last executing test programs: 1m57.891598845s ago: executing program 3 (id=6007): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) shmdt(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}, {&(0x7f0000000280)=""/171, 0xab}], 0x2, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1m27.197513106s ago: executing program 0 (id=6072): r0 = syz_io_uring_setup(0x1dcb, &(0x7f0000000780)={0x0, 0x10000000, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd=r0, 0x5, 0x0, 0x0, 0x4, 0x1, {0x402}}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000e40), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000007000000000000030000000800010003007e72faf7deb651108b04128ec602e92b1343cb693f3629f912678d0d5e70ab479e"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x0, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000580)={0x1, 0x0, '\x00', 0x0, 0x0}) 1m25.099091123s ago: executing program 0 (id=6077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffff8}]}}]}, 0x38}}, 0x0) 1m24.22883051s ago: executing program 0 (id=6081): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x9b, [{{0x9, 0x4, 0x0, 0x77, 0x2, 0x3, 0x1, 0x1, 0xfb, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xccc}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x5, 0x12}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xc7, 0xfe}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0x5, 0x9, 0x8, 0xc6}, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2e00fc0a1001061000020301000614100404166b88c049129cf0b23ae3f670c2ccf70a100302080002050304"]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 1m19.876624148s ago: executing program 0 (id=6088): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)="373756a97e21d9cd3aa33c3395c1d3ec7d42eb334be79790955b20470c8586d37474aea309920ad74a116599a354d7dfbb465a18516bd682f47d91f7e4169fa58aa63ec6ce738324fce65c746423407ca410f20771fafefa275f21bb15c86f5b73da74f41dca4a76807295c31692cf3e945dc60052644861468ca1abae616e6a1f66e2da8e1ff9f03407dbd1a9427ad29d43befe6c4bcafcdfa06ad5848ac768f446c3", 0xa3}, {&(0x7f0000000240)="7038715921eebde91a23140c883eba75daed67ec6e5f22cf205cd059ee84667ee633027d21356603e4185148e479ba6db3e6feecc57084735278708437a2324414172ca10cdd20015409de3b3c66edb4393d1c0346af7a876c182961ab21bf4903f4d3", 0x63}, {&(0x7f00000002c0)="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", 0x585}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x20040881) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 1m19.056595502s ago: executing program 0 (id=6091): r0 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d966000000000000000000000000000000000000000000000000000018e0000000000000feffffff01000000110000000000000081006263736630000002000800000000000073697430000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000"]}, 0x107) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x108, 0x5c, 0x160, 0x108, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @local, [], [], 'team0\x00', 'batadv_slave_0\x00'}, 0x5002, 0xa8, 0x108, 0x52020000, {0x0, 0x6802000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x874, 0x380, 0x0, 0x8bc0}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0x4, 0x0, @mcast2, @remote, 0x20, 0x40, 0x1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r3, 0x31, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) 1m18.29959216s ago: executing program 0 (id=6095): r0 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x28008881) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {}, {0x6}]}) 1m4.393863754s ago: executing program 3 (id=6034): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@initr0]}, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m0.616721291s ago: executing program 3 (id=6119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='svcrdma_encode_wseg\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00'}, 0x10) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@private0}, &(0x7f0000000040)=0x14) 58.939108592s ago: executing program 3 (id=6121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)="373756a97e21d9cd3aa33c3395c1d3ec7d42eb334be79790955b20470c8586d37474aea309920ad74a116599a354d7dfbb465a18516bd682f47d91f7e4169fa58aa63ec6ce738324fce65c746423407ca410f20771fafefa275f21bb15c86f5b73da74f41dca4a76807295c31692cf3e945dc60052644861468ca1abae616e6a1f66e2da8e1ff9f03407dbd1a9427ad29d43befe6c4bcafcdfa06ad5848ac768f446c3", 0xa3}, {&(0x7f0000000240)="7038715921eebde91a23140c883eba75daed67ec6e5f22cf205cd059ee84667ee633027d21356603e4185148e479ba6db3e6feecc57084735278708437a2324414172ca10cdd20015409de3b3c66edb4393d1c0346af7a876c182961ab21bf4903f4d3", 0x63}, {&(0x7f00000002c0)="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", 0x585}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x20040881) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 57.884305853s ago: executing program 3 (id=6124): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0xf, &(0x7f0000000040)={0xffffffff, 0x2}) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x40084146, 0x0) 56.33479084s ago: executing program 3 (id=6125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x80000, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x2, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x305043, 0x0) unshare(0x2a020400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 47.486431001s ago: executing program 2 (id=6139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) vmsplice(r2, 0x0, 0x0, 0x0) 46.526563206s ago: executing program 2 (id=6140): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000006300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_WRITE(r2, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) write$tcp_congestion(r2, &(0x7f0000000180)='highspeed\x00', 0xffffff02) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 45.303514472s ago: executing program 2 (id=6142): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@initr0]}, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 41.312417989s ago: executing program 2 (id=6148): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 40.664695366s ago: executing program 2 (id=6150): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071112d0000000000851000000200000085a562f70000000095000000000000009500a50500000000c8650b2cfc43f7d6b9d96df6264d9d088ed70469cdb4665e42063f11e6c09edb5d205622dc2c6264d6f7a24ac7dc0f635849c878cce7b785ab0be88795f1e055ed0f2899be730d207ed3f9fece99b274005d59a557a71427c5727be830db59f8cdc0c4cff2fe"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) 37.611383997s ago: executing program 2 (id=6155): r0 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x881}, 0x28008881) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {}, {0x6}]}) 33.892446285s ago: executing program 4 (id=6159): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs$userns(r2, &(0x7f00000001c0)) dup3(0xffffffffffffffff, r3, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000180)={r9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002780)={0x0}) close(r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r10, 0x3, r8}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x404080, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb60f33dda5246c22034b633224b"], 0x0) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x8848}, @val={0x1, 0x3, 0x1, 0xd1, 0x6, 0x6}, @llc={@llc={0x80, 0x80, "df", "3b29e0da8ffd6fc21a841ea88f2408017d5daca91620d16ad2"}}}, 0x2a) 30.319259624s ago: executing program 4 (id=6163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x88}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071112d0000000000851000000200000085a562f70000000095000000000000009500a50500000000c8650b2cfc43f7d6b9d96df6264d9d088ed70469cdb4665e42063f11e6c09edb5d205622dc2c6264d6f7a24ac7dc0f635849c878cce7b785ab0be88795f1e055ed0f2899be730d207ed3f9fece99b274005d59a557a71427c5727be830db59f8cdc0c4cff2fe"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) 29.158256896s ago: executing program 4 (id=6164): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="380000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b64"], 0x38}], 0x1}, 0x0) 28.493621847s ago: executing program 4 (id=6165): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000040)=0x1) 27.761961013s ago: executing program 4 (id=6166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x20040881) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 27.041263621s ago: executing program 4 (id=6168): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x1, 0x1, 0x4, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x6, 0x8, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @ldst={0x0, 0x2, 0x6, 0xa, 0x7, 0x50, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xa, 0xeb, 0xc77}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x401, 0x224, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000140)={0x0, 0x30314752, 0x0, 0x0, 0x0, @stepwise}) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0), 0x4) r5 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r5, 0x10d, 0xa8, 0x0, &(0x7f0000000000)) 9.809569875s ago: executing program 1 (id=6174): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af623"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@initr0]}, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.740853519s ago: executing program 1 (id=6175): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) 3.719574097s ago: executing program 1 (id=6176): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) mknod$loop(0x0, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) 1.899523677s ago: executing program 1 (id=6177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="0088799ab1f894d0958cd427cb87f4dc5a23ce9c6552ad1cdadd0f79f918992b26f7c790b92f5b68ea902a047452b99e9b49929c352a4d983f6ae4c6c4fcf333f84eed2390c0482791de0c3cc16ae3e7486217962bfe6d550b4b14b16e4db6fb603c17d8996bb730cce493dafb64", 0x6e}, {&(0x7f0000000140)="9553c2cec246e5ddaef4b2bf95317b526f5822710f1fdcf2fd3eb06de72a432a9ef5e4c0c0ce2f66812b26697fec45006f2b52ffd60c812853dadde8d3f234cef7fb0e1099dc3a32", 0x48}, {&(0x7f0000002880)="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", 0x305}], 0x3}, 0xdfc5c6464666aff9) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 900.368534ms ago: executing program 1 (id=6178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)="373756a97e21d9cd3aa33c3395c1d3ec7d42eb334be79790955b20470c8586d37474aea309920ad74a116599a354d7dfbb465a18516bd682f47d91f7e4169fa58aa63ec6ce738324fce65c746423407ca410f20771fafefa275f21bb15c86f5b73da74f41dca4a76807295c31692cf3e945dc60052644861468ca1abae616e6a1f66e2da8e1ff9f03407dbd1a9427ad29d43befe6c4bcafcdfa06ad5848ac768f446c3", 0xa3}, {0x0}, {&(0x7f0000000240)="7038715921eebde91a23140c883eba75daed67ec6e5f22cf205cd059ee84667ee633027d21356603e4185148e479ba6db3e6feecc570847352", 0x39}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x20040881) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 0s ago: executing program 1 (id=6179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getresgid(&(0x7f00000000c0), 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e00"], 0x44}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000600), 0x0, &(0x7f0000000240)={[{@index_on}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): eady exists on: batadv_slave_0 [ 909.985687][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.027009][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.085895][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.126987][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.185653][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.287865][T20291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.377170][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.415253][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.465572][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.548101][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.595664][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.635956][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.725853][T20291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.785809][T20291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.837841][T20291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.070485][T20291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.206258][T20291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.287192][T20291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.324178][T20291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.098804][T20334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.236424][T14216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.244286][T14216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.266478][T20334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.748866][T20342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.888730][T20334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 913.028142][T20334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.028969][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.115880][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.444938][T20342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.067781][T20342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.878503][T20342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.274731][T20334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.657440][T20334] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.811448][ T5226] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 915.828672][ T5226] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 915.838285][ T5226] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 915.848358][ T5226] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 915.902428][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.909631][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.926047][T19574] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 915.933496][T19574] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 916.109659][T20342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.160148][T20342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.288253][T20342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 916.429385][T20342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 916.668419][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.675648][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.005810][T19574] Bluetooth: hci8: command tx timeout [ 918.331898][T20342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.489118][T20342] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.600742][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.607933][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.828377][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.835640][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.890535][T20334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.651690][T20448] chnl_net:caif_netlink_parms(): no params data found [ 920.075672][T19574] Bluetooth: hci8: command tx timeout [ 921.825723][ T5271] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 921.929291][T20448] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.999299][T20448] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.095616][ T5271] usb 5-1: Using ep0 maxpacket: 32 [ 922.095673][T20448] bridge_slave_0: entered allmulticast mode [ 922.156299][T19574] Bluetooth: hci8: command tx timeout [ 922.176108][ T5271] usb 5-1: config 253 has an invalid interface number: 202 but max is 1 [ 922.184514][ T5271] usb 5-1: config 253 has an invalid interface number: 79 but max is 1 [ 922.255642][ T5271] usb 5-1: config 253 has no interface number 0 [ 922.257505][T20448] bridge_slave_0: entered promiscuous mode [ 922.294192][ T5271] usb 5-1: config 253 has no interface number 1 [ 922.303035][ T5271] usb 5-1: config 253 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 922.415637][ T5271] usb 5-1: config 253 interface 202 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 922.469946][T20448] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.498704][ T5271] usb 5-1: config 253 interface 202 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 922.525659][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.565676][ T5271] usb 5-1: config 253 interface 202 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 922.595790][T20448] bridge_slave_1: entered allmulticast mode [ 922.601075][ T5271] usb 5-1: config 253 interface 202 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 922.604686][T20448] bridge_slave_1: entered promiscuous mode [ 922.705575][ T5271] usb 5-1: config 253 interface 202 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 922.788696][ T5271] usb 5-1: config 253 interface 79 altsetting 64 endpoint 0x3 has an invalid bInterval 98, changing to 10 [ 922.817054][ T4607] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 922.828134][ T4607] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 922.837092][ T4607] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 922.845682][ T4607] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 922.908430][ T4607] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 922.935904][ T4607] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 922.999316][ T5271] usb 5-1: config 253 interface 79 altsetting 64 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 923.056939][ T5271] usb 5-1: config 253 interface 79 altsetting 64 has an endpoint descriptor with address 0x5D, changing to 0xD [ 923.095621][ T5271] usb 5-1: config 253 interface 79 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 923.155646][ T5271] usb 5-1: config 253 interface 79 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 923.239330][T20334] veth0_vlan: entered promiscuous mode [ 923.249033][T20342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.305574][ T5271] usb 5-1: config 253 interface 79 has no altsetting 0 [ 923.364370][T20448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.366247][ T5271] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 923.458025][T20448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.495687][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.535913][ T5271] usb 5-1: Product: syz [ 923.540141][ T5271] usb 5-1: Manufacturer: syz [ 923.544760][ T5271] usb 5-1: SerialNumber: syz [ 923.982331][T20334] veth1_vlan: entered promiscuous mode [ 924.052098][T20448] team0: Port device team_slave_0 added [ 924.073246][T20448] team0: Port device team_slave_1 added [ 924.236932][ T4607] Bluetooth: hci8: command tx timeout [ 924.347128][ T5271] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 924.418061][T12945] usb 5-1: Failed to submit usb control message: -71 [ 924.525900][T12945] usb 5-1: unable to send the bmi data to the device: -71 [ 924.533047][T12945] usb 5-1: unable to get target info from device [ 924.598286][ T5271] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 924.627025][T14216] usb 5-1: Failed to submit usb control message: -71 [ 924.633936][T14216] usb 5-1: unable to send the bmi data to the device: -71 [ 924.695879][ T5271] usb 5-1: USB disconnect, device number 56 [ 924.701964][T12945] usb 5-1: could not get target info (-71) [ 924.735634][T12945] usb 5-1: could not probe fw (-71) [ 924.745536][T14216] usb 5-1: unable to get target info from device [ 924.752390][T14216] usb 5-1: could not get target info (-71) [ 924.758248][T20448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.786466][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.808556][T14216] usb 5-1: could not probe fw (-71) [ 924.995604][T20448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.115847][ T4607] Bluetooth: hci9: command tx timeout [ 925.306262][T20448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.313259][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.479038][T20448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.169787][T20448] hsr_slave_0: entered promiscuous mode [ 926.267275][T20448] hsr_slave_1: entered promiscuous mode [ 926.319313][T20448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.367883][T20448] Cannot create hsr debugfs directory [ 926.380909][T20334] veth0_macvtap: entered promiscuous mode [ 926.461617][T20342] veth0_vlan: entered promiscuous mode [ 926.567703][T20334] veth1_macvtap: entered promiscuous mode [ 927.225801][ T4607] Bluetooth: hci9: command tx timeout [ 927.296374][T20342] veth1_vlan: entered promiscuous mode [ 927.459339][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.565617][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.609345][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.675875][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.785901][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.897178][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.975617][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.086047][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.107376][T20502] can: request_module (can-proto-0) failed. [ 928.167633][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.236177][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.296713][T20334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.495362][T20342] veth0_macvtap: entered promiscuous mode [ 928.779542][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.855590][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.905630][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.955667][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.016325][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.085606][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.125633][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.166880][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.177008][T13236] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 929.225656][T20334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.276191][ T4607] Bluetooth: hci9: command tx timeout [ 929.315747][T20334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.417318][T20334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.445574][T13236] usb 5-1: Using ep0 maxpacket: 8 [ 929.469763][T20342] veth1_macvtap: entered promiscuous mode [ 929.566046][T13236] usb 5-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 929.636137][T20334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.644946][T20334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.706334][T13236] usb 5-1: config 1 interface 0 has no altsetting 0 [ 929.765633][T20334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.807400][T13236] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 929.835504][T20334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.856258][T13236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.864304][T13236] usb 5-1: Product: syz [ 929.928003][T13236] usb 5-1: Manufacturer: syz [ 929.932676][T13236] usb 5-1: SerialNumber: syz [ 930.085985][T20485] chnl_net:caif_netlink_parms(): no params data found [ 930.675202][T20448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.706981][T13236] usbhid 5-1:1.0: can't add hid device: -71 [ 930.755679][T13236] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 930.775513][T20448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.876122][T13236] usb 5-1: USB disconnect, device number 57 [ 931.355791][ T4607] Bluetooth: hci9: command tx timeout [ 931.724924][T20448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.776394][T20448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.923247][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.935521][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.978769][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.065575][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.124441][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.551904][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.927278][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.965650][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.025663][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.085636][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.135647][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.206981][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.305523][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.371709][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.451706][T20342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.933663][T20448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.986617][T20448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.210730][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.223727][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.234114][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.245668][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.258072][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.272038][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.285059][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.297374][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.308505][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.319346][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.330326][T20342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.345582][T20342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.379096][T20342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.301810][T20448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.366453][T20448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.455950][ T5273] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 935.598122][T20342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.675493][T20342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.684353][T20342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.737806][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 935.768227][T20342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.777113][ T5273] usb 5-1: config 0 has no interfaces? [ 935.782618][ T5273] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 935.855690][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.936939][ T5273] usb 5-1: config 0 descriptor?? [ 936.068446][T20485] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.105800][T20485] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.113157][T20485] bridge_slave_0: entered allmulticast mode [ 936.196420][T20485] bridge_slave_0: entered promiscuous mode [ 936.244473][T14216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.275725][T14216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.356836][T20485] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.364019][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.465764][T20485] bridge_slave_1: entered allmulticast mode [ 936.473344][T20485] bridge_slave_1: entered promiscuous mode [ 936.500817][ T5303] usb 5-1: USB disconnect, device number 58 [ 936.947098][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.954947][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.109436][T20485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.208120][T20485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.093297][T20485] team0: Port device team_slave_0 added [ 938.208494][T20485] team0: Port device team_slave_1 added [ 938.396355][ T5303] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 938.615614][ T5303] usb 5-1: Using ep0 maxpacket: 16 [ 938.693245][ T5303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.770580][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.801856][T20485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.829874][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.941513][T20485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.955186][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 939.055704][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 939.088645][T20485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.117996][T20485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.185594][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 18396, setting to 1024 [ 939.245537][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.305476][T20485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.350905][ T5303] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffd0, bcdDevice=e0.c1 [ 939.435729][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.436240][T12945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.475620][ T5303] usb 5-1: Product: syz [ 939.479840][ T5303] usb 5-1: Manufacturer: syz [ 939.484460][ T5303] usb 5-1: SerialNumber: syz [ 939.535499][T12945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.627900][ T5303] usb 5-1: config 0 descriptor?? [ 939.638062][T20532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 939.656258][ T5303] option 5-1:0.0: GSM modem (1-port) converter detected [ 939.887850][T20448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 940.143141][T20485] hsr_slave_0: entered promiscuous mode [ 940.442906][T20485] hsr_slave_1: entered promiscuous mode [ 940.531820][T20485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.565502][T20485] Cannot create hsr debugfs directory [ 940.661582][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.695718][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.719147][T20448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 940.858472][ T9] usb 5-1: USB disconnect, device number 59 [ 940.933126][ T9] option 5-1:0.0: device disconnected [ 941.025792][T20448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 941.226861][T20448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 942.840533][T20553] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 942.848620][T20553] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 942.857279][T20553] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 942.865130][T20553] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 944.016766][T20485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.196029][T20557] trusted_key: encrypted_key: insufficient parameters specified [ 944.389633][T20557] netlink: 'syz.2.5963': attribute type 21 has an invalid length. [ 944.407346][T20557] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5963'. [ 944.646593][T20448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.170124][T20485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.431823][T20448] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.105832][T20485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.462118][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.469287][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.578117][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.585375][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.045587][ T5303] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 947.059213][T20485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.328011][ T5303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.397483][ T5303] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 947.457065][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.565935][ T5303] usb 3-1: Product: syz [ 947.570132][ T5303] usb 3-1: Manufacturer: syz [ 947.690441][ T5303] usb 3-1: SerialNumber: syz [ 947.788076][T20578] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 947.788076][T20578] program syz.4.5970 not setting count and/or reply_len properly [ 948.050918][T20485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 948.248031][T20485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.356649][T20580] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 948.356649][T20580] program syz.4.5970 not setting count and/or reply_len properly [ 948.487135][T20485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.549932][T20485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 949.359905][ T5303] cdc_ncm 3-1:1.0: failed to get mac address [ 949.418381][ T5303] cdc_ncm 3-1:1.0: bind() failure [ 949.494363][T20448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.515994][ T5303] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 949.619394][ T5303] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 949.657466][T20485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.689745][ T5303] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 949.787409][ T5303] usb 3-1: USB disconnect, device number 58 [ 949.858918][T20485] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.991502][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.998708][T14216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.318157][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.325321][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.408932][T20448] veth0_vlan: entered promiscuous mode [ 950.678325][T20448] veth1_vlan: entered promiscuous mode [ 950.944900][T20448] veth0_macvtap: entered promiscuous mode [ 951.130554][T20448] veth1_macvtap: entered promiscuous mode [ 951.283433][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.338496][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.385574][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.431273][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.495661][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.558823][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.635582][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.695708][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.757419][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.805590][T19906] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 951.848761][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.888166][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.045614][T19906] usb 3-1: Using ep0 maxpacket: 32 [ 952.145662][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.138835][T20600] syz.4.5976: attempt to access beyond end of device [ 953.138835][T20600] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 953.153554][T20600] syz.4.5976: attempt to access beyond end of device [ 953.153554][T20600] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 953.166664][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 953.176539][T20600] syz.4.5976: attempt to access beyond end of device [ 953.176539][T20600] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 953.189745][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 953.199389][T20600] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 953.207082][T20600] UDF-fs: Scanning with blocksize 512 failed [ 953.214586][T20600] syz.4.5976: attempt to access beyond end of device [ 953.214586][T20600] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 953.228478][T20600] syz.4.5976: attempt to access beyond end of device [ 953.228478][T20600] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 953.241495][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 953.251305][T20600] syz.4.5976: attempt to access beyond end of device [ 953.251305][T20600] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 953.415630][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 953.425840][T20600] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 953.433500][T20600] UDF-fs: Scanning with blocksize 1024 failed [ 953.441975][T20600] syz.4.5976: attempt to access beyond end of device [ 953.441975][T20600] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 953.455055][T20600] syz.4.5976: attempt to access beyond end of device [ 953.455055][T20600] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 953.468536][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 953.478416][T20600] syz.4.5976: attempt to access beyond end of device [ 953.478416][T20600] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 953.491518][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 953.501140][T20600] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 953.508811][T20600] UDF-fs: Scanning with blocksize 2048 failed [ 953.515324][T20600] syz.4.5976: attempt to access beyond end of device [ 953.515324][T20600] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 953.529787][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 953.765654][T20600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 953.775242][T20600] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 953.782937][T20600] UDF-fs: Scanning with blocksize 4096 failed [ 953.789032][T20600] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 954.200594][T19906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.221888][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.296770][T19906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.365548][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.377009][T19906] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 954.394575][T19906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.407528][T20448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.470037][T19906] usb 3-1: config 0 descriptor?? [ 954.507308][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.555740][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.625619][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.683160][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.684143][T19574] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 954.741282][T19574] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 954.764629][T19574] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 954.796293][T19906] usb 3-1: can't set config #0, error -71 [ 954.802275][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.803957][T19906] usb 3-1: USB disconnect, device number 59 [ 954.831516][T19574] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 954.866887][T19574] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 954.898000][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.918067][T19574] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 955.036059][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.090270][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.163316][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.215599][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.275523][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.335516][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.428149][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.473027][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.540224][T20448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.655902][T20609] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5978'. [ 955.795302][T20448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.865604][T20448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.897629][T20448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.955680][T20448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.456372][T20485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.882454][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'. [ 957.038759][T19574] Bluetooth: hci10: command tx timeout [ 957.854534][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.929806][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.402996][T20485] veth0_vlan: entered promiscuous mode [ 958.500635][T14216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.565617][T14216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.845604][ T5273] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 958.849671][T20485] veth1_vlan: entered promiscuous mode [ 959.059767][T20485] veth0_macvtap: entered promiscuous mode [ 959.116413][T19574] Bluetooth: hci10: command tx timeout [ 959.119738][T20485] veth1_macvtap: entered promiscuous mode [ 959.129357][ T5273] usb 3-1: config 0 has no interfaces? [ 959.149710][ T5273] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 959.200888][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.255605][ T5273] usb 3-1: Product: syz [ 959.261234][ T5273] usb 3-1: Manufacturer: syz [ 959.285625][ T5273] usb 3-1: SerialNumber: syz [ 959.297002][ T5273] usb 3-1: config 0 descriptor?? [ 959.332773][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.445580][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.515495][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.565664][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.605910][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.665537][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.715546][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.839007][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.953223][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.046513][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.098999][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.145597][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.210884][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.267316][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.323389][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.358401][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.412205][T20485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.499737][T20605] chnl_net:caif_netlink_parms(): no params data found [ 960.639780][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.717422][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.775542][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.854997][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.889868][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.945596][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.974296][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.026734][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.076155][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.139384][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.169869][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.196239][T19574] Bluetooth: hci10: command tx timeout [ 961.215745][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.245519][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.276043][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.288782][T20485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.319854][T20485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.471202][T20485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.036255][T20647] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5987'. [ 962.588016][T20485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.652017][T20485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.674990][ T5273] usb 3-1: USB disconnect, device number 60 [ 962.705664][T20485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.744549][T20485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.055302][T20605] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.115599][T20605] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.145936][T20605] bridge_slave_0: entered allmulticast mode [ 963.168237][T20605] bridge_slave_0: entered promiscuous mode [ 963.225614][T20605] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.235709][T20605] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.261998][T20605] bridge_slave_1: entered allmulticast mode [ 963.277573][T19574] Bluetooth: hci10: command tx timeout [ 963.292644][T20605] bridge_slave_1: entered promiscuous mode [ 963.418364][T19908] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 963.695510][T19908] usb 3-1: Using ep0 maxpacket: 16 [ 963.755604][T20667] can: request_module (can-proto-0) failed. [ 963.761906][T19908] usb 3-1: config 0 has no interfaces? [ 963.825844][T19908] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 963.835919][ T5303] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 963.861874][T20605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.895761][T19908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.960911][T19908] usb 3-1: config 0 descriptor?? [ 964.069692][ T5303] usb 5-1: config 0 has no interfaces? [ 964.139057][ T5303] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 964.197843][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.214695][T20605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.251124][ T5303] usb 5-1: Product: syz [ 964.255939][ T5303] usb 5-1: Manufacturer: syz [ 964.260547][ T5303] usb 5-1: SerialNumber: syz [ 964.348147][ T5303] usb 5-1: config 0 descriptor?? [ 964.706459][T19916] usb 3-1: USB disconnect, device number 61 [ 965.202308][T20605] team0: Port device team_slave_0 added [ 965.298268][T20605] team0: Port device team_slave_1 added [ 965.785432][T20605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.806298][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.927801][T20605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.981509][T20605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.068699][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.218900][T20605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.370243][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.429298][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.767062][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 967.025554][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 967.035622][T19908] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 967.086312][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.146363][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.149212][ T9] usb 4-1: config 0 has no interfaces? [ 967.221007][T20605] hsr_slave_0: entered promiscuous mode [ 967.226968][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 967.267875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.286388][T19908] usb 3-1: Using ep0 maxpacket: 8 [ 967.295837][ T5273] usb 5-1: USB disconnect, device number 60 [ 967.336704][ T9] usb 4-1: config 0 descriptor?? [ 967.353042][T20605] hsr_slave_1: entered promiscuous mode [ 967.375361][T19908] usb 3-1: config 0 has no interfaces? [ 967.405798][T19908] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 967.470440][T19908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.530465][T20605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.541729][T19908] usb 3-1: config 0 descriptor?? [ 967.575012][T20605] Cannot create hsr debugfs directory [ 967.876556][T20685] fuse: Bad value for 'fd' [ 967.900794][T19918] usb 3-1: USB disconnect, device number 62 [ 968.251431][T19908] usb 4-1: USB disconnect, device number 74 [ 968.305916][T20690] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5998'. [ 969.455574][T19918] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 969.677660][T19918] usb 3-1: Using ep0 maxpacket: 16 [ 969.764258][T19918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.875341][T19918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.939172][T20712] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 970.015470][T20713] overlayfs: failed to resolve './file1': -2 [ 970.468858][T20715] xt_HMARK: spi-set and port-set can't be combined [ 970.516046][T19918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 970.540816][T20605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.565518][T19918] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 970.608536][T19918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.645911][T19918] usb 3-1: config 0 descriptor?? [ 971.268710][T20719] "syz.4.6006" (20719) uses obsolete ecb(arc4) skcipher [ 971.394250][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.461059][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.515502][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.522792][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.540585][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.591443][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.665926][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.673275][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.744969][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.795576][T19918] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 971.806382][T20605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.876427][T19918] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input47 [ 971.949709][T19918] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 972.013696][T19918] usb 3-1: USB disconnect, device number 63 [ 973.441449][T20605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.448816][T20605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.854130][T20747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 974.862168][T20747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 974.870667][T20747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 974.878675][T20747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 976.553006][T20605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 976.755937][T20605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.938588][T19918] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 976.968672][T20605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 977.205724][T19918] usb 3-1: Using ep0 maxpacket: 8 [ 977.216427][T20605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.247127][T19918] usb 3-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 977.365494][T19918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 977.516750][T19918] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 977.597963][T19918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.645486][T19918] usb 3-1: Product: syz [ 977.695026][T19918] usb 3-1: Manufacturer: syz [ 977.699784][T19918] usb 3-1: SerialNumber: syz [ 978.165902][T20605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.750194][T20776] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 978.750194][T20776] program syz.4.6027 not setting count and/or reply_len properly [ 978.865235][T19918] usbhid 3-1:1.0: can't add hid device: -71 [ 978.878454][T19918] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 978.965537][T19918] usb 3-1: USB disconnect, device number 64 [ 979.256388][T20777] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 979.256388][T20777] program syz.4.6027 not setting count and/or reply_len properly [ 979.310744][T20605] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.412242][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.419502][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.591134][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.598361][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.990485][T20605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.664382][T20605] veth0_vlan: entered promiscuous mode [ 981.805629][T16953] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 981.941705][T20605] veth1_vlan: entered promiscuous mode [ 982.045610][T16953] usb 3-1: Using ep0 maxpacket: 16 [ 982.060089][T16953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.168663][T16953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 982.242312][T16953] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 982.359184][T16953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.388898][T20605] veth0_macvtap: entered promiscuous mode [ 982.435565][T16953] usb 3-1: Product: syz [ 982.439897][T16953] usb 3-1: Manufacturer: syz [ 982.444503][T16953] usb 3-1: SerialNumber: syz [ 982.458572][T20605] veth1_macvtap: entered promiscuous mode [ 982.552754][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.572259][T20798] binder: 20797:20798 ioctl 4018620d 0 returned -22 [ 982.616938][T20610] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 982.673518][T20610] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 982.693833][T20610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 982.713955][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.744206][T20610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 982.756990][T20610] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 982.768414][T20610] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 982.855126][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.896126][ T5273] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 983.007659][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.138949][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.139138][T16953] usb 3-1: 0:2 : does not exist [ 983.216024][T16953] usb 3-1: USB disconnect, device number 65 [ 983.235536][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 983.299505][ T5273] usb 5-1: config 0 has no interfaces? [ 983.305030][ T5273] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 983.347623][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.395625][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.497411][ T5273] usb 5-1: config 0 descriptor?? [ 983.533602][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.695602][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.769681][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.809651][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.831448][ T5273] usb 5-1: USB disconnect, device number 61 [ 983.942564][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.995558][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.045571][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.125630][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.169825][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.225464][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.365627][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.454413][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.527450][T20605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.609029][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.709736][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.805475][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.876479][T19574] Bluetooth: hci11: command tx timeout [ 984.885574][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.974068][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.028519][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.099405][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.127940][T20804] xt_HMARK: spi-set and port-set can't be combined [ 985.149522][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.225487][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.262209][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.313056][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.356767][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.405648][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.486183][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.535559][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.615463][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.625349][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.735547][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.777627][T20605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.862125][T20605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.935474][T20605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.984890][T20605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.025528][T20605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.352913][T20814] trusted_key: encrypted_key: insufficient parameters specified [ 986.360739][T16953] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 986.585541][T16953] usb 3-1: Using ep0 maxpacket: 8 [ 986.717804][T16953] usb 3-1: config 0 has no interfaces? [ 986.772557][T20814] netlink: 'syz.4.6040': attribute type 21 has an invalid length. [ 986.780722][T16953] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 986.825825][T20814] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6040'. [ 986.845519][T16953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.871247][T20818] "syz.0.6041" (20818) uses obsolete ecb(arc4) skcipher [ 986.918337][T16953] usb 3-1: config 0 descriptor?? [ 986.957191][T19574] Bluetooth: hci11: command tx timeout [ 987.156422][T20812] binder_alloc: 20810: binder_alloc_buf, no vma [ 987.174203][ T5303] usb 3-1: USB disconnect, device number 66 [ 987.677484][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.685346][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.846931][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6043'. [ 987.847680][T12945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.920262][T12945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.026836][T20799] chnl_net:caif_netlink_parms(): no params data found [ 988.731183][T20839] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 988.731183][T20839] program syz.4.6046 not setting count and/or reply_len properly [ 989.035561][T19574] Bluetooth: hci11: command tx timeout [ 989.219037][T20839] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 989.219037][T20839] program syz.4.6046 not setting count and/or reply_len properly [ 989.985699][T19907] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 990.205779][T19907] usb 3-1: Using ep0 maxpacket: 8 [ 990.231732][T19907] usb 3-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 990.280414][T19907] usb 3-1: config 1 interface 0 has no altsetting 0 [ 990.344205][T19907] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 990.436798][T19907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.475516][T19907] usb 3-1: Product: syz [ 990.490799][T19907] usb 3-1: Manufacturer: syz [ 990.498123][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.505306][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.556113][T19907] usb 3-1: SerialNumber: syz [ 990.665923][T20799] bridge_slave_0: entered allmulticast mode [ 990.719082][T20799] bridge_slave_0: entered promiscuous mode [ 990.767825][T20799] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.830688][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.888585][T20853] trusted_key: encrypted_key: insufficient parameters specified [ 990.906211][T20799] bridge_slave_1: entered allmulticast mode [ 990.956804][T20799] bridge_slave_1: entered promiscuous mode [ 991.115594][T19574] Bluetooth: hci11: command tx timeout [ 991.604985][T20799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.748430][T20853] netlink: 'syz.1.6050': attribute type 21 has an invalid length. [ 991.881907][T20853] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6050'. [ 992.071168][T20799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.418294][T19907] usbhid 3-1:1.0: can't add hid device: -71 [ 992.424310][T19907] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 992.582069][T19907] usb 3-1: USB disconnect, device number 67 [ 993.365598][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.372130][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.445028][T20799] team0: Port device team_slave_0 added [ 993.490168][T20799] team0: Port device team_slave_1 added [ 993.643732][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6054'. [ 993.895812][ T5273] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 994.095600][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 994.146481][ T5273] usb 5-1: config 0 has no interfaces? [ 994.185715][ T5273] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 994.235998][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.321211][ T5273] usb 5-1: config 0 descriptor?? [ 994.426461][T20799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.473379][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.625960][T20799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.646342][T20865] binder_alloc: 20862: binder_alloc_buf, no vma [ 994.678683][ T5273] usb 5-1: USB disconnect, device number 62 [ 994.822728][T20799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.875746][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.045675][T20799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.253532][T20880] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 996.253532][T20880] program syz.1.6058 not setting count and/or reply_len properly [ 996.705605][T20880] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 996.705605][T20880] program syz.1.6058 not setting count and/or reply_len properly [ 997.378174][T20799] hsr_slave_0: entered promiscuous mode [ 997.600547][T20799] hsr_slave_1: entered promiscuous mode [ 997.785728][T20799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.822420][T20799] Cannot create hsr debugfs directory [ 998.446807][ T5273] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 998.699377][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 998.756620][ T5273] usb 1-1: config 253 has an invalid interface number: 202 but max is 1 [ 998.805803][ T5273] usb 1-1: config 253 has an invalid interface number: 79 but max is 1 [ 998.820281][ T5273] usb 1-1: config 253 has no interface number 0 [ 998.859101][ T5273] usb 1-1: config 253 has no interface number 1 [ 998.896620][ T5273] usb 1-1: config 253 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 998.947246][ T5273] usb 1-1: config 253 interface 79 altsetting 64 endpoint 0x3 has an invalid bInterval 98, changing to 10 [ 999.016689][ T5273] usb 1-1: config 253 interface 79 has no altsetting 0 [ 999.063216][ T5273] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 999.122098][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.167161][ T5273] usb 1-1: Product: syz [ 999.171383][ T5273] usb 1-1: Manufacturer: syz [ 999.225513][ T5273] usb 1-1: SerialNumber: syz [ 999.702586][ T5273] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 999.716471][ T4564] usb 1-1: Failed to submit usb control message: -71 [ 999.723410][ T4564] usb 1-1: unable to send the bmi data to the device: -71 [ 999.855015][ T4564] usb 1-1: unable to get target info from device [ 999.889844][ T2469] usb 1-1: Failed to submit usb control message: -71 [ 999.916521][ T5273] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 999.939767][ T5273] usb 1-1: USB disconnect, device number 61 [ 999.985473][ T4564] usb 1-1: could not get target info (-71) [ 999.991396][ T4564] usb 1-1: could not probe fw (-71) [ 999.999553][ T2469] usb 1-1: unable to send the bmi data to the device: -71 [ 1000.042197][ T2469] usb 1-1: unable to get target info from device [ 1000.134827][ T2469] usb 1-1: could not get target info (-71) [ 1000.188220][ T2469] usb 1-1: could not probe fw (-71) [ 1000.816219][T20911] bio_check_eod: 2 callbacks suppressed [ 1000.816272][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.816272][T20911] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1000.846529][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.846529][T20911] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1000.859734][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1000.870854][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.870854][T20911] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1000.884090][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1000.893775][T20911] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1000.929242][T20911] UDF-fs: Scanning with blocksize 512 failed [ 1000.939873][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.939873][T20911] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1000.953995][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.953995][T20911] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1000.967236][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1000.977899][T20911] syz.1.6068: attempt to access beyond end of device [ 1000.977899][T20911] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1000.991164][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1001.000911][T20911] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1001.008715][T20911] UDF-fs: Scanning with blocksize 1024 failed [ 1001.017802][T20911] syz.1.6068: attempt to access beyond end of device [ 1001.017802][T20911] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1001.031669][T20911] syz.1.6068: attempt to access beyond end of device [ 1001.031669][T20911] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1001.051924][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1001.062524][T20911] syz.1.6068: attempt to access beyond end of device [ 1001.062524][T20911] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1001.075811][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1001.085544][T20911] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1001.093261][T20911] UDF-fs: Scanning with blocksize 2048 failed [ 1001.101823][T20911] syz.1.6068: attempt to access beyond end of device [ 1001.101823][T20911] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1001.115898][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1001.126250][T20911] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1001.135990][T20911] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1001.144806][T20911] UDF-fs: Scanning with blocksize 4096 failed [ 1001.152130][T20911] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1001.833618][T20799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.726512][T20930] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1004.052156][T20799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.845650][ T5273] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1005.166363][ T5273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.263261][T20799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.325982][ T5273] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.385615][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.434396][T16953] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1005.445359][ T5273] usb 2-1: Product: syz [ 1005.475547][ T5273] usb 2-1: Manufacturer: syz [ 1005.480207][ T5273] usb 2-1: SerialNumber: syz [ 1005.600287][T20949] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1005.696218][T16953] usb 1-1: Using ep0 maxpacket: 8 [ 1005.736361][T16953] usb 1-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1005.775659][T16953] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1005.814474][T16953] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 1005.865703][T16953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.956108][T16953] usb 1-1: Product: syz [ 1006.030667][T16953] usb 1-1: Manufacturer: syz [ 1006.035315][T16953] usb 1-1: SerialNumber: syz [ 1006.174834][T20799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.175483][T16953] usbhid 1-1:1.0: can't add hid device: -71 [ 1007.190335][ T5273] cdc_ncm 2-1:1.0: failed to get mac address [ 1007.235841][T16953] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1007.243901][ T5273] cdc_ncm 2-1:1.0: bind() failure [ 1007.286929][ T5273] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1007.317392][T16953] usb 1-1: USB disconnect, device number 62 [ 1007.333736][ T5273] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1007.385659][ T5273] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1007.460757][ T5273] usb 2-1: USB disconnect, device number 76 [ 1007.587085][ T5303] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1007.680783][T20799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1007.838441][T20799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1007.867955][ T5303] usb 5-1: config 0 has no interfaces? [ 1007.904715][ T5303] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1007.965630][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.966791][T20799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.036014][ T5303] usb 5-1: Product: syz [ 1008.040255][ T5303] usb 5-1: Manufacturer: syz [ 1008.044875][ T5303] usb 5-1: SerialNumber: syz [ 1008.136340][ T5303] usb 5-1: config 0 descriptor?? [ 1009.106742][T13236] usb 5-1: USB disconnect, device number 63 [ 1009.265868][T20799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1010.262099][T20976] xt_HMARK: spi-set and port-set can't be combined [ 1010.469823][T20799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.035647][T20610] Bluetooth: hci5: command 0x0406 tx timeout [ 1011.369502][T20799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.590537][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.597899][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.815006][ T29] audit: type=1326 audit(1723658120.921:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20984 comm="syz.0.6095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9189799f9 code=0x0 [ 1011.868662][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.875856][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.196720][ T5303] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1012.391839][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 1012.393746][T20799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1012.476320][ T5273] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1012.617949][ T5303] usb 3-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1012.714093][ T5303] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1012.735589][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 1012.766645][ T5303] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 1012.805644][ T5273] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.826645][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.834700][ T5303] usb 3-1: Product: syz [ 1012.858943][ T5273] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.878425][ T5303] usb 3-1: Manufacturer: syz [ 1012.883144][ T5303] usb 3-1: SerialNumber: syz [ 1012.902523][ T5273] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1013.121036][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.151743][ T5273] usb 5-1: Product: syz [ 1013.186022][ T5273] usb 5-1: Manufacturer: syz [ 1013.190716][ T5273] usb 5-1: SerialNumber: syz [ 1013.476342][T21008] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1013.476342][T21008] program syz.1.6100 not setting count and/or reply_len properly [ 1013.685883][ T5273] usb 5-1: 0:2 : does not exist [ 1013.745676][ T5273] usb 5-1: unit 4 not found! [ 1013.893563][ T5273] usb 5-1: USB disconnect, device number 64 [ 1013.902231][T20799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.920975][ T5303] usbhid 3-1:1.0: can't add hid device: -71 [ 1013.977312][ T5303] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1013.992885][T21008] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1013.992885][T21008] program syz.1.6100 not setting count and/or reply_len properly [ 1014.037093][ T5303] usb 3-1: USB disconnect, device number 68 [ 1014.512616][T20799] veth0_vlan: entered promiscuous mode [ 1014.653546][T20799] veth1_vlan: entered promiscuous mode [ 1014.942549][T20799] veth0_macvtap: entered promiscuous mode [ 1015.027598][T20799] veth1_macvtap: entered promiscuous mode [ 1015.135024][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.205041][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.265476][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.316204][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.348108][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.395643][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.435638][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.485633][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.554939][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.667706][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.731152][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.779398][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.848828][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.958486][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.033812][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.105774][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.151062][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.202833][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.289903][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.618417][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.649015][T20799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.702838][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.835523][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.862611][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.875074][T21031] can: request_module (can-proto-0) failed. [ 1018.955443][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.105711][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.162070][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.426668][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.459815][T21037] bio_check_eod: 2 callbacks suppressed [ 1019.459836][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.459836][T21037] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1019.480462][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.480462][T21037] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1019.493979][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1019.504116][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.504116][T21037] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1019.520802][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1019.530737][T21037] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1019.538737][T21037] UDF-fs: Scanning with blocksize 512 failed [ 1019.549084][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.549084][T21037] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1019.562793][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.562793][T21037] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1019.596235][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1019.606455][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.606455][T21037] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1019.619815][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1019.629830][T21037] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1019.637759][T21037] UDF-fs: Scanning with blocksize 1024 failed [ 1019.645599][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.645599][T21037] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1019.659115][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.659115][T21037] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1019.672471][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1019.684169][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.684169][T21037] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1019.698708][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1019.708724][T21037] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1019.716644][T21037] UDF-fs: Scanning with blocksize 2048 failed [ 1019.723920][T21037] syz.1.6108: attempt to access beyond end of device [ 1019.723920][T21037] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1019.737423][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1019.747603][T21037] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1019.757616][T21037] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1019.765329][T21037] UDF-fs: Scanning with blocksize 4096 failed [ 1019.771597][T21037] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1020.315625][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.394183][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.435604][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.485676][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.535714][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.571032][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.617244][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.649160][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.695587][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.715670][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.745502][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.755378][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.876249][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.947992][T20799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.039763][ T5226] Bluetooth: hci6: command 0x0406 tx timeout [ 1021.046545][ T5226] Bluetooth: hci7: command 0x0406 tx timeout [ 1021.231386][T21040] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1021.252126][T20799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.331206][T20799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.405597][T20799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.485632][T20799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.725278][T21050] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1022.811194][T21042] overlayfs: failed to resolve './file1': -2 [ 1023.278341][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.355476][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.517544][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.595752][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.647394][T19574] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1023.672435][T19574] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1023.696076][T19574] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1023.785923][T19574] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1023.797343][T19574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1023.805015][T19574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1025.096539][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6115'. [ 1025.262476][T21072] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6115'. [ 1025.345565][T20526] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 1025.545508][T20526] usb 4-1: device descriptor read/64, error -71 [ 1025.695560][T19909] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1025.905696][T20526] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1025.915784][T20610] Bluetooth: hci12: command tx timeout [ 1025.980890][T19909] usb 3-1: Using ep0 maxpacket: 32 [ 1026.050624][T21055] chnl_net:caif_netlink_parms(): no params data found [ 1026.145614][T20526] usb 4-1: device descriptor read/64, error -71 [ 1026.146731][T19909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.217817][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1026.286520][T16953] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1026.294478][T20526] usb usb4-port1: attempt power cycle [ 1026.295602][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1026.486669][T19909] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1026.525464][T19909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.535551][T16953] usb 5-1: Using ep0 maxpacket: 16 [ 1026.559717][T19909] usb 3-1: config 0 descriptor?? [ 1026.611873][T21075] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1026.648085][T16953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.737510][T19909] hub 3-1:0.0: USB hub found [ 1026.757092][T20526] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1026.772487][T16953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.858337][T16953] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.945505][T16953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.004938][T16953] usb 5-1: Product: syz [ 1027.017445][T16953] usb 5-1: Manufacturer: syz [ 1027.046986][T16953] usb 5-1: SerialNumber: syz [ 1027.146305][T20526] usb 4-1: device descriptor read/8, error -71 [ 1027.185601][T19909] hub 3-1:0.0: 2 ports detected [ 1027.228279][T21055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.287362][T21055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.325829][T21055] bridge_slave_0: entered allmulticast mode [ 1027.358177][T21055] bridge_slave_0: entered promiscuous mode [ 1027.367131][T16953] usb 5-1: 0:2 : does not exist [ 1027.406470][T16953] usb 5-1: unit 4 not found! [ 1027.447048][T21055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.456663][T20526] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 1027.519678][T21055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.536572][T16953] usb 5-1: USB disconnect, device number 65 [ 1027.542999][T21055] bridge_slave_1: entered allmulticast mode [ 1027.566040][T20526] usb 4-1: device descriptor read/8, error -71 [ 1027.603890][T21055] bridge_slave_1: entered promiscuous mode [ 1027.706908][T20526] usb usb4-port1: unable to enumerate USB device [ 1027.996656][T20610] Bluetooth: hci12: command tx timeout [ 1028.239890][T21055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.327449][T21055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.569160][T19909] usb 3-1: USB disconnect, device number 69 [ 1028.922604][T21055] team0: Port device team_slave_0 added [ 1029.008180][T21055] team0: Port device team_slave_1 added [ 1029.315161][T21089] bio_check_eod: 2 callbacks suppressed [ 1029.315208][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.315208][T21089] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1029.335423][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.335423][T21089] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1029.348603][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1029.361216][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.361216][T21089] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1029.374363][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1029.384093][T21089] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1029.391897][T21089] UDF-fs: Scanning with blocksize 512 failed [ 1029.402137][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.402137][T21089] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1029.447736][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.447736][T21089] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1029.460899][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1029.471490][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.471490][T21089] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1029.484716][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1029.494467][T21089] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1029.502293][T21089] UDF-fs: Scanning with blocksize 1024 failed [ 1029.513298][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.513298][T21089] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1029.529304][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.529304][T21089] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1029.542622][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1029.552993][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.552993][T21089] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1029.569169][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1029.578872][T21089] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1029.586684][T21089] UDF-fs: Scanning with blocksize 2048 failed [ 1029.595056][T21089] syz.3.6119: attempt to access beyond end of device [ 1029.595056][T21089] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1029.608748][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1029.622620][T21089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1029.634352][T21089] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1029.642118][T21089] UDF-fs: Scanning with blocksize 4096 failed [ 1029.648525][T21089] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1029.918531][T21086] netlink: 'syz.4.6120': attribute type 4 has an invalid length. [ 1030.078581][T20610] Bluetooth: hci12: command tx timeout [ 1030.965335][T21055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.029382][T21055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.288929][T21055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.328376][T21055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.358514][T21055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.456266][T21055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.575711][T20526] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1032.465537][T20610] Bluetooth: hci12: command tx timeout [ 1032.488378][T20526] usb 3-1: Using ep0 maxpacket: 32 [ 1032.633439][T20526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.766119][T20526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.805589][T20526] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.835642][T20526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.888644][T20526] usb 3-1: config 0 descriptor?? [ 1033.029364][T20526] hub 3-1:0.0: USB hub found [ 1033.210790][T21055] hsr_slave_0: entered promiscuous mode [ 1033.290805][T20526] hub 3-1:0.0: 1 port detected [ 1033.453838][T21055] hsr_slave_1: entered promiscuous mode [ 1033.713239][T21055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.757873][T21055] Cannot create hsr debugfs directory [ 1034.108141][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1034.124436][T19907] usb 3-1: USB disconnect, device number 70 [ 1035.409225][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1035.652783][T21109] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1035.985743][ T5303] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1036.342957][ T5303] usb 2-1: device descriptor read/64, error -71 [ 1037.386274][T21118] bio_check_eod: 2 callbacks suppressed [ 1037.386290][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.386290][T21118] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1037.406830][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.406830][T21118] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1037.419848][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1037.429679][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.429679][T21118] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1037.442705][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1037.452319][T21118] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1037.459995][T21118] UDF-fs: Scanning with blocksize 512 failed [ 1037.466791][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.466791][T21118] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1037.479935][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.479935][T21118] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1037.492913][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1037.645651][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.645651][T21118] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1037.658805][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1037.668432][T21118] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1037.676091][T21118] UDF-fs: Scanning with blocksize 1024 failed [ 1037.682695][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.682695][T21118] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1037.695806][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.695806][T21118] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1037.710430][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1037.720265][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.720265][T21118] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1037.733385][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1037.742977][T21118] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1037.750662][T21118] UDF-fs: Scanning with blocksize 2048 failed [ 1037.895942][T21118] syz.4.6130: attempt to access beyond end of device [ 1037.895942][T21118] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1037.910538][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1037.920326][T21118] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1037.929954][T21118] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1037.937675][T21118] UDF-fs: Scanning with blocksize 4096 failed [ 1037.943738][T21118] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1038.320659][ T5303] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1038.518970][ T5303] usb 2-1: device descriptor read/64, error -71 [ 1038.686299][ T5303] usb usb2-port1: attempt power cycle [ 1038.699160][T21121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1039.551397][T21055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.428659][T21131] trusted_key: encrypted_key: insufficient parameters specified [ 1040.539549][T21055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.807190][T21132] netlink: 'syz.4.6135': attribute type 21 has an invalid length. [ 1040.844618][T21132] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6135'. [ 1041.509183][T21055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.525874][T20610] Bluetooth: hci8: command 0x0406 tx timeout [ 1041.695608][T16953] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1041.961969][T16953] usb 5-1: Using ep0 maxpacket: 16 [ 1042.146063][T16953] usb 5-1: config 0 has no interfaces? [ 1042.156091][T16953] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1042.295490][T16953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.382139][T16953] usb 5-1: config 0 descriptor?? [ 1043.421311][ T5303] usb 5-1: USB disconnect, device number 66 [ 1043.879929][T21055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.066535][T20610] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1044.085606][T13236] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1044.101031][T20610] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1044.118935][T20610] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1044.130280][T20610] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1044.139045][T20610] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1044.146660][T20610] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1044.385562][T13236] usb 3-1: device descriptor read/64, error -71 [ 1044.685711][T13236] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 1044.905546][T13236] usb 3-1: device descriptor read/64, error -71 [ 1045.047360][T13236] usb usb3-port1: attempt power cycle [ 1045.188440][T21157] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1045.397437][T21055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1045.498498][T13236] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1045.507533][T21055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1045.578905][T13236] usb 3-1: device descriptor read/8, error -71 [ 1045.658999][T21055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1045.807668][T21055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1045.925816][T13236] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1045.986462][T13236] usb 3-1: device descriptor read/8, error -71 [ 1046.129318][T21150] chnl_net:caif_netlink_parms(): no params data found [ 1046.206077][T13236] usb usb3-port1: unable to enumerate USB device [ 1046.242996][T20610] Bluetooth: hci13: command tx timeout [ 1046.635614][T20610] Bluetooth: hci9: command 0x0406 tx timeout [ 1048.437134][T19574] Bluetooth: hci13: command tx timeout [ 1048.553363][T21174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1050.238622][T21188] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1050.476044][T19574] Bluetooth: hci13: command tx timeout [ 1052.557785][T19574] Bluetooth: hci13: command tx timeout [ 1052.743915][ T29] audit: type=1326 audit(1723658161.851:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21197 comm="syz.2.6155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b71799f9 code=0x0 [ 1052.764999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.175712][T19916] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1053.465643][T19916] usb 2-1: device descriptor read/64, error -71 [ 1053.575614][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.766206][T19916] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 1053.838236][T21150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.929567][T21150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.978144][T21150] bridge_slave_0: entered allmulticast mode [ 1053.995898][T19916] usb 2-1: device descriptor read/64, error -71 [ 1054.044956][T21150] bridge_slave_0: entered promiscuous mode [ 1054.147870][T19916] usb usb2-port1: attempt power cycle [ 1054.615999][T19916] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1054.707154][T19916] usb 2-1: device descriptor read/8, error -71 [ 1054.737956][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.813673][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.821881][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.935703][T21150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.942915][T21150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.064081][T19916] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1055.097024][T21150] bridge_slave_1: entered allmulticast mode [ 1055.104769][T21150] bridge_slave_1: entered promiscuous mode [ 1055.196140][T19916] usb 2-1: device descriptor read/8, error -71 [ 1055.325946][T19916] usb usb2-port1: unable to enumerate USB device [ 1055.972215][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.650158][T21150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.756554][T21210] syzkaller1: entered promiscuous mode [ 1056.762081][T21210] syzkaller1: entered allmulticast mode [ 1057.208515][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.096162][T21150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.120388][T21055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.938419][T21150] team0: Port device team_slave_0 added [ 1059.397486][T21150] team0: Port device team_slave_1 added [ 1059.441162][T21222] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1059.479488][T21055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.105926][T21232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1060.359241][T21150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.415550][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.515499][T21150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.680264][T21150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.725591][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.875429][T21150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.008447][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.015678][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.131425][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.138615][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.947136][T21150] hsr_slave_0: entered promiscuous mode [ 1062.028275][T21150] hsr_slave_1: entered promiscuous mode [ 1062.115649][T21150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.163346][T21150] Cannot create hsr debugfs directory [ 1062.173733][ T12] bridge_slave_1: left allmulticast mode [ 1062.181069][ T12] bridge_slave_1: left promiscuous mode [ 1062.248057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.515569][T16953] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1062.596259][ T12] bridge_slave_0: left allmulticast mode [ 1062.601965][ T12] bridge_slave_0: left promiscuous mode [ 1062.696458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.886589][T16953] usb 5-1: config 0 has no interfaces? [ 1062.990450][T16953] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1063.075706][T16953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.225543][T16953] usb 5-1: Product: syz [ 1063.229775][T16953] usb 5-1: Manufacturer: syz [ 1063.299774][T16953] usb 5-1: SerialNumber: syz [ 1063.318678][T20610] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1063.319058][T16953] usb 5-1: config 0 descriptor?? [ 1063.332161][T20610] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1063.355660][T20610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1063.378399][T20610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1063.386572][T20610] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1063.395151][T20610] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1065.526150][T20610] Bluetooth: hci11: command tx timeout [ 1067.605984][T20610] Bluetooth: hci11: command tx timeout [ 1069.676240][T20610] Bluetooth: hci11: command tx timeout [ 1070.226438][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.507151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.897785][ T12] bond0 (unregistering): Released all slaves [ 1071.745631][T21246] netlink: 'syz.1.6169': attribute type 4 has an invalid length. [ 1071.756019][T20610] Bluetooth: hci11: command tx timeout [ 1073.465998][T19909] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1073.549562][T19574] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1073.561641][T19574] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1073.570324][T19574] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1073.580591][T19574] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1073.589537][T19574] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1073.605882][T19574] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1073.826829][T19909] usb 2-1: config 0 has no interfaces? [ 1073.849272][T19909] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1073.885434][T19909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.937033][T19909] usb 2-1: Product: syz [ 1073.941265][T19909] usb 2-1: Manufacturer: syz [ 1073.946615][T20526] usb 5-1: USB disconnect, device number 67 [ 1074.025438][T19909] usb 2-1: SerialNumber: syz [ 1074.052901][T19909] usb 2-1: config 0 descriptor?? [ 1075.494359][T21055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1075.585620][T21055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.755737][T19574] Bluetooth: hci14: command tx timeout [ 1076.127998][T20526] usb 2-1: USB disconnect, device number 84 [ 1077.355697][T19574] Bluetooth: hci10: command 0x0406 tx timeout [ 1077.835663][T20610] Bluetooth: hci14: command tx timeout [ 1079.845688][T19909] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 1079.885823][ T12] hsr_slave_0: left promiscuous mode [ 1079.925899][T20610] Bluetooth: hci14: command tx timeout [ 1080.118362][ T12] hsr_slave_1: left promiscuous mode [ 1080.121517][T19909] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1080.235910][T19909] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.298985][T19909] usb 2-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 1080.385467][T19909] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1080.394356][T19909] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.408326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.408471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.436162][T19909] usb 2-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 1080.545527][T19909] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1080.587013][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.594492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.596289][T19909] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.745542][T19909] usb 2-1: config 246 has 0 interfaces, different from the descriptor's value: 42 [ 1080.937130][T19909] usb 2-1: string descriptor 0 read error: -22 [ 1080.943520][T19909] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1080.982243][ T12] veth1_macvtap: left promiscuous mode [ 1081.055600][T19909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.105505][ T12] veth0_macvtap: left promiscuous mode [ 1081.120014][ T12] veth1_vlan: left promiscuous mode [ 1081.150431][ T12] veth0_vlan: left promiscuous mode [ 1081.995763][T20610] Bluetooth: hci14: command tx timeout [ 1082.048275][T19916] usb 2-1: USB disconnect, device number 85 [ 1083.792334][T19574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1083.803494][T19574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1083.813029][T19574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1083.826160][T19574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1083.833859][T19574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1083.842759][T19574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1085.916449][T19574] Bluetooth: hci5: command tx timeout [ 1087.996094][T19574] Bluetooth: hci5: command tx timeout [ 1089.647203][T21288] overlayfs: missing 'lowerdir' [ 1090.145695][T19574] Bluetooth: hci5: command tx timeout [ 1091.020508][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1091.768424][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1092.165783][T20610] Bluetooth: hci5: command tx timeout [ 1100.828114][T19574] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1100.851669][T19574] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1100.869256][T19574] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1100.887548][T19574] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1100.895622][T19574] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1100.903178][T19574] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1103.035578][T20610] Bluetooth: hci10: command tx timeout [ 1104.762323][T19574] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1104.778332][T19574] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1104.787623][T19574] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1104.860021][T19574] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1104.868086][T19574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1104.877816][T19574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1105.025695][T21240] chnl_net:caif_netlink_parms(): no params data found [ 1105.145664][T20610] Bluetooth: hci10: command tx timeout [ 1106.388031][T21254] chnl_net:caif_netlink_parms(): no params data found [ 1106.965817][T20610] Bluetooth: hci12: command tx timeout [ 1107.207892][T20610] Bluetooth: hci10: command tx timeout [ 1107.440517][T21271] chnl_net:caif_netlink_parms(): no params data found [ 1108.578845][T21240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.656555][T21240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.715893][T21240] bridge_slave_0: entered allmulticast mode [ 1108.723735][T21240] bridge_slave_0: entered promiscuous mode [ 1109.046074][T20610] Bluetooth: hci12: command tx timeout [ 1109.285754][T20610] Bluetooth: hci10: command tx timeout [ 1110.586332][T21240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.593524][T21240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.650009][T21240] bridge_slave_1: entered allmulticast mode [ 1110.677919][T21240] bridge_slave_1: entered promiscuous mode [ 1111.127881][T20610] Bluetooth: hci12: command tx timeout [ 1112.221097][T21240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.075764][T21254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.082945][T21254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.165854][T21254] bridge_slave_0: entered allmulticast mode [ 1113.205884][T20610] Bluetooth: hci12: command tx timeout [ 1113.207771][T21254] bridge_slave_0: entered promiscuous mode [ 1113.329436][T21254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.366106][T21254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.445901][T21254] bridge_slave_1: entered allmulticast mode [ 1113.505670][T21254] bridge_slave_1: entered promiscuous mode [ 1113.617731][T21240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.242111][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.248584][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.709135][T21254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.017455][T21240] team0: Port device team_slave_0 added [ 1117.024841][T21271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.095597][T21271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.102883][T21271] bridge_slave_0: entered allmulticast mode [ 1117.188674][T21271] bridge_slave_0: entered promiscuous mode [ 1117.276320][T21271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.283507][T21271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.386086][T21271] bridge_slave_1: entered allmulticast mode [ 1117.450768][T21271] bridge_slave_1: entered promiscuous mode [ 1117.493796][T21292] chnl_net:caif_netlink_parms(): no params data found [ 1118.756989][T21254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.006643][T21300] chnl_net:caif_netlink_parms(): no params data found [ 1119.118619][T21240] team0: Port device team_slave_1 added [ 1121.045084][T21254] team0: Port device team_slave_0 added [ 1121.751469][T21271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.529354][T21254] team0: Port device team_slave_1 added [ 1123.365043][T21271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.477021][T19574] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1123.518219][T19574] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1123.605633][T19574] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1123.655982][T19574] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1123.664794][T19574] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1123.672685][T19574] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1125.844164][T19574] Bluetooth: hci13: command tx timeout [ 1126.496280][T21254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.503277][T21254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.676050][T21254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.975473][T19574] Bluetooth: hci13: command tx timeout [ 1128.204364][T21271] team0: Port device team_slave_0 added [ 1128.307037][T21271] team0: Port device team_slave_1 added [ 1128.313320][T21292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.345509][T21292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.352906][T21292] bridge_slave_0: entered allmulticast mode [ 1128.465702][T21292] bridge_slave_0: entered promiscuous mode [ 1128.581763][T21292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.645583][T21292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.652875][T21292] bridge_slave_1: entered allmulticast mode [ 1128.736109][T21292] bridge_slave_1: entered promiscuous mode [ 1128.743754][T21254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.775421][T21254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.986494][T21254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.076368][T21300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.083545][T21300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.144198][T21300] bridge_slave_0: entered allmulticast mode [ 1129.206309][T21300] bridge_slave_0: entered promiscuous mode [ 1129.227465][T21300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.234618][T21300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.348106][T21300] bridge_slave_1: entered allmulticast mode [ 1129.415750][T21300] bridge_slave_1: entered promiscuous mode [ 1129.926268][T21271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.985516][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.095502][T19574] Bluetooth: hci13: command tx timeout [ 1130.156128][T21271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.445071][T21300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.547746][T21271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.554753][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.796905][T21271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.889740][T21292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.155903][T19574] Bluetooth: hci13: command tx timeout [ 1132.227110][T21254] hsr_slave_0: entered promiscuous mode [ 1132.435976][T21254] hsr_slave_1: entered promiscuous mode [ 1132.655571][T21254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1132.663193][T21254] Cannot create hsr debugfs directory [ 1132.802097][T21300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.188819][T21292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.264357][T21300] team0: Port device team_slave_0 added [ 1134.676911][T20610] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1134.705602][T20610] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1134.716552][T20610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1134.879483][T20610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1134.966094][T20610] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1134.975937][T20610] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1135.197387][T21292] team0: Port device team_slave_0 added [ 1135.401949][T21300] team0: Port device team_slave_1 added [ 1136.810664][T21271] hsr_slave_0: entered promiscuous mode [ 1137.039117][T21271] hsr_slave_1: entered promiscuous mode [ 1137.046446][T19574] Bluetooth: hci11: command tx timeout [ 1137.135682][T21271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.143308][T21271] Cannot create hsr debugfs directory [ 1137.237638][T21292] team0: Port device team_slave_1 added [ 1137.900123][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.116502][T19574] Bluetooth: hci11: command tx timeout [ 1139.968022][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.164800][T21300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.225500][T21300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.315642][T21300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.658835][T21292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.675575][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.835602][T21292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.915657][T21292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.975470][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.135601][T21292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.196123][T19574] Bluetooth: hci11: command tx timeout [ 1141.249386][T21300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.257317][T21300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.345575][T21300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.920308][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.275808][T20610] Bluetooth: hci11: command tx timeout [ 1144.076240][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.198076][T19574] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1144.210062][T19574] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1144.219186][T19574] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1144.228612][T19574] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1144.236597][T19574] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1144.244949][T19574] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1144.628795][T21300] hsr_slave_0: entered promiscuous mode [ 1144.816638][T21300] hsr_slave_1: entered promiscuous mode [ 1145.065468][T21300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.073076][T21300] Cannot create hsr debugfs directory [ 1146.396564][T20610] Bluetooth: hci14: command tx timeout [ 1147.071528][T21292] hsr_slave_0: entered promiscuous mode [ 1147.255946][T21292] hsr_slave_1: entered promiscuous mode [ 1147.435744][T21292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1147.474361][T21292] Cannot create hsr debugfs directory [ 1148.476155][T20610] Bluetooth: hci14: command tx timeout [ 1149.805651][T21324] chnl_net:caif_netlink_parms(): no params data found [ 1150.565692][T20610] Bluetooth: hci14: command tx timeout [ 1152.423676][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.636917][T20610] Bluetooth: hci14: command tx timeout [ 1152.784919][T21330] chnl_net:caif_netlink_parms(): no params data found [ 1153.267135][T21324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.274266][T21324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.373201][T21324] bridge_slave_0: entered allmulticast mode [ 1153.437407][T21324] bridge_slave_0: entered promiscuous mode [ 1154.458910][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.766646][T21324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.773841][T21324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.874927][T21324] bridge_slave_1: entered allmulticast mode [ 1154.925684][T21324] bridge_slave_1: entered promiscuous mode [ 1155.758291][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.164651][T21324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.825683][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.100440][T21324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.347781][T14218] kworker/1:1 (14218) used greatest stack depth: 13168 bytes left [ 1157.751252][T21300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1157.897038][T21300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1159.116212][ T30] INFO: task syz.0.6095:20985 blocked for more than 143 seconds. [ 1159.123998][ T30] Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1159.225433][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1159.295489][ T30] task:syz.0.6095 state:D stack:23968 pid:20985 tgid:20984 ppid:20485 flags:0x00000004 [ 1159.375588][ T30] Call Trace: [ 1159.389216][ T30] [ 1159.392183][ T30] __schedule+0x17ae/0x4a10 [ 1159.515416][ T30] ? __pfx___schedule+0x10/0x10 [ 1159.557535][ T30] ? __pfx_lock_release+0x10/0x10 [ 1159.562619][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1159.655590][ T30] ? schedule+0x90/0x320 [ 1159.695517][ T30] schedule+0x14b/0x320 [ 1159.709767][ T30] io_schedule+0x8d/0x110 [ 1159.745713][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1159.795634][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1159.835391][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1159.855956][ T30] ? __filemap_get_folio+0x984/0xc10 [ 1159.905598][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 1159.916324][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1159.922654][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1160.065597][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1160.075678][ T30] set_blocksize+0x2f4/0x360 [ 1160.080457][ T30] sb_set_blocksize+0x47/0xf0 [ 1160.085138][ T30] ufs_fill_super+0x11e6/0x77c0 [ 1160.215738][ T30] ? __pfx_snprintf+0x10/0x10 [ 1160.220607][ T30] ? set_blocksize+0x1ff/0x360 [ 1160.265709][ T30] ? sb_set_blocksize+0x98/0xf0 [ 1160.305478][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 1160.345619][ T30] mount_bdev+0x20a/0x2d0 [ 1160.350035][ T30] ? __pfx_ufs_fill_super+0x10/0x10 [ 1160.355274][ T30] ? __pfx_mount_bdev+0x10/0x10 [ 1160.495407][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 1160.545872][ T30] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1160.551642][ T30] ? cap_capable+0x1b4/0x250 [ 1160.625439][ T30] legacy_get_tree+0xee/0x190 [ 1160.675399][ T30] ? __pfx_ufs_mount+0x10/0x10 [ 1160.683351][ T30] vfs_get_tree+0x90/0x2a0 [ 1160.715389][ T30] do_new_mount+0x2be/0xb40 [ 1160.735421][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 1160.740540][ T30] __se_sys_mount+0x2d6/0x3c0 [ 1160.745254][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1160.835387][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 1160.840661][ T30] ? do_syscall_64+0x100/0x230 [ 1160.888284][ T30] ? __x64_sys_mount+0x20/0xc0 [ 1160.893139][ T30] do_syscall_64+0xf3/0x230 [ 1160.965844][ T30] ? clear_bhb_loop+0x35/0x90 [ 1160.985426][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.015383][ T30] RIP: 0033:0x7fe9189799f9 [ 1161.019974][ T30] RSP: 002b:00007fe9196f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1161.075451][ T30] RAX: ffffffffffffffda RBX: 00007fe918b15f80 RCX: 00007fe9189799f9 [ 1161.155388][ T30] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 1161.195562][ T30] RBP: 00007fe9189e78ee R08: 0000000000000000 R09: 0000000000000000 [ 1161.203594][ T30] R10: 0000000000018642 R11: 0000000000000246 R12: 0000000000000000 [ 1161.305412][ T30] R13: 0000000000000000 R14: 00007fe918b15f80 R15: 00007ffe4eda27f8 [ 1161.335662][ T30] [ 1161.355424][ T30] [ 1161.355424][ T30] Showing all locks held in the system: [ 1161.363211][ T30] 6 locks held by kworker/u8:1/12: [ 1161.455454][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1161.525705][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1161.595383][ T30] #2: ffffffff8fa632d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1161.675587][ T30] #3: ffff888064a990e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1161.735864][ T30] #4: ffff88807a746250 (&devlink->lock_key#14){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1161.785386][ T30] #5: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 1161.855390][ T30] 1 lock held by khungtaskd/30: [ 1161.860393][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1161.935432][ T30] 2 locks held by kworker/u8:7/2469: [ 1161.940889][ T30] 2 locks held by getty/4977: [ 1162.006057][ T30] #0: ffff88802b5a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1162.065384][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1162.116884][ T30] 3 locks held by kworker/u8:10/6177: [ 1162.122404][ T30] #0: ffff88802ad9d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1162.215386][ T30] #1: ffffc90017017d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1162.345604][ T30] #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1162.355199][ T30] 3 locks held by kworker/u8:12/12944: [ 1162.415596][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1162.475385][ T30] #1: ffffc900039cfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1162.545388][ T30] #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1162.554569][ T30] 1 lock held by syz.2.5894/20277: [ 1162.625410][ T30] 2 locks held by syz.1.5896/20279: [ 1162.632534][ T30] 2 locks held by syz.3.5936/20427: [ 1162.725386][ T30] 2 locks held by syz.0.5939/20443: [ 1162.745394][ T30] 1 lock held by syz.1.5959/20543: [ 1162.785418][ T30] 2 locks held by syz.3.6007/20725: [ 1162.790696][ T30] 1 lock held by syz.0.6095/20985: [ 1162.845575][ T30] #0: ffff888079f520e0 (&type->s_umount_key#79/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1162.905600][ T30] 7 locks held by syz-executor/21292: [ 1162.934985][ T30] #0: ffff88801e1a4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1162.975582][ T30] #1: ffff8880345d7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1163.075476][ T30] #2: ffff888023436a58 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1163.125668][ T30] #3: ffffffff8f30c928 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1163.175390][ T30] #4: ffff8880201450e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1163.245388][ T30] #5: ffff888020141250 (&devlink->lock_key#19){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1163.325564][ T30] #6: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1163.334653][ T30] 1 lock held by syz-executor/21300: [ 1163.447169][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1163.515622][ T30] 1 lock held by syz-executor/21324: [ 1163.521063][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1163.651870][ T30] 2 locks held by syz-executor/21330: [ 1163.676793][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1163.745386][ T30] #1: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1163.785575][ T30] 1 lock held by syz-executor/21340: [ 1163.790927][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1163.895801][ T30] [ 1163.916514][T21300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1163.945380][ T30] ============================================= [ 1163.945380][ T30] [ 1163.953846][ T30] NMI backtrace for cpu 1 [ 1163.958192][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 1163.968840][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1163.978928][ T30] Call Trace: [ 1163.982235][ T30] [ 1163.985193][ T30] dump_stack_lvl+0x241/0x360 [ 1163.989996][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1163.995279][ T30] ? __pfx__printk+0x10/0x10 [ 1163.999907][ T30] ? vprintk_emit+0x631/0x770 [ 1164.004619][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1164.009678][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1164.014718][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1164.020207][ T30] ? _printk+0xd5/0x120 [ 1164.024401][ T30] ? __pfx__printk+0x10/0x10 [ 1164.029042][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1164.033916][ T30] ? __pfx__printk+0x10/0x10 [ 1164.038525][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1164.043569][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1164.049584][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1164.055667][ T30] watchdog+0xfee/0x1030 [ 1164.059935][ T30] ? watchdog+0x1ea/0x1030 [ 1164.064412][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.069108][ T30] kthread+0x2f0/0x390 [ 1164.073196][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.077891][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.082502][ T30] ret_from_fork+0x4b/0x80 [ 1164.086945][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.091561][ T30] ret_from_fork_asm+0x1a/0x30 [ 1164.096355][ T30] [ 1164.100985][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1164.107052][ C0] NMI backtrace for cpu 0 [ 1164.107069][ C0] CPU: 0 UID: 0 PID: 20176 Comm: syz.4.5862 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 1164.107091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1164.107103][ C0] RIP: 0010:rcu_is_watching+0x26/0xb0 [ 1164.107135][ C0] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 e8 25 8a 7e e8 7b e6 33 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df <4c> 8d 34 dd 40 fa 07 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 [ 1164.107151][ C0] RSP: 0018:ffffc9000fb17410 EFLAGS: 00000093 [ 1164.107168][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819adb8c [ 1164.107181][ C0] RDX: 0000000000000000 RSI: ffffffff8c3f9020 RDI: ffffffff8c3f8fe0 [ 1164.107196][ C0] RBP: 0000002000000000 R08: ffffffff8ff6a22f R09: 1ffffffff1fed445 [ 1164.107210][ C0] R10: dffffc0000000000 R11: fffffbfff1fed446 R12: ffff8880403f1e00 [ 1164.107224][ C0] R13: 0000000000000235 R14: 0000000000000300 R15: dffffc0000000000 [ 1164.107238][ C0] FS: 00007f2067ba06c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1164.107255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.107268][ C0] CR2: 00000000201d2000 CR3: 000000002496a000 CR4: 00000000003506f0 [ 1164.107286][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.107303][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.107315][ C0] Call Trace: [ 1164.107323][ C0] [ 1164.107332][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1164.107356][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1164.107383][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1164.107404][ C0] ? nmi_handle+0x2a/0x5a0 [ 1164.107432][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1164.107456][ C0] ? nmi_handle+0x14f/0x5a0 [ 1164.107473][ C0] ? nmi_handle+0x2a/0x5a0 [ 1164.107492][ C0] ? rcu_is_watching+0x26/0xb0 [ 1164.107517][ C0] ? default_do_nmi+0x63/0x160 [ 1164.107540][ C0] ? exc_nmi+0x123/0x1f0 [ 1164.107561][ C0] ? end_repeat_nmi+0xf/0x53 [ 1164.107587][ C0] ? trace_irq_disable+0x2c/0x120 [ 1164.107611][ C0] ? rcu_is_watching+0x26/0xb0 [ 1164.107637][ C0] ? rcu_is_watching+0x26/0xb0 [ 1164.107664][ C0] ? rcu_is_watching+0x26/0xb0 [ 1164.107690][ C0] [ 1164.107696][ C0] [ 1164.107704][ C0] trace_irq_disable+0x3b/0x120 [ 1164.107727][ C0] exc_page_fault+0x583/0x8c0 [ 1164.107758][ C0] asm_exc_page_fault+0x26/0x30 [ 1164.107777][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1164.107798][ C0] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1164.107813][ C0] RSP: 0018:ffffc9000fb17558 EFLAGS: 00050206 [ 1164.107828][ C0] RAX: ffffffff84a58501 RBX: 0000000000001000 RCX: 0000000000001000 [ 1164.107842][ C0] RDX: 0000000000000000 RSI: ffff888068b91000 RDI: 00000000201d2000 [ 1164.107855][ C0] RBP: ffffc9000fb176d8 R08: ffff888068b91fff R09: 1ffff1100d1723ff [ 1164.107869][ C0] R10: dffffc0000000000 R11: ffffed100d172400 R12: 1ffff92001f62f6d [ 1164.107883][ C0] R13: 00000000201d2000 R14: ffffc9000fb17b68 R15: ffff888068b91000 [ 1164.107902][ C0] ? _copy_to_iter+0x181/0x1960 [ 1164.107995][ C0] _copy_to_iter+0x26b/0x1960 [ 1164.108025][ C0] ? __pfx_filemap_get_pages+0x10/0x10 [ 1164.108053][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 1164.108077][ C0] ? __pfx___might_resched+0x10/0x10 [ 1164.108105][ C0] ? page_copy_sane+0x46/0x260 [ 1164.108136][ C0] copy_page_to_iter+0xb1/0x160 [ 1164.108161][ C0] filemap_read+0x7f6/0xfa0 [ 1164.108203][ C0] ? __pfx_filemap_read+0x10/0x10 [ 1164.108244][ C0] ? mark_lock+0x9a/0x350 [ 1164.108272][ C0] ? __lock_acquire+0x137a/0x2040 [ 1164.108305][ C0] blkdev_read_iter+0x2df/0x440 [ 1164.108335][ C0] aio_read+0x366/0x500 [ 1164.108357][ C0] ? __pfx_aio_read+0x10/0x10 [ 1164.108382][ C0] ? __might_fault+0xaa/0x120 [ 1164.108404][ C0] ? __pfx_lock_release+0x10/0x10 [ 1164.108432][ C0] ? __fget_files+0x3f6/0x470 [ 1164.108454][ C0] ? __might_fault+0xaa/0x120 [ 1164.108478][ C0] io_submit_one+0x884/0x18b0 [ 1164.108518][ C0] ? __pfx_io_submit_one+0x10/0x10 [ 1164.108547][ C0] ? __might_fault+0xaa/0x120 [ 1164.108568][ C0] ? __pfx_lock_release+0x10/0x10 [ 1164.108598][ C0] ? __might_fault+0xaa/0x120 [ 1164.108619][ C0] ? __might_fault+0xc6/0x120 [ 1164.108641][ C0] __se_sys_io_submit+0x179/0x2f0 [ 1164.108668][ C0] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1164.108692][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1164.108720][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1164.108747][ C0] ? do_syscall_64+0x100/0x230 [ 1164.108766][ C0] ? do_syscall_64+0xb6/0x230 [ 1164.108785][ C0] do_syscall_64+0xf3/0x230 [ 1164.108803][ C0] ? clear_bhb_loop+0x35/0x90 [ 1164.108824][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.108844][ C0] RIP: 0033:0x7f2066d799f9 [ 1164.108860][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.108876][ C0] RSP: 002b:00007f2067ba0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1164.108894][ C0] RAX: ffffffffffffffda RBX: 00007f2066f16058 RCX: 00007f2066d799f9 [ 1164.108909][ C0] RDX: 00000000200000c0 RSI: 00000000000000ca RDI: 00007f2067b7f000 [ 1164.108921][ C0] RBP: 00007f2066de78ee R08: 0000000000000000 R09: 0000000000000000 [ 1164.108933][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.108945][ C0] R13: 0000000000000000 R14: 00007f2066f16058 R15: 00007ffc4d735e68 [ 1164.108969][ C0] [ 1164.724763][T21324] team0: Port device team_slave_0 added [ 1164.771576][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1164.778582][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 1164.789131][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1164.799226][ T30] Call Trace: [ 1164.802532][ T30] [ 1164.805487][ T30] dump_stack_lvl+0x241/0x360 [ 1164.810211][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.815447][ T30] ? __pfx__printk+0x10/0x10 [ 1164.820075][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1164.826097][ T30] ? vscnprintf+0x5d/0x90 [ 1164.830470][ T30] panic+0x349/0x860 [ 1164.834407][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1164.840599][ T30] ? __pfx_panic+0x10/0x10 [ 1164.845048][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1164.850451][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1164.856035][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1164.861434][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1164.867639][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1164.873847][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1164.880073][ T30] watchdog+0x102d/0x1030 [ 1164.884465][ T30] ? watchdog+0x1ea/0x1030 [ 1164.888943][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.893658][ T30] kthread+0x2f0/0x390 [ 1164.897765][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.902474][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.907108][ T30] ret_from_fork+0x4b/0x80 [ 1164.911559][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.916183][ T30] ret_from_fork_asm+0x1a/0x30 [ 1164.920997][ T30] [ 1164.924350][ T30] Kernel Offset: disabled [ 1164.928679][ T30] Rebooting in 86400 seconds..