cannot create hsr debugfs directory [ 289.056672][ T5265] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 289.086838][ T54] Bluetooth: hci0: command tx timeout [ 289.136191][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.265140][ T5265] usb 2-1: Using ep0 maxpacket: 8 [ 289.279798][ T8601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.303321][ T5265] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 289.312510][ T5265] usb 2-1: config 179 has no interface number 0 [ 289.326952][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 289.333367][ T5265] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 289.346002][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.367645][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 289.378997][ T5265] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 289.393099][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.413190][ T5265] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 289.425357][ T8] usb 4-1: Product: syz [ 289.431768][ T8] usb 4-1: Manufacturer: syz [ 289.437280][ T5265] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 289.450590][ T8] usb 4-1: SerialNumber: syz [ 289.461842][ T5265] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 289.478721][ T8] usb 4-1: config 0 descriptor?? [ 289.492659][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 289.501424][ T8] pvrusb2: ********** [ 289.505513][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 289.517856][ T5265] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 289.565213][ T8] pvrusb2: Important functionality might not be entirely working. [ 289.574573][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.594784][ T8601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.595123][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 289.622737][ T8] pvrusb2: ********** [ 289.629684][ T8623] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 289.749477][ T2042] pvrusb2: Invalid write control endpoint [ 289.901672][ T8601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.031568][ T8621] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 290.069829][ T8] usb 4-1: USB disconnect, device number 15 [ 290.121281][ T2042] pvrusb2: Invalid write control endpoint [ 290.178404][ T2042] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 290.201918][ T8601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.230168][ T2042] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 290.258550][ T2042] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 290.275970][ T2042] pvrusb2: Device being rendered inoperable [ 290.291741][ T2042] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 290.322100][ T8633] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 290.331959][ T2042] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 290.420403][ T2042] pvrusb2: Attached sub-driver cx25840 [ 290.436030][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.459611][ T2042] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 290.532266][ T8633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 290.546246][ T2042] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 290.582774][ T8634] netlink: 188 bytes leftover after parsing attributes in process `syz.1.698'. [ 290.722923][ T5320] usb 2-1: USB disconnect, device number 13 [ 290.723022][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 290.737309][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 290.746390][ C0] ================================================================== [ 290.754478][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8d1/0x980 [ 290.762585][ C0] Read of size 1 at addr ffff8880204e8891 by task kworker/0:5/5316 [ 290.770488][ C0] [ 290.772800][ C0] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:5 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 290.783542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 290.793584][ C0] Workqueue: events_power_efficient check_lifetime [ 290.800081][ C0] Call Trace: [ 290.803347][ C0] [ 290.806179][ C0] dump_stack_lvl+0x241/0x360 [ 290.810852][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.816046][ C0] ? __pfx__printk+0x10/0x10 [ 290.820651][ C0] ? _printk+0xd5/0x120 [ 290.824817][ C0] ? __virt_addr_valid+0x183/0x530 [ 290.829936][ C0] ? __virt_addr_valid+0x183/0x530 [ 290.835072][ C0] print_report+0x169/0x550 [ 290.839569][ C0] ? __virt_addr_valid+0x183/0x530 [ 290.844672][ C0] ? __virt_addr_valid+0x183/0x530 [ 290.849771][ C0] ? __virt_addr_valid+0x45f/0x530 [ 290.854872][ C0] ? __phys_addr+0xba/0x170 [ 290.859364][ C0] ? register_lock_class+0x8d1/0x980 [ 290.864644][ C0] kasan_report+0x143/0x180 [ 290.869148][ C0] ? register_lock_class+0x8d1/0x980 [ 290.874433][ C0] register_lock_class+0x8d1/0x980 [ 290.879544][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 290.885188][ C0] ? __lock_acquire+0x137a/0x2040 [ 290.890209][ C0] __lock_acquire+0xf0/0x2040 [ 290.894888][ C0] lock_acquire+0x1ed/0x550 [ 290.899398][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 290.904768][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 290.909792][ C0] ? __usb_hcd_giveback_urb+0x42c/0x6e0 [ 290.915337][ C0] ? __pfx_lock_release+0x10/0x10 [ 290.920353][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.925540][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 290.931013][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 290.936302][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 290.941669][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 290.947559][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 290.953450][ C0] __wake_up_common_lock+0x25/0x1e0 [ 290.958650][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 290.964020][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 290.969914][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 290.975125][ C0] dummy_timer+0x830/0x45a0 [ 290.979638][ C0] ? __pfx_lock_release+0x10/0x10 [ 290.984668][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.991077][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 290.996460][ C0] ? __pfx_lock_release+0x10/0x10 [ 291.001570][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.006767][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 291.011702][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 291.016738][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 291.021930][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 291.027914][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 291.033624][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 291.039689][ C0] hrtimer_interrupt+0x396/0x990 [ 291.044625][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 291.050611][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 291.056242][ C0] [ 291.059161][ C0] [ 291.062079][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.068056][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 291.073334][ C0] Code: 2b 00 74 08 4c 89 f7 e8 2a f3 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 291.092930][ C0] RSP: 0018:ffffc900040379e0 EFLAGS: 00000206 [ 291.098987][ C0] RAX: 0000000000000001 RBX: 1ffff92000806f48 RCX: a92f17a0f6b3ce00 [ 291.106947][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605d00 [ 291.114909][ C0] RBP: ffffc90004037b38 R08: ffffffff9372c807 R09: 1ffffffff26e5900 [ 291.122872][ C0] R10: dffffc0000000000 R11: fffffbfff26e5901 R12: 1ffff92000806f44 [ 291.130846][ C0] R13: dffffc0000000000 R14: ffffc90004037a40 R15: 0000000000000246 [ 291.138838][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 291.143865][ C0] ? check_lifetime+0x73/0x960 [ 291.148623][ C0] ? __pfx_lock_release+0x10/0x10 [ 291.153647][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.159626][ C0] check_lifetime+0x94/0x960 [ 291.164212][ C0] ? check_lifetime+0x73/0x960 [ 291.168974][ C0] ? check_lifetime+0x73/0x960 [ 291.173738][ C0] ? process_scheduled_works+0x945/0x1830 [ 291.179470][ C0] process_scheduled_works+0xa2c/0x1830 [ 291.185043][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.191017][ C0] ? assign_work+0x364/0x3d0 [ 291.195601][ C0] worker_thread+0x86d/0xd40 [ 291.200225][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 291.206114][ C0] ? __kthread_parkme+0x169/0x1d0 [ 291.211134][ C0] ? __pfx_worker_thread+0x10/0x10 [ 291.216239][ C0] kthread+0x2f0/0x390 [ 291.220302][ C0] ? __pfx_worker_thread+0x10/0x10 [ 291.225405][ C0] ? __pfx_kthread+0x10/0x10 [ 291.229989][ C0] ret_from_fork+0x4b/0x80 [ 291.234400][ C0] ? __pfx_kthread+0x10/0x10 [ 291.239073][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.243864][ C0] [ 291.246874][ C0] [ 291.249181][ C0] Allocated by task 5265: [ 291.253600][ C0] kasan_save_track+0x3f/0x80 [ 291.258272][ C0] __kasan_kmalloc+0x98/0xb0 [ 291.262855][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 291.268212][ C0] xpad_probe+0x3c8/0x1b90 [ 291.272614][ C0] usb_probe_interface+0x645/0xbb0 [ 291.277715][ C0] really_probe+0x2b8/0xad0 [ 291.282203][ C0] __driver_probe_device+0x1a2/0x390 [ 291.287478][ C0] driver_probe_device+0x50/0x430 [ 291.292486][ C0] __device_attach_driver+0x2d6/0x530 [ 291.297862][ C0] bus_for_each_drv+0x24e/0x2e0 [ 291.302705][ C0] __device_attach+0x333/0x520 [ 291.307453][ C0] bus_probe_device+0x189/0x260 [ 291.312290][ C0] device_add+0x856/0xbf0 [ 291.316602][ C0] usb_set_configuration+0x1976/0x1fb0 [ 291.322049][ C0] usb_generic_driver_probe+0x88/0x140 [ 291.327497][ C0] usb_probe_device+0x1b8/0x380 [ 291.332356][ C0] really_probe+0x2b8/0xad0 [ 291.336846][ C0] __driver_probe_device+0x1a2/0x390 [ 291.342116][ C0] driver_probe_device+0x50/0x430 [ 291.347129][ C0] __device_attach_driver+0x2d6/0x530 [ 291.352490][ C0] bus_for_each_drv+0x24e/0x2e0 [ 291.357367][ C0] __device_attach+0x333/0x520 [ 291.362129][ C0] bus_probe_device+0x189/0x260 [ 291.366979][ C0] device_add+0x856/0xbf0 [ 291.371308][ C0] usb_new_device+0x104a/0x19a0 [ 291.376312][ C0] hub_event+0x2d6a/0x5150 [ 291.380727][ C0] process_scheduled_works+0xa2c/0x1830 [ 291.386265][ C0] worker_thread+0x86d/0xd40 [ 291.390860][ C0] kthread+0x2f0/0x390 [ 291.394930][ C0] ret_from_fork+0x4b/0x80 [ 291.399377][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.404140][ C0] [ 291.406452][ C0] Freed by task 5320: [ 291.410429][ C0] kasan_save_track+0x3f/0x80 [ 291.415101][ C0] kasan_save_free_info+0x40/0x50 [ 291.420127][ C0] poison_slab_object+0xe0/0x150 [ 291.425067][ C0] __kasan_slab_free+0x37/0x60 [ 291.429823][ C0] kfree+0x149/0x360 [ 291.433706][ C0] xpad_disconnect+0x359/0x490 [ 291.438462][ C0] usb_unbind_interface+0x25e/0x940 [ 291.443653][ C0] device_release_driver_internal+0x503/0x7c0 [ 291.449712][ C0] bus_remove_device+0x34f/0x420 [ 291.454647][ C0] device_del+0x57a/0x9b0 [ 291.458972][ C0] usb_disable_device+0x3bf/0x850 [ 291.464015][ C0] usb_disconnect+0x340/0x950 [ 291.468708][ C0] hub_event+0x1eb9/0x5150 [ 291.473119][ C0] process_scheduled_works+0xa2c/0x1830 [ 291.478653][ C0] worker_thread+0x86d/0xd40 [ 291.483242][ C0] kthread+0x2f0/0x390 [ 291.487304][ C0] ret_from_fork+0x4b/0x80 [ 291.491903][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.496774][ C0] [ 291.499100][ C0] The buggy address belongs to the object at ffff8880204e8800 [ 291.499100][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 291.513157][ C0] The buggy address is located 145 bytes inside of [ 291.513157][ C0] freed 1024-byte region [ffff8880204e8800, ffff8880204e8c00) [ 291.527026][ C0] [ 291.529339][ C0] The buggy address belongs to the physical page: [ 291.535744][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x204e8 [ 291.544492][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 291.553084][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 291.560620][ C0] page_type: 0xfdffffff(slab) [ 291.565304][ C0] raw: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 291.573878][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 291.582450][ C0] head: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 291.591110][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 291.599769][ C0] head: 00fff00000000003 ffffea0000813a01 ffffffffffffffff 0000000000000000 [ 291.608513][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 291.617270][ C0] page dumped because: kasan: bad access detected [ 291.623783][ C0] page_owner tracks the page as allocated [ 291.629483][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 123597743292, free_ts 123578286414 [ 291.649965][ C0] post_alloc_hook+0x1f3/0x230 [ 291.654727][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 291.660376][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 291.665572][ C0] alloc_slab_page+0x5f/0x120 [ 291.670259][ C0] allocate_slab+0x5a/0x2f0 [ 291.674756][ C0] ___slab_alloc+0xcd1/0x14b0 [ 291.679422][ C0] __slab_alloc+0x58/0xa0 [ 291.683750][ C0] __kmalloc_noprof+0x25a/0x400 [ 291.688602][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 291.694403][ C0] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 291.700464][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 291.705684][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 291.710789][ C0] process_scheduled_works+0xa2c/0x1830 [ 291.716327][ C0] worker_thread+0x86d/0xd40 [ 291.720911][ C0] kthread+0x2f0/0x390 [ 291.725062][ C0] ret_from_fork+0x4b/0x80 [ 291.729473][ C0] page last free pid 5279 tgid 5279 stack trace: [ 291.735786][ C0] free_unref_page+0xd22/0xea0 [ 291.740545][ C0] __put_partials+0xeb/0x130 [ 291.745125][ C0] put_cpu_partial+0x17c/0x250 [ 291.749880][ C0] __slab_free+0x2ea/0x3d0 [ 291.754375][ C0] qlist_free_all+0x9e/0x140 [ 291.758958][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 291.764412][ C0] __kasan_slab_alloc+0x23/0x80 [ 291.769260][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 291.774710][ C0] getname_flags+0xb7/0x540 [ 291.779201][ C0] __x64_sys_mkdirat+0x7a/0xa0 [ 291.783958][ C0] do_syscall_64+0xf3/0x230 [ 291.788457][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.794342][ C0] [ 291.796654][ C0] Memory state around the buggy address: [ 291.802268][ C0] ffff8880204e8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 291.810323][ C0] ffff8880204e8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.818383][ C0] >ffff8880204e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.826431][ C0] ^ [ 291.831008][ C0] ffff8880204e8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.839061][ C0] ffff8880204e8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.847106][ C0] ================================================================== [ 291.855269][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.862557][ C0] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:5 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 291.873306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 291.883352][ C0] Workqueue: events_power_efficient check_lifetime [ 291.889854][ C0] Call Trace: [ 291.893129][ C0] [ 291.895965][ C0] dump_stack_lvl+0x241/0x360 [ 291.900661][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.905857][ C0] ? __pfx__printk+0x10/0x10 [ 291.910463][ C0] ? rcu_is_watching+0x15/0xb0 [ 291.915227][ C0] ? lock_release+0xbf/0xa30 [ 291.919814][ C0] ? vscnprintf+0x5d/0x90 [ 291.924136][ C0] panic+0x349/0x860 [ 291.928031][ C0] ? check_panic_on_warn+0x21/0xb0 [ 291.933136][ C0] ? __pfx_panic+0x10/0x10 [ 291.937549][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.942742][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 291.948650][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.954973][ C0] ? print_report+0x502/0x550 [ 291.959650][ C0] check_panic_on_warn+0x86/0xb0 [ 291.964580][ C0] ? register_lock_class+0x8d1/0x980 [ 291.969880][ C0] end_report+0x77/0x160 [ 291.974141][ C0] kasan_report+0x154/0x180 [ 291.978658][ C0] ? register_lock_class+0x8d1/0x980 [ 291.983953][ C0] register_lock_class+0x8d1/0x980 [ 291.989069][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 291.994704][ C0] ? __lock_acquire+0x137a/0x2040 [ 291.999729][ C0] __lock_acquire+0xf0/0x2040 [ 292.004413][ C0] lock_acquire+0x1ed/0x550 [ 292.008915][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 292.014294][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 292.019318][ C0] ? __usb_hcd_giveback_urb+0x42c/0x6e0 [ 292.024864][ C0] ? __pfx_lock_release+0x10/0x10 [ 292.029885][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.035084][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 292.040557][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 292.045849][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 292.051228][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 292.057121][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 292.063018][ C0] __wake_up_common_lock+0x25/0x1e0 [ 292.068242][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 292.073618][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 292.079510][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.084707][ C0] dummy_timer+0x830/0x45a0 [ 292.089208][ C0] ? __pfx_lock_release+0x10/0x10 [ 292.094256][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.100580][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 292.105961][ C0] ? __pfx_lock_release+0x10/0x10 [ 292.110987][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.116181][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 292.121115][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 292.126047][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 292.131239][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 292.137225][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 292.142957][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 292.149021][ C0] hrtimer_interrupt+0x396/0x990 [ 292.153962][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 292.159940][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 292.165567][ C0] [ 292.168507][ C0] [ 292.171427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.177420][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 292.182699][ C0] Code: 2b 00 74 08 4c 89 f7 e8 2a f3 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 292.202314][ C0] RSP: 0018:ffffc900040379e0 EFLAGS: 00000206 [ 292.208389][ C0] RAX: 0000000000000001 RBX: 1ffff92000806f48 RCX: a92f17a0f6b3ce00 [ 292.216351][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605d00 [ 292.224314][ C0] RBP: ffffc90004037b38 R08: ffffffff9372c807 R09: 1ffffffff26e5900 [ 292.232278][ C0] R10: dffffc0000000000 R11: fffffbfff26e5901 R12: 1ffff92000806f44 [ 292.240241][ C0] R13: dffffc0000000000 R14: ffffc90004037a40 R15: 0000000000000246 [ 292.248214][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 292.253259][ C0] ? check_lifetime+0x73/0x960 [ 292.258017][ C0] ? __pfx_lock_release+0x10/0x10 [ 292.263038][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.269018][ C0] check_lifetime+0x94/0x960 [ 292.273601][ C0] ? check_lifetime+0x73/0x960 [ 292.278359][ C0] ? check_lifetime+0x73/0x960 [ 292.283117][ C0] ? process_scheduled_works+0x945/0x1830 [ 292.288827][ C0] process_scheduled_works+0xa2c/0x1830 [ 292.294379][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.300357][ C0] ? assign_work+0x364/0x3d0 [ 292.304972][ C0] worker_thread+0x86d/0xd40 [ 292.309556][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 292.315441][ C0] ? __kthread_parkme+0x169/0x1d0 [ 292.320464][ C0] ? __pfx_worker_thread+0x10/0x10 [ 292.325567][ C0] kthread+0x2f0/0x390 [ 292.329633][ C0] ? __pfx_worker_thread+0x10/0x10 [ 292.334739][ C0] ? __pfx_kthread+0x10/0x10 [ 292.339347][ C0] ret_from_fork+0x4b/0x80 [ 292.343777][ C0] ? __pfx_kthread+0x10/0x10 [ 292.348367][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.353134][ C0] [ 293.495304][ C0] Shutting down cpus with NMI [ 293.500385][ C0] Kernel Offset: disabled [ 293.504812][ C0] Rebooting in 86400 seconds..