last executing test programs: 2m4.198838603s ago: executing program 4 (id=6651): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 2m3.863071843s ago: executing program 4 (id=6653): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x220240, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x0, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) io_uring_setup(0x3319, &(0x7f0000007940)={0x0, 0x0, 0x944, 0x8000, 0x2bc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001afc0)=ANY=[@ANYBLOB="c4020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0xcfb45b99770bb43a) fcntl$setown(r6, 0x4, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r7, 0x40187013, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffcc2, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000540000000000219078ac1e0001ac1414aa0c001b298c1300004e0000000000000000000000ac1e0037a8"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040800d3fc030000004788", 0xc, 0x0, 0x0, 0x0) 2m2.4860769s ago: executing program 4 (id=6657): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4d, 0x0, 0x2}, {}, {}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0x710b, r0, 0x8e1dbcc79ad0a69b}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x2, r3, 0xfffffc00}) 2m1.317222816s ago: executing program 4 (id=6662): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1205029, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000003c0)={0x200086}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 2m0.918382087s ago: executing program 4 (id=6663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 2m0.219868887s ago: executing program 4 (id=6666): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@mcast2, @mcast1]}}}], 0x38}}], 0x1, 0x0) 1m43.482017158s ago: executing program 1 (id=6698): r0 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x1) 1m42.865624768s ago: executing program 1 (id=6701): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x70, 0x9c, 0x31, 0x20, 0x4e8, 0x6601, 0x819b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa3, 0x5f, 0x50}}]}}]}}, 0x0) 1m40.130804932s ago: executing program 1 (id=6708): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x0, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 1m39.446704197s ago: executing program 1 (id=6713): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2b0000000400000000000000000000000100000000000000feffff09ffffffff03"], 0x2b) 1m38.843604635s ago: executing program 3 (id=6717): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x7}}) r3 = dup3(r0, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) 1m38.661227825s ago: executing program 1 (id=6718): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x80000035, 0x0) 1m37.323647783s ago: executing program 1 (id=6722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x7, 0x40, 0x1, 0x4, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0xd}, 0x48) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x5, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x200, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xa, 0x2000000, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000c80)=[0x1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x3, 0x1, 0xa}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x1, 0xb, 0x6}], 0x10, 0x8}, 0x90) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001fcffff00000000000000002f000000000000009500000000400000"], &(0x7f0000000040)='GPL\x00'}, 0x90) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdd, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000080)={{0x3}}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYRESOCT=r10, @ANYRES32=r5], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x1b, 0xdd, [@local, @private, @private, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1]}, @rr={0x7, 0x1b, 0x0, [@rand_addr=0x64010100, @broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x4, 0x0}, @rand_addr=0x64010101]}]}}}}}) r11 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x4) ioctl$IOMMU_DESTROY$stdev(r11, 0x3b80, &(0x7f0000000000)={0xffffffffffffff8c}) 1m35.650347601s ago: executing program 3 (id=6724): syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x10}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104c9], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.753556744s ago: executing program 3 (id=6727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semtimedop(0x0, &(0x7f0000000540)=[{}], 0x1, 0x0) 1m32.248072413s ago: executing program 3 (id=6736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000100)=0x1e) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) unshare(0x400) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 1m31.695858673s ago: executing program 3 (id=6737): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x0) 1m28.31205131s ago: executing program 3 (id=6742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000010002104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="080004"], 0x48}}, 0x0) 5.942646198s ago: executing program 2 (id=6851): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x5, 0x0, 0x2000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast1={0xff, 0x5}, @private1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002}) 5.626922398s ago: executing program 0 (id=6852): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) socket$inet(0x2, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600020076000000bf9800000000000056080000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix_mp={0x0, 0x0, 0x42474752}}) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) r6 = memfd_secret(0x0) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000180)=@known='user.incfs.size\x00') r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r7, &(0x7f00000001c0), &(0x7f0000000200)) 5.578675557s ago: executing program 2 (id=6853): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000f140100000080000000000008000100000000000c004500"], 0x24}}, 0x0) 5.264870326s ago: executing program 2 (id=6854): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) 4.832784764s ago: executing program 0 (id=6855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96", 0x1}, {&(0x7f0000000500)="fc", 0x1}], 0x2}}], 0x1, 0x0) 4.459437325s ago: executing program 0 (id=6856): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r2 = syz_io_uring_setup(0x1e27, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x3ad6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 4.17975659s ago: executing program 2 (id=6857): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x34343452}}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "b5794e"}, 0x4, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340), 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0), 0x274}}, 0x0) 3.062313012s ago: executing program 2 (id=6858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a000000"]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x29, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="3c59ea66b8fc0dab802eed88c11a00000000000000bf666569c1699a67b2526461962ec85571b09403aea11c3b23be6b2c89041e244a6a7f5c75736167bd06047cdea316f3770ecb0d2b409a21ba2b6ca8984f3bc51a15ada54ea1e1fe3cc56982a60006e1943f11032c5d87f573ed216e612db2ea3b5ac5da23adb047882c31ad6db66fd123617703bff6a9cd56c5446dcc132ef57eb75ec9f0750ca55de73747e3529f94b6", 0xa6}], 0x1, &(0x7f0000000240)=[{0xe0, 0x110, 0x0, "5a5cb4d01d352b436703092c17a5517e0422493e015ccac97cf93ece3a98d5bbec1a52df84b3f2565f6fed30e7218a50d21f60ba2dc764ab49d4e08b16a36890169b64e2a567e8395ecad46a30308d792bdf832a52368df4d6ab5e8dc8c4282c4c5e074a52eac0d93d928c77d074b70379ee639ff8fe0100ce1c5dda7354b2439892ee41bf19d3f924bfc6d7acf9e7c4414fb52bb03e74553f884db6a3e0f5be1a7e2e2895d1380d9f51eaf693b19d2502f5971110cb62ab90643e87d77ddb943186787e79aef4c9df"}, {0xe8, 0x110, 0xe5f, "39209d66ca19a1033f6da31923a08c520b4a8a648d741f4693b2f872eb65366a2460d3c869c7aa124bfffd19cfd7f408469a56b6697c1d74c50183b16d05c014b3c6e9ecafc95de93e313ce7187ad878030dab55f5220b78898941d9a6b7feaa39cbded710d1c22630c7b337cebf82cc40552bc3acd7d44a6e87d927086faf5249b00d6e17a7a06178add5d21e760bf43394c1b1f45fcc79c0a5a3f1fae29d24ed9d4843d1d383c4dcc3f48cce539ef3befca3bc87193dc3b0a8e1c40bb55e1dcb4b9e997a5cc2f311481a33807b12f2faa1e43b308a10"}, {0x70, 0x107, 0x3, "f9a096699be5c29823e5685a01d27a66ca5ee2c99f1d06453006e21a7b2d1acb30ec9d2ba6d69edc47456c9718515838a1dda36a46f8441a33e5b1e431cbcdec2d05b6d1350d6e8258cc0e2090b4d74c229d9831eb6daa192d"}], 0x238}, 0x4050) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000580)=0x5) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) 2.51989149s ago: executing program 0 (id=6859): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x7a}}}]}}]}, 0x60}}, 0x0) 1.201436759s ago: executing program 0 (id=6860): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, &(0x7f00000002c0)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000001c0)=""/207, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x34, r4, 0x277f826df11ec41b, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f00000001c0)={0xa, 0x4ea2, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x94}}], 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080)='\t', 0x1, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 947.322947ms ago: executing program 2 (id=6861): getrandom(&(0x7f0000000ac0)=""/4096, 0x1000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400"], 0x0) syz_usb_control_io(r2, 0xffffffffffffffff, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="0006af00000068", @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r3, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f000001f500), 0x0, 0x4c800) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) 0s ago: executing program 0 (id=6862): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x0, "5783236af9ad6d796ce0b9c2b275ca3ec5d574aa936b23c47abdd7d6e430442f"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x6f3c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): h=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.481880][ T2625] xt_hashlimit: invalid rate [ 2037.573224][ T29] audit: type=1326 audit(1722976722.369:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.612961][ T625] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2037.658160][ T29] audit: type=1326 audit(1722976722.369:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.714421][ T29] audit: type=1326 audit(1722976722.369:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.770844][ T29] audit: type=1326 audit(1722976722.379:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.795681][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.802155][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.825730][ T29] audit: type=1326 audit(1722976722.379:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.848155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.855169][ T625] usb 5-1: Using ep0 maxpacket: 32 [ 2037.862748][ T2627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2037.865877][ T29] audit: type=1326 audit(1722976722.379:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.913206][ T625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.923824][ T29] audit: type=1326 audit(1722976722.379:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.949014][ T625] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2037.958957][ T625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.969685][ T625] usb 5-1: Product: syz [ 2037.973949][ T29] audit: type=1326 audit(1722976722.379:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2617 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e9779f9 code=0x7ffc0000 [ 2037.996589][ T625] usb 5-1: Manufacturer: syz [ 2038.001455][ T625] usb 5-1: SerialNumber: syz [ 2038.005785][ T5277] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2038.019320][ T2627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.031714][ T625] usb 5-1: config 0 descriptor?? [ 2038.042747][ T625] usb 5-1: bad CDC descriptors [ 2038.051050][ T625] usb 5-1: unsupported MDLM descriptors [ 2038.117207][ T2629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.274461][ T5277] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.291088][ T5277] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 2038.304609][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.316140][ T625] usb 5-1: USB disconnect, device number 20 [ 2038.322260][ T5277] usb 4-1: Product: syz [ 2038.335692][ T5277] usb 4-1: Manufacturer: syz [ 2038.344452][ T5277] usb 4-1: SerialNumber: syz [ 2038.639816][ T2625] netlink: 900 bytes leftover after parsing attributes in process `syz.3.6491'. [ 2038.979671][ T5277] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2039.023094][ T5277] dvb_usb_af9035 4-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 2039.097043][ T5277] usb 4-1: USB disconnect, device number 22 [ 2039.950036][T31736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2039.965545][T31736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2039.977514][T31736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2039.991254][T31736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2040.000028][T31736] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2040.011721][T31736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2040.720520][ T7485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.332491][ T7485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.461349][T31736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2041.484420][T31736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2041.500815][ T2661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 2041.511051][T31736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2041.521855][T31736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2041.531182][T31736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2041.538787][T31736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2041.739673][ T7485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.004095][ T7485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.106179][T30074] Bluetooth: hci3: command tx timeout [ 2042.629260][ T2644] chnl_net:caif_netlink_parms(): no params data found [ 2042.816196][ T625] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2042.939972][ T7485] bridge_slave_1: left allmulticast mode [ 2042.960808][ T7485] bridge_slave_1: left promiscuous mode [ 2042.979032][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.008219][ T7485] bridge_slave_0: left allmulticast mode [ 2043.013894][ T7485] bridge_slave_0: left promiscuous mode [ 2043.028885][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.068521][ T625] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2043.115894][ T625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.123995][ T625] usb 5-1: Product: syz [ 2043.138583][ T625] usb 5-1: Manufacturer: syz [ 2043.143356][ T625] usb 5-1: SerialNumber: syz [ 2043.189825][ T625] usb 5-1: config 0 descriptor?? [ 2043.567846][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 2043.567869][ T29] audit: type=1326 audit(1722976728.529:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2043.656004][T30074] Bluetooth: hci6: command tx timeout [ 2043.741214][ T29] audit: type=1326 audit(1722976728.629:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2043.834805][ T29] audit: type=1326 audit(1722976728.649:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2043.857248][ C1] vkms_vblank_simulate: vblank timer overrun [ 2044.006283][ T2678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2044.034292][ T29] audit: type=1326 audit(1722976728.649:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.126955][ T29] audit: type=1326 audit(1722976728.649:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.185371][ T2678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2044.196164][T30074] Bluetooth: hci3: command tx timeout [ 2044.286056][ T29] audit: type=1326 audit(1722976728.649:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.308537][ C1] vkms_vblank_simulate: vblank timer overrun [ 2044.333208][ T2680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2044.395834][ T29] audit: type=1326 audit(1722976728.649:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.549179][ T29] audit: type=1326 audit(1722976728.649:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.639586][ T29] audit: type=1326 audit(1722976728.649:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2044.710254][ T29] audit: type=1326 audit(1722976728.659:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2671 comm="syz.4.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5785779f9 code=0x7ffc0000 [ 2045.414925][T31736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2045.460252][T31736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2045.473263][T31736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2045.482650][T31736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2045.493215][T31736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2045.503421][T31736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2045.584408][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.667544][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.688887][ T7485] bond0 (unregistering): Released all slaves [ 2045.705927][T30074] Bluetooth: hci6: command tx timeout [ 2046.015901][ T625] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 2046.030183][ T625] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2046.056755][ T625] usb 5-1: USB disconnect, device number 21 [ 2046.266045][T30074] Bluetooth: hci3: command tx timeout [ 2046.287548][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.294674][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.325826][ T2644] bridge_slave_0: entered allmulticast mode [ 2046.346097][ T2644] bridge_slave_0: entered promiscuous mode [ 2046.368026][ T2691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6515'. [ 2046.564016][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.573059][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.583199][ T2644] bridge_slave_1: entered allmulticast mode [ 2046.602044][ T2644] bridge_slave_1: entered promiscuous mode [ 2046.780322][ T7485] hsr_slave_0: left promiscuous mode [ 2046.798117][ T7485] hsr_slave_1: left promiscuous mode [ 2046.825878][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2046.833476][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2046.878803][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2046.909182][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2047.004978][ T7485] veth1_macvtap: left promiscuous mode [ 2047.013937][ T7485] veth0_macvtap: left promiscuous mode [ 2047.040057][ T7485] veth1_vlan: left promiscuous mode [ 2047.047377][ T7485] veth0_vlan: left promiscuous mode [ 2047.547040][T30074] Bluetooth: hci0: command tx timeout [ 2047.785762][T30074] Bluetooth: hci6: command tx timeout [ 2048.345735][T30074] Bluetooth: hci3: command tx timeout [ 2049.625823][T30074] Bluetooth: hci0: command tx timeout [ 2049.738764][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2049.866042][T30074] Bluetooth: hci6: command tx timeout [ 2050.026062][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2051.685558][ T2665] chnl_net:caif_netlink_parms(): no params data found [ 2051.708251][T30074] Bluetooth: hci0: command tx timeout [ 2051.740856][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6519'. [ 2051.780222][ T2644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.820360][ T2644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2052.202575][ T2722] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6523'. [ 2052.251039][ T2644] team0: Port device team_slave_0 added [ 2052.264419][ T2644] team0: Port device team_slave_1 added [ 2052.453559][ T2718] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6523'. [ 2052.557900][ T2644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2052.585234][ T2644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2052.667502][ T2644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2052.938815][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.946556][ T2665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.969005][ T2665] bridge_slave_0: entered allmulticast mode [ 2052.988253][ T2665] bridge_slave_0: entered promiscuous mode [ 2053.026577][ T2644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2053.033593][ T2644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2053.059543][ C1] vkms_vblank_simulate: vblank timer overrun [ 2053.205867][ T2644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2053.379786][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.396416][ T2665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.403955][ T2665] bridge_slave_1: entered allmulticast mode [ 2053.435961][ T2665] bridge_slave_1: entered promiscuous mode [ 2053.679328][ T2743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6525'. [ 2053.744900][ T2686] chnl_net:caif_netlink_parms(): no params data found [ 2053.791723][T30074] Bluetooth: hci0: command tx timeout [ 2054.008959][ T2665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.164223][ T2644] hsr_slave_0: entered promiscuous mode [ 2054.207354][ T2644] hsr_slave_1: entered promiscuous mode [ 2054.213891][ T2644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2054.235744][ T2644] Cannot create hsr debugfs directory [ 2054.286045][ T2665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.852037][ T2665] team0: Port device team_slave_0 added [ 2055.011173][ T2665] team0: Port device team_slave_1 added [ 2055.082641][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.082766][ T2686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.082973][ T2686] bridge_slave_0: entered allmulticast mode [ 2055.084661][ T2686] bridge_slave_0: entered promiscuous mode [ 2055.100547][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.116269][ T2686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.116532][ T2686] bridge_slave_1: entered allmulticast mode [ 2055.118307][ T2686] bridge_slave_1: entered promiscuous mode [ 2055.175884][ T2665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2055.175909][ T2665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2055.175939][ T2665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2055.196256][ T2665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2055.196281][ T2665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2055.196313][ T2665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2055.374501][ T7485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.594392][T31736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2055.607341][T31736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2055.609394][T31736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2055.610613][T31736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2055.613117][T31736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2055.613557][T31736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2056.056715][ T7485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.073128][ T2686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2056.264628][ T2686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2056.468609][ T7485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.594879][ T2665] hsr_slave_0: entered promiscuous mode [ 2056.638884][ T2665] hsr_slave_1: entered promiscuous mode [ 2056.664938][ T2665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2056.672856][ T2665] Cannot create hsr debugfs directory [ 2056.854566][ T2686] team0: Port device team_slave_0 added [ 2056.911661][ T2686] team0: Port device team_slave_1 added [ 2056.934107][ T2780] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2056.977724][ T7485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.261117][ T2686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2057.282648][ T2686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2057.317785][ T2686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2057.398026][ T2686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2057.405039][ T2686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2057.520789][ T2686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2057.705917][T31736] Bluetooth: hci2: command tx timeout [ 2057.820628][ T2644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.264442][ T2644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.574518][ T2644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.762175][ T2686] hsr_slave_0: entered promiscuous mode [ 2058.777619][ T2686] hsr_slave_1: entered promiscuous mode [ 2058.783892][ T2686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2058.805853][ T2686] Cannot create hsr debugfs directory [ 2058.908550][ T2644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.156395][ T7485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.453810][ T7485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.550992][ T7485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.780782][ T7485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.785982][T31736] Bluetooth: hci2: command tx timeout [ 2060.111004][ T2767] chnl_net:caif_netlink_parms(): no params data found [ 2060.172852][ T2644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2060.458801][ T2644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2060.492281][ T2644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2060.881091][ T2644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2061.867140][T31736] Bluetooth: hci2: command tx timeout [ 2061.885879][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.892992][ T2767] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.960761][ T2767] bridge_slave_0: entered allmulticast mode [ 2061.987842][ T2767] bridge_slave_0: entered promiscuous mode [ 2062.060351][ T7485] bridge_slave_1: left allmulticast mode [ 2062.098671][ T7485] bridge_slave_1: left promiscuous mode [ 2062.104512][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.166625][ T7485] bridge_slave_0: left allmulticast mode [ 2062.172347][ T7485] bridge_slave_0: left promiscuous mode [ 2062.216290][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.239500][ T7485] bridge_slave_1: left allmulticast mode [ 2062.245209][ T7485] bridge_slave_1: left promiscuous mode [ 2062.252196][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.297806][ T7485] bridge_slave_0: left allmulticast mode [ 2062.326258][ T7485] bridge_slave_0: left promiscuous mode [ 2062.343221][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.945992][T31736] Bluetooth: hci2: command tx timeout [ 2064.229433][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.250319][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.270037][ T7485] bond0 (unregistering): Released all slaves [ 2064.729995][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.771885][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.793456][ T7485] bond0 (unregistering): Released all slaves [ 2064.839818][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 2064.884250][ T2767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.943699][ T2767] bridge_slave_1: entered allmulticast mode [ 2064.976817][ T2767] bridge_slave_1: entered promiscuous mode [ 2065.161325][ T2767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2065.217173][ T2767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2065.483675][ T2767] team0: Port device team_slave_0 added [ 2065.539256][ T2767] team0: Port device team_slave_1 added [ 2065.745410][ T2767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2065.775840][ T2767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2065.856820][ T2767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2065.999603][ T2767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2066.025629][ T2767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.082749][ T2767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.416136][ T2665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2066.437939][ T2665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2066.461231][ T2767] hsr_slave_0: entered promiscuous mode [ 2066.476962][ T2767] hsr_slave_1: entered promiscuous mode [ 2066.494329][ T2767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2066.503214][ T2767] Cannot create hsr debugfs directory [ 2066.633849][ T2665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2066.676230][ T2665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2066.947073][ T7485] hsr_slave_0: left promiscuous mode [ 2066.966877][ T7485] hsr_slave_1: left promiscuous mode [ 2066.973226][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2066.986035][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.006002][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2067.019095][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.043935][ T7485] hsr_slave_0: left promiscuous mode [ 2067.057071][ T7485] hsr_slave_1: left promiscuous mode [ 2067.066656][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2067.077585][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.095116][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2067.102783][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.179547][ T7485] veth1_macvtap: left promiscuous mode [ 2067.185166][ T7485] veth0_macvtap: left promiscuous mode [ 2067.191600][ T7485] veth1_vlan: left promiscuous mode [ 2067.197836][ T7485] veth0_vlan: left promiscuous mode [ 2067.207846][ T7485] veth1_macvtap: left promiscuous mode [ 2067.213544][ T7485] veth0_macvtap: left promiscuous mode [ 2067.219765][ T7485] veth1_vlan: left promiscuous mode [ 2067.226397][ T7485] veth0_vlan: left promiscuous mode [ 2069.288463][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2069.604184][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2072.670204][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2072.827107][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2074.854340][ T2644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.079876][ T2644] 8021q: adding VLAN 0 to HW filter on device team0 [ 2075.216277][T22216] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.223469][T22216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.306111][T22216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.313332][T22216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2075.727879][T30074] Bluetooth: hci4: command 0x0406 tx timeout [ 2075.834945][ T2686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2076.037192][ T2686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2076.148843][ T2686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2076.306302][ T2686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2076.556073][ T2665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.778820][ T2875] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 2076.975038][ T2665] 8021q: adding VLAN 0 to HW filter on device team0 [ 2077.119394][ T2644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2077.154245][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.161554][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2077.198250][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.205474][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2077.830450][ T2767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2077.949929][ T2767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2078.016576][ T2767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2078.045434][ T2767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2078.114611][ T2644] veth0_vlan: entered promiscuous mode [ 2078.315449][ T2665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.334099][ T2644] veth1_vlan: entered promiscuous mode [ 2078.443414][ T2686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.580511][ T2686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.726784][ T2644] veth0_macvtap: entered promiscuous mode [ 2078.791220][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.798415][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.887014][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.894331][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.914556][ T2644] veth1_macvtap: entered promiscuous mode [ 2079.150827][ T2767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.198552][ T2665] veth0_vlan: entered promiscuous mode [ 2079.294136][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.337027][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.364562][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.385815][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.405777][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.441170][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.456214][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.491928][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.504539][ T2644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.544238][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.556391][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.566936][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.586289][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.600530][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.611619][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.631963][ T2644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.673299][ T2644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.714883][ T2644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2079.752006][ T2767] 8021q: adding VLAN 0 to HW filter on device team0 [ 2079.809522][ T2644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.843195][ T2644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.873349][ T2644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.903904][ T2644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.946718][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.953920][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.969781][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.977036][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2079.996525][ T2665] veth1_vlan: entered promiscuous mode [ 2080.174893][ T2686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.390505][ T2665] veth0_macvtap: entered promiscuous mode [ 2080.534225][ T2767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2080.589488][ T2665] veth1_macvtap: entered promiscuous mode [ 2080.705822][ T7485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2080.713707][ T7485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.924755][ T2686] veth0_vlan: entered promiscuous mode [ 2080.989853][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.025615][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.035510][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.095653][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.105537][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.176866][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.196525][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.225750][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.245787][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.285647][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.323827][ T2665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2081.349754][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2081.361489][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2081.392239][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.475705][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.496859][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.529060][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.550888][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.583234][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.615731][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.645694][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.665768][ T2665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.696448][ T2665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.717587][ T2665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.739550][ T2686] veth1_vlan: entered promiscuous mode [ 2081.862500][ T2665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.895773][ T2665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.935078][ T2665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.957895][ T2665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.088230][ T2767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2082.241652][ T2927] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2082.519619][ T2686] veth0_macvtap: entered promiscuous mode [ 2082.667345][ T2686] veth1_macvtap: entered promiscuous mode [ 2082.850748][ T7501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.850776][ T7501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.000650][ T2767] veth0_vlan: entered promiscuous mode [ 2083.003510][ T7501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.003529][ T7501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.011895][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.011916][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.011927][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.011939][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.011949][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.011961][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.011971][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.011983][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.011994][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.012005][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.012016][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.012027][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.013387][ T2686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.028187][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028217][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.028241][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028259][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.028275][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028292][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.028307][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028324][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.028340][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028356][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.028371][ T2686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.028388][ T2686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.032612][ T2686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2083.087559][ T2686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.087605][ T2686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.087638][ T2686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.087670][ T2686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.128568][ T2767] veth1_vlan: entered promiscuous mode [ 2083.378953][ T2767] veth0_macvtap: entered promiscuous mode [ 2083.416494][ T2767] veth1_macvtap: entered promiscuous mode [ 2083.830854][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.872508][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.888218][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.948437][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.975914][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.008037][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.074620][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.133557][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.158549][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.184961][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.220420][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.262117][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.307657][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2084.324007][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.364089][ T2767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2084.441650][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.483850][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.527932][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.553507][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.603171][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.636066][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.658761][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.680791][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.691633][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.702647][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.713051][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.744101][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.801006][ T2767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2084.851022][ T2767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2084.898787][ T2767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2084.984740][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.024477][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.106379][ T2767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.128030][ T2767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.147563][ T2767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.172818][ T2767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.478534][ T2976] netlink: 'syz.1.6553': attribute type 10 has an invalid length. [ 2085.635046][ T2976] team0: Device hsr_slave_1 failed to register rx_handler [ 2085.962761][ T7498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.004124][ T7498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.572237][ T7503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.891282][ T2990] xt_hashlimit: max too large, truncated to 1048576 [ 2086.943981][ T2995] xt_ecn: cannot match TCP bits for non-tcp packets [ 2087.165448][ T7503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.306844][T30074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2087.334631][T30074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2087.349410][T30074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2087.361944][T30074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2087.370114][T30074] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2087.378567][T30074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2087.602255][ T7503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.798517][ T7503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.003039][ T7501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2088.043744][ T7501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2088.316549][ T7485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2088.367845][ T7485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2089.009364][ T7503] bridge_slave_1: left allmulticast mode [ 2089.056912][ T7503] bridge_slave_1: left promiscuous mode [ 2089.107346][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.285120][ T7503] bridge_slave_0: left allmulticast mode [ 2089.314801][ T7503] bridge_slave_0: left promiscuous mode [ 2089.368289][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.466661][T30074] Bluetooth: hci3: command tx timeout [ 2091.547871][T30074] Bluetooth: hci3: command tx timeout [ 2091.826219][ T7503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2091.897246][ T7503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.930102][ T7503] bond0 (unregistering): Released all slaves [ 2092.012103][ T3002] chnl_net:caif_netlink_parms(): no params data found [ 2092.238188][ T3051] geneve0: entered promiscuous mode [ 2092.275186][ T3051] macvlan2: entered promiscuous mode [ 2092.337928][ T3051] macvlan2: entered allmulticast mode [ 2092.365675][ T3051] geneve0: entered allmulticast mode [ 2093.625896][T30074] Bluetooth: hci3: command tx timeout [ 2093.756175][ T7503] hsr_slave_0: left promiscuous mode [ 2093.792219][ T7503] hsr_slave_1: left promiscuous mode [ 2093.836086][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2093.895788][ T7503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2093.952205][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2093.976393][ T7503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2094.197227][ T7503] veth1_macvtap: left promiscuous mode [ 2094.234242][ T7503] veth0_macvtap: left promiscuous mode [ 2094.267532][ T7503] veth1_vlan: left promiscuous mode [ 2094.288696][T31736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2094.316028][ T7503] veth0_vlan: left promiscuous mode [ 2094.331843][T31736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2094.341294][T31736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2094.349681][T31736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2094.359085][T31736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2094.366653][T31736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2095.706109][T31736] Bluetooth: hci3: command tx timeout [ 2096.427709][T31736] Bluetooth: hci6: command tx timeout [ 2096.867999][ T3098] vivid-002: ================= START STATUS ================= [ 2096.875858][ T3098] vivid-002: Radio HW Seek Mode: Bounded [ 2096.890819][ T3098] vivid-002: Radio Programmable HW Seek: false [ 2096.897284][ T3098] vivid-002: RDS Rx I/O Mode: Block I/O [ 2096.905231][ T3098] vivid-002: Generate RBDS Instead of RDS: false [ 2096.912881][ T3098] vivid-002: RDS Reception: true [ 2096.918127][ T3098] vivid-002: RDS Program Type: 0 inactive [ 2096.924073][ T3098] vivid-002: RDS PS Name: inactive [ 2096.929468][ T3098] vivid-002: RDS Radio Text: inactive [ 2096.935111][ T3098] vivid-002: RDS Traffic Announcement: false inactive [ 2096.942294][ T3098] vivid-002: RDS Traffic Program: false inactive [ 2096.981089][ T3098] vivid-002: RDS Music: false inactive [ 2096.987915][ T3098] vivid-002: ================== END STATUS ================== [ 2097.187517][ T7503] team0 (unregistering): Port device team_slave_1 removed [ 2097.342572][ T7503] team0 (unregistering): Port device team_slave_0 removed [ 2097.575869][ T5281] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2097.775760][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 2097.785071][ T5281] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2097.805788][ T5281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2097.814846][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2097.828106][ T5281] usb 4-1: SerialNumber: syz [ 2097.885360][ T5281] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2098.148949][ T5277] usb 4-1: USB disconnect, device number 23 [ 2098.511634][T31736] Bluetooth: hci6: command tx timeout [ 2099.116264][ T5281] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2099.130993][ T3077] team0: entered promiscuous mode [ 2099.136545][ T3077] team_slave_0: entered promiscuous mode [ 2099.142371][ T3077] team_slave_1: entered promiscuous mode [ 2099.244220][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.250673][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.255842][ T3078] team_slave_0: entered allmulticast mode [ 2099.302393][ T5281] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2099.325882][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.337521][ T3078] team0: Port device team_slave_0 removed [ 2099.344226][ T5281] usb 4-1: Product: syz [ 2099.364591][ T5281] usb 4-1: Manufacturer: syz [ 2099.365772][ T3081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2099.384873][ T5281] usb 4-1: SerialNumber: syz [ 2099.421895][ T5281] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2099.479354][ T5284] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2099.534605][ T3077] team0: left promiscuous mode [ 2099.546273][ T3077] team_slave_1: left promiscuous mode [ 2099.556926][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.574708][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.583027][ T3002] bridge_slave_0: entered allmulticast mode [ 2099.614382][ T3002] bridge_slave_0: entered promiscuous mode [ 2099.685839][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.712186][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.720566][ T3002] bridge_slave_1: entered allmulticast mode [ 2099.731594][ T3002] bridge_slave_1: entered promiscuous mode [ 2099.922707][ T3102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.935192][ T3002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2099.969185][ T3102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.000077][ T1612] usb 4-1: USB disconnect, device number 24 [ 2100.094616][ T3002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2100.345537][ T3109] netlink: 'syz.0.6577': attribute type 62 has an invalid length. [ 2100.395819][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6577'. [ 2100.441504][ T3002] team0: Port device team_slave_0 added [ 2100.588819][ T5284] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2100.597342][T31736] Bluetooth: hci6: command tx timeout [ 2100.622218][ T3002] team0: Port device team_slave_1 added [ 2100.636547][ T5284] ath9k_htc: Failed to initialize the device [ 2100.703688][ T1612] usb 4-1: ath9k_htc: USB layer deinitialized [ 2100.704967][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 2100.704995][ T29] audit: type=1326 audit(1722976785.679:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2100.876793][ T29] audit: type=1326 audit(1722976785.679:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2100.944843][ T3002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2100.976072][ T3002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2101.004510][ T29] audit: type=1326 audit(1722976785.689:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.058085][ T3002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2101.105826][ T29] audit: type=1326 audit(1722976785.689:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.231610][ T3002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2101.248956][ T1612] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2101.260855][ T29] audit: type=1326 audit(1722976785.689:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.286106][ T3002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2101.338379][ T29] audit: type=1326 audit(1722976785.729:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.383955][ T3002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.426879][ T29] audit: type=1326 audit(1722976785.729:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.505723][ T29] audit: type=1326 audit(1722976785.749:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.549780][ T1612] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.08 [ 2101.576710][ T1612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.605282][ T1612] usb 4-1: Product: syz [ 2101.627288][ T1612] usb 4-1: Manufacturer: syz [ 2101.631918][ T1612] usb 4-1: SerialNumber: syz [ 2101.656043][ T29] audit: type=1326 audit(1722976785.749:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2101.746044][ T29] audit: type=1326 audit(1722976785.749:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3115 comm="syz.4.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x7ffc0000 [ 2102.171200][ T3002] hsr_slave_0: entered promiscuous mode [ 2102.219589][ T3002] hsr_slave_1: entered promiscuous mode [ 2102.243785][ T3002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2102.255047][ T3002] Cannot create hsr debugfs directory [ 2102.377383][ T3143] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2102.638782][ T7493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.666057][T31736] Bluetooth: hci6: command tx timeout [ 2103.064977][ T3091] chnl_net:caif_netlink_parms(): no params data found [ 2103.281738][ T7493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.967962][ T7493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.674425][ T3166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6589'. [ 2104.727851][ T7493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.592741][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.633902][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.693336][ T3091] bridge_slave_0: entered allmulticast mode [ 2105.732532][ T3091] bridge_slave_0: entered promiscuous mode [ 2105.854434][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.914049][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.965966][ T3091] bridge_slave_1: entered allmulticast mode [ 2105.974961][ T3091] bridge_slave_1: entered promiscuous mode [ 2106.491950][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.650225][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2107.162346][ T3091] team0: Port device team_slave_0 added [ 2107.216908][ T3091] team0: Port device team_slave_1 added [ 2107.248199][ T3200] dccp_invalid_packet: P.Data Offset(172) too large [ 2107.878123][ T7493] bridge_slave_1: left allmulticast mode [ 2107.894127][ T7493] bridge_slave_1: left promiscuous mode [ 2107.913798][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.959095][ T7493] bridge_slave_0: left allmulticast mode [ 2107.980236][ T7493] bridge_slave_0: left promiscuous mode [ 2107.999313][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.722928][ T3212] delete_channel: no stack [ 2109.737863][ T3212] delete_channel: no stack [ 2111.890779][ T7493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2112.047846][ T7493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2112.156876][ T7493] bond0 (unregistering): Released all slaves [ 2112.473163][ T3210] netlink: 'syz.0.6600': attribute type 26 has an invalid length. [ 2112.481867][ T3210] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6600'. [ 2113.610694][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.656759][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2113.825005][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.909577][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.965989][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2114.227459][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.121866][ T3091] hsr_slave_0: entered promiscuous mode [ 2115.168139][ T3091] hsr_slave_1: entered promiscuous mode [ 2115.213688][ T3091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2115.253413][ T3091] Cannot create hsr debugfs directory [ 2115.353167][ T7493] hsr_slave_0: left promiscuous mode [ 2115.455069][ T7493] hsr_slave_1: left promiscuous mode [ 2115.549800][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2115.598881][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2115.666996][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2115.674585][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2115.975254][ T7493] veth1_macvtap: left promiscuous mode [ 2116.022073][ T7493] veth0_macvtap: left promiscuous mode [ 2116.045984][ T7493] veth1_vlan: left promiscuous mode [ 2116.061669][ T7493] veth0_vlan: left promiscuous mode [ 2117.893942][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 2117.893966][ T29] audit: type=1326 audit(1722976802.859:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.3.6618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x0 [ 2119.856740][ T7493] team0 (unregistering): Port device team_slave_1 removed [ 2120.133352][ T7493] team0 (unregistering): Port device team_slave_0 removed [ 2123.597017][ T3285] netlink: 'syz.3.6618': attribute type 10 has an invalid length. [ 2123.717302][ T3285] team0: Port device dummy0 added [ 2124.173955][ T3299] dccp_invalid_packet: P.Data Offset(0) too small [ 2124.266240][ T3002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2124.490136][ T3002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2124.655411][ T3002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2124.705953][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6622'. [ 2124.756969][ T3002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2124.929658][ T29] audit: type=1326 audit(1722976809.909:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3301 comm="syz.3.6622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x0 [ 2126.740270][ T3002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.856058][ T3002] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.978832][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.986142][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2127.201935][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.209234][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2127.681372][ T3002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2128.170365][ T3091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2128.347687][ T3091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2128.464044][ T3091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2128.546384][ T3091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2128.598316][ T3002] veth0_vlan: entered promiscuous mode [ 2128.728810][ T3002] veth1_vlan: entered promiscuous mode [ 2128.775768][ T5277] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2128.986640][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 2129.040915][ T5277] usb 5-1: New USB device found, idVendor=0424, idProduct=9907, bcdDevice= 3.2c [ 2129.070990][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.127859][ T5277] usb 5-1: Product: syz [ 2129.162618][ T5277] usb 5-1: Manufacturer: syz [ 2129.183627][ T5277] usb 5-1: SerialNumber: syz [ 2129.225401][ T5277] usb 5-1: config 0 descriptor?? [ 2129.299747][ T5277] smsc95xx v2.0.0 [ 2129.326932][ T5277] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2129.366863][ T5277] smsc95xx 5-1:0.0: probe with driver smsc95xx failed with error -22 [ 2129.420380][ T3002] veth0_macvtap: entered promiscuous mode [ 2129.514626][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.604719][ T5277] usb 5-1: USB disconnect, device number 22 [ 2129.613916][ T3002] veth1_macvtap: entered promiscuous mode [ 2129.783137][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2129.845875][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2129.885696][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2129.935873][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2129.978734][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.035663][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.090653][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.132021][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.191126][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.229681][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.305679][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.359016][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.402711][ T3002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2130.447734][ T3091] 8021q: adding VLAN 0 to HW filter on device team0 [ 2130.519785][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2130.569849][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.675695][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2130.765596][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.835505][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2130.901075][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.106006][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.155715][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.213907][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.481271][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.515519][ T3002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.579056][ T3002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.629304][ T3002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.731726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.739191][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2131.846883][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.854081][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2131.972718][ T3002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.007001][ T3002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.045651][ T3002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.345928][ T3002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.481591][ T3386] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6637'. [ 2133.323398][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.383473][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.554382][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.622411][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.634248][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2133.852879][ T3398] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6635'. [ 2133.937108][ T3398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6635'. [ 2134.002151][ T3407] netlink: 'syz.0.6641': attribute type 9 has an invalid length. [ 2134.057869][ T3407] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6641'. [ 2134.111286][ T3091] veth0_vlan: entered promiscuous mode [ 2134.304423][ T3410] netlink: 'syz.0.6641': attribute type 9 has an invalid length. [ 2134.327965][ T3091] veth1_vlan: entered promiscuous mode [ 2134.376968][ T3410] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6641'. [ 2134.773262][ T3091] veth0_macvtap: entered promiscuous mode [ 2134.903081][ T3091] veth1_macvtap: entered promiscuous mode [ 2135.093300][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.159611][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.205730][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.246662][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.295628][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.348081][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.395645][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.439242][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.515679][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.584883][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.623108][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.669545][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.725652][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.781817][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.887323][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.954885][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.017917][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.054729][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.098638][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.241352][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.432508][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.483376][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.704776][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.750439][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.820653][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.857821][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.925655][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.993543][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2137.066919][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.099603][ T3447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6650'. [ 2137.108043][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2137.280181][ T3091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.424030][ T3091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.455131][ T3452] No such timeout policy "syz0" [ 2137.534643][ T3091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.598804][ T3091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.846687][ T5281] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2138.007858][ T29] audit: type=1326 audit(1722976822.979:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.068363][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2138.133465][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.158994][ T29] audit: type=1326 audit(1722976822.979:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.213940][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2138.235731][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.310797][ T29] audit: type=1326 audit(1722976823.009:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.354832][ T5281] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2138.420667][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.426667][ T29] audit: type=1326 audit(1722976823.009:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.492148][ T7498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2138.550605][ T7498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2138.561315][ T5281] usb 3-1: config 0 descriptor?? [ 2138.611525][ T29] audit: type=1326 audit(1722976823.009:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.776480][ T3466] syzkaller1: entered promiscuous mode [ 2138.792834][ T3466] syzkaller1: entered allmulticast mode [ 2138.798771][ T29] audit: type=1326 audit(1722976823.019:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2138.937841][ T29] audit: type=1326 audit(1722976823.019:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.3.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2139.231810][ T29] audit: type=1326 audit(1722976824.209:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3475 comm="syz.4.6657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff200d779f9 code=0x0 [ 2139.486405][ T1171] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2139.716017][ T1171] usb 2-1: Using ep0 maxpacket: 16 [ 2139.780787][ T1171] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 2139.843063][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.904942][ T1171] usb 2-1: Product: syz [ 2139.941244][ T1171] usb 2-1: Manufacturer: syz [ 2139.972673][ T1171] usb 2-1: SerialNumber: syz [ 2140.016568][ T1171] usb 2-1: config 0 descriptor?? [ 2140.077928][ T1171] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 2140.546241][ T625] usb 2-1: USB disconnect, device number 19 [ 2140.650313][ T5281] usb 3-1: string descriptor 0 read error: -71 [ 2140.685477][ T5281] uclogic 0003:256C:006D.005F: failed retrieving string descriptor #200: -71 [ 2140.746792][ T5281] uclogic 0003:256C:006D.005F: failed retrieving pen parameters: -71 [ 2140.805697][ T5281] uclogic 0003:256C:006D.005F: failed probing pen v2 parameters: -71 [ 2140.813951][ T5281] uclogic 0003:256C:006D.005F: failed probing parameters: -71 [ 2140.835805][ T5281] uclogic 0003:256C:006D.005F: probe with driver uclogic failed with error -71 [ 2140.878336][ T5281] usb 3-1: USB disconnect, device number 19 [ 2141.216442][ T3510] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2141.223011][ T3510] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2141.291034][ T3510] vhci_hcd vhci_hcd.0: Device attached [ 2141.595785][ T9] usb 9-1: new high-speed USB device number 4 using vhci_hcd [ 2141.996267][ T7493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.625266][ T7493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2143.042620][ T7493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2143.312383][ T3537] netlink: 'syz.1.6672': attribute type 2 has an invalid length. [ 2143.342853][ T7493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2143.383571][ T3537] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6672'. [ 2143.471917][T30074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2143.490207][T30074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2143.500161][T30074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2143.510844][T30074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2143.519257][T30074] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2143.527913][T30074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2143.645787][T22216] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2143.845782][T22216] usb 3-1: Using ep0 maxpacket: 16 [ 2143.869906][T22216] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 2143.909685][T22216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.953661][T22216] usb 3-1: Product: syz [ 2143.975866][T22216] usb 3-1: Manufacturer: syz [ 2143.980523][T22216] usb 3-1: SerialNumber: syz [ 2144.013621][T22216] usb 3-1: config 0 descriptor?? [ 2144.045124][ T7493] bridge_slave_1: left allmulticast mode [ 2144.064210][ T7493] bridge_slave_1: left promiscuous mode [ 2144.077184][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.117027][ T7493] bridge_slave_0: left allmulticast mode [ 2144.125831][ T7493] bridge_slave_0: left promiscuous mode [ 2144.131651][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.226662][ T3511] vhci_hcd: connection reset by peer [ 2144.254776][ T7485] vhci_hcd: stop threads [ 2144.272898][ T7485] vhci_hcd: release socket [ 2144.293627][ T7485] vhci_hcd: disconnect device [ 2145.646007][T31736] Bluetooth: hci2: command tx timeout [ 2146.825879][ T9] vhci_hcd: vhci_device speed not set [ 2147.488041][ T7493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2147.601507][ T7493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2147.649629][ T7493] bond0 (unregistering): Released all slaves [ 2147.705730][T31736] Bluetooth: hci2: command tx timeout [ 2147.951205][T22216] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 2147.990505][T22216] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 2148.459842][T22216] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 2148.559057][T22216] usb 3-1: USB disconnect, device number 20 [ 2148.870885][ T7493] hsr_slave_0: left promiscuous mode [ 2148.925865][ T7493] hsr_slave_1: left promiscuous mode [ 2148.955730][T22216] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2149.005240][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2149.012790][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2149.066764][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2149.080277][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2149.185709][T22216] usb 3-1: Using ep0 maxpacket: 16 [ 2149.197710][T22216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2149.217360][ T7493] veth1_macvtap: left promiscuous mode [ 2149.226620][ T7493] veth0_macvtap: left promiscuous mode [ 2149.235658][T22216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2149.245444][T22216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2149.268176][ T7493] veth1_vlan: left promiscuous mode [ 2149.316442][ T7493] veth0_vlan: left promiscuous mode [ 2149.335710][T22216] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2149.369422][T22216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.447059][T22216] usb 3-1: config 0 descriptor?? [ 2149.798264][T31736] Bluetooth: hci2: command tx timeout [ 2151.763633][T22216] usbhid 3-1:0.0: can't add hid device: -71 [ 2151.785872][T22216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2151.846208][T22216] usb 3-1: USB disconnect, device number 21 [ 2151.866946][T31736] Bluetooth: hci2: command tx timeout [ 2152.841180][ T7493] team0 (unregistering): Port device team_slave_1 removed [ 2153.063964][ T7493] team0 (unregistering): Port device team_slave_0 removed [ 2156.765736][ T3586] netlink: 'syz.1.6689': attribute type 12 has an invalid length. [ 2156.836900][ T3589] tap0: tun_chr_ioctl cmd 35111 [ 2157.241214][ T3541] chnl_net:caif_netlink_parms(): no params data found [ 2157.415275][ T3609] vlan2: entered promiscuous mode [ 2157.443615][ T3609] bond0: (slave vlan2): Opening slave failed [ 2157.506570][ T3612] fuse: Bad value for 'fd' [ 2158.065053][ T29] audit: type=1326 audit(1722976843.039:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.120687][ T29] audit: type=1326 audit(1722976843.069:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.261459][ T29] audit: type=1326 audit(1722976843.069:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.368974][ T29] audit: type=1326 audit(1722976843.079:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.505879][ T29] audit: type=1326 audit(1722976843.079:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.555960][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.600302][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.633028][ T29] audit: type=1326 audit(1722976843.079:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.666128][ T3541] bridge_slave_0: entered allmulticast mode [ 2158.693936][ T3541] bridge_slave_0: entered promiscuous mode [ 2158.737773][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.760420][ T29] audit: type=1326 audit(1722976843.079:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.825477][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.877149][ T3541] bridge_slave_1: entered allmulticast mode [ 2158.917524][ T29] audit: type=1326 audit(1722976843.079:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2158.946824][ T3541] bridge_slave_1: entered promiscuous mode [ 2159.021569][ T29] audit: type=1326 audit(1722976843.089:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2159.134382][ T29] audit: type=1326 audit(1722976843.089:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3615 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb5d779f9 code=0x7ffc0000 [ 2159.355757][ T1171] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2159.427570][ T3541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2159.515866][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2159.536729][ T3541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2159.556056][ T1171] usb 2-1: Using ep0 maxpacket: 32 [ 2159.636745][ T1171] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 2159.676349][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.717265][ T1171] usb 2-1: Product: syz [ 2159.725885][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.762584][ T1171] usb 2-1: Manufacturer: syz [ 2159.767539][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.800085][ T1171] usb 2-1: SerialNumber: syz [ 2159.846166][ T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 2159.855358][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.866029][ T1171] usb 2-1: config 0 descriptor?? [ 2159.942536][ T1171] usb 2-1: active config #0 != 1 ?? [ 2159.962523][ T25] usb 3-1: config 0 descriptor?? [ 2159.980220][ T3541] team0: Port device team_slave_0 added [ 2160.167053][ T3541] team0: Port device team_slave_1 added [ 2160.401166][T30277] usb 2-1: USB disconnect, device number 20 [ 2160.514038][ T25] stadia 0003:18D1:9400.0060: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 2160.613735][ T25] stadia 0003:18D1:9400.0060: no inputs found [ 2160.620099][ T3541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2160.620122][ T3541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2160.620152][ T3541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.684873][ T3541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.722813][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.729705][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.785668][ T3541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2160.949293][ T3541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2160.965031][ T25] stadia 0003:18D1:9400.0060: force feedback init failed [ 2161.036185][ T25] usb 3-1: USB disconnect, device number 22 [ 2161.350678][ T3541] hsr_slave_0: entered promiscuous mode [ 2161.479214][ T3541] hsr_slave_1: entered promiscuous mode [ 2161.555706][ T3541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2161.597387][ T3541] Cannot create hsr debugfs directory [ 2161.716559][ T3671] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6708'. [ 2161.832624][ T3671] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 2162.533561][ T3689] netlink: 'syz.2.6716': attribute type 3 has an invalid length. [ 2162.595088][ T3690] xt_NFQUEUE: number of total queues is 0 [ 2165.041019][ T7485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.420755][ T7485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.899804][ T7485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.262547][ T3723] kvm: pic: non byte read [ 2166.303318][T30074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2166.321258][T30074] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2166.332802][T30074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2166.350345][T30074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2166.359054][T30074] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2166.366795][T30074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2166.526815][ T7485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.955350][ T3541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2167.047169][ T3541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2167.305052][ T3541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2167.465155][ T3541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2167.865789][T30074] Bluetooth: hci0: command 0x0406 tx timeout [ 2168.505893][T31736] Bluetooth: hci6: command tx timeout [ 2168.570777][ T7485] bridge_slave_1: left allmulticast mode [ 2168.595180][ T7485] bridge_slave_1: left promiscuous mode [ 2168.602865][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6734'. [ 2168.636012][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.655909][ T3755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6734'. [ 2168.778784][ T7485] bridge_slave_0: left allmulticast mode [ 2168.803557][ T7485] bridge_slave_0: left promiscuous mode [ 2168.816203][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2169.491058][ T3762] cgroup: fork rejected by pids controller in /syz3 [ 2170.585722][T31736] Bluetooth: hci6: command tx timeout [ 2171.493550][ T4679] udevd[4679]: worker [2711] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 2172.144656][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.255458][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.339499][ T7485] bond0 (unregistering): Released all slaves [ 2172.688056][T31736] Bluetooth: hci6: command tx timeout [ 2173.444326][ T3728] chnl_net:caif_netlink_parms(): no params data found [ 2174.320168][ T3787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2174.745948][T30074] Bluetooth: hci6: command tx timeout [ 2174.947987][ T7485] hsr_slave_0: left promiscuous mode [ 2175.003285][ T7485] hsr_slave_1: left promiscuous mode [ 2175.126425][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2175.166747][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.236605][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2175.244110][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2175.775674][ T7485] veth1_macvtap: left promiscuous mode [ 2175.795291][ T7485] veth0_macvtap: left promiscuous mode [ 2175.801714][T30074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2175.814631][T30074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2175.823716][T30074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2175.832821][T30074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2175.841184][T30074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2175.848770][T30074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2175.915890][ T7485] veth1_vlan: left promiscuous mode [ 2175.998484][ T7485] veth0_vlan: left promiscuous mode [ 2176.674863][ T3821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6751'. [ 2177.948123][T31736] Bluetooth: hci0: command tx timeout [ 2179.659585][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2180.025843][T31736] Bluetooth: hci0: command tx timeout [ 2180.115067][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2182.106218][T31736] Bluetooth: hci0: command tx timeout [ 2184.185783][T31736] Bluetooth: hci0: command tx timeout [ 2184.199918][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6755'. [ 2184.266736][ T3836] veth3: entered allmulticast mode [ 2184.413021][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.465976][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.515950][ T3728] bridge_slave_0: entered allmulticast mode [ 2184.544649][ T3728] bridge_slave_0: entered promiscuous mode [ 2184.587654][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.594860][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.705659][ T3728] bridge_slave_1: entered allmulticast mode [ 2184.738446][ T3728] bridge_slave_1: entered promiscuous mode [ 2185.151202][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.226404][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.694192][ T3541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2185.869620][ T3728] team0: Port device team_slave_0 added [ 2185.919033][ T3728] team0: Port device team_slave_1 added [ 2186.403160][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.453488][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.635706][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.820094][ T3541] 8021q: adding VLAN 0 to HW filter on device team0 [ 2186.929209][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.965701][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2187.078834][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2187.285913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.293121][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2187.416180][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.423383][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2187.928673][ T7485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.210403][ T7485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.791557][ T3728] hsr_slave_0: entered promiscuous mode [ 2188.847195][ T3728] hsr_slave_1: entered promiscuous mode [ 2188.856843][ T3728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2188.886635][ T3728] Cannot create hsr debugfs directory [ 2188.946061][ T5281] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2188.966278][ T7485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.125760][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 2189.165758][ T5281] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 2189.195083][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.256941][ T5281] usb 3-1: config 0 descriptor?? [ 2189.294602][ T5281] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 2189.416784][ T7485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.083960][ T3815] chnl_net:caif_netlink_parms(): no params data found [ 2190.163775][ T3541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2190.212736][ T3923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.291205][ T3923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.516116][ T5281] gspca_sunplus: reg_w_riv err -110 [ 2190.545024][ T5281] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 2190.777728][ T7485] bridge_slave_1: left allmulticast mode [ 2190.813407][ T7485] bridge_slave_1: left promiscuous mode [ 2190.841244][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.907327][ T7485] bridge_slave_0: left allmulticast mode [ 2190.982184][ T7485] bridge_slave_0: left promiscuous mode [ 2191.106822][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.554127][T22216] usb 3-1: USB disconnect, device number 23 [ 2192.148402][T22216] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2192.475313][T22216] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 2192.495239][T22216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.530633][T22216] usb 3-1: config 0 descriptor?? [ 2192.550498][T22216] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 2193.257500][T22216] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 2193.264533][T22216] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2193.331279][T22216] usb 3-1: USB disconnect, device number 24 [ 2194.056276][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2194.116440][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2194.177628][ T7485] bond0 (unregistering): Released all slaves [ 2194.526202][ T1171] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2194.745824][ T1171] usb 3-1: Using ep0 maxpacket: 16 [ 2194.763298][ T1171] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2194.793727][ T1171] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2194.854445][ T1171] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2194.925711][ T1171] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 2194.981734][ T3815] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.998593][ T1171] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 2195.015845][ T3815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.033174][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 2195.036762][ T3815] bridge_slave_0: entered allmulticast mode [ 2195.072883][ T1171] usb 3-1: SerialNumber: syz [ 2195.086955][ T3815] bridge_slave_0: entered promiscuous mode [ 2195.107450][ T1171] usb-storage 3-1:1.0: USB Mass Storage device detected [ 2195.137644][ T1171] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 2195.198209][ T1171] scsi host1: usb-storage 3-1:1.0 [ 2195.573824][ T9] usb 3-1: USB disconnect, device number 25 [ 2195.823860][ T3541] veth0_vlan: entered promiscuous mode [ 2195.847990][ T3815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.855203][ T3815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.877118][ T3971] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 2195.913470][ T3815] bridge_slave_1: entered allmulticast mode [ 2195.933617][ T3815] bridge_slave_1: entered promiscuous mode [ 2196.724186][ T3815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2196.778297][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 2196.965624][ T7485] hsr_slave_0: left promiscuous mode [ 2197.015842][ T7485] hsr_slave_1: left promiscuous mode [ 2197.074988][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2197.084916][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2197.117331][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.124867][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2197.315801][ T7485] veth1_macvtap: left promiscuous mode [ 2197.321447][ T7485] veth0_macvtap: left promiscuous mode [ 2197.365895][ T7485] veth1_vlan: left promiscuous mode [ 2197.371317][ T7485] veth0_vlan: left promiscuous mode [ 2198.714569][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2199.468825][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6779'. [ 2199.504521][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6779'. [ 2202.216237][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2202.468469][ T4013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6782'. [ 2202.633188][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2203.419184][T30074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2203.458795][T30074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2203.495831][T30074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2203.521069][T30074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2203.529576][T30074] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2203.537403][T30074] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2205.635717][T30074] Bluetooth: hci7: command tx timeout [ 2205.707430][ T7485] team0 (unregistering): Port device dummy0 removed [ 2207.206817][ T3815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2207.389866][ T3541] veth1_vlan: entered promiscuous mode [ 2207.718697][T30074] Bluetooth: hci7: command tx timeout [ 2207.887655][ T3815] team0: Port device team_slave_0 added [ 2207.943475][ T3815] team0: Port device team_slave_1 added [ 2208.005770][ T5281] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2208.216758][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 2208.227792][ T5281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2208.295915][ T5281] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2208.345725][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2208.355214][ T5281] usb 3-1: Product: syz [ 2208.363834][ T3815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2208.395806][ T3815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2208.408269][ T5281] usb 3-1: Manufacturer: syz [ 2208.492953][ T5281] usb 3-1: SerialNumber: syz [ 2208.500804][ T5281] usb 3-1: config 0 descriptor?? [ 2208.506251][ T3815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2208.549125][ T4019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2208.603026][ T3815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2208.616246][ T3815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2208.675065][ T3815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2208.875208][ T5277] usb 3-1: USB disconnect, device number 26 [ 2209.024549][ T3728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2209.067441][ T3728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2209.253240][ T3728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2209.316573][ T3728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2209.367485][ T4036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6783'. [ 2209.395515][ T3815] hsr_slave_0: entered promiscuous mode [ 2209.478404][ T3815] hsr_slave_1: entered promiscuous mode [ 2209.510115][ T3815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2209.530791][ T3815] Cannot create hsr debugfs directory [ 2209.796106][T30074] Bluetooth: hci7: command tx timeout [ 2211.451957][ T4016] chnl_net:caif_netlink_parms(): no params data found [ 2211.867827][T31736] Bluetooth: hci7: command tx timeout [ 2213.292606][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2213.306219][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.317513][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.345465][ T4016] bridge_slave_0: entered allmulticast mode [ 2213.367828][ T4016] bridge_slave_0: entered promiscuous mode [ 2213.581717][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.627103][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.665910][ T4016] bridge_slave_1: entered allmulticast mode [ 2213.693880][ T4016] bridge_slave_1: entered promiscuous mode [ 2213.946684][T31736] Bluetooth: hci3: command 0x0406 tx timeout [ 2214.356538][ T4060] program syz.0.6790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2214.532427][ T3728] 8021q: adding VLAN 0 to HW filter on device team0 [ 2214.642981][ T4016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.701078][ T7485] bridge_slave_1: left allmulticast mode [ 2214.721671][ T7485] bridge_slave_1: left promiscuous mode [ 2214.768893][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2215.016613][ T7485] bridge_slave_0: left allmulticast mode [ 2215.022322][ T7485] bridge_slave_0: left promiscuous mode [ 2215.046322][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.999276][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2217.056448][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2217.098898][ T7485] bond0 (unregistering): Released all slaves [ 2217.181412][ T4016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2217.575690][ T7485] hsr_slave_0: left promiscuous mode [ 2217.582149][ T7485] hsr_slave_1: left promiscuous mode [ 2217.616524][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2217.637054][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2217.755995][ T7485] veth1_vlan: left promiscuous mode [ 2217.776676][ T7485] veth0_vlan: left promiscuous mode [ 2217.843862][ T4087] fuse: Bad value for 'fd' [ 2217.873457][ T4087] binder: 4086:4087 ioctl c018620c 20002380 returned -1 [ 2218.965638][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2219.222808][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2219.269651][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2219.337827][ T25] usb 3-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=cd.ee [ 2219.400136][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.455677][ T25] usb 3-1: Product: syz [ 2219.482722][ T25] usb 3-1: Manufacturer: syz [ 2219.502850][ T25] usb 3-1: SerialNumber: syz [ 2219.581515][ T25] usb 3-1: config 0 descriptor?? [ 2219.612316][ T4099] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.6798'. [ 2219.613992][ T25] option 3-1:0.0: GSM modem (1-port) converter detected [ 2220.493210][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 2220.799286][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 2221.438755][ T1171] usb 3-1: USB disconnect, device number 27 [ 2221.496130][ T1171] option 3-1:0.0: device disconnected [ 2221.668020][ T4109] atomic_op ffff888045bdd198 conn xmit_atomic 0000000000000000 [ 2222.073851][ T1171] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2222.114253][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.120710][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.335725][ T1171] usb 3-1: Using ep0 maxpacket: 32 [ 2222.348284][ T1171] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.383905][ T1171] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2222.403771][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.434242][ T1171] usb 3-1: Product: syz [ 2222.448878][ T1171] usb 3-1: Manufacturer: syz [ 2222.465635][ T1171] usb 3-1: SerialNumber: syz [ 2222.503862][ T1171] cdc_ether 3-1:1.0: skipping garbage [ 2222.515693][ T1171] usb 3-1: bad CDC descriptors [ 2222.822740][ T1171] usb 3-1: USB disconnect, device number 28 [ 2223.905878][T22216] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2224.040301][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.047470][ T625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.108213][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.115432][ T625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.125885][T22216] usb 3-1: Using ep0 maxpacket: 8 [ 2224.147005][T22216] usb 3-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice= b.64 [ 2224.165790][T22216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.194323][T22216] usb 3-1: Product: syz [ 2224.211580][ T4016] team0: Port device team_slave_0 added [ 2224.227591][T22216] usb 3-1: Manufacturer: syz [ 2224.245696][T22216] usb 3-1: SerialNumber: syz [ 2224.286749][T22216] usb 3-1: config 0 descriptor?? [ 2224.297077][ T4016] team0: Port device team_slave_1 added [ 2224.297727][T22216] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2224.370209][T22216] usb-storage 3-1:0.0: This device (0595,4343,0b64 S 05 P 17) has an unneeded SubClass entry in unusual_devs.h (kernel 6.11.0-rc2-syzkaller-00011-geb5e56d14912) [ 2224.370209][T22216] Please send a copy of this message to and [ 2224.736483][ T5277] usb 3-1: USB disconnect, device number 29 [ 2224.763735][ T3728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2224.825623][ T3728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2224.857696][ T4016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2224.864667][ T4016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.024354][ T4016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2225.091128][ T4016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2225.136623][ T4016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.255604][ T4016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2225.513137][ T3815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2225.587776][ T3815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2225.917141][ T4016] hsr_slave_0: entered promiscuous mode [ 2225.984155][ T4016] hsr_slave_1: entered promiscuous mode [ 2226.055728][ T4016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2226.063339][ T4016] Cannot create hsr debugfs directory [ 2226.130154][ T3815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2226.365679][ T3815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2226.465455][ T4130] xt_cluster: node mask cannot exceed total number of nodes [ 2226.716453][T31736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2226.730067][T31736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2226.740284][T31736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2226.766276][T31736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2226.775476][T31736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2226.783130][T31736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2226.929843][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'. [ 2228.249503][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2228.907125][T31736] Bluetooth: hci2: command tx timeout [ 2229.008640][ T3815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2229.425325][ T3815] 8021q: adding VLAN 0 to HW filter on device team0 [ 2229.725722][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.732959][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.957074][ T4137] chnl_net:caif_netlink_parms(): no params data found [ 2230.015047][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.022256][T30277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2230.110880][ T7501] bridge_slave_1: left allmulticast mode [ 2230.130783][ T7501] bridge_slave_1: left promiscuous mode [ 2230.168510][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.287765][ T7501] bridge_slave_0: left allmulticast mode [ 2230.293504][ T7501] bridge_slave_0: left promiscuous mode [ 2230.345806][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.996020][T31736] Bluetooth: hci2: command tx timeout [ 2233.080376][T31736] Bluetooth: hci2: command tx timeout [ 2233.700610][ T7501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2233.823886][ T7501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2233.898856][ T7501] bond0 (unregistering): Released all slaves [ 2234.735974][ T7501] hsr_slave_0: left promiscuous mode [ 2234.816691][ T7501] hsr_slave_1: left promiscuous mode [ 2234.945859][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2235.090126][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.149921][T31736] Bluetooth: hci2: command tx timeout [ 2235.723965][T30074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2235.747306][T30074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2235.762298][T30074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2235.776168][T30074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2235.792714][T30074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2235.806806][T30074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2236.787643][ T7501] team0 (unregistering): Port device team_slave_1 removed [ 2237.037424][ T7501] team0 (unregistering): Port device team_slave_0 removed [ 2237.866215][T30074] Bluetooth: hci0: command tx timeout [ 2239.517323][ T4234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6825'. [ 2239.945826][T30074] Bluetooth: hci0: command tx timeout [ 2240.025381][ T4016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2240.148558][ T4016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2240.516777][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.524013][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.582775][ T4137] bridge_slave_0: entered allmulticast mode [ 2240.620732][ T4137] bridge_slave_0: entered promiscuous mode [ 2240.685936][ T4016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2240.744328][ T4016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2240.879492][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.916208][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.066095][ T4137] bridge_slave_1: entered allmulticast mode [ 2241.133668][ T4137] bridge_slave_1: entered promiscuous mode [ 2241.580282][ T4137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2241.629599][ T4137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2242.025919][T30074] Bluetooth: hci0: command tx timeout [ 2242.395832][ T4137] team0: Port device team_slave_0 added [ 2242.616266][ T4137] team0: Port device team_slave_1 added [ 2242.970846][T30277] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2243.215749][T30277] usb 3-1: Using ep0 maxpacket: 32 [ 2243.241455][T30277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.290639][T30277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.323441][T30277] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2243.405934][T30277] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2243.438441][ T4137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2243.445467][ T4137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.454435][T30277] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2243.501216][ T4137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2243.518742][ T4137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2243.535233][ T4137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.575899][T30277] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2243.609966][T30277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2243.634580][ T4137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2243.652614][T30277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.699974][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 2243.717364][T30277] usb 3-1: Product: syz [ 2243.721604][T30277] usb 3-1: Manufacturer: syz [ 2243.756029][T30277] usb 3-1: SerialNumber: syz [ 2243.885378][ T4319] vlan2: entered promiscuous mode [ 2243.915818][ T4319] vlan2: entered allmulticast mode [ 2243.933487][ T4319] bridge0: port 3(vlan2) entered blocking state [ 2243.956170][ T4319] bridge0: port 3(vlan2) entered disabled state [ 2244.117954][T30074] Bluetooth: hci0: command tx timeout [ 2244.614908][T30277] cdc_ncm 3-1:1.0: bind() failure [ 2244.690185][T30277] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2244.736273][T30277] cdc_ncm 3-1:1.1: bind() failure [ 2244.815781][T30277] usb 3-1: USB disconnect, device number 30 [ 2245.111897][ T4137] hsr_slave_0: entered promiscuous mode [ 2245.216746][ T4137] hsr_slave_1: entered promiscuous mode [ 2245.256546][ T4137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2245.284725][ T4137] Cannot create hsr debugfs directory [ 2245.622790][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2245.647646][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.678191][ T4253] bridge_slave_0: entered allmulticast mode [ 2245.703916][ T4253] bridge_slave_0: entered promiscuous mode [ 2245.742853][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 2245.795304][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2245.857413][ T4253] bridge_slave_1: entered allmulticast mode [ 2245.910749][ T4253] bridge_slave_1: entered promiscuous mode [ 2246.544292][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.627433][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2247.035243][ T7501] bridge_slave_1: left allmulticast mode [ 2247.063099][ T7501] bridge_slave_1: left promiscuous mode [ 2247.085944][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.200267][ T7501] bridge_slave_0: left allmulticast mode [ 2247.227813][ T7501] bridge_slave_0: left promiscuous mode [ 2247.233631][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.039536][ T4359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 2249.046205][ T4359] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2249.105602][ T4359] vhci_hcd vhci_hcd.0: Device attached [ 2249.462737][T14520] usb 10-1: SetAddress Request (2) to port 0 [ 2249.500790][T14520] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2249.705790][ T4361] vhci_hcd: connection reset by peer [ 2249.736504][ T7498] vhci_hcd: stop threads [ 2249.742040][ T7498] vhci_hcd: release socket [ 2249.789564][ T7498] vhci_hcd: disconnect device [ 2250.154481][ T7501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2250.215962][ T7501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2250.284766][ T7501] bond0 (unregistering): Released all slaves [ 2250.549176][ T4253] team0: Port device team_slave_0 added [ 2250.593351][ T4016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2250.815770][ T7501] hsr_slave_0: left promiscuous mode [ 2250.861846][ T7501] hsr_slave_1: left promiscuous mode [ 2250.885767][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2250.934512][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.007130][ T4369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2251.610516][ T1171] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2251.877475][ T1171] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.931515][ T1171] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2251.971340][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.054165][ T1171] usb 3-1: config 0 descriptor?? [ 2252.057669][ T7501] team0 (unregistering): Port device team_slave_1 removed [ 2252.082103][ T1171] pwc: Askey VC010 type 2 USB webcam detected. [ 2252.296876][ T7501] team0 (unregistering): Port device team_slave_0 removed [ 2252.520903][ T1171] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2252.548077][ T1171] pwc: recv_control_msg error -32 req 02 val 2700 [ 2252.584330][ T1171] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2252.636847][ T1171] pwc: recv_control_msg error -32 req 04 val 1000 [ 2252.855734][ T1171] pwc: recv_control_msg error -71 req 04 val 1400 [ 2252.886244][ T1171] pwc: recv_control_msg error -71 req 02 val 2000 [ 2252.924779][ T1171] pwc: recv_control_msg error -71 req 02 val 2100 [ 2252.955975][ T1171] pwc: recv_control_msg error -71 req 04 val 1500 [ 2252.995818][ T1171] pwc: recv_control_msg error -71 req 02 val 2500 [ 2253.035624][ T1171] pwc: recv_control_msg error -71 req 02 val 2400 [ 2253.076438][ T1171] pwc: recv_control_msg error -71 req 02 val 2600 [ 2253.107397][ T1171] pwc: recv_control_msg error -71 req 02 val 2900 [ 2253.136198][ T1171] pwc: recv_control_msg error -71 req 02 val 2800 [ 2253.165873][ T1171] pwc: recv_control_msg error -71 req 04 val 1100 [ 2253.194635][ T1171] pwc: recv_control_msg error -71 req 04 val 1200 [ 2253.230858][ T1171] pwc: Registered as video71. [ 2253.266104][ T1171] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input101 [ 2253.328626][ T1171] usb 3-1: USB disconnect, device number 31 [ 2254.599590][T14520] usb 10-1: device descriptor read/8, error -110 [ 2255.081847][T14520] usb usb10-port1: attempt power cycle [ 2255.510299][ T4253] team0: Port device team_slave_1 added [ 2255.847500][T14520] usb usb10-port1: unable to enumerate USB device [ 2255.884060][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2255.916454][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.085578][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.148578][ T4388] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 2256.160601][ T4016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.252166][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.358337][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.446033][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.506402][ T4390] macvlan0: entered allmulticast mode [ 2256.565594][ T4390] veth1_vlan: entered allmulticast mode [ 2256.650704][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.657986][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.756624][ T4390] veth1_vlan: left allmulticast mode [ 2256.912338][ T4390] macvlan0 (unregistering): left allmulticast mode [ 2257.568080][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.575277][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2258.192545][ T4253] hsr_slave_0: entered promiscuous mode [ 2258.221266][ T4253] hsr_slave_1: entered promiscuous mode [ 2258.242943][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2258.275605][ T4253] Cannot create hsr debugfs directory [ 2259.005756][ T4412] netlink: 'syz.2.6858': attribute type 10 has an invalid length. [ 2259.013792][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2259.155157][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.334026][ T4412] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2260.089383][ T4420] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 2260.584876][ T4016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2261.071072][ T4137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2261.196513][T14520] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2261.423636][T14520] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2261.516494][T14520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.524610][T14520] usb 3-1: Product: syz [ 2261.531628][ T4137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2261.589655][T14520] usb 3-1: Manufacturer: syz [ 2261.594386][T14520] usb 3-1: SerialNumber: syz [ 2261.622316][ T4137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2261.660544][T14520] usb 3-1: config 0 descriptor?? [ 2261.710601][T14520] ch341 3-1:0.0: ch341-uart converter detected [ 2261.749934][ T4016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2262.019299][ T4137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2263.069618][ T30] INFO: task kworker/0:7:5284 blocked for more than 143 seconds. [ 2263.089505][ T30] Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2263.160247][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2263.241104][ T30] task:kworker/0:7 state:D stack:13232 pid:5284 tgid:5284 ppid:2 flags:0x00004000 [ 2263.314381][T14520] usb 3-1: failed to send control message: -110 [ 2263.315563][ T30] Workqueue: events request_firmware_work_func [ 2263.365847][T14520] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2263.412262][ T30] Call Trace: [ 2263.430810][ T30] [ 2263.433828][ T30] __schedule+0x1800/0x4a60 [ 2263.495694][ T30] ? __pfx___schedule+0x10/0x10 [ 2263.500645][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2263.585637][ T30] ? __pfx_lock_release+0x10/0x10 [ 2263.590760][ T30] ? kick_pool+0x45c/0x620 [ 2263.595272][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2263.731254][ T4137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2263.741978][ T30] ? schedule+0x90/0x320 [ 2263.785930][ T30] schedule+0x14b/0x320 [ 2263.815769][ T30] schedule_preempt_disabled+0x13/0x30 [ 2263.821351][ T30] __mutex_lock+0x6a4/0xd70 [ 2263.895663][ T30] ? __mutex_lock+0x527/0xd70 [ 2263.900405][ T30] ? ath9k_hif_usb_firmware_cb+0x34a/0x4b0 [ 2263.957919][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2263.963048][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2263.998166][ T30] ? complete_all+0xd5/0x1e0 [ 2264.019310][ T30] ath9k_hif_usb_firmware_cb+0x34a/0x4b0 [ 2264.025045][ T30] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 2264.060766][ T30] request_firmware_work_func+0x1a4/0x280 [ 2264.075674][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 2264.115583][ T30] ? process_scheduled_works+0x945/0x1830 [ 2264.121350][ T30] process_scheduled_works+0xa2c/0x1830 [ 2264.207823][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2264.213925][ T30] ? assign_work+0x364/0x3d0 [ 2264.256678][ T30] worker_thread+0x86d/0xd40 [ 2264.261372][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2264.315846][ T30] ? __kthread_parkme+0x169/0x1d0 [ 2264.320993][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2264.359544][ T30] kthread+0x2f0/0x390 [ 2264.363716][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2264.416589][ T30] ? __pfx_kthread+0x10/0x10 [ 2264.421287][ T30] ret_from_fork+0x4b/0x80 [ 2264.465668][ T30] ? __pfx_kthread+0x10/0x10 [ 2264.471354][ T30] ret_from_fork_asm+0x1a/0x30 [ 2264.506267][ T30] [ 2264.513183][ T30] INFO: task udevd:2711 blocked for more than 144 seconds. [ 2264.586146][ T30] Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 2264.593857][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2264.709788][ T30] task:udevd state:D stack:24864 pid:2711 tgid:2711 ppid:4679 flags:0x00000002 [ 2264.815568][ T30] Call Trace: [ 2264.818925][ T30] [ 2264.821884][ T30] __schedule+0x1800/0x4a60 [ 2264.895568][ T30] ? __pfx___schedule+0x10/0x10 [ 2264.900521][ T30] ? __pfx_lock_release+0x10/0x10 [ 2264.985636][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2264.991199][ T30] ? schedule+0x90/0x320 [ 2265.095636][ T30] schedule+0x14b/0x320 [ 2265.109853][ T30] schedule_preempt_disabled+0x13/0x30 [ 2265.115360][ T30] __mutex_lock+0x6a4/0xd70 [ 2265.215687][ T30] ? __mutex_lock+0x527/0xd70 [ 2265.220468][ T30] ? uevent_show+0x17d/0x340 [ 2265.225187][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2265.355576][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 2265.360434][ T30] ? uevent_show+0x163/0x340 [ 2265.365071][ T30] uevent_show+0x17d/0x340 [ 2265.415822][ T30] dev_attr_show+0x55/0xc0 [ 2265.420387][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 2265.468892][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 2265.473979][ T30] seq_read_iter+0x445/0xd60 [ 2265.515658][ T30] vfs_read+0x9bd/0xbc0 [ 2265.519913][ T30] ? __pfx_vfs_read+0x10/0x10 [ 2265.524630][ T30] ? vfs_fstatat+0xfd/0x190 [ 2265.596287][ T30] ? __x64_sys_newfstatat+0x145/0x1a0 [ 2265.601756][ T30] ksys_read+0x1a0/0x2c0 [ 2265.645566][ T30] ? __pfx_ksys_read+0x10/0x10 [ 2265.650434][ T30] ? do_syscall_64+0x100/0x230 [ 2265.655252][ T30] ? do_syscall_64+0xb6/0x230 [ 2265.705861][ T30] do_syscall_64+0xf3/0x230 [ 2265.710457][ T30] ? clear_bhb_loop+0x35/0x90 [ 2265.715176][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.772098][ T30] RIP: 0033:0x7fa861574b6a [ 2265.778902][ T30] RSP: 002b:00007ffd4a139b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.825996][ T30] RAX: ffffffffffffffda RBX: 00005608f0417730 RCX: 00007fa861574b6a [ 2265.834063][ T30] RDX: 0000000000001000 RSI: 00005608f0434930 RDI: 0000000000000008 [ 2265.885556][ T30] RBP: 00005608f0417730 R08: 0000000000000008 R09: 0000000000000020 [ 2265.893606][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 2265.944719][ T30] R13: 0000000000003fff R14: 00007ffd4a13a058 R15: 000000000000000a [ 2265.968719][ T30] [ 2265.971860][ T30] [ 2265.971860][ T30] Showing all locks held in the system: [ 2266.076126][ T30] 1 lock held by khungtaskd/30: [ 2266.081049][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2266.145596][ T30] 2 locks held by getty/4986: [ 2266.150342][ T30] #0: ffff88802b1460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2266.173605][ T30] #1: ffffc900034b32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 2266.225051][ T30] 3 locks held by kworker/0:7/5284: [ 2266.251330][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2266.301386][ T30] #1: ffffc90004097d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2266.343976][ T30] #2: ffff888023f4b190 (&dev->mutex){....}-{3:3}, at: ath9k_hif_usb_firmware_cb+0x34a/0x4b0 [ 2266.375649][ T30] 3 locks held by kworker/u8:12/7485: [ 2266.381159][ T30] #0: ffff88802ad75948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2266.445570][ T30] #1: ffffc900035a7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2266.515549][ T30] #2: ffffffff8fc81688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 2266.575643][ T30] 3 locks held by kworker/1:5/14520: [ 2266.580967][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2266.645558][ T30] #1: ffffc90003db7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2266.675563][ T30] #2: ffffffff8fc81688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2266.684769][ T30] 3 locks held by kworker/0:0/22216: [ 2266.717779][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2266.755542][ T30] #1: ffffc90003977d00 ((work_completion)(&(&devlink->rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2266.811583][ T30] #2: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2266.864862][ T30] 5 locks held by kworker/1:4/1612: [ 2266.885862][ T30] 1 lock held by syz.1.6316/1883: [ 2266.891042][ T30] 4 locks held by udevd/2711: [ 2266.915631][ T30] #0: ffff888074214e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 2266.936618][ T30] #1: ffff88802cf7a088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 2267.005606][ T30] #2: ffff88805dac6878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 2267.015171][ T30] #3: ffff888056d20190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 2267.055561][ T30] 3 locks held by syz-executor/4016: [ 2267.060913][ T30] #0: ffff88805bc68d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2267.112384][ T30] #1: ffff88805bc68078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2267.180054][ T30] #2: ffffffff8fdecfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2267.205620][ T30] 3 locks held by syz-executor/4137: [ 2267.210970][ T30] #0: ffff88805b408d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2267.221517][ T30] #1: ffff88805b408078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2267.264550][ T30] #2: ffffffff8fdecfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2267.275904][ T30] 3 locks held by syz-executor/4253: [ 2267.281228][ T30] #0: ffff88806a4bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2267.325545][ T30] #1: ffff88806a4bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2267.355626][ T30] #2: ffffffff8fdecfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2267.376775][ T30] 1 lock held by syz.2.6861/4431: [ 2267.381848][ T30] #0: ffffffff8fc81688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 2267.415565][ T30] 1 lock held by syz.0.6862/4436: [ 2267.420665][ T30] #0: ffffffff8fc81688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 2267.515589][ T30] [ 2267.518107][ T30] ============================================= [ 2267.518107][ T30] [ 2267.587745][ T30] NMI backtrace for cpu 1 [ 2267.592223][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 2267.602753][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2267.612840][ T30] Call Trace: [ 2267.616138][ T30] [ 2267.619068][ T30] dump_stack_lvl+0x241/0x360 [ 2267.623757][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2267.628969][ T30] ? __pfx__printk+0x10/0x10 [ 2267.633560][ T30] ? vprintk_emit+0x631/0x770 [ 2267.638238][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2267.643281][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2267.648350][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2267.653854][ T30] ? _printk+0xd5/0x120 [ 2267.658077][ T30] ? __pfx__printk+0x10/0x10 [ 2267.662686][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2267.667542][ T30] ? __pfx__printk+0x10/0x10 [ 2267.672136][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2267.677157][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2267.683135][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2267.689116][ T30] watchdog+0xfee/0x1030 [ 2267.693360][ T30] ? watchdog+0x1ea/0x1030 [ 2267.697807][ T30] ? __pfx_watchdog+0x10/0x10 [ 2267.702517][ T30] kthread+0x2f0/0x390 [ 2267.706626][ T30] ? __pfx_watchdog+0x10/0x10 [ 2267.711329][ T30] ? __pfx_kthread+0x10/0x10 [ 2267.716018][ T30] ret_from_fork+0x4b/0x80 [ 2267.720448][ T30] ? __pfx_kthread+0x10/0x10 [ 2267.725049][ T30] ret_from_fork_asm+0x1a/0x30 [ 2267.729846][ T30] [ 2267.734614][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2267.740501][ C0] NMI backtrace for cpu 0 [ 2267.740513][ C0] CPU: 0 UID: 0 PID: 7493 Comm: kworker/u8:17 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 2267.740532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2267.740543][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2267.740693][ C0] RIP: 0010:unwind_next_frame+0x8ea/0x2a00 [ 2267.740721][ C0] Code: fd 04 0f 84 6c 01 00 00 83 fd 05 0f 85 ff 02 00 00 e8 ca 56 52 00 48 8b 44 24 58 42 80 3c 28 00 74 08 48 89 df e8 46 90 b9 00 <48> 8b 33 48 8b 54 24 18 48 8d 5a 01 48 89 d0 48 c1 e8 03 42 0f b6 [ 2267.740735][ C0] RSP: 0018:ffffc90003ab7308 EFLAGS: 00000246 [ 2267.740749][ C0] RAX: 1ffff92000756e83 RBX: ffffc90003ab7418 RCX: ffff88804523da00 [ 2267.740763][ C0] RDX: 0000000000000000 RSI: ffffffff8e7a3d60 RDI: 0000000000000005 [ 2267.740774][ C0] RBP: 0000000000000005 R08: 0000000000000005 R09: ffffffff81411f0e [ 2267.740786][ C0] R10: 0000000000000008 R11: ffff88804523da00 R12: ffffffff9030505c [ 2267.740798][ C0] R13: dffffc0000000000 R14: ffffc90003ab7430 R15: 1ffff92000756e7c [ 2267.740811][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2267.740826][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2267.740838][ C0] CR2: 000056487295a131 CR3: 000000000e734000 CR4: 00000000003506f0 [ 2267.740854][ C0] Call Trace: [ 2267.740861][ C0] [ 2267.740868][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2267.740887][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2267.740911][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2267.740928][ C0] ? nmi_handle+0x2a/0x5a0 [ 2267.740950][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2267.740970][ C0] ? nmi_handle+0x14f/0x5a0 [ 2267.740985][ C0] ? nmi_handle+0x2a/0x5a0 [ 2267.741002][ C0] ? unwind_next_frame+0x8ea/0x2a00 [ 2267.741024][ C0] ? default_do_nmi+0x63/0x160 [ 2267.741042][ C0] ? exc_nmi+0x123/0x1f0 [ 2267.741059][ C0] ? end_repeat_nmi+0xf/0x53 [ 2267.741079][ C0] ? unwind_next_frame+0x7be/0x2a00 [ 2267.741104][ C0] ? unwind_next_frame+0x8ea/0x2a00 [ 2267.741127][ C0] ? unwind_next_frame+0x8ea/0x2a00 [ 2267.741152][ C0] ? unwind_next_frame+0x8ea/0x2a00 [ 2267.741175][ C0] [ 2267.741181][ C0] [ 2267.741192][ C0] ? poison_slab_object+0xe0/0x150 [ 2267.741215][ C0] ? poison_slab_object+0xe0/0x150 [ 2267.741237][ C0] ? __kernel_text_address+0xd/0x40 [ 2267.741253][ C0] ? poison_slab_object+0xe0/0x150 [ 2267.741274][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2267.741295][ C0] arch_stack_walk+0x151/0x1b0 [ 2267.741320][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 2267.741373][ C0] ? poison_slab_object+0xe0/0x150 [ 2267.741399][ C0] stack_trace_save+0x118/0x1d0 [ 2267.741420][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2267.741442][ C0] ? mark_lock+0x9a/0x350 [ 2267.741469][ C0] kasan_save_track+0x3f/0x80 [ 2267.741490][ C0] ? kasan_save_track+0x3f/0x80 [ 2267.741510][ C0] ? kasan_save_free_info+0x40/0x50 [ 2267.741527][ C0] ? poison_slab_object+0xe0/0x150 [ 2267.741573][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 2267.741594][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 2267.741618][ C0] kasan_save_free_info+0x40/0x50 [ 2267.741636][ C0] poison_slab_object+0xe0/0x150 [ 2267.741659][ C0] __kasan_slab_free+0x37/0x60 [ 2267.741681][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 2267.741700][ C0] kfree+0x149/0x360 [ 2267.741718][ C0] ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 2267.741747][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 2267.741768][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2267.741811][ C0] ? mark_lock+0x9a/0x350 [ 2267.741837][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2267.741862][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2267.741887][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2267.741915][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 2267.741942][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 2267.741964][ C0] ? process_scheduled_works+0x945/0x1830 [ 2267.741985][ C0] process_scheduled_works+0xa2c/0x1830 [ 2267.742022][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2267.742049][ C0] ? assign_work+0x364/0x3d0 [ 2267.742072][ C0] worker_thread+0x86d/0xd40 [ 2267.742102][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2267.742127][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2267.742150][ C0] kthread+0x2f0/0x390 [ 2267.742174][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2267.742196][ C0] ? __pfx_kthread+0x10/0x10 [ 2267.742221][ C0] ret_from_fork+0x4b/0x80 [ 2267.742244][ C0] ? __pfx_kthread+0x10/0x10 [ 2267.742269][ C0] ret_from_fork_asm+0x1a/0x30 [ 2267.742300][ C0] [ 2268.248053][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2268.254980][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 2268.265567][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2268.275669][ T30] Call Trace: [ 2268.278980][ T30] [ 2268.281937][ T30] dump_stack_lvl+0x241/0x360 [ 2268.286674][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2268.291918][ T30] ? __pfx__printk+0x10/0x10 [ 2268.296547][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2268.302589][ T30] ? vscnprintf+0x5d/0x90 [ 2268.306965][ T30] panic+0x349/0x860 [ 2268.310906][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2268.317098][ T30] ? __pfx_panic+0x10/0x10 [ 2268.321557][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2268.326971][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2268.332595][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2268.338008][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2268.344197][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2268.350391][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2268.356588][ T30] watchdog+0x102d/0x1030 [ 2268.360979][ T30] ? watchdog+0x1ea/0x1030 [ 2268.365435][ T30] ? __pfx_watchdog+0x10/0x10 [ 2268.370241][ T30] kthread+0x2f0/0x390 [ 2268.374354][ T30] ? __pfx_watchdog+0x10/0x10 [ 2268.379068][ T30] ? __pfx_kthread+0x10/0x10 [ 2268.383689][ T30] ret_from_fork+0x4b/0x80 [ 2268.388134][ T30] ? __pfx_kthread+0x10/0x10 [ 2268.392755][ T30] ret_from_fork_asm+0x1a/0x30 [ 2268.397565][ T30] [ 2268.400929][ T30] Kernel Offset: disabled [ 2268.405265][ T30] Rebooting in 86400 seconds..