last executing test programs: 10.457827134s ago: executing program 2 (id=1919): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007001a000900", 0x33a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0000003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d805000600000000001300020062"], 0x270}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'ip_vti0\x00', &(0x7f0000001b00)={'syztnl2\x00', 0x0, 0x40, 0xa0, 0x1, 0x7, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x9b, [@local, @empty, @rand_addr=0x8, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0xf, 0x77, [@empty, @empty, @empty]}, @cipso={0x86, 0x28, 0x3, [{0x5, 0x2}, {0x7, 0x12, "ab7182d5c4aef2fadfcf4f886c6ceefb"}, {0x1, 0xe, "3ea67f55e00719bd3ec61a3c"}]}, @timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x6}]}, @rr={0x7, 0xb, 0x18, [@local, @empty]}, @lsrr={0x83, 0x17, 0x60, [@broadcast, @broadcast, @empty, @multicast1, @broadcast]}, @cipso={0x86, 0x14, 0x0, [{0x6, 0xe, "9646003a66d81c0caa0e3b9b"}]}, @ra={0x94, 0x4}]}}}}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@loopback, {@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001c00)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}], 0x4}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f0000001700)=""/94, 0x5e}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.079993079s ago: executing program 0 (id=1928): socket$inet(0x2, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndrcv={0x30}, @authinfo={0x18}], 0x48}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = accept(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x1000f0000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff4d, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) 6.515433666s ago: executing program 2 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) times(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) dup3(r6, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da29b5408205c4005fac000000010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) munlock(&(0x7f0000fde000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0xc}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 3.524046019s ago: executing program 1 (id=1945): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.401875909s ago: executing program 2 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 3.392174251s ago: executing program 0 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x548) 3.387003228s ago: executing program 1 (id=1948): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x42d3f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@gettaction={0x60, 0x32, 0x6620c249b5bcdf6f, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x60}}, 0x4000044) r4 = fanotify_init(0x0, 0x0) r5 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xc9\xa7\xb1S\x80:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\x1c\rt\xe6\n\x02\x9c\x02)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb7\xc1\x00\x00\x00\x00\x00\x00$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcd\xcax\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3}\xc4\x1e \x10\x9d\x94:\x18;;\xb6\xdc\xa3m\xb8\xc9CN\xd1\xcf\xc10\x8a\xee,\x7f\x91\xf7\xf7\xad)\xdbb\r @\xb8\x93\xd8\xd7\xe3\x0476\n\xe0\x0e\xcez\xc1z\xd8\xd4\xbc#;\x18\xe1\xc1Z\xf7\x8c-\xea\f\r!\xde\xa7\x99\xfc%Q\x89\xc5\xce O\xc6\xdd\x0f\xc5\xd3Y\xd8\a\xcclX\xb1}\xde\x15p\xae\f\xc02\x1a\x82\x97\\Z\xb6:\x9c\x9b\xde=\x85v\bY\x87\x12Br\xf4\xee\x1f\fA\xa6z\x8b\fs)[\x8e\xb4\xe7\x91\xa3\xca\xff\xbf<\xd1\xbc8\x06\xa1\xcd_\xa7\xdaZ\xab\x17\xb4\xebZoX\\\xc26\xb5f\xf8\xa6\xb8\x8e\xe6\xab\x17Wh\xb4(\x1b\xe1\xec\xd3I\xb1x0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.081301075s ago: executing program 2 (id=1954): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b0a2a7cf704005cd"}}, 0x48}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x2}, 0x40) unshare(0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6f8f1b7e3e806009"}}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000000000002000006040000000100000000000000feffffff030000000061"], 0x0, 0x3b}, 0x20) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) 2.075832224s ago: executing program 3 (id=1955): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000540)='d', 0x1}) 2.000323476s ago: executing program 1 (id=1956): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x80045432, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2882, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00'}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e2b0204000000000000000001b0000100aaaaaaaaaa000000070000000000000000000003"], 0x2e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1e8, 0x2a8, 0x2a8, 0x1e8, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x110, 0x130, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@limit={{0x48}, {0xde, 0x400, 0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28, '\x00', 0x6}}}}, 0x2e0) mmap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0x7f0f2000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) dup(r2) r3 = epoll_create1(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x80401) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0xc0002015}) ppoll(&(0x7f0000000440)=[{r3}], 0x1, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x100af1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private}}, 0x4}, 0x90) 1.847945016s ago: executing program 0 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) times(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) dup3(r6, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da29b5408205c4005fac000000010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) munlock(&(0x7f0000fde000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0xc}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 1.847437813s ago: executing program 3 (id=1958): getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) epoll_create(0x47f) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x240480, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x48, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x48}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000100)={0x3, r7, 0x80000001, 0x7ffffe02, 0xb, 0x1fd, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.837429016s ago: executing program 2 (id=1959): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="042ffb03"], 0x2fe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b1cf", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140d00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='sy\x001'], 0x4) socket$igmp(0x2, 0x3, 0x2) close_range(r2, r1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x4f565559}}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406"], 0x0) 1.718160051s ago: executing program 4 (id=1960): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}], 0xa, "67e7303689fabc025796b7d4479ec2194f78b28f127d6653711308e9df8c17aabe71bf985844aa44e3ca09b06c3ec760395952c329c25b0289572079141869c6aa5e644810ec6f2506a8102f005974298fb90cac499570dd0c93583dc5aca78c9fc66e53b0e2413cb5e44fe719516e"}, 0xa6) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 1.659212555s ago: executing program 4 (id=1961): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @func_proto]}, {0x0, [0x0, 0x61]}}, &(0x7f0000002b80)=""/244, 0x44, 0xf4, 0x1}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x48}}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x1, &(0x7f0000000180)=[{}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.544294515s ago: executing program 1 (id=1962): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff}}}}]}, 0x88}}, 0x0) 1.40866265s ago: executing program 1 (id=1963): pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d001034e90102030109021b0002060000000904a900005943bf000904"], 0x0) creat(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020}, 0x91) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = io_uring_setup(0x5c01, &(0x7f0000000240)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaa08aaaaaaaa948d9317aa8863"], 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x1b}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 897.045455ms ago: executing program 3 (id=1964): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d870000000000"], 0xa0}}, 0x0) 697.688303ms ago: executing program 4 (id=1965): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000064"], 0xe0}}, 0x0) io_uring_setup(0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 605.048822ms ago: executing program 3 (id=1966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/117}, 0xfffffe50, 0x0, 0x0) msgget(0x1, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000640)={0x2}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 428.165146ms ago: executing program 4 (id=1967): prctl$PR_SET_SECCOMP(0x7, 0x0, 0x0) 329.86777ms ago: executing program 3 (id=1968): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000540)='d', 0x1}) 198.813348ms ago: executing program 4 (id=1969): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b0a2a7cf704005cd"}}, 0x48}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x2}, 0x40) unshare(0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6f8f1b7e3e806009"}}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000000000002000006040000000100000000000000feffffff030000000061"], 0x0, 0x3b}, 0x20) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) 198.17556ms ago: executing program 3 (id=1970): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/14, 0xe}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=1971): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}], 0xa, "67e7303689fabc025796b7d4479ec2194f78b28f127d6653711308e9df8c17aabe71bf985844aa44e3ca09b06c3ec760395952c329c25b0289572079141869c6aa5e644810ec6f2506a8102f005974298fb90cac499570dd0c93583dc5aca78c9fc66e53b0e2413cb5e44fe719516e"}, 0xa6) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) kernel console output (not intermixed with test programs): 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.076066][ T5261] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.085449][ T5261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.102092][ T5261] usb 2-1: config 0 descriptor?? [ 403.278963][T10076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 403.777509][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.786253][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.349208][ T5261] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 404.359835][ T5261] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 404.371041][ T5261] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 404.640889][T10137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 406.828021][ T5264] usb 2-1: USB disconnect, device number 17 [ 407.022427][T10154] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1306'. [ 407.037599][ T5227] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 407.062315][T10154] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1306'. [ 407.079272][T10154] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1306'. [ 407.312437][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 407.617709][T10163] syz.2.1306 (10163): attempted to duplicate a private mapping with mremap. This is not supported. [ 408.333098][T10174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.341848][ T5227] Bluetooth: hci4: Malformed LE Event: 0x1d [ 408.437770][T10174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1314'. [ 410.575921][T10187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 411.327066][ T5264] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 412.463911][ T5227] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 412.471204][T10212] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1326'. [ 412.499195][T10212] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1326'. [ 412.531788][T10212] netlink: 81 bytes leftover after parsing attributes in process `syz.4.1326'. [ 412.627750][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 412.986878][T10228] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 412.995182][T10228] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1331'. [ 414.604149][T10259] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 414.622512][T10259] netlink: 3440 bytes leftover after parsing attributes in process `syz.3.1342'. [ 414.640455][T10259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1342'. [ 415.008412][T10263] xt_CONNSECMARK: invalid mode: 0 [ 415.008524][T10259] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 415.517247][T10259] netlink: 5888 bytes leftover after parsing attributes in process `syz.3.1342'. [ 416.138795][ T5264] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 416.387290][ T5264] usb 2-1: Using ep0 maxpacket: 32 [ 416.417135][ T5264] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 416.485704][ T5264] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 416.521832][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.542682][T10290] libceph: resolve '400' (ret=-3): failed [ 416.572144][ T5264] usb 2-1: Product: syz [ 416.576356][ T5264] usb 2-1: Manufacturer: syz [ 416.617293][ T5264] usb 2-1: SerialNumber: syz [ 416.655421][ T5264] usb 2-1: config 0 descriptor?? [ 416.689008][T10277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 416.722860][ T5264] hub 2-1:0.0: bad descriptor, ignoring hub [ 416.757198][ T5264] hub 2-1:0.0: probe with driver hub failed with error -5 [ 416.792479][ T5264] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 417.272824][ T25] usb 2-1: USB disconnect, device number 18 [ 417.272941][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 419.748041][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1370'. [ 420.598173][T10350] cgroup: fork rejected by pids controller in /syz1 [ 420.927933][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 421.371871][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 421.607802][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 421.619105][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.651566][ T8] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=cf.27 [ 421.674626][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.692898][ T8] usb 5-1: Product: syz [ 421.697380][ T8] usb 5-1: Manufacturer: syz [ 421.702141][ T8] usb 5-1: SerialNumber: syz [ 421.713494][ T8] usb 5-1: config 0 descriptor?? [ 421.722210][ T8] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 421.814013][ C0] eth0: bad gso: type: 1, size: 1408 [ 421.972564][ T5265] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 422.064471][ T5261] usb 5-1: USB disconnect, device number 24 [ 422.179305][ T5265] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 422.212939][ T5265] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 422.242545][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.296400][ T5265] usb 3-1: Product: syz [ 422.308656][ T5265] usb 3-1: Manufacturer: syz [ 422.313311][ T5265] usb 3-1: SerialNumber: syz [ 422.624895][ T5265] qmi_wwan 3-1:1.0: skipping garbage [ 422.660559][ T5265] qmi_wwan 3-1:1.0: probe with driver qmi_wwan failed with error -22 [ 422.780933][ T5265] usb 3-1: USB disconnect, device number 8 [ 423.846968][ T4607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.956192][ T4607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.967551][ T4607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.989834][ T4607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.998829][ T4607] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 424.006534][ T4607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.251934][T10404] cgroup: fork rejected by pids controller in /syz2 [ 424.538623][T10396] chnl_net:caif_netlink_parms(): no params data found [ 424.879779][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.906161][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.921421][T10396] bridge_slave_0: entered allmulticast mode [ 424.930575][T10396] bridge_slave_0: entered promiscuous mode [ 424.946276][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.955227][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.980365][T10396] bridge_slave_1: entered allmulticast mode [ 425.004744][T10396] bridge_slave_1: entered promiscuous mode [ 425.136839][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 425.143311][ T29] audit: type=1326 audit(1722304650.042:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10420 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85d77299 code=0x7fc00000 [ 425.185127][ T29] audit: type=1326 audit(1722304650.052:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10420 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbd85d77299 code=0x7fc00000 [ 425.207112][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.232151][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.388443][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.481736][T10396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.560290][T10396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.795475][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.138545][ T4607] Bluetooth: hci0: command tx timeout [ 426.335095][ T29] audit: type=1326 audit(1722304651.232:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10420 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85d77299 code=0x7fc00000 [ 426.359556][ T4607] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 426.458961][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.509834][T10396] team0: Port device team_slave_0 added [ 426.539253][T10436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1398'. [ 426.591409][T10436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1398'. [ 426.625260][T10436] netlink: 81 bytes leftover after parsing attributes in process `syz.4.1398'. [ 426.661335][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.676974][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.703456][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.712398][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.722176][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.729720][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.738258][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 426.989882][T10396] team0: Port device team_slave_1 added [ 427.599989][T10396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.607027][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.647380][T10396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.667046][T10396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.683133][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.715604][T10396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.907233][ T5264] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 427.925954][T10396] hsr_slave_0: entered promiscuous mode [ 427.934280][T10396] hsr_slave_1: entered promiscuous mode [ 427.945909][T10396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.955859][T10396] Cannot create hsr debugfs directory [ 427.971690][ T35] bridge_slave_1: left allmulticast mode [ 427.985955][ T35] bridge_slave_1: left promiscuous mode [ 427.998667][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.010314][ T35] bridge_slave_0: left allmulticast mode [ 428.016382][ T35] bridge_slave_0: left promiscuous mode [ 428.022839][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.119043][ T5264] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 428.154602][ T5264] usb 5-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 428.171815][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.201954][ T5264] usb 5-1: Product: syz [ 428.209691][ T5264] usb 5-1: Manufacturer: syz [ 428.214617][ T5264] usb 5-1: SerialNumber: syz [ 428.217235][ T5227] Bluetooth: hci0: command tx timeout [ 428.495228][ T5264] qmi_wwan 5-1:1.0: skipping garbage [ 428.508729][ T5264] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 428.527017][ T5264] usb 5-1: USB disconnect, device number 25 [ 428.780762][ T5227] Bluetooth: hci3: command tx timeout [ 428.956251][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.977708][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.998882][ T35] bond0 (unregistering): Released all slaves [ 430.569152][ T5227] Bluetooth: hci0: command tx timeout [ 430.857738][ T5227] Bluetooth: hci3: command tx timeout [ 430.912232][T10396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.205062][ T35] hsr_slave_0: left promiscuous mode [ 431.221011][ T35] hsr_slave_1: left promiscuous mode [ 431.228638][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.236306][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.268050][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.285024][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.331832][ T35] veth1_macvtap: left promiscuous mode [ 431.345917][ T35] veth0_macvtap: left promiscuous mode [ 431.352911][ T35] veth1_vlan: left promiscuous mode [ 431.359856][ T35] veth0_vlan: left promiscuous mode [ 431.693193][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 431.905771][ T9] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 431.943062][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 431.955539][ T35] team0 (unregistering): Port device team_slave_1 removed [ 431.963041][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.984738][ T9] usb 4-1: Product: syz [ 431.989625][ T9] usb 4-1: Manufacturer: syz [ 431.994259][ T9] usb 4-1: SerialNumber: syz [ 432.056617][ T35] team0 (unregistering): Port device team_slave_0 removed [ 432.623528][ T5227] Bluetooth: hci0: command tx timeout [ 432.748252][T10396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.769578][ T9] qmi_wwan 4-1:1.0: skipping garbage [ 432.785805][ T9] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22 [ 432.805456][ T9] usb 4-1: USB disconnect, device number 18 [ 432.937366][ T5227] Bluetooth: hci3: command tx timeout [ 432.978111][T10396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.017695][T10442] chnl_net:caif_netlink_parms(): no params data found [ 433.293405][T10396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.140958][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.148252][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.164995][T10442] bridge_slave_0: entered allmulticast mode [ 434.173392][T10442] bridge_slave_0: entered promiscuous mode [ 434.186158][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.203400][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.219620][T10442] bridge_slave_1: entered allmulticast mode [ 434.236076][T10442] bridge_slave_1: entered promiscuous mode [ 434.323661][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.382363][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.455002][ T35] IPVS: stop unused estimator thread 0... [ 434.475635][T10442] team0: Port device team_slave_0 added [ 434.516845][T10442] team0: Port device team_slave_1 added [ 434.531242][T10396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.545721][T10396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.586560][T10396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.610642][T10396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.631189][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.640751][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.685367][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.710636][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.718885][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.745084][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.757486][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.875922][T10442] hsr_slave_0: entered promiscuous mode [ 434.888863][T10442] hsr_slave_1: entered promiscuous mode [ 435.018574][ T5227] Bluetooth: hci3: command tx timeout [ 435.170333][T10396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.359051][T10396] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.451722][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.458999][ T9781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.493331][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.500570][ T9781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.187580][ T9781] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 436.808303][ T9781] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 436.829567][T10442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.836766][ T9781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.860121][T10569] batadv_slave_1: entered promiscuous mode [ 436.866451][ T9781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.883271][T10568] batadv_slave_1: left promiscuous mode [ 436.890219][ T9781] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 436.917885][T10442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.941538][T10442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.949393][ T9781] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 436.967212][ T9781] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 436.975524][ T9781] usb 1-1: Manufacturer: syz [ 436.984144][T10442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.008264][ T9781] usb 1-1: config 0 descriptor?? [ 437.095347][T10396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.276910][T10396] veth0_vlan: entered promiscuous mode [ 437.330924][T10396] veth1_vlan: entered promiscuous mode [ 437.401273][T10396] veth0_macvtap: entered promiscuous mode [ 437.423762][T10396] veth1_macvtap: entered promiscuous mode [ 437.438946][ T9781] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 437.476446][ T9781] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 437.509517][ T9781] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 437.535679][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.555817][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.573217][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.595094][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.616584][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.650143][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.663288][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.680390][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.695142][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.706966][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.718242][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.742830][T10396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.770355][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.781777][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.793622][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.804255][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.804872][ T9] usb 1-1: USB disconnect, device number 15 [ 437.821848][ T5265] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 437.831930][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.844163][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.854412][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.865383][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.875963][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.886762][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.908268][T10396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.937866][T10396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.946705][T10396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.956016][T10396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.965645][T10396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.986173][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.008385][ T5265] usb 4-1: Using ep0 maxpacket: 16 [ 438.025491][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.032685][ T9781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.051451][ T5265] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 438.064755][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.073291][ T5265] usb 4-1: Product: syz [ 438.083700][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.090824][ T9781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.098456][ T5265] usb 4-1: Manufacturer: syz [ 438.103082][ T5265] usb 4-1: SerialNumber: syz [ 438.111061][ T5265] usb 4-1: config 0 descriptor?? [ 438.131587][ T5265] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 438.288593][ T1292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.306517][ T1292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.372459][ T1292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.410693][ T1292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.422079][T10581] input: syz0 as /devices/virtual/input/input15 [ 438.713938][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.054260][ T5265] gp8psk: usb in 128 operation failed. [ 440.135441][ T5265] gp8psk: usb in 137 operation failed. [ 440.145385][ T5265] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 440.163844][ T5265] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 440.304407][ T5265] usb 4-1: USB disconnect, device number 19 [ 440.593788][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.602315][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.647934][T10442] veth0_vlan: entered promiscuous mode [ 440.781351][T10596] xt_CONNSECMARK: invalid mode: 0 [ 441.074467][T10442] veth1_vlan: entered promiscuous mode [ 441.451738][T10442] veth0_macvtap: entered promiscuous mode [ 441.459508][T10613] xt_TCPMSS: Only works on TCP SYN packets [ 441.518405][T10442] veth1_macvtap: entered promiscuous mode [ 441.540223][T10613] overlayfs: missing 'lowerdir' [ 441.555466][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 441.696620][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.744249][ T29] audit: type=1326 audit(1722304666.642:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10614 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf79377299 code=0x7fc00000 [ 441.765968][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.797531][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.808809][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.878390][ T29] audit: type=1326 audit(1722304666.762:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10614 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbf79377299 code=0x7fc00000 [ 441.899958][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.910368][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.965739][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.976748][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.010788][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.045404][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.075119][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.095277][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.131006][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.180396][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.245164][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.332668][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.391199][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.431093][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.442555][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.448909][ T29] audit: type=1326 audit(1722304667.352:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10614 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf79377299 code=0x7fc00000 [ 442.457188][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.513917][T10633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.546495][T10630] xt_CT: No such helper "pptp" [ 442.550713][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.574341][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.629860][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.655663][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.676542][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.716877][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.771242][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.809238][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.871254][T10442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.897985][T10442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.907352][T10442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.916322][T10442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.163861][ T1292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.179785][ T1292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.260407][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.282520][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.417216][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 446.157640][ T8] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 446.205087][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 446.216413][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.218094][ T5261] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 446.454941][ T8] usb 1-1: string descriptor 0 read error: -71 [ 446.467219][ T8] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 446.477147][ T8] usb 1-1: No valid video chain found. [ 446.484835][ T8] usb 1-1: USB disconnect, device number 16 [ 446.517437][ T5261] usb 5-1: Using ep0 maxpacket: 16 [ 446.537558][ T5261] usb 5-1: device descriptor read/all, error -71 [ 446.597846][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 446.834718][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 446.920384][T10683] xt_CT: No such helper "pptp" [ 446.929176][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 446.949046][T10688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.957567][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.987850][ T9] usb 4-1: Product: syz [ 446.992065][ T9] usb 4-1: Manufacturer: syz [ 447.039910][ T9] usb 4-1: SerialNumber: syz [ 447.068186][ T9] usb 4-1: config 0 descriptor?? [ 447.120217][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 447.170224][ T29] audit: type=1800 audit(1722304672.082:267): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1475" name="/" dev="fuse" ino=1 res=0 errno=0 [ 447.334292][ T9] gspca_sn9c2028: read1 error -71 [ 447.357352][ T9] gspca_sn9c2028: read1 error -71 [ 447.367260][ T9] gspca_sn9c2028: read1 error -71 [ 447.372503][ T9] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 447.427370][ T9] usb 4-1: USB disconnect, device number 20 [ 447.529600][T10706] input: syz1 as /devices/virtual/input/input16 [ 447.991809][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 449.423196][T10755] trusted_key: encrypted_key: master key parameter is missing [ 449.646707][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 449.860134][T10762] input: syz1 as /devices/virtual/input/input17 [ 449.918621][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 450.026923][T10763] can0: slcan on ttyprintk. [ 450.397235][ T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 450.637237][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 450.653703][ T47] usb 4-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 450.677051][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.717803][ T47] usb 4-1: config 0 descriptor?? [ 451.146225][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 451.651014][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 452.439787][T10811] netlink: 'syz.4.1524': attribute type 12 has an invalid length. [ 452.590926][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 452.851079][ T5224] usb 4-1: USB disconnect, device number 21 [ 453.069521][T10763] can0 (unregistered): slcan off ttyprintk. [ 453.082516][T10832] mmap: syz.4.1534 (10832): VmData 37462016 exceed data ulimit 40800. Update limits or use boot option ignore_rlimit_data. [ 453.133956][T10828] bond0: entered promiscuous mode [ 453.167463][T10828] bond_slave_0: entered promiscuous mode [ 453.175192][T10828] bond_slave_1: entered promiscuous mode [ 453.778710][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 453.838748][ T5224] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 453.903312][T10859] can0: slcan on ttyprintk. [ 453.955530][ T5227] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 453.957613][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 453.966562][ T5227] CPU: 1 UID: 0 PID: 5227 Comm: kworker/u9:5 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 453.985552][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.995619][ T5227] Workqueue: hci0 hci_rx_work [ 454.000314][ T5227] Call Trace: [ 454.003588][ T5227] [ 454.006536][ T5227] dump_stack_lvl+0x241/0x360 [ 454.011235][ T5227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.016457][ T5227] ? __pfx__printk+0x10/0x10 [ 454.021098][ T5227] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 454.026414][ T5227] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 454.031968][ T5227] sysfs_create_dir_ns+0x2ce/0x3a0 [ 454.037088][ T5227] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 454.042736][ T5227] kobject_add_internal+0x435/0x8d0 [ 454.047946][ T5227] kobject_add+0x152/0x220 [ 454.052385][ T5227] ? do_raw_spin_unlock+0x13c/0x8b0 [ 454.057690][ T5227] ? device_add+0x3e7/0xbf0 [ 454.062197][ T5227] ? __pfx_kobject_add+0x10/0x10 [ 454.067182][ T5227] ? _raw_spin_unlock+0x28/0x50 [ 454.072039][ T5227] ? get_device_parent+0x165/0x410 [ 454.077251][ T5227] device_add+0x4e5/0xbf0 [ 454.081596][ T5227] hci_conn_add_sysfs+0xe8/0x200 [ 454.086627][ T5227] le_conn_complete_evt+0xc9f/0x12e0 [ 454.091925][ T5227] ? trace_contention_end+0x3c/0x120 [ 454.097218][ T5227] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 454.102956][ T5227] ? __mutex_unlock_slowpath+0x21d/0x750 [ 454.108595][ T5227] ? __copy_skb_header+0x437/0x5b0 [ 454.113727][ T5227] ? skb_pull_data+0x112/0x230 [ 454.118500][ T5227] hci_le_enh_conn_complete_evt+0x185/0x420 [ 454.124402][ T5227] hci_event_packet+0xa55/0x1540 [ 454.129376][ T5227] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 454.134669][ T5227] ? __pfx_hci_event_packet+0x10/0x10 [ 454.140043][ T5227] ? do_raw_spin_unlock+0x13c/0x8b0 [ 454.145251][ T5227] ? hci_send_to_monitor+0xd8/0x7f0 [ 454.150446][ T5227] ? kcov_remote_start+0x9e/0x7e0 [ 454.155534][ T5227] hci_rx_work+0x3e8/0xca0 [ 454.160044][ T5227] ? process_scheduled_works+0x945/0x1830 [ 454.165766][ T5227] process_scheduled_works+0xa2c/0x1830 [ 454.171340][ T5227] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.177334][ T5227] ? assign_work+0x364/0x3d0 [ 454.181959][ T5227] worker_thread+0x86d/0xd40 [ 454.186558][ T5227] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 454.192450][ T5227] ? __kthread_parkme+0x169/0x1d0 [ 454.197493][ T5227] ? __pfx_worker_thread+0x10/0x10 [ 454.202622][ T5227] kthread+0x2f0/0x390 [ 454.206700][ T5227] ? __pfx_worker_thread+0x10/0x10 [ 454.211812][ T5227] ? __pfx_kthread+0x10/0x10 [ 454.216429][ T5227] ret_from_fork+0x4b/0x80 [ 454.220903][ T5227] ? __pfx_kthread+0x10/0x10 [ 454.225501][ T5227] ret_from_fork_asm+0x1a/0x30 [ 454.230298][ T5227] [ 454.238475][ T5227] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 454.252808][ T5227] Bluetooth: hci0: failed to register connection device [ 454.307296][ T5224] usb 4-1: Using ep0 maxpacket: 32 [ 454.323263][ T5224] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 454.332211][ T5224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.351133][ T5224] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.360201][ T5224] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 454.369824][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.380795][ T5224] usb 4-1: config 0 descriptor?? [ 454.437319][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 454.558552][ T5305] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 454.633742][T10849] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1541'. [ 454.647421][ T5265] usb 4-1: USB disconnect, device number 22 [ 454.650470][ T8] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 454.681997][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.696826][ T8] usb 5-1: config 0 descriptor?? [ 454.757528][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 454.764844][ T5305] usb 3-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 454.775517][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.795357][ T5305] usb 3-1: config 0 descriptor?? [ 455.360983][T10882] xt_CONNSECMARK: invalid mode: 0 [ 456.137264][ T5227] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 456.147789][ T5227] Bluetooth: hci4: Injecting HCI hardware error event [ 456.160330][ T5227] Bluetooth: hci4: hardware error 0x00 [ 456.209137][ T5305] usb 5-1: USB disconnect, device number 28 [ 456.339861][ T4607] Bluetooth: hci0: command tx timeout [ 457.123732][ T4607] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 457.134297][ T4607] Bluetooth: hci3: Injecting HCI hardware error event [ 457.144290][ T4607] Bluetooth: hci3: hardware error 0x00 [ 457.231265][ T9] usb 3-1: USB disconnect, device number 9 [ 457.430059][T10908] netlink: 'syz.3.1563': attribute type 12 has an invalid length. [ 457.447927][T10859] can0 (unregistered): slcan off ttyprintk. [ 457.578391][T10913] netlink: 'syz.3.1565': attribute type 11 has an invalid length. [ 457.587617][T10913] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1565'. [ 457.647476][ T5305] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.837366][ T5305] usb 2-1: Using ep0 maxpacket: 8 [ 457.899475][ T5265] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 458.103814][ T5305] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 458.127446][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.165555][ T5305] usb 2-1: Product: syz [ 458.179865][ T5305] usb 2-1: Manufacturer: syz [ 458.192961][ T5305] usb 2-1: SerialNumber: syz [ 458.215403][ T5305] usb 2-1: config 0 descriptor?? [ 458.220800][ T5227] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 458.254804][ T5305] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 458.288592][ T5265] usb 4-1: Using ep0 maxpacket: 32 [ 458.304776][ T5265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.367765][ T5265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.469165][T10920] xt_CONNSECMARK: invalid mode: 0 [ 458.708892][ T5265] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.724356][ T5305] gspca_sn9c2028: read1 error -71 [ 458.738037][ T5265] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 458.753396][ T5305] gspca_sn9c2028: read1 error -71 [ 458.767318][ T5305] gspca_sn9c2028: read1 error -71 [ 458.772636][ T5265] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 458.789143][ T5305] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 459.237624][ T5265] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 459.269913][ T5305] usb 2-1: USB disconnect, device number 19 [ 459.296554][ T5265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.337390][ T4607] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 459.354261][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.380101][ T5265] usb 4-1: Product: syz [ 459.391363][ T5265] usb 4-1: Manufacturer: syz [ 459.399344][ T5265] usb 4-1: SerialNumber: syz [ 459.651771][ T5265] cdc_ncm 4-1:1.0: bind() failure [ 459.675606][ T5265] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 459.694096][T10933] input: syz0 as /devices/virtual/input/input18 [ 459.700640][ T5265] cdc_ncm 4-1:1.1: bind() failure [ 459.720456][ T5265] usb 4-1: USB disconnect, device number 23 [ 482.192849][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.235760][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.258835][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.307007][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.326730][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 482.398698][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.575393][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 482.607018][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 482.656637][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 482.684893][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 482.709461][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 482.736732][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.700816][T10904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.728252][T10904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 483.753856][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 483.753919][T10904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.781501][T10904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 483.781593][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 483.800530][T10904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 483.813882][T10904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 483.825647][T10904] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 483.834918][T10904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 483.836555][ T5217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 483.858844][ T5217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.618569][ T5217] Bluetooth: hci2: command tx timeout [ 484.689680][ T5217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.713612][ T5217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.729133][ T5217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.743596][ T5217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 484.773537][ T5217] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 484.785892][ T5217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 484.858475][ T5217] Bluetooth: hci6: command tx timeout [ 485.054004][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.649956][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.988677][ T4607] Bluetooth: hci3: command tx timeout [ 485.988813][ T5217] Bluetooth: hci0: command tx timeout [ 486.200702][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.697200][ T5217] Bluetooth: hci2: command tx timeout [ 486.908534][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.008696][ T5217] Bluetooth: hci7: command tx timeout [ 487.015406][ T5217] Bluetooth: hci6: command tx timeout [ 488.057662][ T4607] Bluetooth: hci3: command tx timeout [ 488.064801][ T5217] Bluetooth: hci0: command tx timeout [ 488.777316][ T5217] Bluetooth: hci2: command tx timeout [ 489.097582][ T4607] Bluetooth: hci6: command tx timeout [ 489.097599][ T5227] Bluetooth: hci7: command tx timeout [ 490.137421][ T5227] Bluetooth: hci0: command tx timeout [ 490.137478][ T5217] Bluetooth: hci3: command tx timeout [ 490.857237][ T5217] Bluetooth: hci2: command tx timeout [ 491.177429][ T5217] Bluetooth: hci6: command tx timeout [ 491.187280][ T5217] Bluetooth: hci7: command tx timeout [ 492.217631][ T5217] Bluetooth: hci3: command tx timeout [ 492.217646][ T5227] Bluetooth: hci0: command tx timeout [ 492.885807][ T35] bridge_slave_1: left allmulticast mode [ 492.913023][ T35] bridge_slave_1: left promiscuous mode [ 492.920217][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.952841][ T35] bridge_slave_0: left allmulticast mode [ 492.959123][ T35] bridge_slave_0: left promiscuous mode [ 492.967366][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.257450][ T5227] Bluetooth: hci7: command tx timeout [ 497.913695][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.950850][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.974291][ T35] bond0 (unregistering): Released all slaves [ 501.901998][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.908584][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.870738][T10959] chnl_net:caif_netlink_parms(): no params data found [ 504.790274][ T35] hsr_slave_0: left promiscuous mode [ 504.848621][ T35] hsr_slave_1: left promiscuous mode [ 504.899879][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.940029][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.066721][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.075310][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.331146][ T35] veth1_macvtap: left promiscuous mode [ 505.364812][ T35] veth0_macvtap: left promiscuous mode [ 505.477716][ T35] veth1_vlan: left promiscuous mode [ 505.483281][ T35] veth0_vlan: left promiscuous mode [ 512.533480][ T35] team0 (unregistering): Port device team_slave_1 removed [ 513.027597][ T35] team0 (unregistering): Port device team_slave_0 removed [ 522.730558][T10954] chnl_net:caif_netlink_parms(): no params data found [ 524.377419][T10953] chnl_net:caif_netlink_parms(): no params data found [ 524.922252][T10958] chnl_net:caif_netlink_parms(): no params data found [ 526.016810][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.090635][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.307941][T10959] bridge_slave_0: entered allmulticast mode [ 526.369573][T10959] bridge_slave_0: entered promiscuous mode [ 526.491045][T10959] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.499153][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.528427][T10959] bridge_slave_1: entered allmulticast mode [ 526.710654][T10959] bridge_slave_1: entered promiscuous mode [ 528.505292][T10962] chnl_net:caif_netlink_parms(): no params data found [ 528.738178][T10959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.906123][T10959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.251217][T10953] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 533.634026][T10959] team0: Port device team_slave_0 added [ 539.617294][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.062620][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.730338][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.830212][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.902932][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.930305][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.952907][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.971844][ T5217] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 541.988724][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.427711][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.138728][ T5227] Bluetooth: hci2: command tx timeout [ 544.786479][ T4607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.797919][T10904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.811617][T10904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.818161][ T4607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.986319][ T4607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.994808][ T4607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.081056][T10904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 545.092966][ T4607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 545.137602][T10904] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 545.147257][T10957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 545.161466][T10904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 545.168871][T10957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 545.212496][T10957] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.228309][T10957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.237493][T10957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.247305][T10957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.255716][T10957] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.264824][T10957] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.369699][ T4607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.399575][ T4607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.414100][ T4607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.433592][ T4607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.449326][ T4607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 545.458491][ T4607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 545.638495][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.791565][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.872667][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.958899][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.217531][T10957] Bluetooth: hci2: command tx timeout [ 546.378979][T11005] chnl_net:caif_netlink_parms(): no params data found [ 546.439498][T11014] chnl_net:caif_netlink_parms(): no params data found [ 546.458420][T11011] chnl_net:caif_netlink_parms(): no params data found [ 546.475632][T11008] chnl_net:caif_netlink_parms(): no params data found [ 546.564031][ T35] bridge_slave_1: left allmulticast mode [ 546.570023][ T35] bridge_slave_1: left promiscuous mode [ 546.575752][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.587044][ T35] bridge_slave_0: left allmulticast mode [ 546.593244][ T35] bridge_slave_0: left promiscuous mode [ 546.599873][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.611755][ T35] bridge_slave_1: left allmulticast mode [ 546.617735][ T35] bridge_slave_1: left promiscuous mode [ 546.623407][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.634154][ T35] bridge_slave_0: left allmulticast mode [ 546.640325][ T35] bridge_slave_0: left promiscuous mode [ 546.645998][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.257784][T10957] Bluetooth: hci0: command tx timeout [ 547.257817][ T4607] Bluetooth: hci3: command tx timeout [ 547.341571][ T4607] Bluetooth: hci4: command tx timeout [ 547.434650][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.446913][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.457997][ T35] bond0 (unregistering): Released all slaves [ 547.500074][ T4607] Bluetooth: hci1: command tx timeout [ 547.630919][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.643752][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.654920][ T35] bond0 (unregistering): Released all slaves [ 547.762039][T11007] chnl_net:caif_netlink_parms(): no params data found [ 547.954966][T11005] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.962446][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.969906][T11005] bridge_slave_0: entered allmulticast mode [ 547.976803][T11005] bridge_slave_0: entered promiscuous mode [ 547.986437][T11005] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.994637][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.002738][T11005] bridge_slave_1: entered allmulticast mode [ 548.010131][T11005] bridge_slave_1: entered promiscuous mode [ 548.068076][T11011] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.075250][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.082797][T11011] bridge_slave_0: entered allmulticast mode [ 548.096225][T11011] bridge_slave_0: entered promiscuous mode [ 548.152936][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.160548][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.168430][T11014] bridge_slave_0: entered allmulticast mode [ 548.175942][T11014] bridge_slave_0: entered promiscuous mode [ 548.202320][T11011] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.214431][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.223040][T11011] bridge_slave_1: entered allmulticast mode [ 548.230593][T11011] bridge_slave_1: entered promiscuous mode [ 548.253735][T11005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.266691][T11005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.276424][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.283818][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.291305][T11008] bridge_slave_0: entered allmulticast mode [ 548.298030][ T4607] Bluetooth: hci2: command tx timeout [ 548.306722][T11008] bridge_slave_0: entered promiscuous mode [ 548.315874][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.323200][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.330626][T11008] bridge_slave_1: entered allmulticast mode [ 548.338139][T11008] bridge_slave_1: entered promiscuous mode [ 548.345710][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.353174][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.361694][T11014] bridge_slave_1: entered allmulticast mode [ 548.369294][T11014] bridge_slave_1: entered promiscuous mode [ 548.441408][T11011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.531364][T11011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.569167][T11005] team0: Port device team_slave_0 added [ 548.582867][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.607539][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.614774][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.623860][T11007] bridge_slave_0: entered allmulticast mode [ 548.631405][T11007] bridge_slave_0: entered promiscuous mode [ 548.689420][T11005] team0: Port device team_slave_1 added [ 548.702321][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.739878][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.752544][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.761880][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.770279][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.778146][T11007] bridge_slave_1: entered allmulticast mode [ 548.785653][T11007] bridge_slave_1: entered promiscuous mode [ 548.815654][T11011] team0: Port device team_slave_0 added [ 548.860013][T11008] team0: Port device team_slave_0 added [ 548.867077][T11005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.876400][T11005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.902702][T11005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.972079][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.983011][T11011] team0: Port device team_slave_1 added [ 549.022346][T11008] team0: Port device team_slave_1 added [ 549.044341][T11005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.056550][T11005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.082997][T11005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.120948][T11014] team0: Port device team_slave_0 added [ 549.131603][T11014] team0: Port device team_slave_1 added [ 549.153806][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.235274][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.242394][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.270584][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.297428][T11011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.304476][T11011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.331685][T11011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.342621][ T4607] Bluetooth: hci0: command tx timeout [ 549.348205][T10957] Bluetooth: hci3: command tx timeout [ 549.354483][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.362489][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.389739][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.406587][ T35] hsr_slave_0: left promiscuous mode [ 549.412974][ T35] hsr_slave_1: left promiscuous mode [ 549.418691][ T4607] Bluetooth: hci4: command tx timeout [ 549.427064][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.434717][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.444177][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.451739][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.464710][ T35] hsr_slave_0: left promiscuous mode [ 549.471009][ T35] hsr_slave_1: left promiscuous mode [ 549.477008][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.484699][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.492904][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.501530][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.550093][ T35] veth1_macvtap: left promiscuous mode [ 549.555639][ T35] veth0_macvtap: left promiscuous mode [ 549.561310][ T35] veth1_vlan: left promiscuous mode [ 549.566681][ T35] veth0_vlan: left promiscuous mode [ 549.573324][ T35] veth1_macvtap: left promiscuous mode [ 549.578930][ T4607] Bluetooth: hci1: command tx timeout [ 549.579056][ T35] veth0_macvtap: left promiscuous mode [ 549.590173][ T35] veth1_vlan: left promiscuous mode [ 549.595495][ T35] veth0_vlan: left promiscuous mode [ 550.356151][ T35] team0 (unregistering): Port device team_slave_1 removed [ 550.379331][ T4607] Bluetooth: hci2: command tx timeout [ 550.424534][ T35] team0 (unregistering): Port device team_slave_0 removed [ 551.417737][ T4607] Bluetooth: hci0: command tx timeout [ 551.423411][ T4607] Bluetooth: hci3: command tx timeout [ 551.497475][ T4607] Bluetooth: hci4: command tx timeout [ 551.503039][ T35] team0 (unregistering): Port device team_slave_1 removed [ 551.561943][ T35] team0 (unregistering): Port device team_slave_0 removed [ 551.663488][ T4607] Bluetooth: hci1: command tx timeout [ 552.247998][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.254999][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.287383][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.325879][T11007] team0: Port device team_slave_0 added [ 552.334686][T11011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.343011][T11011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.369280][T11011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.389071][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.397611][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.423669][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.446237][T11005] hsr_slave_0: entered promiscuous mode [ 552.454356][T11005] hsr_slave_1: entered promiscuous mode [ 552.471065][T11007] team0: Port device team_slave_1 added [ 552.653648][T11011] hsr_slave_0: entered promiscuous mode [ 552.660284][T11011] hsr_slave_1: entered promiscuous mode [ 552.666487][T11011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.674642][T11011] Cannot create hsr debugfs directory [ 552.713194][T11008] hsr_slave_0: entered promiscuous mode [ 552.720262][T11008] hsr_slave_1: entered promiscuous mode [ 552.726399][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.734116][T11008] Cannot create hsr debugfs directory [ 552.753901][T11014] hsr_slave_0: entered promiscuous mode [ 552.768944][T11014] hsr_slave_1: entered promiscuous mode [ 552.776079][T11014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.784071][T11014] Cannot create hsr debugfs directory [ 552.821297][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.828536][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.854593][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.867877][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.874904][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.901952][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.222382][T11007] hsr_slave_0: entered promiscuous mode [ 553.229066][T11007] hsr_slave_1: entered promiscuous mode [ 553.235226][T11007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.242997][T11007] Cannot create hsr debugfs directory [ 553.482734][T11005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.497579][ T4607] Bluetooth: hci3: command tx timeout [ 553.503022][ T4607] Bluetooth: hci0: command tx timeout [ 553.577316][ T4607] Bluetooth: hci4: command tx timeout [ 553.603440][T11005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.698878][T11005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.738900][ T4607] Bluetooth: hci1: command tx timeout [ 553.786674][T11005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.872140][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.979112][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.054584][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.125924][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.242688][ T35] bridge_slave_1: left allmulticast mode [ 554.248660][ T35] bridge_slave_1: left promiscuous mode [ 554.255639][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.264924][ T35] bridge_slave_0: left allmulticast mode [ 554.271880][ T35] bridge_slave_0: left promiscuous mode [ 554.277749][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.286954][ T35] bridge_slave_1: left allmulticast mode [ 554.293461][ T35] bridge_slave_1: left promiscuous mode [ 554.299656][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.310523][ T35] bridge_slave_0: left allmulticast mode [ 554.316191][ T35] bridge_slave_0: left promiscuous mode [ 554.322733][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.130871][ T35] bond0 (unregistering): Released all slaves [ 555.145487][ T35] bond0 (unregistering): Released all slaves [ 555.307042][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.316249][ T35] bond_slave_0: left promiscuous mode [ 555.324884][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.334435][ T35] bond_slave_1: left promiscuous mode [ 555.342399][ T35] bond0 (unregistering): Released all slaves [ 555.358042][ T35] bond1 (unregistering): Released all slaves [ 555.373971][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.389172][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.401744][ T35] bond0 (unregistering): Released all slaves [ 555.412941][ T35] bond0 (unregistering): Released all slaves [ 555.425052][ T35] bond0 (unregistering): Released all slaves [ 556.093988][ T35] hsr_slave_0: left promiscuous mode [ 556.102675][ T35] hsr_slave_1: left promiscuous mode [ 556.108807][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.116232][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.131317][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.138988][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.164793][ T35] veth1_macvtap: left promiscuous mode [ 556.170457][ T35] veth0_macvtap: left promiscuous mode [ 556.176022][ T35] veth1_vlan: left promiscuous mode [ 556.181633][ T35] veth0_vlan: left promiscuous mode [ 556.960609][ T35] team0 (unregistering): Port device team_slave_1 removed [ 557.012832][ T35] team0 (unregistering): Port device team_slave_0 removed [ 557.618178][ T35] team0 (unregistering): Port device team_slave_0 removed [ 558.120460][T11011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 558.134900][T11011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 558.157849][T11011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 558.185104][T11011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 558.356789][T11011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.389323][T11011] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.439609][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.446857][ T9781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.456093][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.463229][ T9781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.567083][T11011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.749108][T11005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.792421][T11005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 558.843267][T11005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.876981][T11005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 558.966201][T11011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.977986][T11008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.007710][T11008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.024894][T11008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.090586][T11008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.209069][T11014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.238538][T11014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 559.266528][T11014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 559.293651][T11011] veth0_vlan: entered promiscuous mode [ 559.315243][T11014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 559.378332][T11011] veth1_vlan: entered promiscuous mode [ 559.599178][T11007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.682389][T11007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.697817][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.705277][T11007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 559.735516][T11007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 559.784507][T11011] veth0_macvtap: entered promiscuous mode [ 559.811270][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.822588][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.843637][T11005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.870202][T11005] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.882298][T11011] veth1_macvtap: entered promiscuous mode [ 559.943520][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.960104][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.967320][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.973740][ T35] IPVS: stop unused estimator thread 0... [ 559.984147][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.991378][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.026413][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.033623][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.045946][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.053117][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.063007][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.070297][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.094873][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.105863][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.116056][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.126567][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.136420][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.147482][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.158558][T11011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.181585][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.188743][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.256606][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.276559][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.289039][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.299811][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.310276][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.320754][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.335031][T11011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.382807][T11011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.403438][T11011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.412666][T11011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.421509][T11011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.486961][T11005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.675193][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.746841][ T8994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.778237][ T8994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.815771][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.861774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.869053][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.906044][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.913286][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.964599][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.978253][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.990411][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.029597][T11007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 561.047245][T11007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.091568][T11005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.145593][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.230459][T11014] veth0_vlan: entered promiscuous mode [ 561.349035][T11014] veth1_vlan: entered promiscuous mode [ 561.365155][T11005] veth0_vlan: entered promiscuous mode [ 561.400594][T11005] veth1_vlan: entered promiscuous mode [ 561.495251][T11005] veth0_macvtap: entered promiscuous mode [ 561.544922][T11005] veth1_macvtap: entered promiscuous mode [ 561.672998][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.692114][T11014] veth0_macvtap: entered promiscuous mode [ 561.719636][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.277297][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.287336][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.312849][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.336392][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.367545][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.387188][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.430652][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.454224][T11005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.470364][T11014] veth1_macvtap: entered promiscuous mode [ 562.520056][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.532852][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.544809][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.556523][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.566414][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.577009][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.587040][T11005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.599082][T11005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.610355][T11005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.623129][T11005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.632070][T11005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.644797][T11005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.653543][T11005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.671201][T11080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.716819][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.728072][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.740601][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.751192][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.761101][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.771657][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.781650][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.792242][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.802121][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.812581][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.824617][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.870478][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.881537][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.891644][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.902732][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.923159][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.947272][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.974630][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.988866][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.008963][T11014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.026401][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.048051][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.114332][T11014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.125282][T11014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.134537][T11014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.161991][T11014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.179732][T11008] veth0_vlan: entered promiscuous mode [ 563.210569][T11007] veth0_vlan: entered promiscuous mode [ 563.241339][T11008] veth1_vlan: entered promiscuous mode [ 563.330046][T11007] veth1_vlan: entered promiscuous mode [ 563.346557][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.353769][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.526414][ T8994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.538482][ T8994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.613580][T11008] veth0_macvtap: entered promiscuous mode [ 563.654572][T11007] veth0_macvtap: entered promiscuous mode [ 563.680226][T11008] veth1_macvtap: entered promiscuous mode [ 563.702535][ T8994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.723247][ T8994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.780421][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.780570][T11007] veth1_macvtap: entered promiscuous mode [ 563.823391][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.861461][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.880457][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.890798][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.902090][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.913251][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.923847][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.934301][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.946274][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.956610][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.968835][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.983128][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.006292][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.028110][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.071797][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.085747][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.097690][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.110119][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.121280][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.133656][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.144042][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.155177][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.165748][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.177221][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.187222][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.197762][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.215105][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.258339][T11008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.280139][T11008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.293719][T11008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.303138][T11008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.343268][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.356141][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.367169][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.400871][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.431549][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.444933][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.456592][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.472000][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.483291][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.505573][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.533215][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.564167][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.573843][T11092] input: syz0 as /devices/virtual/input/input19 [ 564.575500][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.599883][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.611791][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.623437][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.635949][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.656675][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.667888][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.677957][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.690069][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.745286][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.757620][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.767756][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.779845][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.791048][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.801924][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.811826][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.825396][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.836698][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.857782][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.881771][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.919842][T11007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.957537][T11007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.969250][T11007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.985942][T11007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.049392][T11095] random: crng reseeded on system resumption [ 565.908364][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.944092][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.890490][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.904235][T11103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1582'. [ 566.928492][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.071565][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.088303][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.110991][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.111830][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.247736][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 567.684790][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 567.725874][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 567.768236][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.804429][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.873222][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.972954][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.997829][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.070131][ T25] usb 2-1: config 0 descriptor?? [ 568.142111][T11121] netlink: 'syz.0.1593': attribute type 1 has an invalid length. [ 568.372760][T11129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.458140][T10976] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 568.528734][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 568.546470][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 568.582801][ T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 568.618257][ T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 568.658861][T10976] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 568.672056][T10976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.708156][T10976] usb 1-1: config 0 descriptor?? [ 568.815626][T11139] netlink: 'syz.3.1600': attribute type 3 has an invalid length. [ 568.908887][ T5224] usb 2-1: USB disconnect, device number 20 [ 568.949224][T11121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.978703][T11121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.111420][T11155] usb usb8: usbfs: process 11155 (syz.1.1602) did not claim interface 0 before use [ 570.272849][T10976] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 570.334236][T10976] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 570.368601][T10976] usb 1-1: USB disconnect, device number 17 [ 571.799797][ T5265] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 572.019862][ T5265] usb 2-1: Using ep0 maxpacket: 16 [ 572.076021][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.102771][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.141916][ T5265] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 572.173142][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.228942][ T5265] usb 2-1: config 0 descriptor?? [ 572.426698][T11171] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1608'. [ 573.286133][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 573.471860][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.550498][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.594397][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.611625][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.621748][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.633079][ T25] usb 3-1: config 0 descriptor?? [ 573.713719][T11201] blktrace: Concurrent blktraces are not allowed on loop3 [ 573.992670][ T5265] usbhid 2-1:0.0: can't add hid device: -71 [ 573.999320][ T5265] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 574.017726][ T5265] usb 2-1: USB disconnect, device number 21 [ 574.392988][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 574.591533][T11199] fuse: Unknown parameter 'fd0x0000000000000007' [ 574.770262][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 574.778946][ T25] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 574.796881][ T25] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 574.843846][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'. [ 574.854008][ T25] usb 3-1: USB disconnect, device number 10 [ 574.931636][T11216] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 574.970531][T11216] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1620'. [ 575.114813][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 575.388618][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1623'. [ 575.400158][T11224] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 575.418261][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1623'. [ 575.459193][T11224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1620'. [ 575.517294][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 575.831840][T11237] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1625'. [ 576.967347][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 577.251300][T11261] vivid-000: disconnect [ 577.527444][T10980] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 581.769655][T10980] usb 3-1: device descriptor read/all, error -71 [ 581.858016][T11256] vivid-000: reconnect [ 584.102598][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 587.278397][ T25] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 587.564968][ T25] usb 3-1: device descriptor read/all, error -71 [ 588.547490][ T9781] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 588.726421][T11350] x_tables: ip_tables: udp match: only valid for protocol 17 [ 590.869024][T11350] netlink: 'syz.4.1653': attribute type 7 has an invalid length. [ 590.901922][T11355] netlink: 'syz.4.1653': attribute type 3 has an invalid length. [ 590.910139][T11355] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1653'. [ 591.026843][T11350] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1653'. [ 592.017835][T11357] Bluetooth: MGMT ver 1.23 [ 592.719471][ T1110] tipc: Subscription rejected, illegal request [ 595.140919][T11410] x_tables: ip_tables: udp match: only valid for protocol 17 [ 595.169434][T11410] netlink: 'syz.4.1671': attribute type 7 has an invalid length. [ 595.202359][T11410] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1671'. [ 595.231752][T11407] netlink: 'syz.4.1671': attribute type 3 has an invalid length. [ 595.256296][T11407] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1671'. [ 596.389286][ T1132] tipc: Subscription rejected, illegal request [ 596.593192][T10957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.604443][T10957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.615803][T10957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.626159][T10957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.634882][T10957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 596.643470][T10957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.953290][ T1132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.009496][ T1132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.101643][T11461] x_tables: ip_tables: udp match: only valid for protocol 17 [ 598.161908][T11456] netlink: 'syz.4.1684': attribute type 7 has an invalid length. [ 598.188197][T11456] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1684'. [ 598.210969][T11456] netlink: 'syz.4.1684': attribute type 3 has an invalid length. [ 598.245105][ T1132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.255878][T11456] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1684'. [ 598.697318][ T4607] Bluetooth: hci2: command tx timeout [ 599.903405][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.919527][ T1132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.354704][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.516977][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 600.869098][T11433] chnl_net:caif_netlink_parms(): no params data found [ 601.028584][T11513] netlink: 'syz.0.1700': attribute type 1 has an invalid length. [ 601.161006][ T1132] bridge_slave_1: left allmulticast mode [ 601.208788][ T1132] bridge_slave_1: left promiscuous mode [ 601.250341][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.392806][ T9781] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 601.432697][ T1132] bridge_slave_0: left allmulticast mode [ 601.753575][ T4607] Bluetooth: hci2: command tx timeout [ 602.331411][ T1132] bridge_slave_0: left promiscuous mode [ 602.558609][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.579872][ T9781] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 602.590792][ T9781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.605214][ T9781] usb 1-1: config 0 descriptor?? [ 602.944807][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.959282][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.120089][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.141003][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.159038][ T1132] bond0 (unregistering): Released all slaves [ 604.304318][T11513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 604.377490][ T4607] Bluetooth: hci2: command tx timeout [ 604.378984][T11513] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 604.487567][T11514] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 604.539577][T11514] bond1 (unregistering): Released all slaves [ 604.570509][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1707'. [ 604.644173][ T9781] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 604.664891][ T9781] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 604.722970][T11551] blktrace: Concurrent blktraces are not allowed on loop3 [ 604.730822][ T9781] usb 1-1: USB disconnect, device number 18 [ 604.862666][T11433] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.874496][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.891636][T11433] bridge_slave_0: entered allmulticast mode [ 604.902866][T11433] bridge_slave_0: entered promiscuous mode [ 604.931486][T11433] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.078772][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.111286][T11433] bridge_slave_1: entered allmulticast mode [ 605.149218][T11433] bridge_slave_1: entered promiscuous mode [ 605.798602][T11433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.843037][T11433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.005371][T11433] team0: Port device team_slave_0 added [ 606.038891][T11433] team0: Port device team_slave_1 added [ 606.147363][T11433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.167018][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.211660][T11433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.338624][T11433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.345623][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.436932][T11433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.457356][T10957] Bluetooth: hci2: command tx timeout [ 606.538832][T10957] Bluetooth: hci4: command 0x0406 tx timeout [ 606.601937][T11584] Bluetooth: MGMT ver 1.23 [ 606.620586][ T1132] hsr_slave_0: left promiscuous mode [ 606.646540][ T1132] hsr_slave_1: left promiscuous mode [ 606.663928][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.673663][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.685569][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.693739][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.937452][ T1132] veth1_macvtap: left promiscuous mode [ 606.948524][ T1132] veth0_macvtap: left promiscuous mode [ 606.954595][ T1132] veth1_vlan: left promiscuous mode [ 606.961553][ T1132] veth0_vlan: left promiscuous mode [ 607.877638][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 608.093241][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 608.122769][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 608.136245][ T8] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 608.153022][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.161306][ T8] usb 2-1: Product: syz [ 608.165600][ T8] usb 2-1: Manufacturer: syz [ 608.170358][ T8] usb 2-1: SerialNumber: syz [ 608.179135][ T8] usb 2-1: config 0 descriptor?? [ 608.424714][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 608.469708][ T8] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 608.472452][ T35] usb 2-1: Failed to submit usb control message: -71 [ 608.486621][ T35] usb 2-1: unable to send the bmi data to the device: -71 [ 608.492240][ T8] usb 2-1: USB disconnect, device number 23 [ 608.505591][ T35] usb 2-1: unable to get target info from device [ 608.515052][ T35] usb 2-1: could not get target info (-71) [ 608.526856][ T35] usb 2-1: could not probe fw (-71) [ 608.528684][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 609.363303][T11433] hsr_slave_0: entered promiscuous mode [ 609.383913][T11433] hsr_slave_1: entered promiscuous mode [ 609.468402][T11591] tap0: tun_chr_ioctl cmd 1074025694 [ 609.576162][T11611] qrtr: Invalid version 0 [ 609.664266][T10957] Bluetooth: hci1: command 0x0406 tx timeout [ 610.337929][T11624] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1736'. [ 610.358489][T11624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1736'. [ 610.533105][T11433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 610.551846][T11433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 610.580920][T11433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 610.603191][T11433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.759609][ T5262] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 610.801295][T11433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.861732][T11433] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.910702][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.917912][T10980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.953211][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.960574][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.969808][ T5262] usb 1-1: Using ep0 maxpacket: 32 [ 610.988026][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 611.004428][ T5262] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 611.023875][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.042889][ T5262] usb 1-1: Product: syz [ 611.054830][ T5262] usb 1-1: Manufacturer: syz [ 611.082362][ T5262] usb 1-1: SerialNumber: syz [ 611.118614][ T5262] usb 1-1: config 0 descriptor?? [ 611.506853][ T5262] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 611.533971][ T1132] usb 1-1: Failed to submit usb control message: -71 [ 612.162144][ T1132] usb 1-1: unable to send the bmi data to the device: -71 [ 612.213561][ T1132] usb 1-1: unable to get target info from device [ 612.247455][ T1132] usb 1-1: could not get target info (-71) [ 612.292900][ T1132] usb 1-1: could not probe fw (-71) [ 612.420006][ T5262] usb 1-1: USB disconnect, device number 19 [ 612.747714][T11652] blktrace: Concurrent blktraces are not allowed on loop3 [ 612.853409][T11433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.684452][T11662] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1747'. [ 613.694353][T11662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1747'. [ 613.710871][T11433] veth0_vlan: entered promiscuous mode [ 613.764866][T11433] veth1_vlan: entered promiscuous mode [ 613.877836][T11433] veth0_macvtap: entered promiscuous mode [ 613.912950][T11433] veth1_macvtap: entered promiscuous mode [ 613.971822][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.997529][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.015823][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.031720][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.043021][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.058252][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.068386][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.080352][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.090582][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.101969][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.112718][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.125308][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.135508][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.157269][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.216086][T11433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.282767][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.546770][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.635773][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.747971][T11687] qrtr: Invalid version 0 [ 614.945139][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.208981][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.241262][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.264185][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.289324][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.299556][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.310237][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.320096][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.345868][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.371781][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.395123][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.421793][T11433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.449159][T11433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.586046][T11433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.594964][T11433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.604054][T11433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.504669][T11702] blktrace: Concurrent blktraces are not allowed on loop3 [ 616.601877][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.652890][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.770354][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.792283][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.208471][T11714] veth0_vlan: entered allmulticast mode [ 617.246965][T11719] ªªªªªª: renamed from vlan0 [ 618.827382][T11724] fuse: Unknown parameter 'fd0x0000000000000007' [ 619.149274][T11716] vivid-000: disconnect [ 619.626416][ T4607] Bluetooth: hci0: link tx timeout [ 619.633204][ T4607] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 619.653438][T11713] vivid-000: reconnect [ 620.927740][T10980] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 621.661557][ T4607] Bluetooth: hci0: command 0x0406 tx timeout [ 621.804365][T11776] program syz.0.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.819634][T10980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.853541][T10980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.895377][T10980] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 621.935866][T10980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.970757][T10980] usb 2-1: config 0 descriptor?? [ 622.415887][T10980] elo 0003:04E7:0030.000C: item fetching failed at offset 5/7 [ 622.441484][T10980] elo 0003:04E7:0030.000C: parse failed [ 622.484379][T10980] elo 0003:04E7:0030.000C: probe with driver elo failed with error -22 [ 624.782062][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.826889][ T5262] usb 2-1: USB disconnect, device number 24 [ 625.035525][T10957] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 625.197338][T11810] program syz.0.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.898278][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 625.913286][T11824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1794'. [ 626.145137][T11837] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 627.678610][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 627.726587][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1812'. [ 628.307462][T11888] program syz.3.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.327516][T10957] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 630.360080][T11929] input: syz1 as /devices/virtual/input/input20 [ 632.798876][ T29] audit: type=1326 audit(1722304857.712:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11969 comm="syz.2.1852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943d377299 code=0x0 [ 632.864017][T10976] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 633.110650][T10976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.317469][T10976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.328589][T10976] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 633.340008][T10976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.364448][T10976] usb 4-1: config 0 descriptor?? [ 634.001659][T10976] elo 0003:04E7:0030.000D: item fetching failed at offset 5/7 [ 634.030140][T10976] elo 0003:04E7:0030.000D: parse failed [ 634.045991][T10976] elo 0003:04E7:0030.000D: probe with driver elo failed with error -22 [ 634.246128][ T9] usb 4-1: USB disconnect, device number 24 [ 634.447689][T10976] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 634.647305][T10976] usb 5-1: Using ep0 maxpacket: 16 [ 634.664561][T10976] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 634.697006][T10976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.716029][T10976] usb 5-1: Product: syz [ 634.739674][T10976] usb 5-1: Manufacturer: syz [ 634.755016][T10976] usb 5-1: SerialNumber: syz [ 634.791215][T10976] usb 5-1: config 0 descriptor?? [ 634.815662][T10976] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 635.202843][ C0] eth0: bad gso: type: 1, size: 1408 [ 636.025290][T10976] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 636.065966][T10976] usb 5-1: USB disconnect, device number 29 [ 636.143866][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 636.207462][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1871'. [ 636.365462][T12032] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.375275][T12032] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.384775][T12032] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.393844][T12032] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.543368][T12046] 9pnet_fd: Insufficient options for proto=fd [ 638.869589][ C0] eth0: bad gso: type: 1, size: 1408 [ 640.775729][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 640.804686][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 643.710319][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 643.749465][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 643.926641][T12105] syz.2.1900: attempt to access beyond end of device [ 643.926641][T12105] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 644.669504][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 644.686962][T12116] vlan2: entered promiscuous mode [ 644.692361][T12116] vlan1: entered promiscuous mode [ 644.716952][T12116] vlan1: left promiscuous mode [ 646.418925][T12113] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.427978][T12113] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.436705][T12113] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.445527][T12113] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.698735][T12125] random: crng reseeded on system resumption [ 648.598270][T10980] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 648.821433][T10980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.857632][T10980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.905397][T10980] usb 1-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 648.944293][T10980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.980373][T10980] usb 1-1: config 0 descriptor?? [ 649.082336][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 649.105138][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 649.197255][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 649.218195][T12169] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.226954][T12169] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.236105][T12169] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.244958][T12169] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.413535][T10976] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 649.840475][T10980] wacom 0003:056A:00B8.000E: unknown main item tag 0x0 [ 649.907538][T10980] wacom 0003:056A:00B8.000E: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 650.122961][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.135916][T10980] wacom 0003:056A:00B8.000E: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.0-1/input0 [ 650.149573][T10980] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B8.000E/input/input21 [ 650.149693][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.172376][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.180476][ T25] usb 3-1: Product: syz [ 650.184659][ T25] usb 3-1: Manufacturer: syz [ 650.190931][ T25] usb 3-1: SerialNumber: syz [ 650.265878][T10980] usb 1-1: USB disconnect, device number 20 [ 650.279544][T10976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.292409][T10976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.306455][T10976] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 650.317409][T10976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.329563][T10976] usb 5-1: config 0 descriptor?? [ 650.414163][T12175] syzkaller0: entered promiscuous mode [ 650.422214][T12175] syzkaller0: entered allmulticast mode [ 650.433097][T12162] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1919'. [ 650.447739][T12162] netlink: 'syz.2.1919': attribute type 12 has an invalid length. [ 650.455965][T12162] netlink: 'syz.2.1919': attribute type 29 has an invalid length. [ 650.463972][T12162] netlink: 'syz.2.1919': attribute type 2 has an invalid length. [ 650.472099][T12162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1919'. [ 650.770602][T10976] wacom 0003:056A:0300.000F: unknown main item tag 0x0 [ 650.780272][T10976] wacom 0003:056A:0300.000F: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 650.799694][T10976] wacom 0003:056A:0300.000F: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 650.826570][T10976] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.000F/input/input24 [ 650.971814][T10976] usb 5-1: USB disconnect, device number 30 [ 651.018160][T12184] vivid-000: disconnect [ 651.260789][T10957] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 651.312508][ T25] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 651.471395][ T25] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 651.512820][ T25] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 651.837093][T12192] sctp: [Deprecated]: syz.0.1928 (pid 12192) Use of int in maxseg socket option. [ 651.837093][T12192] Use struct sctp_assoc_value instead [ 651.857548][T12192] xt_CONNSECMARK: invalid mode: 0 [ 652.268715][ T25] cdc_ncm 3-1:1.0: setting tx_max = 32 [ 652.318656][T12179] vivid-000: reconnect [ 652.437894][T12196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1930'. [ 652.449168][T12196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1930'. [ 653.663336][T12204] tmpfs: Bad value for 'size' [ 655.078824][ T25] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 655.096511][ T25] usb 3-1: USB disconnect, device number 15 [ 655.103430][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 655.117047][ T25] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 655.141945][T12213] vlan0: entered promiscuous mode [ 655.157741][T12213] vlan1: entered promiscuous mode [ 655.171642][T12213] vlan1: left promiscuous mode [ 655.514241][T12228] fuse: Bad value for 'user_id' [ 655.534547][T12228] fuse: Bad value for 'user_id' [ 655.697327][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 656.153733][ T25] usb 3-1: device not accepting address 16, error -71 [ 656.977631][T12251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1950'. [ 657.157751][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 657.464280][T12267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.467394][T10957] Bluetooth: hci4: unknown advertising packet type: 0x07 [ 657.877352][T10976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 658.103144][T10976] usb 1-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 658.133082][T10957] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 658.149072][T10976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.203910][T10976] usb 1-1: config 0 descriptor?? [ 658.458825][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 658.510642][T12272] vlan2: entered promiscuous mode [ 658.515746][T12272] ip6gretap0: entered promiscuous mode [ 658.551276][T12272] vlan2: entered allmulticast mode [ 658.567279][T12272] ip6gretap0: entered allmulticast mode [ 658.586355][T12289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1964'. [ 658.610868][ T9781] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 658.644681][T10976] usb 1-1: USB disconnect, device number 21 [ 658.712640][ T25] usb 2-1: config 6 has an invalid interface number: 169 but max is 1 [ 658.731213][ T25] usb 2-1: config 6 has no interface number 1 [ 658.739070][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 658.750821][ T25] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 658.778792][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.801083][ T25] usb 2-1: Product: syz [ 658.815492][ T25] usb 2-1: Manufacturer: syz [ 658.827222][ T9781] usb 3-1: Using ep0 maxpacket: 32 [ 658.833015][ T25] usb 2-1: SerialNumber: syz [ 658.843344][ T9781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.855271][ T9781] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 658.866500][ T9781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.894982][ T9781] usb 3-1: config 0 descriptor?? [ 658.905937][ T9781] usb 3-1: bad CDC descriptors [ 659.142327][ T9781] usb 3-1: USB disconnect, device number 18 [ 659.270847][ C0] ================================================================== [ 659.278971][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x231/0x240 [ 659.287149][ C0] Read of size 4 at addr ffffc9000319f198 by task syz.4.1969/12301 [ 659.295043][ C0] [ 659.297363][ C0] CPU: 0 UID: 0 PID: 12301 Comm: syz.4.1969 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 659.308130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 659.318171][ C0] Call Trace: [ 659.321436][ C0] [ 659.324263][ C0] dump_stack_lvl+0x241/0x360 [ 659.328938][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.334131][ C0] ? __pfx__printk+0x10/0x10 [ 659.338711][ C0] ? _printk+0xd5/0x120 [ 659.342862][ C0] print_report+0x169/0x550 [ 659.347353][ C0] ? __virt_addr_valid+0xbd/0x530 [ 659.352365][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 659.357723][ C0] kasan_report+0x143/0x180 [ 659.362212][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 659.367588][ C0] xdp_do_check_flushed+0x231/0x240 [ 659.372805][ C0] __napi_poll+0xe4/0x490 [ 659.377137][ C0] net_rx_action+0x89b/0x1240 [ 659.381836][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 659.386951][ C0] ? sched_clock+0x4a/0x70 [ 659.391364][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 659.397685][ C0] handle_softirqs+0x2c4/0x970 [ 659.402446][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 659.407232][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 659.412509][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 659.417740][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 659.422323][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 659.427511][ C0] irq_exit_rcu+0x9/0x30 [ 659.431739][ C0] common_interrupt+0xaa/0xd0 [ 659.436405][ C0] [ 659.439322][ C0] [ 659.442239][ C0] asm_common_interrupt+0x26/0x40 [ 659.447274][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 659.453080][ C0] Code: c9 50 e8 19 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 00 d5 52 0a e8 0b d7 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 659.472697][ C0] RSP: 0018:ffffc9000319ec88 EFLAGS: 00000282 [ 659.478782][ C0] RAX: a4efd061d8acdf00 RBX: ffff888023220000 RCX: ffffffff81701daa [ 659.486740][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f9280 [ 659.494786][ C0] RBP: ffffc9000319ecd0 R08: ffffffff934e9837 R09: 1ffffffff269d306 [ 659.502749][ C0] R10: dffffc0000000000 R11: fffffbfff269d307 R12: 1ffff11017247eeb [ 659.510714][ C0] R13: dffffc0000000000 R14: ffff8880b923e9c0 R15: ffff8880b923f758 [ 659.518685][ C0] ? mark_lock+0x9a/0x350 [ 659.523008][ C0] ? finish_task_switch+0x1e5/0x870 [ 659.528363][ C0] __schedule+0x17b6/0x4a10 [ 659.532865][ C0] ? try_to_wake_up+0x8fb/0x1470 [ 659.537812][ C0] ? __pfx___schedule+0x10/0x10 [ 659.542687][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 659.547915][ C0] ? preempt_schedule+0xe1/0xf0 [ 659.552784][ C0] preempt_schedule_common+0x84/0xd0 [ 659.558099][ C0] preempt_schedule+0xe1/0xf0 [ 659.562793][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 659.568187][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 659.574195][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 659.580553][ C0] preempt_schedule_thunk+0x1a/0x30 [ 659.585772][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 659.591610][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 659.597969][ C0] ? swake_up_one+0x78/0x160 [ 659.602582][ C0] rcu_preempt_deferred_qs_irqrestore+0x89c/0xc70 [ 659.609032][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 659.616000][ C0] ? rcu_is_watching+0x15/0xb0 [ 659.620794][ C0] rcu_read_unlock_special+0x470/0x550 [ 659.626274][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 659.632272][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 659.638191][ C0] ? __pfx_lock_release+0x10/0x10 [ 659.643249][ C0] __rcu_read_unlock+0xa1/0x110 [ 659.648128][ C0] unmap_page_range+0x38be/0x42c0 [ 659.653199][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 659.658603][ C0] ? mas_next_slot+0xeab/0xf90 [ 659.663398][ C0] ? uprobe_munmap+0x183/0x460 [ 659.668183][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 659.673236][ C0] unmap_vmas+0x3cc/0x5f0 [ 659.677592][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 659.682527][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 659.688017][ C0] exit_mmap+0x264/0xc80 [ 659.692284][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 659.697067][ C0] ? __asan_memset+0x23/0x50 [ 659.701679][ C0] ? uprobe_clear_state+0x277/0x290 [ 659.706890][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 659.712192][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 659.717413][ C0] __mmput+0x115/0x380 [ 659.721496][ C0] exit_mm+0x220/0x310 [ 659.725577][ C0] ? __pfx_exit_mm+0x10/0x10 [ 659.730186][ C0] ? taskstats_exit+0x326/0xa60 [ 659.735068][ C0] do_exit+0x9b2/0x27f0 [ 659.739241][ C0] ? __pfx_do_exit+0x10/0x10 [ 659.743842][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 659.749242][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 659.755256][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 659.761617][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 659.766756][ C0] do_group_exit+0x207/0x2c0 [ 659.771370][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.776618][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 659.781839][ C0] get_signal+0x1695/0x1730 [ 659.786372][ C0] ? __pfx_get_signal+0x10/0x10 [ 659.791250][ C0] arch_do_signal_or_restart+0x96/0x860 [ 659.796824][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.803091][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 659.809192][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 659.815027][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 659.820602][ C0] do_syscall_64+0x100/0x230 [ 659.825229][ C0] ? clear_bhb_loop+0x35/0x90 [ 659.829938][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.835854][ C0] RIP: 0033:0x7f589f377299 [ 659.840290][ C0] Code: Unable to access opcode bytes at 0x7f589f37726f. [ 659.847325][ C0] RSP: 002b:00007f589edff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 659.855763][ C0] RAX: fffffffffffffe00 RBX: 00007f589f506060 RCX: 00007f589f377299 [ 659.863763][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f589f506060 [ 659.871759][ C0] RBP: 00007f589f506058 R08: 00007f589edff6c0 R09: 00007f589edff6c0 [ 659.879753][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f589f506064 [ 659.887751][ C0] R13: 000000000000006e R14: 00007fff10635720 R15: 00007fff10635808 [ 659.895755][ C0] [ 659.898787][ C0] [ 659.901115][ C0] The buggy address belongs to stack of task syz.4.1969/12301 [ 659.908581][ C0] and is located at offset 88 in frame: [ 659.914219][ C0] rcu_preempt_deferred_qs_irqrestore+0x0/0xc70 [ 659.920484][ C0] [ 659.922816][ C0] This frame has 2 objects: [ 659.927329][ C0] [32, 40) 'flags.i.i.i406' [ 659.927347][ C0] [64, 72) 'flags.i.i.i' [ 659.931941][ C0] [ 659.938611][ C0] The buggy address belongs to the virtual mapping at [ 659.938611][ C0] [ffffc90003198000, ffffc900031a1000) created by: [ 659.938611][ C0] copy_process+0x5d1/0x3dc0 [ 659.956256][ C0] [ 659.958573][ C0] The buggy address belongs to the physical page: [ 659.964972][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888047897000 pfn:0x47897 [ 659.975016][ C0] memcg:ffff88802f4c8b02 [ 659.979237][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 659.986339][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 659.994918][ C0] raw: ffff888047897000 0000000000000000 00000001ffffffff ffff88802f4c8b02 [ 660.003483][ C0] page dumped because: kasan: bad access detected [ 660.009884][ C0] page_owner tracks the page as allocated [ 660.015589][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 12298, tgid 12298 (syz.4.1969), ts 659218213120, free_ts 658628850336 [ 660.034080][ C0] post_alloc_hook+0x1f3/0x230 [ 660.038855][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 660.044475][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 660.049659][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 660.055114][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 660.061002][ C0] dup_task_struct+0x444/0x8c0 [ 660.065754][ C0] copy_process+0x5d1/0x3dc0 [ 660.070328][ C0] kernel_clone+0x223/0x870 [ 660.074817][ C0] __se_sys_clone3+0x2cb/0x350 [ 660.079570][ C0] do_syscall_64+0xf3/0x230 [ 660.084062][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.089941][ C0] page last free pid 10902 tgid 10902 stack trace: [ 660.096425][ C0] free_unref_page+0xd19/0xea0 [ 660.101178][ C0] ringbuf_map_free+0xc2/0x120 [ 660.105937][ C0] bpf_map_free_deferred+0xe6/0x110 [ 660.111140][ C0] process_scheduled_works+0xa2c/0x1830 [ 660.116932][ C0] worker_thread+0x86d/0xd40 [ 660.121513][ C0] kthread+0x2f0/0x390 [ 660.125565][ C0] ret_from_fork+0x4b/0x80 [ 660.129980][ C0] ret_from_fork_asm+0x1a/0x30 [ 660.134817][ C0] [ 660.137127][ C0] Memory state around the buggy address: [ 660.143007][ C0] ffffc9000319f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.151052][ C0] ffffc9000319f100: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 [ 660.159095][ C0] >ffffc9000319f180: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.167144][ C0] ^ [ 660.171988][ C0] ffffc9000319f200: 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 [ 660.180044][ C0] ffffc9000319f280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.188092][ C0] ================================================================== [ 660.196199][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 660.203379][ C0] CPU: 0 UID: 0 PID: 12301 Comm: syz.4.1969 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 660.214146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 660.224193][ C0] Call Trace: [ 660.227461][ C0] [ 660.230286][ C0] dump_stack_lvl+0x241/0x360 [ 660.234972][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.240166][ C0] ? __pfx__printk+0x10/0x10 [ 660.244743][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.250715][ C0] ? vscnprintf+0x5d/0x90 [ 660.255035][ C0] panic+0x349/0x860 [ 660.258916][ C0] ? check_panic_on_warn+0x21/0xb0 [ 660.264006][ C0] ? __pfx_panic+0x10/0x10 [ 660.268406][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 660.274282][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 660.280153][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 660.286458][ C0] check_panic_on_warn+0x86/0xb0 [ 660.291396][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 660.296749][ C0] end_report+0x77/0x160 [ 660.300975][ C0] kasan_report+0x154/0x180 [ 660.305463][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 660.310825][ C0] xdp_do_check_flushed+0x231/0x240 [ 660.316010][ C0] __napi_poll+0xe4/0x490 [ 660.320322][ C0] net_rx_action+0x89b/0x1240 [ 660.325100][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 660.330224][ C0] ? sched_clock+0x4a/0x70 [ 660.334627][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 660.340940][ C0] handle_softirqs+0x2c4/0x970 [ 660.345686][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 660.350450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 660.355719][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 660.360904][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 660.365475][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 660.370659][ C0] irq_exit_rcu+0x9/0x30 [ 660.374887][ C0] common_interrupt+0xaa/0xd0 [ 660.379555][ C0] [ 660.382465][ C0] [ 660.385372][ C0] asm_common_interrupt+0x26/0x40 [ 660.390382][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 660.396168][ C0] Code: c9 50 e8 19 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 00 d5 52 0a e8 0b d7 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 660.415769][ C0] RSP: 0018:ffffc9000319ec88 EFLAGS: 00000282 [ 660.421849][ C0] RAX: a4efd061d8acdf00 RBX: ffff888023220000 RCX: ffffffff81701daa [ 660.429816][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f9280 [ 660.437775][ C0] RBP: ffffc9000319ecd0 R08: ffffffff934e9837 R09: 1ffffffff269d306 [ 660.445726][ C0] R10: dffffc0000000000 R11: fffffbfff269d307 R12: 1ffff11017247eeb [ 660.453684][ C0] R13: dffffc0000000000 R14: ffff8880b923e9c0 R15: ffff8880b923f758 [ 660.461645][ C0] ? mark_lock+0x9a/0x350 [ 660.465971][ C0] ? finish_task_switch+0x1e5/0x870 [ 660.471154][ C0] __schedule+0x17b6/0x4a10 [ 660.475654][ C0] ? try_to_wake_up+0x8fb/0x1470 [ 660.480583][ C0] ? __pfx___schedule+0x10/0x10 [ 660.485415][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 660.490604][ C0] ? preempt_schedule+0xe1/0xf0 [ 660.495439][ C0] preempt_schedule_common+0x84/0xd0 [ 660.500709][ C0] preempt_schedule+0xe1/0xf0 [ 660.505366][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 660.510721][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.516685][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 660.522998][ C0] preempt_schedule_thunk+0x1a/0x30 [ 660.528184][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 660.533981][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 660.540300][ C0] ? swake_up_one+0x78/0x160 [ 660.544873][ C0] rcu_preempt_deferred_qs_irqrestore+0x89c/0xc70 [ 660.551277][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 660.558200][ C0] ? rcu_is_watching+0x15/0xb0 [ 660.562949][ C0] rcu_read_unlock_special+0x470/0x550 [ 660.568394][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 660.574355][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 660.580227][ C0] ? __pfx_lock_release+0x10/0x10 [ 660.585234][ C0] __rcu_read_unlock+0xa1/0x110 [ 660.590068][ C0] unmap_page_range+0x38be/0x42c0 [ 660.595084][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 660.600441][ C0] ? mas_next_slot+0xeab/0xf90 [ 660.605186][ C0] ? uprobe_munmap+0x183/0x460 [ 660.609931][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 660.614939][ C0] unmap_vmas+0x3cc/0x5f0 [ 660.619260][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 660.624104][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 660.629554][ C0] exit_mmap+0x264/0xc80 [ 660.633789][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 660.638537][ C0] ? __asan_memset+0x23/0x50 [ 660.643119][ C0] ? uprobe_clear_state+0x277/0x290 [ 660.648297][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 660.653562][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 660.658741][ C0] __mmput+0x115/0x380 [ 660.662794][ C0] exit_mm+0x220/0x310 [ 660.666843][ C0] ? __pfx_exit_mm+0x10/0x10 [ 660.671420][ C0] ? taskstats_exit+0x326/0xa60 [ 660.676259][ C0] do_exit+0x9b2/0x27f0 [ 660.680398][ C0] ? __pfx_do_exit+0x10/0x10 [ 660.684965][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.690323][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.696284][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 660.702594][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 660.707690][ C0] do_group_exit+0x207/0x2c0 [ 660.712259][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.717438][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 660.722617][ C0] get_signal+0x1695/0x1730 [ 660.727110][ C0] ? __pfx_get_signal+0x10/0x10 [ 660.731960][ C0] arch_do_signal_or_restart+0x96/0x860 [ 660.737500][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 660.743642][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.749610][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 660.755314][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 660.760844][ C0] do_syscall_64+0x100/0x230 [ 660.765415][ C0] ? clear_bhb_loop+0x35/0x90 [ 660.770077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.775952][ C0] RIP: 0033:0x7f589f377299 [ 660.780379][ C0] Code: Unable to access opcode bytes at 0x7f589f37726f. [ 660.787383][ C0] RSP: 002b:00007f589edff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 660.795800][ C0] RAX: fffffffffffffe00 RBX: 00007f589f506060 RCX: 00007f589f377299 [ 660.803753][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f589f506060 [ 660.811705][ C0] RBP: 00007f589f506058 R08: 00007f589edff6c0 R09: 00007f589edff6c0 [ 660.819655][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f589f506064 [ 660.827607][ C0] R13: 000000000000006e R14: 00007fff10635720 R15: 00007fff10635808 [ 660.835567][ C0] [ 660.838874][ C0] Kernel Offset: disabled [ 660.843187][ C0] Rebooting in 86400 seconds..