last executing test programs: 1m40.782261535s ago: executing program 3 (id=2404): landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 1m21.950634403s ago: executing program 3 (id=2404): landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 1m6.883444716s ago: executing program 3 (id=2404): landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 50.780363347s ago: executing program 3 (id=2404): landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 28.962310673s ago: executing program 3 (id=2404): landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 9.715843635s ago: executing program 2 (id=3046): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c920f1ee7d"], 0x15) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000001f80)={&(0x7f0000001780)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000680)={&(0x7f0000000480)=@id, 0x10, 0x0}, 0x0) close(r3) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c930"], 0x15) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x7, 0xa, 0x0, "4a6535dffaa9779c16cc07d49d49cd3402fac865fbe70156e4788c2ece00"}) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.828557413s ago: executing program 2 (id=3057): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) 7.469417275s ago: executing program 0 (id=3062): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800004000000000000000003000000003000000070000000000000700000000010000000100008545fcffff0600000005000000020000000cd7f651ed12"], &(0x7f0000000300)=""/137, 0x4b, 0x89, 0x0, 0x807a}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x0, 0x10000}], 0x10}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004e00)=""/10, 0xa}}], 0x1, 0x2020, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x48) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 3.515755766s ago: executing program 4 (id=3072): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 3.40239422s ago: executing program 4 (id=3073): r0 = memfd_create(&(0x7f0000000240)='\xf9@\x16u\xe0lt\xef\x80N\x00\x00\x00(%;\xeb\x8c\xf3\xdb\x88\nh\x9eg\x90\x81\xe7^\xad]\xf9\xfa\xf3\x10\x9b>\x03\x17\xf4\xads)V]\x00\xb8\xe0\xea)\t\xe3[\x19\xe0\xceW~\x80\x80l\x82\xae\x86s\x12H\xcc\vo\a\x19\xfa\xba{\xe2c\x99\xa0\xad\x80\xc9\x8a\bn\xa4\x04IS?\xa9j1\xc8=\xbc*\xbd\xbd\xd0\xfbA?\x12~\x01\x00\x00\x00{\xd57\xb4a\xad\xe0\xf1\xffb!V\a\xc7\xa5-\x9c\xdb\n\xa9\xc6\xf48X\xf9\x01ZVs\xda\xa9\xd2_U\x1c\x1e\xe7u\fW?\x9b\x12\xfe\x19|n\xc0\x94\tj\x19\xc57\x14\xc24\xdc\xe8\xfa\xcb\xa9*)\xf4\xfdh\xf8\xf3\x97\xb7Ca\xcfY\xfc\x82\xf7p4vS\xde\x94\x0e\"\xe8\x1c\xf6M\xabOA9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\xd2\xcd\x97\x8e\x19\"e{1\xcesKt\x1cU\x00\xf5E\x1e\xfb\">\xadc\x1b\xf7\xff\xf3\xcdnZah\xb7\xed8\xffs\xf29\xe0\x87[P\xb4\xf7\x16\xd3X\x97\xf7\xebX/\xb2f\xfa:D\x88\x94\x1dyl\xa1\xe7^Kh\xdd\\{(\xdb\xabF\x82C\x01I\xd6\xc4\xc0R\xc9+\xee\xb3\xbci\x14|\xc2[\xb9m\x96\xea\\P\x8e\xfd\xa7\xf475|I\x90.E\xf0\x9e\t>\xb2\x92\xe9\a\a\xe7\xbfmm\x1f', 0x0) fallocate(r0, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.066852358s ago: executing program 1 (id=3074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.066477294s ago: executing program 2 (id=3075): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6}, 0xfffffffffffffdd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.984883659s ago: executing program 4 (id=3076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) 1.962329672s ago: executing program 1 (id=3077): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0xd) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 1.780718992s ago: executing program 1 (id=3079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r3}) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x8a, &(0x7f0000000000), 0x4) 776.000049ms ago: executing program 0 (id=3080): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) 774.641991ms ago: executing program 2 (id=3081): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d28"], 0xe0}], 0x1}, 0x0) 773.728786ms ago: executing program 4 (id=3082): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 620.705095ms ago: executing program 0 (id=3083): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], 0x0, 0x1, r2}) 578.97648ms ago: executing program 4 (id=3084): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES64=0x0], 0x78}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x0, 0x300}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2, 0x12, 0x0, 0x6, 0xe, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x401, {0x6, 0x0, 0xff, 0x8, 0x0, 0x7, 0x0, @in6=@mcast1, @in=@multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd2b}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x6, 0xf6, 0x3, 0x1}]}, 0x70}}, 0x20008080) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x701, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 438.25689ms ago: executing program 0 (id=3085): r0 = socket$inet6(0xa, 0x1, 0x84) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)) 437.307888ms ago: executing program 1 (id=3086): r0 = memfd_create(&(0x7f0000000240)='\xf9@\x16u\xe0lt\xef\x80N\x00\x00\x00(%;\xeb\x8c\xf3\xdb\x88\nh\x9eg\x90\x81\xe7^\xad]\xf9\xfa\xf3\x10\x9b>\x03\x17\xf4\xads)V]\x00\xb8\xe0\xea)\t\xe3[\x19\xe0\xceW~\x80\x80l\x82\xae\x86s\x12H\xcc\vo\a\x19\xfa\xba{\xe2c\x99\xa0\xad\x80\xc9\x8a\bn\xa4\x04IS?\xa9j1\xc8=\xbc*\xbd\xbd\xd0\xfbA?\x12~\x01\x00\x00\x00{\xd57\xb4a\xad\xe0\xf1\xffb!V\a\xc7\xa5-\x9c\xdb\n\xa9\xc6\xf48X\xf9\x01ZVs\xda\xa9\xd2_U\x1c\x1e\xe7u\fW?\x9b\x12\xfe\x19|n\xc0\x94\tj\x19\xc57\x14\xc24\xdc\xe8\xfa\xcb\xa9*)\xf4\xfdh\xf8\xf3\x97\xb7Ca\xcfY\xfc\x82\xf7p4vS\xde\x94\x0e\"\xe8\x1c\xf6M\xabOA9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\xd2\xcd\x97\x8e\x19\"e{1\xcesKt\x1cU\x00\xf5E\x1e\xfb\">\xadc\x1b\xf7\xff\xf3\xcdnZah\xb7\xed8\xffs\xf29\xe0\x87[P\xb4\xf7\x16\xd3X\x97\xf7\xebX/\xb2f\xfa:D\x88\x94\x1dyl\xa1\xe7^Kh\xdd\\{(\xdb\xabF\x82C\x01I\xd6\xc4\xc0R\xc9+\xee\xb3\xbci\x14|\xc2[\xb9m\x96\xea\\P\x8e\xfd\xa7\xf475|I\x90.E\xf0\x9e\t>\xb2\x92\xe9\a\a\xe7\xbfmm\x1f', 0x0) fallocate(r0, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 240.318601ms ago: executing program 0 (id=3087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x6422, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 231.021189ms ago: executing program 2 (id=3088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) 204.399635ms ago: executing program 1 (id=3089): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x40286608, 0x0) 111.351487ms ago: executing program 0 (id=3090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) madvise(&(0x7f0000a2e000/0x3000)=nil, 0xffffffffdf5d1fff, 0x12) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) unshare(0x62040200) 68.424923ms ago: executing program 2 (id=3091): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, ']\'$'}]}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x14, r4, 0x1, 0x0, 0x10000}, 0x14}}, 0x0) unshare(0x26020480) pipe(0x0) r5 = fsopen(&(0x7f0000000540)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f00000033c0)=[{&(0x7f0000002200)=""/4096, 0xfdef}], 0x1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x21, 0x2, 0x2) getsockopt$bt_BT_SECURITY(r8, 0x110, 0x4, 0x0, 0x166a1570a0fcd01c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r9, @ANYRESDEC=r3, @ANYRES64, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x10001, 0x6, 0x5, 0x3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=3092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x7) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd9b}, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r8, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 5092] Bluetooth: hci5: command tx timeout [ 471.405484][ T9797] syz_tun (unregistering): left allmulticast mode [ 471.424401][T11556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.441932][T11556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.463626][T11556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.487539][T11556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.758703][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.950797][ T9645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.996893][ T9645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.998147][T11768] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2407'. [ 472.092307][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.131983][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.139229][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.262514][ T929] kernel write not supported for file /244/projid_map (pid: 929 comm: kworker/1:2) [ 472.291160][ T9645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.315455][ T9645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.340353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.347546][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.378422][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.399924][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.411580][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.427930][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.436085][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.445871][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.473724][ T9645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.485651][ T9645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.603411][ T9645] bond0: (slave netdevsim0): Releasing backup interface [ 472.621223][ T9645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.632554][ T9645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.090038][T11804] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2418'. [ 473.226562][T11800] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2417'. [ 473.348008][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.360585][ T9645] bridge_slave_1: left allmulticast mode [ 473.366319][ T9645] bridge_slave_1: left promiscuous mode [ 473.367810][ T25] kernel write not supported for file /635/projid_map (pid: 25 comm: kworker/1:0) [ 473.394947][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.434591][ T9645] bridge_slave_0: left allmulticast mode [ 473.448216][ T9645] bridge_slave_0: left promiscuous mode [ 473.461855][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.950241][ T5139] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 474.139014][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 474.163839][ T5139] usb 2-1: descriptor type invalid, skip [ 474.181483][ T5139] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 474.209588][ T5139] usb 2-1: string descriptor 0 read error: -22 [ 474.219037][ T5139] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 474.238552][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.264226][ T5139] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 474.308154][ T9645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.325544][ T9645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.357518][ T9645] bond0 (unregistering): Released all slaves [ 474.451520][T11777] chnl_net:caif_netlink_parms(): no params data found [ 474.579501][ T5101] Bluetooth: hci1: command tx timeout [ 474.853752][ T25] usb 2-1: USB disconnect, device number 15 [ 474.966356][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.981481][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.989572][T11777] bridge_slave_0: entered allmulticast mode [ 474.997176][T11777] bridge_slave_0: entered promiscuous mode [ 475.071899][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.093785][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.102709][T11777] bridge_slave_1: entered allmulticast mode [ 475.125173][T11777] bridge_slave_1: entered promiscuous mode [ 475.232520][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.255095][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.457190][ T9645] hsr_slave_0: left promiscuous mode [ 475.490121][ T9645] hsr_slave_1: left promiscuous mode [ 475.499597][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.507729][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.523770][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.535750][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.614543][ T9645] veth1_macvtap: left promiscuous mode [ 475.620494][ T9645] veth0_macvtap: left promiscuous mode [ 475.626206][ T9645] veth1_vlan: left promiscuous mode [ 475.639885][ T9645] veth0_vlan: left promiscuous mode [ 476.649821][ T5101] Bluetooth: hci1: command tx timeout [ 476.694615][T11869] vivid-002: disconnect [ 476.802067][ T9645] team0 (unregistering): Port device team_slave_1 removed [ 476.908486][ T9645] team0 (unregistering): Port device team_slave_0 removed [ 477.687875][T11870] overlayfs: failed to resolve './file1': -2 [ 478.388652][T11861] vivid-002: reconnect [ 478.463583][T11777] team0: Port device team_slave_0 added [ 478.487147][T11777] team0: Port device team_slave_1 added [ 478.644332][T11556] veth0_vlan: entered promiscuous mode [ 478.652359][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.662482][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.691579][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.731063][ T5101] Bluetooth: hci1: command tx timeout [ 478.749640][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.756662][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.785034][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.801356][T11556] veth1_vlan: entered promiscuous mode [ 478.957473][T11777] hsr_slave_0: entered promiscuous mode [ 478.976130][T11777] hsr_slave_1: entered promiscuous mode [ 479.356477][T11556] veth0_macvtap: entered promiscuous mode [ 479.420560][T11556] veth1_macvtap: entered promiscuous mode [ 479.502376][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.522148][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.549268][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.565200][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.576677][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.594538][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.606885][T11556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.673615][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.695790][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.706407][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.723371][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.735092][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.751190][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.766147][T11556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.805314][T11556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.821270][T11556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.835626][T11556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.847358][T11556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.120952][ T9615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.145760][ T9615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.217502][ T9636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.226458][ T9636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.524519][T11777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.561337][T11777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.604475][T11777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.635296][T11777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.665491][T11902] overlayfs: failed to resolve './file1': -2 [ 480.818820][ T5101] Bluetooth: hci1: command tx timeout [ 480.945024][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.037827][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.082369][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.089622][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.123198][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.130636][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.725808][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.821870][T11777] veth0_vlan: entered promiscuous mode [ 481.846524][T11777] veth1_vlan: entered promiscuous mode [ 481.918174][T11777] veth0_macvtap: entered promiscuous mode [ 481.938239][T11777] veth1_macvtap: entered promiscuous mode [ 481.985350][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.002546][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.017581][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.034803][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.048664][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.067777][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.097766][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.135938][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.160989][T11777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.222568][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.262992][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.291658][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.322979][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.353047][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.384240][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.419449][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.441406][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.484974][T11777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.543365][T11777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.584695][T11925] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 482.595722][T11777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.636646][T11777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.649382][T11777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.912669][T11939] pim6reg1: entered promiscuous mode [ 482.918663][T11939] pim6reg1: entered allmulticast mode [ 483.239460][ T9636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.279507][ T9636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.685981][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.706149][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.637849][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 488.241634][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.510199][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.656809][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.680525][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.694032][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.719856][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.729655][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.738889][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 488.746375][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.972277][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.343361][ T51] team0: left allmulticast mode [ 489.348296][ T51] team_slave_0: left allmulticast mode [ 489.359623][ T51] team_slave_1: left allmulticast mode [ 489.366004][ T51] bridge0: port 3(team0) entered disabled state [ 489.383681][ T51] bridge_slave_1: left allmulticast mode [ 489.400926][ T51] bridge_slave_1: left promiscuous mode [ 489.406893][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.425399][ T51] bridge_slave_0: left allmulticast mode [ 489.436396][ T51] bridge_slave_0: left promiscuous mode [ 489.445163][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.470034][ T5196] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 489.665019][ T5196] usb 5-1: Using ep0 maxpacket: 16 [ 489.679474][ T5196] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.698312][ T5196] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 489.728808][ T5196] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.768650][ T5196] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.802575][ T5196] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 489.817687][ T5196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.848806][ T5196] usb 5-1: Product: syz [ 489.853041][ T5196] usb 5-1: Manufacturer: syz [ 489.865863][ T5196] usb 5-1: SerialNumber: syz [ 489.895471][ T5196] usb 5-1: config 0 descriptor?? [ 489.908186][ T5196] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 489.933805][ T51] batman_adv: batadv0: Removing interface: vlan2 [ 490.176432][ T8] usb 5-1: USB disconnect, device number 19 [ 490.479659][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.510332][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.531225][ T51] bond0 (unregistering): Released all slaves [ 490.682671][T11977] chnl_net:caif_netlink_parms(): no params data found [ 490.909291][ T5101] Bluetooth: hci0: command tx timeout [ 491.151600][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.186910][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.219019][T11977] bridge_slave_0: entered allmulticast mode [ 491.226652][T11977] bridge_slave_0: entered promiscuous mode [ 491.329450][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.336654][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.372084][T11977] bridge_slave_1: entered allmulticast mode [ 491.400205][T11977] bridge_slave_1: entered promiscuous mode [ 491.661570][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.722176][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.912539][T12004] netlink: 'syz.0.2488': attribute type 11 has an invalid length. [ 492.105287][T11977] team0: Port device team_slave_0 added [ 492.128155][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 492.223321][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.237224][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.246364][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.276632][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.285358][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.299511][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.437441][ T51] hsr_slave_0: left promiscuous mode [ 492.525767][ T51] hsr_slave_1: left promiscuous mode [ 492.636389][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.746806][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.888503][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.973484][ T5092] Bluetooth: hci0: command tx timeout [ 493.017438][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.107504][ T51] veth1_macvtap: left promiscuous mode [ 493.119237][ T51] veth0_macvtap: left promiscuous mode [ 493.125034][ T51] veth1_vlan: left promiscuous mode [ 493.131312][ T51] veth0_vlan: left promiscuous mode [ 494.008714][ T51] team_slave_1 (unregistering): left promiscuous mode [ 494.027518][ T51] team0 (unregistering): Port device team_slave_1 removed [ 494.080592][ T51] team_slave_0 (unregistering): left promiscuous mode [ 494.090644][ T51] team0 (unregistering): Port device team_slave_0 removed [ 494.491515][ T5092] Bluetooth: hci1: command tx timeout [ 494.650603][T11977] team0: Port device team_slave_1 added [ 494.770495][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.783212][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.828945][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.865205][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.878659][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.916887][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.049152][ T5092] Bluetooth: hci0: command tx timeout [ 495.050004][T11977] hsr_slave_0: entered promiscuous mode [ 495.086737][T11977] hsr_slave_1: entered promiscuous mode [ 495.109791][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.118063][T11977] Cannot create hsr debugfs directory [ 495.628512][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.842787][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.868114][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.869001][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.888408][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.903559][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.918895][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.934820][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 495.951187][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.092632][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.108946][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.130837][T12010] chnl_net:caif_netlink_parms(): no params data found [ 496.137848][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.159318][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.177913][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.196543][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.212072][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.228534][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.251131][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.278456][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.299207][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.308893][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.330103][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.360488][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.372675][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.382145][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.390355][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.400369][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.413616][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 496.423331][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.451454][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.479127][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.500033][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.509193][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.516729][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.527711][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.544325][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.552106][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.559729][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.568368][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.570929][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.576155][ T5101] Bluetooth: hci1: command tx timeout [ 496.592456][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.600331][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.607918][ T929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.618484][ T929] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 497.024504][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.039338][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.046830][T12010] bridge_slave_0: entered allmulticast mode [ 497.060154][T12010] bridge_slave_0: entered promiscuous mode [ 497.106511][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.118185][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.129220][ T5101] Bluetooth: hci0: command tx timeout [ 497.148153][T12010] bridge_slave_1: entered allmulticast mode [ 497.168238][T12010] bridge_slave_1: entered promiscuous mode [ 497.339883][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.378656][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.410014][ T51] bridge_slave_1: left allmulticast mode [ 497.415825][ T51] bridge_slave_1: left promiscuous mode [ 497.449116][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.470930][ T51] bridge_slave_0: left allmulticast mode [ 497.476606][ T51] bridge_slave_0: left promiscuous mode [ 497.503522][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.665842][T12100] TCP: MD5 Hash not found for 172.20.20.187.0->224.0.0.1.20002 [S] L3 index 0 [ 497.762806][ T5091] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 497.952955][ T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 497.970349][ T5091] usb 2-1: Using ep0 maxpacket: 16 [ 497.984219][ T5091] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.998712][ T5091] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.016857][ T5091] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 498.030296][ T5091] usb 2-1: config 0 interface 0 has no altsetting 0 [ 498.047584][ T5091] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 498.058806][ T5091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.066862][ T5091] usb 2-1: Product: syz [ 498.067521][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.071619][ T5091] usb 2-1: Manufacturer: syz [ 498.085835][ T5091] usb 2-1: SerialNumber: syz [ 498.101772][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.106056][ T5091] usb 2-1: config 0 descriptor?? [ 498.119640][ T51] bond0 (unregistering): Released all slaves [ 498.128529][ T5091] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 498.138962][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 498.147784][ T58] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 498.159406][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.171979][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 498.197048][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.254087][T12010] team0: Port device team_slave_0 added [ 498.266765][ T58] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.297071][ T58] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 498.305956][ T58] usb 5-1: Manufacturer: syz [ 498.328431][ T58] usb 5-1: config 0 descriptor?? [ 498.363678][ T5091] usb 2-1: USB disconnect, device number 16 [ 498.371603][T12010] team0: Port device team_slave_1 added [ 498.489230][ T5101] Bluetooth: hci4: command tx timeout [ 498.505373][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.517093][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.548913][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.637808][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.646299][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.659843][ T58] rc_core: IR keymap rc-hauppauge not found [ 498.676307][ T5101] Bluetooth: hci1: command tx timeout [ 498.685108][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.690645][ T58] Registered IR keymap rc-empty [ 498.716582][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 498.724586][T11977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 498.765354][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 498.802098][ T58] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 498.833803][ T58] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 498.858735][T11977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 498.880192][T11977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 498.890903][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 498.908321][T11977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 498.930006][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 498.952124][ T51] hsr_slave_0: left promiscuous mode [ 498.962297][ T51] hsr_slave_1: left promiscuous mode [ 498.972821][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 498.980639][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.999200][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.008151][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.025290][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.032335][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.069287][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.098597][ T51] veth1_macvtap: left promiscuous mode [ 499.109888][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.116727][ T51] veth0_macvtap: left promiscuous mode [ 499.131042][ T51] veth1_vlan: left promiscuous mode [ 499.137435][ T51] veth0_vlan: left promiscuous mode [ 499.162685][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.230270][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.280136][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.351343][ T58] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 499.401118][ T58] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 499.432018][ T58] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 499.492226][ T58] usb 5-1: USB disconnect, device number 20 [ 500.336663][ T51] team0 (unregistering): Port device team_slave_1 removed [ 500.418510][ T51] team0 (unregistering): Port device team_slave_0 removed [ 500.578796][ T5101] Bluetooth: hci4: command tx timeout [ 500.731978][ T5101] Bluetooth: hci1: command tx timeout [ 501.515547][T12075] chnl_net:caif_netlink_parms(): no params data found [ 501.535560][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 501.692990][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2535'. [ 501.725143][T12010] hsr_slave_0: entered promiscuous mode [ 501.755146][T12010] hsr_slave_1: entered promiscuous mode [ 501.932505][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.947238][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.212137][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.235810][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.247406][T12075] bridge_slave_0: entered allmulticast mode [ 502.263598][T12075] bridge_slave_0: entered promiscuous mode [ 502.293428][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.305324][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.319924][T12075] bridge_slave_1: entered allmulticast mode [ 502.429559][T12075] bridge_slave_1: entered promiscuous mode [ 502.612700][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.694264][ T5101] Bluetooth: hci4: command tx timeout [ 503.512394][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.591022][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.761294][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.835661][T12075] team0: Port device team_slave_0 added [ 503.902165][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.962298][T12075] team0: Port device team_slave_1 added [ 504.069723][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.176583][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.194375][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.222783][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.241874][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.251380][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.279647][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.431357][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.737017][ T5101] Bluetooth: hci4: command tx timeout [ 507.935027][T12075] hsr_slave_0: entered promiscuous mode [ 507.964624][T12075] hsr_slave_1: entered promiscuous mode [ 507.989167][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.996811][T12075] Cannot create hsr debugfs directory [ 508.102676][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.211407][ T51] team0: left allmulticast mode [ 508.216445][ T51] team_slave_0: left allmulticast mode [ 508.228676][ T51] team_slave_1: left allmulticast mode [ 508.234660][ T51] bridge0: port 3(team0) entered disabled state [ 508.265245][ T51] bridge_slave_1: left allmulticast mode [ 508.286861][ T51] bridge_slave_1: left promiscuous mode [ 508.293241][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.808291][ T51] bridge_slave_0: left allmulticast mode [ 508.828316][ T51] bridge_slave_0: left promiscuous mode [ 508.848438][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.335587][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.347314][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.359336][ T51] bond0 (unregistering): Released all slaves [ 509.416607][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.423812][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.527391][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.534744][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.831729][T12010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 509.931580][T12010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 509.942862][T12010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 509.950197][ T929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 509.990938][T12010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.026548][ T51] hsr_slave_0: left promiscuous mode [ 510.035851][ T51] hsr_slave_1: left promiscuous mode [ 510.058622][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.070116][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.078398][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.086087][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.112187][ T51] veth1_macvtap: left promiscuous mode [ 510.117787][ T51] veth0_macvtap: left promiscuous mode [ 510.123617][ T51] veth1_vlan: left promiscuous mode [ 510.129181][ T51] veth0_vlan: left promiscuous mode [ 510.158900][ T929] usb 2-1: Using ep0 maxpacket: 32 [ 510.166906][ T929] usb 2-1: config 0 has no interfaces? [ 510.169976][ T5196] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 510.185167][ T929] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 510.204303][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.224951][ T929] usb 2-1: Product: syz [ 510.230913][ T929] usb 2-1: Manufacturer: syz [ 510.235809][ T929] usb 2-1: SerialNumber: syz [ 510.253380][ T929] usb 2-1: config 0 descriptor?? [ 510.384794][ T5196] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 510.397268][ T5196] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 510.413902][ T5196] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 510.426983][ T5196] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 510.461886][ T5196] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.472469][ T5196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.496670][ T5196] usb 5-1: SerialNumber: syz [ 510.524056][T12228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 510.539135][T12228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 510.553400][ T5196] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 510.587596][ T5139] usb 2-1: USB disconnect, device number 17 [ 510.810637][ T5196] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 510.834257][ T5196] usb 5-1: USB disconnect, device number 21 [ 510.864873][ T51] team_slave_1 (unregistering): left promiscuous mode [ 510.898727][ T51] team0 (unregistering): Port device team_slave_1 removed [ 510.958290][ T51] team_slave_0 (unregistering): left promiscuous mode [ 510.971490][ T51] team0 (unregistering): Port device team_slave_0 removed [ 515.347635][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 515.393494][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.407183][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.444732][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.484242][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.491444][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.547869][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.555110][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.886876][T12075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 515.919560][T11977] veth0_vlan: entered promiscuous mode [ 515.949134][T12075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 515.993285][T12075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.033599][T12075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.115799][T11977] veth1_vlan: entered promiscuous mode [ 516.471044][T11977] veth0_macvtap: entered promiscuous mode [ 516.537486][T11977] veth1_macvtap: entered promiscuous mode [ 516.706092][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.734105][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.774682][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.808152][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.837021][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.868613][T11977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.992673][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.011473][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.027018][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.045618][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.067789][T11977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.175814][T11977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.214193][T11977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.236639][T11977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.257011][T11977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.336633][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.569007][T12010] veth0_vlan: entered promiscuous mode [ 517.586222][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.644905][T12010] veth1_vlan: entered promiscuous mode [ 517.815492][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.822857][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.896948][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.904229][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.997655][T12010] veth0_macvtap: entered promiscuous mode [ 518.113815][T12010] veth1_macvtap: entered promiscuous mode [ 518.266511][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.325047][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.359063][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.405933][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.438917][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.478820][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.532837][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.581280][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.608832][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.627005][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.663583][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.697413][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.769024][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.809325][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.858920][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.896217][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.990322][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 519.026345][T12010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.049108][T12010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.057890][T12010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.088886][T12010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.150921][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.169906][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.212114][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.323712][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.348419][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.494988][T12075] veth0_vlan: entered promiscuous mode [ 520.531704][ T9608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.545297][T12075] veth1_vlan: entered promiscuous mode [ 520.550587][T12309] Invalid ELF header magic: != ELF [ 520.560647][ T9608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.691834][T12075] veth0_macvtap: entered promiscuous mode [ 520.713041][T12075] veth1_macvtap: entered promiscuous mode [ 520.833687][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.878339][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.894543][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.905617][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.916635][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.935448][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.947287][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.968629][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.992238][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.728152][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.765199][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.792957][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.813852][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.825568][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.847467][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.860085][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.877200][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.890109][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.003414][T12075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.043435][T12075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.079028][T12075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.087816][T12075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.497228][ T9608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.605925][T12328] program syz.1.2592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.767803][ T9608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.790037][T12333] fuse: blksize only supported for fuseblk [ 523.971890][ T9608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.015825][ T29] audit: type=1326 audit(1720081206.442:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12326 comm="syz.4.2591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46a8b75bd9 code=0x0 [ 524.123063][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.144179][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.160506][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.173792][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.189840][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.197991][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 524.202809][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.212864][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.331659][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 524.374640][ T9608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.412399][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.429432][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.501907][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 524.780964][T12354] program syz.4.2597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.802300][ T9608] bridge_slave_1: left allmulticast mode [ 524.808023][ T9608] bridge_slave_1: left promiscuous mode [ 524.839249][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.866172][ T9608] bridge_slave_0: left allmulticast mode [ 524.890592][ T9608] bridge_slave_0: left promiscuous mode [ 524.896451][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.205409][T12372] fuse: blksize only supported for fuseblk [ 525.576982][ T29] audit: type=1326 audit(1720081208.002:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.4.2608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46a8b75bd9 code=0x0 [ 525.678215][T12384] vivid-004: disconnect [ 526.249565][ T5101] Bluetooth: hci1: command tx timeout [ 526.277520][ T9608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.312911][ T9608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.340676][T12378] vivid-004: reconnect [ 526.364448][ T9608] bond0 (unregistering): Released all slaves [ 527.175659][ T29] audit: type=1326 audit(1720081209.582:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12399 comm="syz.0.2613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x0 [ 527.462741][ T9608] hsr_slave_0: left promiscuous mode [ 527.518678][ T9608] hsr_slave_1: left promiscuous mode [ 527.548383][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.584656][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.630114][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.637550][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.755597][ T9608] veth1_macvtap: left promiscuous mode [ 527.763418][ T9608] veth0_macvtap: left promiscuous mode [ 527.776083][ T9608] veth1_vlan: left promiscuous mode [ 527.781683][ T9608] veth0_vlan: left promiscuous mode [ 528.332480][ T5101] Bluetooth: hci1: command tx timeout [ 530.412279][ T5101] Bluetooth: hci1: command tx timeout [ 530.642677][ T9608] team0 (unregistering): Port device team_slave_1 removed [ 530.756087][ T9608] team0 (unregistering): Port device team_slave_0 removed [ 531.793789][T12339] chnl_net:caif_netlink_parms(): no params data found [ 531.991834][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.006771][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.038192][T12339] bridge_slave_0: entered allmulticast mode [ 532.046373][T12339] bridge_slave_0: entered promiscuous mode [ 532.064391][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.078503][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.087429][T12339] bridge_slave_1: entered allmulticast mode [ 532.106870][T12339] bridge_slave_1: entered promiscuous mode [ 532.177619][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.200343][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.285754][T12339] team0: Port device team_slave_0 added [ 532.303611][T12339] team0: Port device team_slave_1 added [ 532.374770][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.384760][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.420056][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.445976][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.456933][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.491124][ T5101] Bluetooth: hci1: command tx timeout [ 532.497445][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.590816][T12339] hsr_slave_0: entered promiscuous mode [ 532.597623][T12339] hsr_slave_1: entered promiscuous mode [ 532.897031][T12455] fuse: blksize only supported for fuseblk [ 534.704922][T12485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2643'. [ 534.735072][T12485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2643'. [ 535.312447][T12339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.340530][T12339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.387462][T12339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.416106][T12339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 536.365897][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.406898][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.462609][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.470043][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.518438][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.525781][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.868483][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.072721][T12339] veth0_vlan: entered promiscuous mode [ 538.131883][T12339] veth1_vlan: entered promiscuous mode [ 538.253834][T12339] veth0_macvtap: entered promiscuous mode [ 538.331739][T12339] veth1_macvtap: entered promiscuous mode [ 538.382715][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.401202][T12532] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 538.417676][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.432580][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.456482][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.478982][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.512968][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.536154][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.547293][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.566832][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.583498][T12536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2662'. [ 538.617553][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.643858][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.657075][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.674034][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.687115][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.718828][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.749117][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.771181][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.787350][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.830107][T12339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.865766][T12339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.892896][T12339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.919191][T12339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.044274][T12549] 9pnet_fd: Insufficient options for proto=fd [ 539.204243][T12553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.506716][ T29] audit: type=1326 audit(1720081222.932:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12556 comm="syz.2.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x0 [ 540.660219][ T9636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.668099][ T9636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.767731][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.776494][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.041796][T12566] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 541.746478][T12577] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 541.926601][ T9636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.760307][ T9636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.831752][ T9636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.963152][ T9636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.046722][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 544.063040][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 544.072452][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 544.086125][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 544.095622][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 544.106480][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 544.356237][ T9636] bridge_slave_1: left allmulticast mode [ 544.378332][ T9636] bridge_slave_1: left promiscuous mode [ 544.391536][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.407434][ T9636] bridge_slave_0: left allmulticast mode [ 544.425513][ T9636] bridge_slave_0: left promiscuous mode [ 544.432306][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.527614][T12605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2686'. [ 544.557724][T12605] input: syz0 as /devices/virtual/input/input30 [ 545.314311][ T9636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.327341][ T9636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.343738][ T9636] bond0 (unregistering): Released all slaves [ 545.385415][T12607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2687'. [ 545.410505][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 546.169500][ T5092] Bluetooth: hci1: command tx timeout [ 546.196696][T12586] chnl_net:caif_netlink_parms(): no params data found [ 546.381241][ T9636] hsr_slave_0: left promiscuous mode [ 546.388150][ T9636] hsr_slave_1: left promiscuous mode [ 546.408138][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.408184][ T9636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.410787][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.410823][ T9636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.476037][ T9636] veth1_macvtap: left promiscuous mode [ 546.476135][ T9636] veth0_macvtap: left promiscuous mode [ 546.476345][ T9636] veth1_vlan: left promiscuous mode [ 546.476486][ T9636] veth0_vlan: left promiscuous mode [ 546.698420][ T29] audit: type=1326 audit(1720081229.122:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12658 comm="syz.1.2704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04be375bd9 code=0x0 [ 547.965142][ T9636] team0 (unregistering): Port device team_slave_1 removed [ 548.046149][ T9636] team0 (unregistering): Port device team_slave_0 removed [ 548.250713][ T5092] Bluetooth: hci1: command tx timeout [ 548.490729][ T5092] Bluetooth: hci5: command tx timeout [ 548.978263][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 548.983349][T12657] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 548.983495][T12657] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 549.115366][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.115574][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.115767][T12586] bridge_slave_0: entered allmulticast mode [ 549.117394][T12586] bridge_slave_0: entered promiscuous mode [ 549.132128][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.132245][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.132433][T12586] bridge_slave_1: entered allmulticast mode [ 549.133989][T12586] bridge_slave_1: entered promiscuous mode [ 549.315171][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.345175][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.417625][T12586] team0: Port device team_slave_0 added [ 549.449198][T12586] team0: Port device team_slave_1 added [ 549.589938][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.589962][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.589995][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.610223][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.610246][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.610278][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.757308][T12586] hsr_slave_0: entered promiscuous mode [ 549.773504][T12586] hsr_slave_1: entered promiscuous mode [ 550.409089][ T5092] Bluetooth: hci1: command tx timeout [ 551.150475][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 551.369830][T12586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.374295][T12586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.380725][T12586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.393375][T12586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.574973][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 551.575026][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 551.575073][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.575101][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.578667][T12736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 551.706038][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.768072][T12586] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.790837][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.791019][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.822104][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.822227][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.110235][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2736'. [ 552.489474][ T5092] Bluetooth: hci1: command tx timeout [ 552.535176][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.686344][T12586] veth0_vlan: entered promiscuous mode [ 552.750864][T12586] veth1_vlan: entered promiscuous mode [ 553.066091][T12771] team0: Port device team_slave_0 removed [ 553.066659][T12771] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 553.157073][T12586] veth0_macvtap: entered promiscuous mode [ 553.226592][T12586] veth1_macvtap: entered promiscuous mode [ 553.301835][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.301865][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.301880][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.301897][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.301913][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.301930][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.301945][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.301962][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.313890][T12586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.343155][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.343181][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.343193][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.343208][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.343220][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.343234][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.343245][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.343259][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.344941][T12586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.362597][T12586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.362645][T12586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.362679][T12586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.362721][T12586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.620342][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.620371][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.714155][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.714186][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.561188][ T25] usb 3-1: USB disconnect, device number 12 [ 556.701246][ T29] audit: type=1326 audit(1720081239.132:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.701311][ T29] audit: type=1326 audit(1720081239.132:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.711123][ T29] audit: type=1326 audit(1720081239.142:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.711440][ T29] audit: type=1326 audit(1720081239.142:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.711565][ T29] audit: type=1326 audit(1720081239.142:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.712397][ T29] audit: type=1326 audit(1720081239.142:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.712620][ T29] audit: type=1326 audit(1720081239.142:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.713076][ T29] audit: type=1326 audit(1720081239.142:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.713439][ T29] audit: type=1326 audit(1720081239.142:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.713574][ T29] audit: type=1326 audit(1720081239.142:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12796 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 556.993896][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.359562][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.703706][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.769238][T12811] binder_alloc: 12806: binder_alloc_buf, no vma [ 557.987672][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.055633][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 558.076380][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 558.088034][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 558.115501][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 558.132779][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 558.146682][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 558.459045][T12834] netlink: 'syz.4.2762': attribute type 1 has an invalid length. [ 558.584932][ T63] bridge_slave_1: left allmulticast mode [ 558.595083][ T63] bridge_slave_1: left promiscuous mode [ 558.606638][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.624763][ T63] bridge_slave_0: left allmulticast mode [ 558.642479][ T63] bridge_slave_0: left promiscuous mode [ 558.673802][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.249614][ T5101] Bluetooth: hci1: command tx timeout [ 561.296873][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.313193][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.324755][ T63] bond0 (unregistering): Released all slaves [ 561.352382][T12850] geneve2: entered promiscuous mode [ 561.357631][T12850] geneve2: entered allmulticast mode [ 561.528421][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 561.748833][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 561.766481][ T25] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 561.782739][T12821] chnl_net:caif_netlink_parms(): no params data found [ 561.789898][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.816032][ T25] usb 2-1: config 0 descriptor?? [ 562.086931][ T63] hsr_slave_0: left promiscuous mode [ 562.094860][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 562.094878][ T29] audit: type=1326 audit(1720081244.512:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.2.2777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x0 [ 562.133077][ T63] hsr_slave_1: left promiscuous mode [ 562.144863][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.154142][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.167021][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.176264][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.237166][ T63] veth1_macvtap: left promiscuous mode [ 562.247336][ T63] veth0_macvtap: left promiscuous mode [ 562.261686][ T63] veth1_vlan: left promiscuous mode [ 562.267591][ T63] veth0_vlan: left promiscuous mode [ 562.334518][ T5101] Bluetooth: hci1: command tx timeout [ 563.408554][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.415194][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.952490][ T5196] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 564.022173][ T63] team0 (unregistering): Port device team_slave_1 removed [ 564.127475][ T63] team0 (unregistering): Port device team_slave_0 removed [ 564.172575][ T5196] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 564.190314][ T5196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.217670][ T5196] usb 5-1: config 0 descriptor?? [ 564.409731][ T5101] Bluetooth: hci1: command tx timeout [ 564.438523][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.456827][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.564065][ T5196] usb 5-1: Cannot set autoneg [ 565.576529][ T5196] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 565.628219][ T5196] usb 5-1: USB disconnect, device number 22 [ 565.888365][ T5101] Bluetooth: Unexpected start frame (len 16) [ 565.895197][ T5101] Bluetooth: Frame is too long (len 16, expected len 4) [ 566.028115][T12821] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.037791][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.048675][T12821] bridge_slave_0: entered allmulticast mode [ 566.060956][T12821] bridge_slave_0: entered promiscuous mode [ 566.063348][ T45] usb 2-1: USB disconnect, device number 18 [ 566.091262][T12821] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.098517][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.119079][T12821] bridge_slave_1: entered allmulticast mode [ 566.135990][T12821] bridge_slave_1: entered promiscuous mode [ 566.352989][T12821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.388521][T12821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.489752][ T5101] Bluetooth: hci1: command tx timeout [ 566.496868][T12925] Bluetooth: MGMT ver 1.22 [ 566.515460][T12821] team0: Port device team_slave_0 added [ 566.525456][T12821] team0: Port device team_slave_1 added [ 566.653642][T12821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.695631][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.730626][T12821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.772000][T12821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.793840][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.843853][T12821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.988660][T12821] hsr_slave_0: entered promiscuous mode [ 566.996009][T12821] hsr_slave_1: entered promiscuous mode [ 567.119389][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 567.328886][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 567.338256][ T45] usb 2-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice=5c.4b [ 567.376665][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.422119][ T45] usb 2-1: config 0 descriptor?? [ 567.450155][ T45] usb 2-1: active config #0 != 1 ?? [ 567.602570][T12966] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 567.655798][T12966] team0: Port device netdevsim0 added [ 567.700737][ T45] usb 2-1: USB disconnect, device number 19 [ 567.711593][T12972] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 567.943651][T12821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 567.966563][T12821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.000710][T12821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.026885][T12821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.281719][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.345793][T12821] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.380031][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.387255][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.427850][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.429515][T13004] tmpfs: Unknown parameter 'N' [ 568.435126][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.948836][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 569.087471][T12821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.148845][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 569.156487][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 569.183725][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.232171][T12821] veth0_vlan: entered promiscuous mode [ 569.232320][ T45] usb 3-1: config 0 descriptor?? [ 569.272363][T12821] veth1_vlan: entered promiscuous mode [ 569.354256][T12821] veth0_macvtap: entered promiscuous mode [ 569.383242][T12821] veth1_macvtap: entered promiscuous mode [ 569.437551][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.451379][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.468074][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.485253][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.495878][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.497899][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 569.520375][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.538091][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.555640][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.576162][T12821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.586249][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 569.616203][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.635304][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.674826][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.705637][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.717309][T13036] tmpfs: Unknown parameter 'N' [ 569.733805][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.763086][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.785144][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.818946][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.840776][T12821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.997575][T12821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.018442][T12821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.028431][T12821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.043828][T12821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.180085][ T929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 570.336746][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.379394][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.412180][ T929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.440507][ T929] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 570.463701][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.464459][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.484746][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.517912][ T929] usb 2-1: config 0 descriptor?? [ 570.948148][ T929] usb 2-1: USB disconnect, device number 20 [ 571.755048][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 571.799061][ T58] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 571.815149][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 571.827001][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 571.838500][ T45] usb 3-1: USB disconnect, device number 13 [ 571.992600][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.013312][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 572.033077][ T58] usb 5-1: config 1 has no interface number 0 [ 572.041472][ T58] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.057681][ T58] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 572.075410][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.088426][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.106948][ T58] usb 5-1: Product: syz [ 572.112861][ T58] usb 5-1: Manufacturer: syz [ 572.117536][ T58] usb 5-1: SerialNumber: syz [ 572.135281][ T58] usb 5-1: selecting invalid altsetting 1 [ 572.556501][ T58] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 572.594921][ T58] cdc_ncm 5-1:1.1: bind() failure [ 573.340468][ T9645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.878912][ T9645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.949992][ T9645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.065279][T13107] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 574.108841][T13107] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.2869'. [ 574.148268][T13107] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 574.179357][ T9645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.301535][T13111] vlan2: entered promiscuous mode [ 574.306696][T13111] gretap0: entered promiscuous mode [ 574.352885][T13111] vlan2: entered allmulticast mode [ 574.388078][T13111] gretap0: entered allmulticast mode [ 574.428857][T13111] gretap0: left allmulticast mode [ 574.452958][T13111] gretap0: left promiscuous mode [ 574.476872][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.493250][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.505541][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.570319][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.588214][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 574.597278][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.653003][ T929] usb 5-1: USB disconnect, device number 23 [ 574.820378][ T9645] bridge_slave_1: left allmulticast mode [ 574.830186][ T9645] bridge_slave_1: left promiscuous mode [ 574.836021][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.853586][ T9645] bridge_slave_0: left allmulticast mode [ 574.868914][ T9645] bridge_slave_0: left promiscuous mode [ 574.875745][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.148999][ T929] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 575.379286][ T929] usb 5-1: Using ep0 maxpacket: 8 [ 575.406569][ T929] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 575.446677][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.477004][ T29] audit: type=1326 audit(1720081257.892:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.504288][ T929] usb 5-1: config 0 descriptor?? [ 575.510551][ T29] audit: type=1326 audit(1720081257.932:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.575786][ T29] audit: type=1326 audit(1720081257.932:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.606172][ T29] audit: type=1326 audit(1720081257.992:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.646653][ T29] audit: type=1326 audit(1720081257.992:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.688111][ T29] audit: type=1326 audit(1720081257.992:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13130 comm="syz.2.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x7ffc0000 [ 575.848985][ T929] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 576.036936][ T9645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.062062][ T9645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.077306][ T9645] bond0 (unregistering): Released all slaves [ 576.386435][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.427914][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.452289][T13147] netlink: 'syz.0.2884': attribute type 46 has an invalid length. [ 576.513709][T13147] netlink: 'syz.0.2884': attribute type 46 has an invalid length. [ 576.649644][ T5092] Bluetooth: hci1: command tx timeout [ 576.722814][T13151] vlan2: entered promiscuous mode [ 576.746571][T13151] gretap0: entered promiscuous mode [ 576.769139][T13151] vlan2: entered allmulticast mode [ 576.784909][T13151] gretap0: entered allmulticast mode [ 576.806979][T13151] gretap0: left allmulticast mode [ 576.830502][T13151] gretap0: left promiscuous mode [ 576.931234][ T9645] hsr_slave_0: left promiscuous mode [ 576.937653][ T9645] hsr_slave_1: left promiscuous mode [ 576.955399][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.967149][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.987323][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.996940][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.040799][ T9645] veth1_macvtap: left promiscuous mode [ 577.046436][ T9645] veth0_macvtap: left promiscuous mode [ 577.054304][ T9645] veth1_vlan: left promiscuous mode [ 577.061045][ T9645] veth0_vlan: left promiscuous mode [ 577.701488][ T929] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 577.717104][ T929] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 577.740755][ T929] asix 5-1:0.0: probe with driver asix failed with error -71 [ 577.769360][ T929] usb 5-1: USB disconnect, device number 24 [ 578.194423][ T9645] team0 (unregistering): Port device team_slave_1 removed [ 578.278638][ T9645] team0 (unregistering): Port device team_slave_0 removed [ 578.508003][T13166] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 578.544136][T13166] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2891'. [ 578.747568][ T5092] Bluetooth: hci1: command tx timeout [ 579.279609][ T5092] Bluetooth: hci3: unexpected cc 0x2027 length: 2 > 1 [ 580.810025][ T5092] Bluetooth: hci1: command tx timeout [ 580.988046][T13115] chnl_net:caif_netlink_parms(): no params data found [ 581.690839][T13182] fuse: Unknown parameter 'fd0x0000000000000007' [ 582.057712][T13191] netlink: 'syz.0.2897': attribute type 46 has an invalid length. [ 582.066414][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.076961][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.092052][T13115] bridge_slave_0: entered allmulticast mode [ 582.106648][T13115] bridge_slave_0: entered promiscuous mode [ 582.175646][T13191] netlink: 'syz.0.2897': attribute type 46 has an invalid length. [ 582.184068][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.196524][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.213658][T13115] bridge_slave_1: entered allmulticast mode [ 582.223453][T13115] bridge_slave_1: entered promiscuous mode [ 582.341736][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.385424][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.457374][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 582.476143][T13115] team0: Port device team_slave_0 added [ 582.486689][T13115] team0: Port device team_slave_1 added [ 582.688020][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.746344][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.829091][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.839510][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 582.880432][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.887462][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.922063][ T5092] Bluetooth: hci1: command tx timeout [ 582.970151][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.163878][T13221] netlink: 'syz.4.2911': attribute type 46 has an invalid length. [ 583.198435][T13115] hsr_slave_0: entered promiscuous mode [ 583.217100][T13115] hsr_slave_1: entered promiscuous mode [ 583.251652][T13221] netlink: 'syz.4.2911': attribute type 46 has an invalid length. [ 583.289052][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 583.297930][ T5092] Bluetooth: hci3: Injecting HCI hardware error event [ 583.307325][ T5101] Bluetooth: hci3: hardware error 0x00 [ 583.916177][ T29] audit: type=1326 audit(1720081266.342:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13238 comm="syz.2.2915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d975bd9 code=0x0 [ 584.009683][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 584.146219][T13246] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 584.161330][T13246] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.2919'. [ 584.185359][T13246] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 585.368986][ T5101] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 585.932233][ T5101] Bluetooth: hci5: command 0x0406 tx timeout [ 586.708418][T13262] unknown channel width for channel at 909000KHz? [ 586.866653][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 587.416226][T13115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.450633][T13115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.511880][T13115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.540173][T13115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.725747][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.774111][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.797748][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.805029][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.881788][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.889096][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.031157][ T5092] Bluetooth: hci5: unexpected cc 0x2027 length: 2 > 1 [ 588.043117][ T5092] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 589.072053][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.138030][T13115] veth0_vlan: entered promiscuous mode [ 589.158310][T13115] veth1_vlan: entered promiscuous mode [ 589.223533][T13115] veth0_macvtap: entered promiscuous mode [ 589.257418][T13115] veth1_macvtap: entered promiscuous mode [ 589.303208][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.325108][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.337509][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.354798][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.364782][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.378245][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.388671][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.399995][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.412505][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.435968][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.454389][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.466479][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.484019][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.494683][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.505902][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.516080][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.526829][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.538583][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.552627][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 589.586232][T13115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.595889][T13115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.606992][T13115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.626549][T13115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.833468][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.845167][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.912918][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.934213][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.758148][T13346] fuse: Unknown parameter 'fd0x0000000000000007' [ 591.078914][ T45] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 591.285189][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 591.320401][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.358930][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 591.396270][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.417553][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 591.439172][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 591.475172][ T45] usb 1-1: string descriptor 0 read error: -22 [ 591.482281][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.493456][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 591.516013][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.810225][ T5092] Bluetooth: Unexpected start frame (len 16) [ 591.818322][ T5092] Bluetooth: Frame is too long (len 16, expected len 4) [ 592.091784][ T5092] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 592.101275][ T5092] Bluetooth: hci5: Injecting HCI hardware error event [ 592.119722][ T5092] Bluetooth: hci5: hardware error 0x00 [ 592.279798][ T45] cdc_ncm 1-1:1.0: bind() failure [ 592.313328][ T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 592.350845][ T45] cdc_ncm 1-1:1.1: bind() failure [ 592.408355][ T45] usb 1-1: USB disconnect, device number 16 [ 592.594628][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 592.935233][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 593.405064][T13391] fuse: Unknown parameter 'fd0x0000000000000007' [ 593.700296][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 593.707343][ T25] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 593.717027][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.759844][ T25] usb 2-1: config 0 descriptor?? [ 593.936788][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 594.019846][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 594.305444][ T29] audit: type=1326 audit(1720081276.732:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.329120][ T5092] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 594.329569][ T29] audit: type=1326 audit(1720081276.732:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.360060][ T29] audit: type=1326 audit(1720081276.732:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.385761][ T29] audit: type=1326 audit(1720081276.732:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.409135][ T29] audit: type=1326 audit(1720081276.732:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.433058][ T29] audit: type=1326 audit(1720081276.732:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.461312][ T29] audit: type=1326 audit(1720081276.732:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.496065][ T29] audit: type=1326 audit(1720081276.732:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.524861][ T29] audit: type=1326 audit(1720081276.732:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.554481][ T29] audit: type=1326 audit(1720081276.732:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2eb75bd9 code=0x7ffc0000 [ 594.872565][ T9611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.973461][ T9611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.148078][ T9611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.300487][ T9611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.532556][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.546886][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.557390][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.569332][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.578217][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 596.586109][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.665974][ T9611] bridge_slave_1: left allmulticast mode [ 596.676360][ T9611] bridge_slave_1: left promiscuous mode [ 596.685531][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.703540][ T9611] bridge_slave_0: left allmulticast mode [ 596.713220][ T9611] bridge_slave_0: left promiscuous mode [ 596.724583][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.718025][ T9611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.740829][ T9611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.761362][ T9611] bond0 (unregistering): Released all slaves [ 597.867379][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 597.909551][ T25] asix 2-1:0.0: probe with driver asix failed with error -71 [ 598.079853][ T25] usb 2-1: USB disconnect, device number 21 [ 598.257265][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 598.507321][T13424] chnl_net:caif_netlink_parms(): no params data found [ 598.673957][ T5101] Bluetooth: hci1: command tx timeout [ 598.717612][T13424] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.914024][T13424] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.060488][T13424] bridge_slave_0: entered allmulticast mode [ 599.397524][T13424] bridge_slave_0: entered promiscuous mode [ 599.628876][ T9611] hsr_slave_0: left promiscuous mode [ 599.650238][ T9611] hsr_slave_1: left promiscuous mode [ 599.670119][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.677707][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.703139][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.735328][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.835532][ T9611] veth1_macvtap: left promiscuous mode [ 599.850411][ T9611] veth0_macvtap: left promiscuous mode [ 599.856450][ T9611] veth1_vlan: left promiscuous mode [ 599.867268][ T9611] veth0_vlan: left promiscuous mode [ 600.239570][T13498] mmap: syz.4.3015 (13498): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 601.567678][ T5101] Bluetooth: hci1: command tx timeout [ 603.866892][ T5101] Bluetooth: hci1: command tx timeout [ 604.808374][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 607.276045][ T5101] Bluetooth: hci1: command tx timeout [ 607.515674][ T9611] team0 (unregistering): Port device team_slave_1 removed [ 609.788162][ T9611] team0 (unregistering): Port device team_slave_0 removed [ 610.622122][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 610.831190][ T9] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 610.879407][ T9] usb 5-1: string descriptor 0 read error: -22 [ 610.894457][ T9] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 610.925790][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.956880][ T9] usb 5-1: config 0 descriptor?? [ 611.186741][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 611.285995][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 611.322891][ T9] dib0700: firmware download failed at 7 with -22 [ 611.396229][ T9] usb 5-1: USB disconnect, device number 25 [ 611.475555][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.495496][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.505985][T13424] bridge_slave_1: entered allmulticast mode [ 611.535383][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 611.570344][T13424] bridge_slave_1: entered promiscuous mode [ 611.655565][T13424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.686006][T13424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.821363][T13424] team0: Port device team_slave_0 added [ 611.847435][T13424] team0: Port device team_slave_1 added [ 612.187174][T13424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.198523][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.179081][T13424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.329947][T13424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.336958][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.387034][T13424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.516258][T13424] hsr_slave_0: entered promiscuous mode [ 613.527980][T13424] hsr_slave_1: entered promiscuous mode [ 613.588857][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 613.768887][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 613.776686][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.804141][ T8] usb 5-1: New USB device found, idVendor=19d2, idProduct=dcfb, bcdDevice=25.47 [ 613.819592][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.856605][ T8] usb 5-1: Product: syz [ 613.861359][ T8] usb 5-1: Manufacturer: syz [ 613.878483][ T8] usb 5-1: SerialNumber: syz [ 613.902381][ T8] usb 5-1: config 0 descriptor?? [ 613.931668][ T8] usb 5-1: bad CDC descriptors [ 614.143356][ T8] usb 5-1: USB disconnect, device number 26 [ 614.533520][T13424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 614.552776][T13424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 614.596841][T13424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 614.615746][T13424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.742780][ T5101] Bluetooth: Unexpected start frame (len 16) [ 614.752462][ T5101] Bluetooth: Frame is too long (len 16, expected len 4) [ 614.823524][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 614.881244][T13424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.938582][T13424] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.994899][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.002169][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.056619][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.063986][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.677549][T13424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.758911][T13424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.268872][ T929] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 616.744669][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.026617][T13424] veth0_vlan: entered promiscuous mode [ 617.065975][T13424] veth1_vlan: entered promiscuous mode [ 617.154079][T13424] veth0_macvtap: entered promiscuous mode [ 617.212274][T13424] veth1_macvtap: entered promiscuous mode [ 617.267869][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.294872][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.314607][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.335729][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.346606][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.363862][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.380849][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.412609][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.434339][T13424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.480856][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.528937][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.563797][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.596708][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.625439][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.663762][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.688916][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.722071][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.753501][T13424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.802401][T13424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.837739][T13424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.866131][T13424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.889621][T13424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.711198][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.851048][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.196424][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.224859][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.162964][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3071'. [ 620.277848][ T929] usb 3-1: Using ep0 maxpacket: 32 [ 621.639927][ T929] usb 3-1: device descriptor read/all, error -71 [ 621.775606][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 622.147189][ T9608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.258886][ T9608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.382574][ T9608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.493464][ T9608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.655250][ T9608] bridge_slave_1: left allmulticast mode [ 622.671028][ T9608] bridge_slave_1: left promiscuous mode [ 622.676885][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.694338][ T9608] bridge_slave_0: left allmulticast mode [ 622.703995][ T9608] bridge_slave_0: left promiscuous mode [ 622.713156][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.458226][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.497255][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.507960][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 623.523239][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 623.545503][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 623.557497][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 623.846693][ T9608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.867382][ T9608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.890652][ T9608] bond0 (unregistering): Released all slaves [ 624.814713][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.829327][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.609178][ T5092] Bluetooth: hci1: command tx timeout [ 627.689215][ T5092] Bluetooth: hci1: command tx timeout [ 629.769320][ T5092] Bluetooth: hci1: command tx timeout [ 631.850795][ T5092] Bluetooth: hci1: command tx timeout [ 634.390238][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.403456][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.412663][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.422772][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.449055][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 634.459592][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 635.393146][ T5092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 635.405336][ T5092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 635.414862][ T5092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 635.429961][ T5092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 635.438115][ T5092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 635.447264][ T5092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 635.626521][ T5101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 635.638169][ T5101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 635.652075][ T5101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 635.662199][ T5101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 635.684503][ T5101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 635.692515][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 635.806721][ T5092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.820071][ T5092] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.829847][ T5092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.840157][ T5092] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.848343][ T5092] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 635.867253][ T5092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 636.112768][T13738] chnl_net:caif_netlink_parms(): no params data found [ 636.262312][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.284590][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.292753][T13738] bridge_slave_0: entered allmulticast mode [ 636.302042][T13738] bridge_slave_0: entered promiscuous mode [ 636.317862][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.326501][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.342983][T13738] bridge_slave_1: entered allmulticast mode [ 636.369719][T13738] bridge_slave_1: entered promiscuous mode [ 636.428195][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.449997][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.533263][T13738] team0: Port device team_slave_0 added [ 636.551444][T13738] team0: Port device team_slave_1 added [ 636.568961][ T5092] Bluetooth: hci2: command tx timeout [ 636.623184][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.637630][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.672358][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.696132][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.706960][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.741428][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.838106][T13738] hsr_slave_0: entered promiscuous mode [ 636.845376][T13738] hsr_slave_1: entered promiscuous mode [ 636.861771][T13738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.874499][T13738] Cannot create hsr debugfs directory [ 637.194544][T13738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.337769][T13738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.479479][T13738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.529083][ T5092] Bluetooth: hci5: command tx timeout [ 637.683466][T13738] team0: Port device netdevsim0 removed [ 637.697718][T13738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.777152][ T5092] Bluetooth: hci6: command tx timeout [ 637.938029][ T5092] Bluetooth: hci7: command tx timeout [ 637.984649][T13738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.003994][T13738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.033469][T13738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.051991][T13738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.103162][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.110456][T13738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.118368][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.125638][T13738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.282866][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.327629][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.649367][ T5092] Bluetooth: hci2: command tx timeout [ 638.707523][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.795835][T13738] veth0_vlan: entered promiscuous mode [ 638.821299][T13738] veth1_vlan: entered promiscuous mode [ 638.887983][T13738] veth0_macvtap: entered promiscuous mode [ 638.916221][T13738] veth1_macvtap: entered promiscuous mode [ 638.955072][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.977678][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.996564][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.007680][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.026940][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.048573][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.072623][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.083970][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.102952][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.116849][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.137737][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.156983][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.175566][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.187577][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.198858][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.218292][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.238897][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.260117][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.279112][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.290429][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.310091][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.332027][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.355721][T13738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.387103][T13738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.396620][T13738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.406471][T13738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.560970][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.582270][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.608993][ T5092] Bluetooth: hci5: command tx timeout [ 639.638762][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.657257][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.859362][ T5092] Bluetooth: hci6: command tx timeout [ 640.025281][ T5092] Bluetooth: hci7: command tx timeout [ 640.729027][ T5092] Bluetooth: hci2: command tx timeout [ 641.689051][ T5092] Bluetooth: hci5: command tx timeout [ 641.930626][ T5092] Bluetooth: hci6: command tx timeout [ 642.089224][ T5101] Bluetooth: hci7: command tx timeout [ 642.809087][ T5092] Bluetooth: hci2: command tx timeout [ 643.768976][ T5092] Bluetooth: hci5: command tx timeout [ 644.013392][ T5092] Bluetooth: hci6: command tx timeout [ 644.177655][ T5092] Bluetooth: hci7: command tx timeout [ 686.253854][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.268818][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.698213][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.704987][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.769345][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 762.088941][ T5101] Bluetooth: hci7: command 0x0406 tx timeout [ 762.095160][ T5101] Bluetooth: hci2: command tx timeout [ 762.100950][T13237] Bluetooth: hci5: command tx timeout [ 762.106392][T13237] Bluetooth: hci6: command tx timeout [ 770.089597][ T30] INFO: task kworker/u8:11:9608 blocked for more than 143 seconds. [ 770.097571][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 770.121779][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.135649][ T30] task:kworker/u8:11 state:D stack:21968 pid:9608 tgid:9608 ppid:2 flags:0x00004000 [ 770.153729][ T30] Workqueue: netns cleanup_net [ 770.158592][ T30] Call Trace: [ 770.162511][ T30] [ 770.165486][ T30] __schedule+0x1796/0x49d0 [ 770.177841][ T30] ? __pfx___schedule+0x10/0x10 [ 770.184249][ T30] ? __pfx_lock_release+0x10/0x10 [ 770.196942][ T30] ? kthread_data+0x52/0xd0 [ 770.201885][ T30] ? wq_worker_sleeping+0x66/0x240 [ 770.209741][ T30] ? schedule+0x90/0x320 [ 770.214046][ T30] schedule+0x14b/0x320 [ 770.218243][ T30] schedule_timeout+0xb0/0x310 [ 770.233719][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 770.243167][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 770.253691][ T30] ? wait_for_completion+0x2fe/0x620 [ 770.259515][ T30] ? wait_for_completion+0x2fe/0x620 [ 770.264845][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 770.277621][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 770.283629][ T30] ? wait_for_completion+0x2fe/0x620 [ 770.296773][ T30] wait_for_completion+0x355/0x620 [ 770.302669][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 770.312304][ T30] ? __flush_work+0xe6/0xd00 [ 770.316990][ T30] __flush_work+0xaa9/0xd00 [ 770.329446][ T30] ? __flush_work+0xe6/0xd00 [ 770.334115][ T30] ? __pfx___flush_work+0x10/0x10 [ 770.348387][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 770.354222][ T30] ? __pfx___cancel_work+0x10/0x10 [ 770.359911][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 770.365883][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 770.380118][ T30] __cancel_work_sync+0xbc/0x110 [ 770.385638][ T30] wiphy_unregister+0x57e/0xaa0 [ 770.397175][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 770.403083][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 770.420305][ T30] ? kfree+0x149/0x360 [ 770.424455][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 770.436648][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 770.442721][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 770.456341][ T30] hwsim_exit_net+0x5c1/0x670 [ 770.461473][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 770.466734][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 770.473297][ T30] cleanup_net+0x802/0xcc0 [ 770.477774][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 770.490530][ T30] ? process_scheduled_works+0x945/0x1830 [ 770.496402][ T30] process_scheduled_works+0xa2c/0x1830 [ 770.502982][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 770.518728][ T30] ? assign_work+0x364/0x3d0 [ 770.523457][ T30] worker_thread+0x86d/0xd50 [ 770.528132][ T30] ? __kthread_parkme+0x169/0x1d0 [ 770.541595][ T30] ? __pfx_worker_thread+0x10/0x10 [ 770.546772][ T30] kthread+0x2f0/0x390 [ 770.556304][ T30] ? __pfx_worker_thread+0x10/0x10 [ 770.564359][ T30] ? __pfx_kthread+0x10/0x10 [ 770.574919][ T30] ret_from_fork+0x4b/0x80 [ 770.579838][ T30] ? __pfx_kthread+0x10/0x10 [ 770.584480][ T30] ret_from_fork_asm+0x1a/0x30 [ 770.597186][ T30] [ 770.600675][ T30] INFO: task kworker/u8:20:9636 blocked for more than 143 seconds. [ 770.608599][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 770.627473][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.636649][ T30] task:kworker/u8:20 state:D stack:21040 pid:9636 tgid:9636 ppid:2 flags:0x00004000 [ 770.654575][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 770.662124][ T30] Call Trace: [ 770.665456][ T30] [ 770.668422][ T30] __schedule+0x1796/0x49d0 [ 770.681702][ T30] ? __pfx___schedule+0x10/0x10 [ 770.686636][ T30] ? __pfx_lock_release+0x10/0x10 [ 770.696283][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 770.702343][ T30] ? kthread_data+0x52/0xd0 [ 770.706906][ T30] ? schedule+0x90/0x320 [ 770.722309][ T30] ? wq_worker_sleeping+0x66/0x240 [ 770.727498][ T30] ? schedule+0x90/0x320 [ 770.736156][ T30] schedule+0x14b/0x320 [ 770.744529][ T30] schedule_preempt_disabled+0x13/0x30 [ 770.750536][ T30] __mutex_lock+0x6a4/0xd70 [ 770.755100][ T30] ? __mutex_lock+0x527/0xd70 [ 770.767315][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 770.774235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 770.787101][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 770.794654][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 770.808104][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 770.815614][ T30] ? process_scheduled_works+0x945/0x1830 [ 770.832509][ T30] process_scheduled_works+0xa2c/0x1830 [ 770.838175][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 770.848576][ T30] ? assign_work+0x364/0x3d0 [ 770.857945][ T30] worker_thread+0x86d/0xd50 [ 770.863049][ T30] ? __kthread_parkme+0x169/0x1d0 [ 770.868127][ T30] ? __pfx_worker_thread+0x10/0x10 [ 770.881114][ T30] kthread+0x2f0/0x390 [ 770.885257][ T30] ? __pfx_worker_thread+0x10/0x10 [ 770.897049][ T30] ? __pfx_kthread+0x10/0x10 [ 770.905541][ T30] ret_from_fork+0x4b/0x80 [ 770.910560][ T30] ? __pfx_kthread+0x10/0x10 [ 770.915258][ T30] ret_from_fork_asm+0x1a/0x30 [ 770.931407][ T30] [ 770.934516][ T30] INFO: task syz-executor:13709 blocked for more than 144 seconds. [ 770.947759][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 770.955968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.973382][ T30] task:syz-executor state:D stack:24992 pid:13709 tgid:13709 ppid:13693 flags:0x00000000 [ 770.987583][ T30] Call Trace: [ 770.991502][ T30] [ 770.994475][ T30] __schedule+0x1796/0x49d0 [ 771.007054][ T30] ? __pfx___schedule+0x10/0x10 [ 771.012969][ T30] ? __pfx_lock_release+0x10/0x10 [ 771.018104][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 771.036899][ T30] ? schedule+0x90/0x320 [ 771.042894][ T30] schedule+0x14b/0x320 [ 771.047116][ T30] schedule_preempt_disabled+0x13/0x30 [ 771.068756][ T30] __mutex_lock+0x6a4/0xd70 [ 771.073379][ T30] ? __mutex_lock+0x527/0xd70 [ 771.078106][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 771.093392][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 771.098521][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 771.107912][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 771.118481][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.128258][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 771.149599][ T30] ? __pfx_validate_chain+0x10/0x10 [ 771.154889][ T30] ? __pfx_validate_chain+0x10/0x10 [ 771.167313][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 771.172753][ T30] ? mark_lock+0x9a/0x350 [ 771.177138][ T30] ? __pfx_validate_chain+0x10/0x10 [ 771.183203][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 771.188396][ T30] ? mark_lock+0x9a/0x350 [ 771.200376][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 771.205913][ T30] netlink_rcv_skb+0x1e3/0x430 [ 771.219263][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.224806][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.240325][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.245603][ T30] netlink_unicast+0x7ea/0x980 [ 771.257099][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 771.262932][ T30] ? __virt_addr_valid+0x183/0x520 [ 771.268117][ T30] ? __check_object_size+0x49c/0x900 [ 771.281835][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 771.287113][ T30] netlink_sendmsg+0x8db/0xcb0 [ 771.296419][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.305946][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 771.315792][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 771.325530][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.333578][ T30] __sock_sendmsg+0x221/0x270 [ 771.338350][ T30] __sys_sendto+0x3a4/0x4f0 [ 771.352564][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 771.357721][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.367538][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 771.378759][ T30] ? exc_page_fault+0x590/0x8c0 [ 771.383695][ T30] __x64_sys_sendto+0xde/0x100 [ 771.388505][ T30] do_syscall_64+0xf3/0x230 [ 771.401366][ T30] ? clear_bhb_loop+0x35/0x90 [ 771.406135][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.417857][ T30] RIP: 0033:0x7f9e67d7796c [ 771.425181][ T30] RSP: 002b:00007fff89b44a40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 771.445017][ T30] RAX: ffffffffffffffda RBX: 00007f9e68a34620 RCX: 00007f9e67d7796c [ 771.454829][ T30] RDX: 0000000000000028 RSI: 00007f9e68a34670 RDI: 0000000000000003 [ 771.469120][ T30] RBP: 0000000000000000 R08: 00007fff89b44a94 R09: 000000000000000c [ 771.477156][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 771.492086][ T30] R13: 0000000000000000 R14: 00007f9e68a34670 R15: 0000000000000000 [ 771.502160][ T30] [ 771.507590][ T30] [ 771.507590][ T30] Showing all locks held in the system: [ 771.531580][ T30] 1 lock held by kthreadd/2: [ 771.538489][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x21f1/0x3dc0 [ 771.562504][ T30] 1 lock held by kworker/u8:1/12: [ 771.567598][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.578867][ T30] 1 lock held by khungtaskd/30: [ 771.583759][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 771.601249][ T30] 1 lock held by hwrng/758: [ 771.605803][ T30] #0: ffffffff8eb21068 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0xf0/0x3c0 [ 771.623757][ T30] 3 locks held by kworker/1:2/929: [ 771.633257][ T30] 3 locks held by kworker/0:3/932: [ 771.646034][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 771.664932][ T30] #1: ffffc90004017d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 771.676457][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 771.687485][ T30] 1 lock held by kworker/u8:5/1092: [ 771.698704][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.710569][ T30] 1 lock held by kworker/u8:6/1100: [ 771.715811][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.731670][ T30] 1 lock held by kworker/u8:7/2474: [ 771.736919][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.758751][ T30] 1 lock held by dhcpcd/4747: [ 771.763489][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x21f1/0x3dc0 [ 771.783384][ T30] 2 locks held by getty/4838: [ 771.788121][ T30] #0: ffff88802abfb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 771.805688][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 771.816509][ T30] 2 locks held by kworker/1:4/5139: [ 771.822526][ T30] 1 lock held by kworker/u8:8/5227: [ 771.827763][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.849237][ T30] 1 lock held by kworker/u8:9/6437: [ 771.854503][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 771.873933][ T30] 3 locks held by kworker/u8:11/9608: [ 771.879950][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 771.898296][ T30] #1: ffffc900121f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 771.909643][ T30] #2: ffffffff8f5c8190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 771.927014][ T30] 3 locks held by kworker/u8:12/9611: [ 771.934667][ T30] #0: ffff88802a1b8948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 771.957399][ T30] #1: ffffc9000c91fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 771.978071][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 771.988375][ T30] 1 lock held by kworker/u8:14/9617: [ 771.998775][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.021594][ T30] 1 lock held by kworker/u8:18/9632: [ 772.026973][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.045397][ T30] 3 locks held by kworker/u8:20/9636: [ 772.054722][ T30] #0: ffff888015fef948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 772.074042][ T30] #1: ffffc900096c7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 772.104687][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 772.123805][ T30] 1 lock held by kworker/u8:21/9639: [ 772.132511][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.147699][ T30] 1 lock held by kworker/u8:23/9646: [ 772.159472][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.178768][ T30] 1 lock held by kworker/u8:24/9648: [ 772.184128][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.202330][ T30] 1 lock held by kworker/u8:25/9650: [ 772.207687][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.222015][ T30] 1 lock held by syz-executor/13693: [ 772.227383][ T30] #0: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x6b4/0x27e0 [ 772.243115][ T30] 1 lock held by syz-executor/13709: [ 772.248476][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 772.273752][ T30] 1 lock held by syz.2.3091/13720: [ 772.283214][ T30] 1 lock held by syz.1.3092/13722: [ 772.288382][ T30] 1 lock held by syz-executor/13732: [ 772.297862][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab5/0x20a0 [ 772.314818][ T30] 6 locks held by syz-executor/13738: [ 772.320759][ T30] 1 lock held by syz-executor/13741: [ 772.326090][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 772.344476][ T30] 1 lock held by syz-executor/13743: [ 772.352074][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 772.372907][ T30] [ 772.375292][ T30] ============================================= [ 772.375292][ T30] [ 772.387616][ T30] NMI backtrace for cpu 0 [ 772.391988][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 772.401911][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 772.412003][ T30] Call Trace: [ 772.415313][ T30] [ 772.418271][ T30] dump_stack_lvl+0x241/0x360 [ 772.422998][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.428244][ T30] ? __pfx__printk+0x10/0x10 [ 772.432960][ T30] ? vprintk_emit+0x631/0x770 [ 772.437685][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 772.442845][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 772.447828][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 772.453320][ T30] ? _printk+0xd5/0x120 [ 772.457607][ T30] ? __pfx__printk+0x10/0x10 [ 772.462327][ T30] ? __wake_up_klogd+0xcc/0x110 [ 772.467230][ T30] ? __pfx__printk+0x10/0x10 [ 772.471867][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 772.476940][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 772.482956][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 772.489018][ T30] watchdog+0xfde/0x1020 [ 772.493299][ T30] ? watchdog+0x1ea/0x1020 [ 772.497756][ T30] ? __pfx_watchdog+0x10/0x10 [ 772.502469][ T30] kthread+0x2f0/0x390 [ 772.506580][ T30] ? __pfx_watchdog+0x10/0x10 [ 772.511288][ T30] ? __pfx_kthread+0x10/0x10 [ 772.516001][ T30] ret_from_fork+0x4b/0x80 [ 772.520454][ T30] ? __pfx_kthread+0x10/0x10 [ 772.525117][ T30] ret_from_fork_asm+0x1a/0x30 [ 772.529957][ T30] [ 772.535053][ T30] Sending NMI from CPU 0 to CPUs 1: [ 772.541424][ C1] NMI backtrace for cpu 1 [ 772.541440][ C1] CPU: 1 PID: 13718 Comm: syz.0.3090 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 772.541460][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 772.541470][ C1] RIP: 0010:do_raw_spin_unlock+0x0/0x8b0 [ 772.541503][ C1] Code: 38 c1 0f 8c 27 ff ff ff e8 ed c3 84 00 e9 1d ff ff ff e8 63 56 09 0a 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 49 89 ff 48 [ 772.541518][ C1] RSP: 0018:ffffc90009187b88 EFLAGS: 00000046 [ 772.541536][ C1] RAX: cfc7ca1142c18400 RBX: ffff88802ac665c0 RCX: ffffc90009187a03 [ 772.541550][ C1] RDX: 0000000000000000 RSI: ffffffff8bcaccc0 RDI: ffff88802ac665c0 [ 772.541562][ C1] RBP: ffffc90009187c70 R08: ffffffff8fac216f R09: 1ffffffff1f5842d [ 772.541576][ C1] R10: dffffc0000000000 R11: fffffbfff1f5842e R12: dffffc0000000000 [ 772.541590][ C1] R13: 0000000000000021 R14: ffffc90009187e20 R15: ffff888043f76318 [ 772.541603][ C1] FS: 00007fda2f8896c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 772.541619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.541632][ C1] CR2: 000000002006b000 CR3: 000000006193e000 CR4: 00000000003506f0 [ 772.541648][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.541658][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.541670][ C1] Call Trace: [ 772.541677][ C1] [ 772.541685][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 772.541706][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 772.541727][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 772.541747][ C1] ? nmi_handle+0x2a/0x5a0 [ 772.541783][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 772.541804][ C1] ? nmi_handle+0x14f/0x5a0 [ 772.541831][ C1] ? nmi_handle+0x2a/0x5a0 [ 772.541858][ C1] ? __pfx_do_raw_spin_unlock+0x10/0x10 [ 772.541884][ C1] ? default_do_nmi+0x63/0x160 [ 772.541911][ C1] ? exc_nmi+0x123/0x1f0 [ 772.541930][ C1] ? end_repeat_nmi+0xf/0x53 [ 772.541964][ C1] ? __pfx_do_raw_spin_unlock+0x10/0x10 [ 772.541991][ C1] ? __pfx_do_raw_spin_unlock+0x10/0x10 [ 772.542020][ C1] ? __pfx_do_raw_spin_unlock+0x10/0x10 [ 772.542046][ C1] [ 772.542052][ C1] [ 772.542058][ C1] _raw_spin_unlock+0x1e/0x50 [ 772.542085][ C1] dequeue_signal+0x241/0x5a0 [ 772.542112][ C1] ? __pfx_dequeue_signal+0x10/0x10 [ 772.542137][ C1] ? uprobe_deny_signal+0x79/0x230 [ 772.542164][ C1] get_signal+0x602/0x1740 [ 772.542201][ C1] ? __pfx_get_signal+0x10/0x10 [ 772.542233][ C1] arch_do_signal_or_restart+0x96/0x860 [ 772.542258][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 772.542279][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 772.542307][ C1] ? syscall_exit_to_user_mode+0xa3/0x360 [ 772.542335][ C1] syscall_exit_to_user_mode+0xc9/0x360 [ 772.542363][ C1] do_syscall_64+0x100/0x230 [ 772.542390][ C1] ? clear_bhb_loop+0x35/0x90 [ 772.542418][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.542443][ C1] RIP: 0033:0x7fda2eb75bd7 [ 772.542458][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 772.542473][ C1] RSP: 002b:00007fda2f8890f8 EFLAGS: 00000246 [ 772.542487][ C1] RAX: 00000000000000ca RBX: 00007fda2ed03f68 RCX: 00007fda2eb75bd9 [ 772.542500][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda2ed03f68 [ 772.542511][ C1] RBP: 00007fda2ed03f60 R08: 00007fda2f8896c0 R09: 00007fda2f8896c0 [ 772.542524][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda2ed03f6c [ 772.542535][ C1] R13: 000000000000000b R14: 00007ffed3f92570 R15: 00007ffed3f92658 [ 772.542558][ C1] [ 772.954145][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 772.961162][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 772.971087][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 772.981224][ T30] Call Trace: [ 772.984529][ T30] [ 772.987496][ T30] dump_stack_lvl+0x241/0x360 [ 772.992244][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.997536][ T30] ? __pfx__printk+0x10/0x10 [ 773.002162][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 773.008196][ T30] ? vscnprintf+0x5d/0x90 [ 773.012574][ T30] panic+0x349/0x860 [ 773.016523][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 773.022805][ T30] ? __pfx_panic+0x10/0x10 [ 773.027288][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 773.032796][ T30] ? __irq_work_queue_local+0x137/0x410 [ 773.038383][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 773.043877][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 773.050070][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 773.056269][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 773.062464][ T30] watchdog+0x101d/0x1020 [ 773.066846][ T30] ? watchdog+0x1ea/0x1020 [ 773.071318][ T30] ? __pfx_watchdog+0x10/0x10 [ 773.076037][ T30] kthread+0x2f0/0x390 [ 773.080157][ T30] ? __pfx_watchdog+0x10/0x10 [ 773.084961][ T30] ? __pfx_kthread+0x10/0x10 [ 773.089596][ T30] ret_from_fork+0x4b/0x80 [ 773.094059][ T30] ? __pfx_kthread+0x10/0x10 [ 773.098698][ T30] ret_from_fork_asm+0x1a/0x30 [ 773.103521][ T30] [ 773.106822][ T30] Kernel Offset: disabled [ 773.111155][ T30] Rebooting in 86400 seconds..