last executing test programs: 8m59.053716233s ago: executing program 32 (id=378): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) 8m40.252566447s ago: executing program 33 (id=620): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda364790fb179f69e252af2d0508977c466005236ee05627d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 8m38.332498183s ago: executing program 34 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x3c}}, 0x44) 8m19.70276923s ago: executing program 35 (id=841): r0 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xfc, 0x10a5, 0x3, &(0x7f0000000040), 0x8) 7m41.678830326s ago: executing program 36 (id=1352): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "055b10e0"}]}}, 0x0}, 0x0) 7m13.688896568s ago: executing program 37 (id=1705): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m52.652748505s ago: executing program 38 (id=1940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 6m36.816645702s ago: executing program 39 (id=2140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="00000097c3199945e3eadae14708c82ec713c20000070002", 0x20) 6m26.81878019s ago: executing program 40 (id=2245): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x1, 0x6, @local}, 0x10) 6m20.390064865s ago: executing program 41 (id=2275): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 6m5.171289454s ago: executing program 42 (id=2352): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x8000000, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x8, 0x5, 0x1, 'queue1\x00', 0x84}) 5m59.345952161s ago: executing program 43 (id=2393): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000001240)=""/4102, 0x1006}) io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0) 5m27.612449795s ago: executing program 44 (id=2723): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5m16.138614537s ago: executing program 45 (id=2840): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x21, 0x0) 5m2.218575693s ago: executing program 46 (id=2836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000003010040"]) 4m58.95836428s ago: executing program 47 (id=2936): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x188, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x130, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x11c, 0x6, [@m_ife={0xc8, 0xb, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x7ff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x188}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m53.453886761s ago: executing program 48 (id=2972): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 4m40.060440838s ago: executing program 49 (id=3030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 4m39.748219485s ago: executing program 50 (id=3034): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f0000000000080003"], 0x7c}}, 0x0) 4m29.589077792s ago: executing program 51 (id=3090): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) 4m22.633317452s ago: executing program 52 (id=3120): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x7, 0x4, "22685711"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m12.787720416s ago: executing program 53 (id=3176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 4m1.714844955s ago: executing program 54 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, r0, 0x2) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m53.583769283s ago: executing program 55 (id=3335): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "e56eb0", 0x10, 0x21, 0xff, @private0, @empty, {[], {{0x4e24, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, "9f13b7", 0x3, "b54c9d"}}}}}}}, 0x0) 3m40.728599378s ago: executing program 56 (id=3320): syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) unshare(0x22020600) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x1d, 0x2}, 0x0, 0x0) 3m0.928808448s ago: executing program 57 (id=3856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m54.592806789s ago: executing program 58 (id=3907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m18.837572379s ago: executing program 59 (id=4329): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 2m7.746798312s ago: executing program 60 (id=4418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 1m46.474023282s ago: executing program 61 (id=4623): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) 1m37.497141969s ago: executing program 62 (id=4698): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sigaltstack(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) 1m29.181781865s ago: executing program 63 (id=4768): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m23.139050424s ago: executing program 64 (id=4819): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x8000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0xd8dc000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1m19.979160489s ago: executing program 65 (id=4840): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x4, 0x6, "08faf247db8f1cf79742afd6ed56925d63db17599217a157b17ad419bb5177daa604ae45a4ae4311d0689a5c0fe32949735d09e2d714c9decb026e5bd630b5b0f5be8c99c7e9348e7fa8304f2e05c65a0587831203e6ed79abce2785f00aca5ecd1f536cbb2c7a113d15e79c0735b9c2804ebe09a021ee26f8928a1daebb5db66ce8a8dcc4d8207d4e05bb737cd34cab12b94509b0e615ee60a747159463b626927f7135b3955e125532a53bff1c3109f07bc02027e640760172c186e2d03ed41e7e6baafdcdf76c2327fb886332a434466f20a6c2799ebb2d21e9b34b4eef49242ea9b77f373ceda8fc2cd971e9fd29dd0b4a280275c045f6d15fdf4ef7fe4b", 0x6, 0x3, 0xc6, 0x8, 0x80, 0x1, 0xa, 0x1}, r2}}, 0x120) 1m16.435450403s ago: executing program 66 (id=4858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 59.324358694s ago: executing program 0 (id=5003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 58.942914212s ago: executing program 0 (id=5008): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x5e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="4f657f07da674c79be900dd4b36b03ca3513a320ebab75751d7d7e40d6ede2dcec43dc605632fa0df345f1fe1fd7e8e5d0da647d921b0f102b0b2fa24e5cef12d89e0db21f0cb28f5588c4b231abad294f049cbfa56b7402fa06d644b298a4922e5a0b0f2de53fca098c15a02df417cf592b8bf00ac06d56a3a286048ba59dc0fd69debc9d0f024476d9345c2b008df031d796e5581b0318fe281599f8b39d447257422eb55f1c87406e20b2f16d946f0ab156903d46d6ab54d6656307a0de7b83d35e818d8d048f784a9c87076fa4c6e9cfe38f88a77e789c9d4bea96f7b072d754fd17da475552965113151882c6dd91d1394342b8b3e4e74a82c2412507b0793cdb9656150e8b1e134ab1dd7888f6039f8de7056990800d9b9eab54171ad9879ee00fd157b3e54527f2a2356008cf524e72cf74fe0c307a920dd67d12a0846e921a88aead6edd3a5bd3da023856de8338adfa26345f5403319d336dd45efe3e407cc35b0e022f3e81de786ea6a3917a07e2f6fbe73adfd975c2236b937fda47b6c89cd0f4f64f8b93d73ce3d32b5162c7a318ee6e9bc08b32743c7b9e66fe6a1014830826ed55cca4d679ec24321ea888e61de0bea104b0a8edfcb5d18df2190b8a9113118acda5bdfadf7f404df0fbd39dd3fec06c4449fbde4ea7ccde27c44c63633c06e4559857637d037cad122a9fda4509805092ca0350d9f73b061eb153026730bda9ecc461473230438f135091a521240b6b4273b230af2057bb27f56b7851e13fb4d9c27d757bff9d8281fc9990afc8861356998c77560850828d7c6537faf470ca94889c14e28e1e8c6c73b6756ae380f8c15dded00616cc66a5440240876173ae1ee41005519e709f9412e260686ed18320acbdc2b465508390d456683928f5f42e25cb73e1fb53794fb4ab345bb8df04225bba362598d3e603f06f7ac324a0fef1494fe4a5e829c8b50207cfbaef7d29e85ca3e9891291b66179b39713032089ab90c6481bf0cca0e61da5fc955280682e702bc186851d014a59d9903be30104e31d7d57094e34bd10fe5b31bb7f3f1fe37eaef05b31a1c1206a6cce8fa425089001eab642478caa11cf08e43fad0668fdc22ac54ed30fbf13e6af1232af289ae48c0f3a371ec41ea5f7d9fb01f860b751760d680c72af1059d5fab16bf61dd8aaa7ada290d8cf2d135eb5a879b3a754b1de0a5e550895ce05a84f4dcc80f10b16d5a78fad7f9ec36945d1e946f1f1f3bbb983bc5a68b94a2633f3f232bf22b6c9479f60f7146e20d5df4726dc3835266fc132a1f0f49bd8e8e1cf34e20826bc3e7e2e95385eeeb2693b9d69a0f884f50122e783517a462707f67fca2ac8f2ac68693a1b5730b52231685caa92fb3e00622052eab3af70a6e89de641cc8949cff3c14767a55ab06f6312fdf27eaa7ec28f1591bad3a7b433272013de3ae26c95eb885528dd7f64bf69a8508aaf4d4629b838efe76c13d47ec31c5a9af75138d40ebabd09448e20ffbae7848211f31b6ce4df6b5ee103fdece3f15a3c3708ddb550a8d98b6b8920c23af9af40baeb47b0a2adf78699cbdfeddf67611dd9365c941913263d8f9998a81f964d7071d7eb347ec90556af053ac6b9d5be23cb85a5cab6392fffbbf8ea3a47c0c3a2bab8d3785055bff6694897fb9d3a16421a4d02caae0bd5152f0e80074b9f573a176200e81a1c4e35ab05c493f66b7c25ca13a6a3da12283821c119db39e957e739fb4c1259252cef81a8b346f787d195d388f06d252e9433e50728bf5b94d141f9ac8e6b2aaef86d007940b45fd28cc0171fa8700bdff936a2fc706a352ff0ceceb70c54f18f71de3a6e36c5391d3f648dd0d6f1b97f810ad838b4bb9c6919f0ec78b96644397c448f628f6b589477bf6512f7fe8a623674ac16c00deb3e2316bb7727c034fe9935bc0d4a402ca7c83fe4dff3d7b18d6439cd2576f0bde84ba1cbdf9f5a5743d874119e59ab8fcfa9801f9972cfc18e033c757423dfbd92d1bf1b2b3cf741c4a13b726b08441041712f98d8917d20fef74fcf3876ab5953e38ff6c2a2b3a8b96a2b1ec4dd86b09aec23ba096d16bdc1acfcb44ac82ed8c855c217bc07625c5dce82a0db0b400e2cdb89a75bb2155af9862304efc989253eadadcd08ae5f2e58cf842880df11a12ac8b3492069ccea594430ccee2baaf0fc3b2db99c14aa93f2624ab0e9237760b5fa1a96c16474be2cabc90ff091672e95c8d25fccd039110c6934b948de9c5983aae57a3547ad288ca1219e3fd1f27d5687f66ae4d487141b1d091c6049e72eff1d5df8280c1248892677b520cdb4e97c31778c2b09ac10a174d04da2a43a0d178242f203b3ae14154d1d03319d14921352ba733b0656ae2cece53f736006d117cf08c7f9e18d9f1b500dc5922d423dbf822c1ae089332b1884901aae255612bb70bcc65257bbc6cef6f9c5b76dfd1dfd0b5dfba63eece0c2185c01ef11810497eb2047bc87be9b8b5c897b8a155200d2ce96427bd4036b19f0ef6c9cea67c43b80c8fbd0d25d6b046efe93a9872bb0f964e016490883e9388ef035908221166c2206415f3feebdbc2a830ccac55d61b79d3316e2d3be9aea1c2c72c23688efff2b9b5a4f39f667a5404e3ce2083a302bc4a49208a0725c20f9a19adff430c50a169f151355df660d52c0068cca7f171ecdec15047dfea2ba6861e5ece606d228e0bf47631cc32b91ab4c09015d40a326086ebaac6af8e79059dc7f929cf6a80ad3b8cd6b3a91b8e5a199fb00814b45f42e8b7feeb9158c39510c1a10d35aea06fe660b0eb73bc0905252b6919fe23e5d5c3c9c66adaefe9e4307981e63fdcdc67e2bf76d75ff7be4fe8dd025cece14d556074c84b3c8833dc7cff583ce25947101676fd3f8f4016368bf27e24744bba7cb768b9d837b16d5308dc3712f37c69d1d1ee98360c6449634433afebe5bea6b2e39c249c29c4c8c3fca5f180ad4893c41458fc9f82db8200e201b3c4b5cc69dadf9a409af684f372a68cf1cf3aa64f9de0ec5fcd58acca051c590c689e42d0037cf3b2abee9d2c85803a929032b35113963ad79793b2a4d8377517654149b9afb408b189d2ecf95c66594e79db6c34e0c82a30259938589b2f81c50851a4d30013d9da1f24eacd5efbdf945e8af4a625126b38c01029fb2b0062de8c4bcd61c7d8b9215bac8dc35609ff45acbadfac0a04e3f5014c1c34cbb46393633f6102080f266fec4242c67c93e01312ba0e6e3dd1e002d1253e4d34a8d6122c60ce5169d1c47f807230d86f4836e4c385aff2c6492c9e2584a4a0dcff544316f4c35d1fb19c4277041885df236324b80c3f2d58c76f64a075d27a916ba55746b0aa758d383c063cd6447a80f7abd06a310974765a8c977671a6dbe35be115747a4a3c9d9f558ce7fbfc35b91875612e89f505007792f7b197ba5fc4c65cd6f8765e2d2454f4681381325477af63a88fe4313c7365690c50f05d40fe302479d21cee188f29f8b4475b6b37e2a4dd710814a2463cf1650f281595cff95f549c4c4ffcd184e672b308aa4bc071395f214ee97e5b7dbc5efaed8e65a878169a0529b6ed4022e5bfaaa49fc521c283bd9d62ddc00e4d84d5da18f7c0acd00c53e827c7194146e5d0cb9439e8c35e0659d347cb012e47da92aff33c8b45fd9aa140d2f76b75c6800f8769057e88d156714a82e3d12b4fdf2863a27eb2587ebc25b011a949849dcd9faaa128b9bef780b3d239a007ca9c04256b858cfc7b068365c044a5eb863bdf0454cf37df09d4cf930408f0d41c1e8c278b994c455f89ecb85156ed20b7f89c9c2f1176508e4c7ab7ed74311a12317d4193eaef0333368963286e4c5e0c0c0db5f3f2d5e3cff77b21e3b4786c8c096b89b60cf41560544ba1361f4af4b5b330b410edc5421b5023f1f4df0f910067bfbe0a46cb5f1407f650c47288a31e0f767de8ddca77b20ed16513e095fbce085d25d543dce850515458c5ef07a0c012175ef50ef3c52f98afa0b2631c7d3e63b22e90ebce2513d3b0d4d62f153cc90700fbee5c80ffd14fece05e0ba293758aaa7510d3853a4a4d44e9e479e3f5d92a663f14b5f5452efc6ecf387a100787667dd060cfdf75ee57dda2e042f7f171ac5083a5ddc6656bb34d683955f4a8a1cf687d29e963d8abf93912aa08dc4df3cdaaceae9fa1d21472ed01705d861a798f57f14ca4f3f0e1e9f1c20e9e2eb6974a7d838e7a2f69943ad259cd6967c0c46698952c65a9a1d72be890a66dfea4fa1b5ee861b1f929ce78c9bcdfb0145ff52d462865a8a81506e1bd0afa6b2d3cc5556c17c19b891fc6c36b9ed0b8b3c516836872ced92b1b65e2334b3730deae7af801016d30af14daf53ec550da914dedc18726871a94c3ce8efd4bfcf25ffdf224d665374b279ea65d32e213bfad60aa8555fbe97cb22977f7e9f20a04e8e2c65b3a5519a098b70cce0ad25cb239e2335e0040481c86a2153b5056e70f83515e7d3739749ab8a2c3e4a1b0faab4426495c4f0076d2590c52f6548e3b20b17a6f21deefe63f67fcba027a83959dd9f79dc2f61e712d41fa50c0a89d1329a70aa8471f02a2755ea2f872adc3fbaea5e942ab7fd9191b669a6017a0a2ae7344ee0ca36afd646444a38696ceeca997321ab37642ea71be0758b3bb311b13cce0cc5881c97549ebf9366171a99a8f3b754f6e42970002b09ebc56402693fd2d06bfc114396c75a4bcfb02e114170fafad5ab7e671b70e51461f6916a674d4abcf47011e8598144c5cb013f280e21afc936055b1d2e0bbf29a4b969cadf754ac62bb6020f33ed9b3e46428496d0de29ff0b6fb13710f98f688e9185126c0b154530a045abcf54f4be1a63ac4ec02ba038cb1b510abd82532cfcc7684c977e00fe81d2d4a483d5cf7d23a5c4fd6a299edb436f519a6efc37b79b249feec6f0d7983a321f4021ac4766270f6bf9fe10733313e6116178fd271eb4d0ac6158e16f3a01795932f15b6df70c25dad7fd9f8932bf6bd651094d6c83cf0accfa978f575e535e86e44f17a23802bdba0bcb17899d76a5bb083061a4ddceb105333a828ade21c99dbc6257a322a22f73899f3fd64eddb1669b965d21f468416eb81ca750e54976616ced379078b149822d38634f90bb4644746eb40cc6153a1c0fd7b4d482958c5c1d9a47c3512510f022b8eb00861794ed8a3c207f4cf5a565b94a44eb14e6baefc24ee30380b53ee4726779b429240cb8b71340fd41fa0352810d90519f18ee69b85d3134cc16619a966ed378d608292834631aa1f215a324641d0b772d08a822f6ec0905c22768044c13911476bc70122345a274b1887ac471676f09a849faba85f9c2a8b24af21ac7700395b29f963d493a5f81febc3b8a23bbafaba0d9b288c5506c44ec4f6f327433f06cf6d72f8de7cc61ecc1de0fc743ddfeb2fa47fa17ab3257b68e0c56dce273f56de9724b809b4df30d0dc8a4a97db38674242ea7e81571dda16c2dd2ae5d82b51b719181db901409170504ecfd94de74315c554462dbc90d749f2d2d54b6b7ca6c287979b5cc1ec651af17891359628abc6c8329d88351966c4ffd23b7a729453ec0c064210b3234f8657747a84bc0b236a89a35f412395805c942392b61a2bd5a88a5740b97c31d5bd8857f2b7a0cb999a48d0b395c21ff58e7349939f542470a829db9e033ef7b719453ad7a705829d74416011ce17839618f1534c9859c08a8d5c49a0478074ceea47ab23fb24570011684733bc01f0adca5a48139f54c598bee0f2a", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) 58.850183914s ago: executing program 0 (id=5010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x80, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) 58.743006635s ago: executing program 0 (id=5011): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x24, 0x1) 58.548868711s ago: executing program 0 (id=5014): r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 58.23487422s ago: executing program 0 (id=5019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) 57.975870876s ago: executing program 67 (id=5019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) 45.093773321s ago: executing program 2 (id=5123): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000200), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) 44.905078s ago: executing program 2 (id=5125): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendto$packet(r0, &(0x7f0000000780)="aaa911d7c286dd1327c9167c6411", 0xe, 0x0, &(0x7f0000000540)={0x11, 0xd, r1, 0x1, 0x1, 0x6, @remote}, 0x14) 44.667799825s ago: executing program 2 (id=5126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getgid() 42.862433008s ago: executing program 2 (id=5151): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0) 41.901228753s ago: executing program 2 (id=5162): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0xfffffffe, "87578774b6592ba209f477ebc1546752d53d53c165cddd12cfb288907c595665"}) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) 41.856941602s ago: executing program 7 (id=5163): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f000034d000/0x4000)=nil, 0x4000) 41.589486529s ago: executing program 2 (id=5166): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c0c4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 41.176769036s ago: executing program 68 (id=5166): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c0c4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 40.575617946s ago: executing program 7 (id=5171): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) 40.319186845s ago: executing program 7 (id=5172): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.585439266s ago: executing program 7 (id=5174): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x0, 0x300, 0x8, 0x400, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000200)='./file0\x00') 39.344041491s ago: executing program 7 (id=5176): setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 38.962506347s ago: executing program 7 (id=5180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000021, 0x4, 0x7ff, 0x800000, 0x4}]}) 38.548084283s ago: executing program 69 (id=5180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000021, 0x4, 0x7ff, 0x800000, 0x4}]}) 37.814831697s ago: executing program 3 (id=5188): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$sock(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 37.674516865s ago: executing program 3 (id=5190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) 36.785821827s ago: executing program 3 (id=5191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xc41d}]}, 0x24}}, 0x0) 36.390750743s ago: executing program 3 (id=5192): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2800092, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 35.374260307s ago: executing program 3 (id=5201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}]]}, 0x30}}, 0x0) 34.674723021s ago: executing program 3 (id=5206): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000400)=[{0x80000006, 0x0, 0x1, 0x200}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000003c0)="d52e92474549bd65ef6523dc5df08533801fbfe79baa95b6da9ee1f1803bd2c5447f92f8f5ad1c2db22485cd893ba9a2b93927395305506d3a98fc5d0acb4dc7bc7f2976bfb8718b4fb05ab6d2f244ce6bb844f9489464eb2ee9083b0d3b9da2c3e6a0c0cd6a902c7a9ad950eb3f4f086d0300000000000000", 0x79}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xff1d}, {&(0x7f0000000b40)}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000000080)={0xa, 0xfffd, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) 34.306187597s ago: executing program 70 (id=5206): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000400)=[{0x80000006, 0x0, 0x1, 0x200}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000003c0)="d52e92474549bd65ef6523dc5df08533801fbfe79baa95b6da9ee1f1803bd2c5447f92f8f5ad1c2db22485cd893ba9a2b93927395305506d3a98fc5d0acb4dc7bc7f2976bfb8718b4fb05ab6d2f244ce6bb844f9489464eb2ee9083b0d3b9da2c3e6a0c0cd6a902c7a9ad950eb3f4f086d0300000000000000", 0x79}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xff1d}, {&(0x7f0000000b40)}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000000080)={0xa, 0xfffd, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) 23.292332879s ago: executing program 8 (id=5286): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b43a409aa81", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) 23.059047624s ago: executing program 8 (id=5288): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) 22.868077492s ago: executing program 8 (id=5289): creat(&(0x7f0000000040)='./bus\x00', 0x140) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 22.67454891s ago: executing program 8 (id=5291): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x401, 0x0, 0x11}, 0x18) 22.459261952s ago: executing program 8 (id=5294): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x508, 0x418, 0xf0, 0x418, 0x418, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x2b, 0x22, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff], 'veth1\x00', 'ip6gretap0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 21.84279445s ago: executing program 8 (id=5303): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}]}, 0x30}}, 0x0) 21.516564652s ago: executing program 71 (id=5303): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}]}, 0x30}}, 0x0) 10.088153296s ago: executing program 4 (id=5389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x40, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r1, 0x6}, &(0x7f00000001c0)=0x8) 9.945750633s ago: executing program 4 (id=5391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000a, 0x10012, r1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f00000003c0)=ANY=[]) 9.748352268s ago: executing program 4 (id=5393): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000017c0)={0x2c, &(0x7f0000001580)={0x0, 0x8, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xf7}}) 7.566072474s ago: executing program 4 (id=5413): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfff, 0x4}) 6.620887998s ago: executing program 4 (id=5425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.222792266s ago: executing program 4 (id=5429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0xfa, 0x1, 0x6}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 5.715358717s ago: executing program 72 (id=5429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0xfa, 0x1, 0x6}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 4.317372495s ago: executing program 1 (id=5453): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r0, 0xec4, 0x0, 0x0, 0x0, 0x0) 4.120901414s ago: executing program 1 (id=5455): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 3.993011541s ago: executing program 1 (id=5456): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback, 0x18}, 0x10) close(0x4) 3.869067618s ago: executing program 1 (id=5458): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) 3.753665543s ago: executing program 1 (id=5460): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="00214717a70700000000030640710a069d317ebbaaa672f6338ab00f40f8ef5e405b14f358de15c2ad710d258d702e5cf1d5", 0x32}], 0x1, 0x20000002, 0x0) 3.522121805s ago: executing program 6 (id=5461): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af34514000cc0080020000700020006001f0003000000f6a6bf9082545314000056a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e45", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.350802059s ago: executing program 1 (id=5462): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x362, @tick=0x9, 0x0, {0x0, 0xfe}}) 3.09557372s ago: executing program 73 (id=5462): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x362, @tick=0x9, 0x0, {0x0, 0xfe}}) 3.077224748s ago: executing program 6 (id=5464): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r0, &(0x7f0000000180)=[{}, {0x0, 0x0, 0x800}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 2.445918832s ago: executing program 5 (id=5468): r0 = socket$kcm(0x29, 0x5, 0x0) write(r0, &(0x7f0000000140)="8c", 0x1) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x34040882) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0x0, 0x0) 2.377055434s ago: executing program 5 (id=5469): unshare(0x22000600) r0 = gettid() r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) tkill(r0, 0x7) 2.260207021s ago: executing program 5 (id=5470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xffff2b00, @remote, 0xfff}}, [0x7, 0x6bf8, 0x1, 0x7, 0xfffffffffffffffa, 0x8, 0x3, 0x100, 0x5, 0x9, 0x3, 0x1, 0x0, 0xf, 0xffffffffffff9707]}, &(0x7f0000000280)=0x100) 2.146179365s ago: executing program 6 (id=5471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "422597ff34"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x58}}, 0x0) 2.145494828s ago: executing program 5 (id=5472): syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) clock_gettime(0x0, 0x0) 1.967040749s ago: executing program 5 (id=5473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xe}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) 1.791119023s ago: executing program 5 (id=5475): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x7000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.438739294s ago: executing program 9 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "b1c9b5afdb5d724c28656de421260900"}]}, 0x3c}}, 0x10) 807.755965ms ago: executing program 6 (id=5478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x6c}}, 0x0) 779.495081ms ago: executing program 9 (id=5479): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x1, 0x8, 0xfffffffe}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 601.979435ms ago: executing program 9 (id=5480): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 451.034115ms ago: executing program 6 (id=5481): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x400c885) 290.821117ms ago: executing program 9 (id=5482): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x4, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 187.095526ms ago: executing program 9 (id=5483): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000440)={0x80000006}) 142.925508ms ago: executing program 6 (id=5484): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8a945000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) 0s ago: executing program 9 (id=5485): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, 0x0, 0x6e, 0x6, 0x400, 0x4, 0xd5a4, 0x8, 0x0, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) kernel console output (not intermixed with test programs): 0): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.7.4673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8ed85d29 code=0x0 [ 531.552707][T21440] netlink: 'syz.1.4674': attribute type 14 has an invalid length. [ 532.152860][ T5835] Bluetooth: hci4: command tx timeout [ 532.437491][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4687'. [ 532.532804][ T8] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 532.673599][T21322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.711363][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.725380][T21322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.752804][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.753557][T21322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.774864][ T8] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=e2.a5 [ 532.784373][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.813981][ T8] usb 6-1: config 0 descriptor?? [ 532.835588][T21322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.990792][T21322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.045323][ T8] usb 6-1: USB disconnect, device number 15 [ 533.052264][T21322] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.092776][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.099892][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.141971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.149183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.267912][T21492] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4692'. [ 533.287722][T21322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.304841][T21322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.409188][T21322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.523632][T21322] veth0_vlan: entered promiscuous mode [ 533.580603][T21322] veth1_vlan: entered promiscuous mode [ 533.612550][T21322] veth0_macvtap: entered promiscuous mode [ 533.622028][T21322] veth1_macvtap: entered promiscuous mode [ 533.800255][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.813556][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.829457][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4697'. [ 533.842702][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.859820][T21508] kvm: kvm [21507]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000004c) = 0x0 [ 533.866992][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4697'. [ 533.878613][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.902692][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.935881][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.946038][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.957341][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.969789][T21322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.009153][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.092650][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.102499][T21322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.132774][T21322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.154165][T21322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.239199][ T5835] Bluetooth: hci4: command tx timeout [ 534.480152][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.565106][T21322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.580418][T21322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.608214][T21322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.630789][T21322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.818086][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.983773][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.994416][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.004690][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.016321][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.027432][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.043515][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 535.051334][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.132726][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.175353][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.310350][ T12] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.334220][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.342711][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.593203][ T29] audit: type=1326 audit(1734500818.913:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 535.718429][T21574] fuse: Invalid uid '00000000000000000003' [ 535.789358][ T12] bridge_slave_1: left allmulticast mode [ 535.797688][ T12] bridge_slave_1: left promiscuous mode [ 535.804280][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.827299][ T12] bridge_slave_0: left allmulticast mode [ 535.839623][ T12] bridge_slave_0: left promiscuous mode [ 535.862756][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.334003][ T29] audit: type=1326 audit(1734500819.683:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e8ed87c47 code=0x7fc00000 [ 536.394800][ T29] audit: type=1326 audit(1734500819.683:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.457405][ T29] audit: type=1326 audit(1734500819.683:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.496854][ T29] audit: type=1326 audit(1734500819.683:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.520758][ T29] audit: type=1326 audit(1734500819.683:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.543679][ T29] audit: type=1326 audit(1734500819.683:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.566924][ T29] audit: type=1326 audit(1734500819.683:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.599215][ T29] audit: type=1326 audit(1734500819.683:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.631336][ T29] audit: type=1326 audit(1734500819.683:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.654671][ T29] audit: type=1326 audit(1734500819.683:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.677648][ T29] audit: type=1326 audit(1734500819.683:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.700721][ T29] audit: type=1326 audit(1734500819.683:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.727586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.748479][ T29] audit: type=1326 audit(1734500819.683:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21558 comm="syz.7.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7fc00000 [ 536.771575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.790111][ T12] bond0 (unregistering): Released all slaves [ 536.942185][T21605] sctp: [Deprecated]: syz.5.4720 (pid 21605) Use of int in max_burst socket option deprecated. [ 536.942185][T21605] Use struct sctp_assoc_value instead [ 536.947335][T21545] chnl_net:caif_netlink_parms(): no params data found [ 537.113845][ T5835] Bluetooth: hci0: command tx timeout [ 537.323069][ T5962] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 537.429029][ T12] hsr_slave_0: left promiscuous mode [ 537.457733][ T12] hsr_slave_1: left promiscuous mode [ 537.482394][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.494782][ T5962] usb 5-1: config 1 interface 0 altsetting 111 bulk endpoint 0x3 has invalid maxpacket 1024 [ 537.495220][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.518871][ T5962] usb 5-1: config 1 interface 0 altsetting 111 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 537.552750][ T5962] usb 5-1: config 1 interface 0 has no altsetting 0 [ 537.565752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.573819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.607235][ T5962] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.621996][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.632204][ T5962] usb 5-1: SerialNumber: syz [ 537.641937][T21608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 537.686266][ T12] veth1_macvtap: left promiscuous mode [ 537.691960][ T12] veth0_macvtap: left promiscuous mode [ 537.698262][ T12] veth1_vlan: left promiscuous mode [ 537.703711][ T12] veth0_vlan: left promiscuous mode [ 537.709639][T21633] input: syz0 as /devices/virtual/input/input62 [ 538.066805][ T5962] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 538.104170][ T5962] usb 5-1: USB disconnect, device number 15 [ 538.423400][ T12] team0 (unregistering): Port device team_slave_1 removed [ 538.469487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 538.936183][T21545] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.947615][T21545] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.957703][T21545] bridge_slave_0: entered allmulticast mode [ 538.966196][T21545] bridge_slave_0: entered promiscuous mode [ 539.010592][T21545] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.030356][T21545] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.072263][T21545] bridge_slave_1: entered allmulticast mode [ 539.110620][T21545] bridge_slave_1: entered promiscuous mode [ 539.193794][ T5835] Bluetooth: hci0: command tx timeout [ 539.258652][T21545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.289581][T21545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.441403][T21545] team0: Port device team_slave_0 added [ 539.478261][T21545] team0: Port device team_slave_1 added [ 539.660570][T21545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.676217][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.741834][T21545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.812959][T21545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.843429][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.919220][T21545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.086744][T21545] hsr_slave_0: entered promiscuous mode [ 540.100746][T21545] hsr_slave_1: entered promiscuous mode [ 540.148057][T21545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.162507][T21545] Cannot create hsr debugfs directory [ 541.274004][ T5835] Bluetooth: hci0: command tx timeout [ 541.643148][T21744] netlink: 'syz.7.4761': attribute type 12 has an invalid length. [ 541.657248][T21744] netlink: 'syz.7.4761': attribute type 2 has an invalid length. [ 541.673846][T21744] netlink: 'syz.7.4761': attribute type 10 has an invalid length. [ 541.899914][T21545] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 541.982810][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 541.990444][T21545] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 542.018063][T21545] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 542.042079][T21545] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 542.162741][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 542.201703][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.233991][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 542.259502][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.288823][ T8] usb 5-1: config 0 descriptor?? [ 542.328847][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.518686][ T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 542.544562][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.626407][T21545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.714756][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.750163][ T5837] usb 5-1: USB disconnect, device number 16 [ 542.788261][T21545] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.827552][T21785] delete_channel: no stack [ 542.924789][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.949084][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.956318][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.989537][T21790] netlink: 'syz.7.4774': attribute type 9 has an invalid length. [ 543.004317][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.022104][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.029297][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.039480][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.059008][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.070127][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.078907][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 543.086494][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.354298][ T5835] Bluetooth: hci0: command tx timeout [ 543.415785][ T12] bridge_slave_1: left allmulticast mode [ 543.424026][ T12] bridge_slave_1: left promiscuous mode [ 543.430974][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.441600][ T12] bridge_slave_0: left allmulticast mode [ 543.447734][ T12] bridge_slave_0: left promiscuous mode [ 543.454642][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.391558][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.421729][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.449329][ T12] bond0 (unregistering): Released all slaves [ 544.500799][T21545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.540473][T21813] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 544.540866][T21848] tap0: tun_chr_ioctl cmd 1074025677 [ 544.567535][T21813] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 544.586080][T21848] tap0: linktype set to 774 [ 544.591837][T21813] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 545.200508][ T5835] Bluetooth: hci2: command tx timeout [ 545.287180][ T12] hsr_slave_0: left promiscuous mode [ 545.298330][ T12] hsr_slave_1: left promiscuous mode [ 545.331586][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.339400][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.361907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.369424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.429600][ T12] veth1_macvtap: left promiscuous mode [ 545.436009][ T12] veth0_macvtap: left promiscuous mode [ 545.441734][ T12] veth1_vlan: left promiscuous mode [ 545.447288][ T12] veth0_vlan: left promiscuous mode [ 545.951169][T21903] xt_connbytes: Forcing CT accounting to be enabled [ 545.981377][T21903] --map-set only usable from mangle table [ 546.433609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 546.510414][ T12] team0 (unregistering): Port device team_slave_0 removed [ 546.565801][T21915] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 547.279083][ T5835] Bluetooth: hci2: command tx timeout [ 547.421235][T21876] netlink: 'syz.4.4786': attribute type 1 has an invalid length. [ 547.433085][T21797] chnl_net:caif_netlink_parms(): no params data found [ 547.596171][T21545] veth0_vlan: entered promiscuous mode [ 547.786369][T21797] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.816312][T21797] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.840277][T21797] bridge_slave_0: entered allmulticast mode [ 547.857021][T21797] bridge_slave_0: entered promiscuous mode [ 547.877279][T21545] veth1_vlan: entered promiscuous mode [ 547.886978][T21797] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.897703][T21797] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.933340][T21797] bridge_slave_1: entered allmulticast mode [ 547.948344][T21797] bridge_slave_1: entered promiscuous mode [ 548.190750][T21797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.214085][T21545] veth0_macvtap: entered promiscuous mode [ 548.224607][T21797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.311914][T21545] veth1_macvtap: entered promiscuous mode [ 548.377296][T21797] team0: Port device team_slave_0 added [ 548.421853][T21797] team0: Port device team_slave_1 added [ 548.469096][T21545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.497068][T21545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.518047][T21545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.534465][T21545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.548165][T21545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.564518][T21545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.581198][T21545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.696473][T21545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.727904][T21545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.748944][T21545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.767389][T21797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.781024][T21797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.806989][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.826284][T21797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.846372][T21797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.855608][T21797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.881508][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.889680][T21797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.043264][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.056496][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.058054][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.074829][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.084410][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.092024][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 549.100292][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.110492][T21545] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.123372][T21545] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.135008][T21545] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.145377][T21545] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.369355][T22003] xt_socket: unknown flags 0x4 [ 549.374543][ T5835] Bluetooth: hci2: command tx timeout [ 549.418959][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.448062][T21797] hsr_slave_0: entered promiscuous mode [ 549.454406][T21797] hsr_slave_1: entered promiscuous mode [ 549.460869][T21797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.477221][T21797] Cannot create hsr debugfs directory [ 549.565842][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.729380][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.855409][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.872047][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.991455][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.019611][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.144488][ T12] bridge_slave_1: left allmulticast mode [ 550.150739][ T12] bridge_slave_1: left promiscuous mode [ 550.156593][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.239093][ T12] bridge_slave_0: left allmulticast mode [ 550.245089][ T12] bridge_slave_0: left promiscuous mode [ 550.250813][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.805643][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.819021][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.830920][ T12] bond0 (unregistering): Released all slaves [ 550.865974][T21997] chnl_net:caif_netlink_parms(): no params data found [ 551.192898][ T5835] Bluetooth: hci3: command tx timeout [ 551.432990][ T5835] Bluetooth: hci2: command tx timeout [ 551.951055][T21997] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.972736][T21997] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.988757][T21997] bridge_slave_0: entered allmulticast mode [ 551.997629][T21997] bridge_slave_0: entered promiscuous mode [ 552.234577][ T12] hsr_slave_0: left promiscuous mode [ 552.246006][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.257808][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.272772][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.281855][ T12] hsr_slave_1: left promiscuous mode [ 552.287764][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.295405][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 552.304802][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.312435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.343865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.360821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.414116][ T12] veth1_macvtap: left promiscuous mode [ 552.421727][ T12] veth0_macvtap: left promiscuous mode [ 552.435092][ T12] veth1_vlan: left promiscuous mode [ 552.440524][ T12] veth0_vlan: left promiscuous mode [ 552.960570][ T12] team0 (unregistering): Port device team_slave_1 removed [ 553.006946][ T12] team0 (unregistering): Port device team_slave_0 removed [ 553.097761][T22113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4844'. [ 553.107356][T22113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4844'. [ 553.273167][ T5835] Bluetooth: hci3: command tx timeout [ 553.545072][T21997] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.552275][T21997] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.564548][T21997] bridge_slave_1: entered allmulticast mode [ 553.571111][T21997] bridge_slave_1: entered promiscuous mode [ 553.664834][T21997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.705324][T21997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.825628][T21997] team0: Port device team_slave_0 added [ 553.876046][T21997] team0: Port device team_slave_1 added [ 553.955931][T21797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.985509][T21797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.997239][T21997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.004996][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.045521][T21997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.061720][T21797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.086960][T21997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.101720][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.130485][T21997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.145831][T21797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.192248][T22099] chnl_net:caif_netlink_parms(): no params data found [ 554.211376][T22130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.306032][T21997] hsr_slave_0: entered promiscuous mode [ 554.321790][T21997] hsr_slave_1: entered promiscuous mode [ 554.330022][T21997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.338046][T21997] Cannot create hsr debugfs directory [ 554.376594][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.393257][ T5835] Bluetooth: hci0: command tx timeout [ 554.474322][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.535596][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.552224][T22099] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.560358][T22099] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.567801][T22099] bridge_slave_0: entered allmulticast mode [ 554.578353][T22099] bridge_slave_0: entered promiscuous mode [ 554.607273][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.621841][T22099] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.629822][T22099] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.637959][T22099] bridge_slave_1: entered allmulticast mode [ 554.645184][T22099] bridge_slave_1: entered promiscuous mode [ 554.707636][T22099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.744731][T22099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.836849][T21797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.943927][T22099] team0: Port device team_slave_0 added [ 554.951935][T22099] team0: Port device team_slave_1 added [ 555.040738][T21797] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.163736][ T12] bridge_slave_1: left allmulticast mode [ 555.169429][ T12] bridge_slave_1: left promiscuous mode [ 555.192997][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.205930][ T12] bridge_slave_0: left allmulticast mode [ 555.211606][ T12] bridge_slave_0: left promiscuous mode [ 555.226759][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.367117][ T5835] Bluetooth: hci3: command tx timeout [ 555.618953][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 555.630210][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.638482][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.646999][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.655187][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 555.663728][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 555.810964][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.821432][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.831412][ T12] bond0 (unregistering): Released all slaves [ 555.851658][T22099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.858847][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.885316][T22099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.989361][T22099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.998118][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.041044][T22099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.098342][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.105487][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.176272][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 556.176288][ T29] audit: type=1326 audit(1734500839.523:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 556.205706][ T29] audit: type=1326 audit(1734500839.523:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 556.240091][ T29] audit: type=1326 audit(1734500839.523:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 556.263083][ T29] audit: type=1326 audit(1734500839.523:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 556.287909][ T29] audit: type=1326 audit(1734500839.523:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 556.380846][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.387976][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.472809][ T5834] Bluetooth: hci0: command tx timeout [ 556.521108][ T12] hsr_slave_0: left promiscuous mode [ 556.546682][ T12] hsr_slave_1: left promiscuous mode [ 556.559755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.567783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.583634][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.591201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.630820][ T12] veth1_macvtap: left promiscuous mode [ 556.651180][ T12] veth0_macvtap: left promiscuous mode [ 556.657134][ T12] veth1_vlan: left promiscuous mode [ 556.662525][ T12] veth0_vlan: left promiscuous mode [ 557.408028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 557.439326][ T5834] Bluetooth: hci3: command tx timeout [ 557.470052][ T12] team0 (unregistering): Port device team_slave_0 removed [ 557.758806][ T5834] Bluetooth: hci4: command tx timeout [ 557.997099][T22099] hsr_slave_0: entered promiscuous mode [ 558.004067][T22099] hsr_slave_1: entered promiscuous mode [ 558.010087][T22099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.018629][T22099] Cannot create hsr debugfs directory [ 558.037997][T22179] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 558.278929][T21997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 558.299325][T21997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 558.356307][T21997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 558.396415][T22151] chnl_net:caif_netlink_parms(): no params data found [ 558.426640][T21997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 558.553499][ T5834] Bluetooth: hci0: command tx timeout [ 558.588038][T21797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.730681][T22151] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.746163][T22151] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.757809][T22151] bridge_slave_0: entered allmulticast mode [ 558.767691][T22151] bridge_slave_0: entered promiscuous mode [ 558.864502][T22151] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.871669][T22151] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.883886][T22151] bridge_slave_1: entered allmulticast mode [ 558.890811][T22151] bridge_slave_1: entered promiscuous mode [ 558.904886][T21797] veth0_vlan: entered promiscuous mode [ 559.004721][T21797] veth1_vlan: entered promiscuous mode [ 559.122336][T21797] veth0_macvtap: entered promiscuous mode [ 559.146709][T21797] veth1_macvtap: entered promiscuous mode [ 559.165655][T22151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.224507][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.256221][T21797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.277479][T21797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.290517][T21797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.301396][T21797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.325118][T21797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.337548][T22151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.380893][T21997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.454790][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.487686][T22151] team0: Port device team_slave_0 added [ 559.505398][T22151] team0: Port device team_slave_1 added [ 559.559405][T21797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.571931][T21797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.586201][T21797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.607459][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.627216][T22151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.634332][T22151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.661465][T22151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.687362][T21997] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.718313][T22099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 559.734836][T22151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.741807][T22151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.768475][T22151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.801529][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.819086][T21797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.830273][T21797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.839534][ T5834] Bluetooth: hci4: command tx timeout [ 559.846113][T21797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.855557][T21797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.883398][T22099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 559.917441][T22099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 559.933877][T22099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 559.954100][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.961174][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.136268][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.143435][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.176290][T22151] hsr_slave_0: entered promiscuous mode [ 560.191100][T22151] hsr_slave_1: entered promiscuous mode [ 560.199439][T22151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.208152][T22151] Cannot create hsr debugfs directory [ 560.384732][ T12] bridge_slave_1: left allmulticast mode [ 560.390426][ T12] bridge_slave_1: left promiscuous mode [ 560.400476][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.415166][ T12] bridge_slave_0: left allmulticast mode [ 560.420944][ T12] bridge_slave_0: left promiscuous mode [ 560.426951][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.633248][ T5834] Bluetooth: hci0: command tx timeout [ 560.987748][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.015645][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.028953][ T12] bond0 (unregistering): Released all slaves [ 561.050658][T21997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 561.061708][T21997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.174965][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.193348][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.244531][T21997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.299561][T22213] tun0: tun_chr_ioctl cmd 2147767519 [ 561.339051][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.349841][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.570523][T22099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.653070][ T12] hsr_slave_0: left promiscuous mode [ 561.670271][ T12] hsr_slave_1: left promiscuous mode [ 561.680464][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.695547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.711455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.719768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.744805][ T12] veth1_macvtap: left promiscuous mode [ 561.750344][ T12] veth0_macvtap: left promiscuous mode [ 561.756614][ T12] veth1_vlan: left promiscuous mode [ 561.761930][ T12] veth0_vlan: left promiscuous mode [ 561.913160][ T5834] Bluetooth: hci4: command tx timeout [ 562.330735][ T12] team0 (unregistering): Port device team_slave_1 removed [ 562.370543][ T12] team0 (unregistering): Port device team_slave_0 removed [ 562.954205][T21997] veth0_vlan: entered promiscuous mode [ 562.988275][T22099] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.009438][T21997] veth1_vlan: entered promiscuous mode [ 563.034680][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.041022][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.054584][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.061714][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.184620][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.191745][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.294454][T21997] veth0_macvtap: entered promiscuous mode [ 563.328132][T21997] veth1_macvtap: entered promiscuous mode [ 563.394283][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.422692][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.432542][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.479566][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.503901][T21997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.586161][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.613380][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.646420][T21997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.712365][T21997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.726568][T21997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.736022][T21997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.745436][T21997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.869372][T22099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.897297][T22254] tap0: tun_chr_ioctl cmd 2147767507 [ 563.940774][T22151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.954176][T22151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.993830][ T5834] Bluetooth: hci4: command tx timeout [ 564.006394][T22151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 564.048248][T22151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 564.134957][T22099] veth0_vlan: entered promiscuous mode [ 564.145877][T22099] veth1_vlan: entered promiscuous mode [ 564.170153][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.191937][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.240885][T22238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.276812][T22238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.321125][T22151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.338299][T22151] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.369180][T22151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.379727][T22151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.406688][T22151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.437783][T22151] veth0_vlan: entered promiscuous mode [ 564.448042][T22151] veth1_vlan: entered promiscuous mode [ 564.455885][T22099] veth0_macvtap: entered promiscuous mode [ 564.469815][T22238] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.476948][T22238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.517884][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.525039][T22238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.584402][T22099] veth1_macvtap: entered promiscuous mode [ 564.610550][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.622265][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.632181][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.642998][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.652880][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.663378][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.675566][T22099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.696145][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.714802][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.741470][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.752332][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.763873][T22099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.790312][T22099] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.800756][T22099] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.810201][T22099] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.820714][T22099] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.833809][T22151] veth0_macvtap: entered promiscuous mode [ 564.849891][T22151] veth1_macvtap: entered promiscuous mode [ 564.906858][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.917861][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.930597][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.952742][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.962870][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.973608][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.978065][T22276] vxcan1: tx address claim with dlc 1 [ 564.983932][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.999984][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.011161][T22151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.021671][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.032171][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.042400][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.052902][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.062969][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.073447][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.085441][T22151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.096476][T22151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.105453][T22151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.114350][T22151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.123981][T22151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.184496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.209526][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.330149][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.339451][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.357604][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.370928][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.446795][T22238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.475364][T22238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.753206][ T29] audit: type=1326 audit(1734500849.093:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.867419][ T29] audit: type=1326 audit(1734500849.093:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.890155][ T29] audit: type=1326 audit(1734500849.133:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.912726][ T29] audit: type=1326 audit(1734500849.133:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.938274][ T29] audit: type=1326 audit(1734500849.133:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.960762][ T29] audit: type=1326 audit(1734500849.143:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 565.983231][ T29] audit: type=1326 audit(1734500849.143:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 566.012666][ T29] audit: type=1326 audit(1734500849.143:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 566.035357][ T29] audit: type=1326 audit(1734500849.153:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 566.058022][ T29] audit: type=1326 audit(1734500849.153:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.3.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x7ffc0000 [ 566.299724][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4923'. [ 567.437091][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4934'. [ 568.001785][T22391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4942'. [ 570.685167][T22519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4981'. [ 571.513113][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 571.642028][T22564] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 571.683940][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 571.693821][ T9] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 571.722037][ T9] usb 9-1: config 0 has no interface number 0 [ 571.747799][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 571.767387][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.790168][ T9] usb 9-1: Product: syz [ 571.799163][ T9] usb 9-1: Manufacturer: syz [ 571.821114][ T9] usb 9-1: SerialNumber: syz [ 571.850020][ T9] usb 9-1: config 0 descriptor?? [ 571.916153][ T9] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 571.923872][ T9] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 572.132152][ T9] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 572.338411][ T9] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 572.536667][T22601] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 572.548911][ T8] usb 9-1: USB disconnect, device number 38 [ 572.555741][ T8] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 573.406790][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5016'. [ 573.633352][ T2908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.806100][ T2908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.885558][ T3076] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 573.964254][ T2908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.043923][ T3076] usb 9-1: Using ep0 maxpacket: 8 [ 574.077208][ T3076] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.107428][ T3076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.158391][ T2908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.163132][ T3076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 574.224301][ T3076] usb 9-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 574.233980][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.241998][ T3076] usb 9-1: Product: syz [ 574.267021][ T3076] usb 9-1: Manufacturer: syz [ 574.271652][ T3076] usb 9-1: SerialNumber: syz [ 574.323808][ T3076] usb 9-1: config 0 descriptor?? [ 574.455421][ T2908] bridge_slave_1: left allmulticast mode [ 574.461148][ T2908] bridge_slave_1: left promiscuous mode [ 574.499505][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.535027][ T3076] radio-si470x 9-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 574.570625][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.582798][ T2908] bridge_slave_0: left allmulticast mode [ 574.588499][ T2908] bridge_slave_0: left promiscuous mode [ 574.594318][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.603239][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.615332][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.625041][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.643830][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 574.666585][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 574.740660][ T3076] radio-si470x 9-1:0.0: software version 98, hardware version 86 [ 574.941693][ T3076] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 574.951820][ T3076] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 574.982854][ T3076] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 575.013393][ T3076] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 575.063589][ T3076] usb 9-1: USB disconnect, device number 39 [ 575.429687][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.441332][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.452405][ T2908] bond0 (unregistering): Released all slaves [ 576.268006][T22685] chnl_net:caif_netlink_parms(): no params data found [ 576.640461][T22759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.693791][ T2908] hsr_slave_0: left promiscuous mode [ 576.712704][ T5835] Bluetooth: hci2: command tx timeout [ 576.731993][ T2908] hsr_slave_1: left promiscuous mode [ 576.841458][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.860289][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.013476][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.041279][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.078049][T22771] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5043'. [ 577.131018][ T2908] veth1_macvtap: left promiscuous mode [ 577.140348][ T2908] veth0_macvtap: left promiscuous mode [ 577.150750][ T2908] veth1_vlan: left promiscuous mode [ 577.158708][ T2908] veth0_vlan: left promiscuous mode [ 578.130553][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 578.209518][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 578.797504][ T5835] Bluetooth: hci2: command tx timeout [ 579.143120][T22771] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5043'. [ 579.152750][T22818] hsr0: entered allmulticast mode [ 579.157827][T22818] hsr_slave_0: entered allmulticast mode [ 579.193077][T22818] hsr_slave_1: entered allmulticast mode [ 579.459543][T22685] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.473112][T22685] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.480305][T22685] bridge_slave_0: entered allmulticast mode [ 579.487296][T22685] bridge_slave_0: entered promiscuous mode [ 579.494893][T22685] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.502006][T22685] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.509223][T22685] bridge_slave_1: entered allmulticast mode [ 579.517137][T22685] bridge_slave_1: entered promiscuous mode [ 579.791140][T22685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.835025][T22685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.122447][T22685] team0: Port device team_slave_0 added [ 580.144817][T22685] team0: Port device team_slave_1 added [ 580.298074][T22685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.313840][T22685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.362911][T22685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.449664][T22685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.471309][T22685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.572706][T22685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.761153][T22685] hsr_slave_0: entered promiscuous mode [ 580.787233][T22685] hsr_slave_1: entered promiscuous mode [ 580.804572][T22901] vlan2: entered promiscuous mode [ 580.832744][T22901] xfrm0: entered promiscuous mode [ 580.850604][T22901] vlan2: entered allmulticast mode [ 580.869685][T22901] xfrm0: entered allmulticast mode [ 580.875174][ T5835] Bluetooth: hci2: command tx timeout [ 581.443323][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 581.604625][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 581.620845][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 581.644890][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 581.686053][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 581.714425][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.741331][ T9] usb 3-1: Product: syz [ 581.774051][ T9] usb 3-1: Manufacturer: syz [ 581.790744][ T9] usb 3-1: SerialNumber: syz [ 581.820375][T22916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 581.838009][T22685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 581.856052][T22916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 581.873982][T22685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 581.925788][T22685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 581.965174][T22685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.098130][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 582.169996][ T9] usb 3-1: USB disconnect, device number 14 [ 582.224065][ T9] usblp0: removed [ 582.247291][T22685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.311282][T22685] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.427958][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.435154][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.458728][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.465902][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.602300][T22685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.744775][T22685] veth0_vlan: entered promiscuous mode [ 582.799369][T22685] veth1_vlan: entered promiscuous mode [ 582.885134][T22685] veth0_macvtap: entered promiscuous mode [ 582.905145][T22685] veth1_macvtap: entered promiscuous mode [ 582.952317][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.958003][ T5835] Bluetooth: hci2: command tx timeout [ 583.014978][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.025216][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.036175][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.051259][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.062278][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.082917][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.130280][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.154278][T22685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.182984][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.207342][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.247788][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.292675][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.341044][T22685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.357638][T22685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.370239][T22685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.396017][T22685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.410253][T22685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.419529][T22685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.432725][T22685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.652743][ T8496] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 583.711450][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.744086][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.799879][T22999] netlink: 'syz.7.5088': attribute type 18 has an invalid length. [ 583.808585][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.813154][ T8496] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.822856][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.834985][ T8496] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 583.858965][T22999] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.868037][T22999] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.877128][T22999] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.877492][ T8496] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.885869][T22999] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.935401][ T8496] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 583.946798][ T8496] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 583.975599][ T8496] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.994943][ T8496] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.020000][ T8496] usb 3-1: Product: syz [ 584.042251][ T8496] usb 3-1: Manufacturer: syz [ 584.063038][ T8496] cdc_wdm 3-1:1.0: skipping garbage [ 584.071670][ T8496] cdc_wdm 3-1:1.0: skipping garbage [ 584.093578][ T8496] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 584.117191][ T8496] cdc_wdm 3-1:1.0: Unknown control protocol [ 584.392204][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 584.392222][ T29] audit: type=1326 audit(1734500867.733:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.392680][ T8] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 584.446100][ T29] audit: type=1326 audit(1734500867.793:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.545907][ T29] audit: type=1326 audit(1734500867.813:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.578482][ T29] audit: type=1326 audit(1734500867.813:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.612363][ T29] audit: type=1326 audit(1734500867.813:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.623556][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 584.639697][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 584.688513][ T29] audit: type=1326 audit(1734500867.833:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.751037][ T8] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 584.772147][ T8] usb 9-1: can't read configurations, error -71 [ 584.782241][ T29] audit: type=1326 audit(1734500867.833:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 584.843847][ T5962] usb 3-1: USB disconnect, device number 15 [ 584.882122][ T29] audit: type=1326 audit(1734500867.833:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23026 comm="syz.7.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8ed85d29 code=0x7ffc0000 [ 585.310492][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5103'. [ 585.899695][T23092] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 587.560718][T23163] unknown channel width for channel at 907000KHz? [ 587.850058][ T29] audit: type=1326 audit(1734500871.193:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.8.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 587.968007][ T29] audit: type=1326 audit(1734500871.193:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23175 comm="syz.8.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 589.273520][ T5839] IPVS: starting estimator thread 0... [ 589.373223][T23244] IPVS: using max 22 ests per chain, 52800 per kthread [ 590.103895][T23281] bridge0: port 3(netdevsim2) entered blocking state [ 590.133429][T23281] bridge0: port 3(netdevsim2) entered disabled state [ 590.140332][T23281] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 590.205533][T23281] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 590.206001][T23281] bridge0: port 3(netdevsim2) entered blocking state [ 590.206074][T23281] bridge0: port 3(netdevsim2) entered forwarding state [ 590.377117][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.545429][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.723256][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.786251][T23303] netlink: 'syz.1.5169': attribute type 2 has an invalid length. [ 590.894197][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.943139][ T5837] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 591.114417][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.158965][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.186290][ T5837] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 591.211733][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.234818][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.249910][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.258447][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.266459][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.275924][ T5837] usb 9-1: config 0 descriptor?? [ 591.287015][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 591.295241][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 591.379185][ T11] bridge_slave_1: left allmulticast mode [ 591.385181][ T11] bridge_slave_1: left promiscuous mode [ 591.390899][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.471159][ T11] bridge_slave_0: left allmulticast mode [ 591.477048][ T11] bridge_slave_0: left promiscuous mode [ 591.485330][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.778645][ T5837] steelseries 0003:1038:12B6.003D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.8-1/input0 [ 592.048095][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 592.048113][ T29] audit: type=1326 audit(1734500875.383:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.3.5173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426ab85d29 code=0x0 [ 592.208352][ T5878] usb 9-1: USB disconnect, device number 42 [ 592.572754][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.591721][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.626279][ T11] bond0 (unregistering): Released all slaves [ 593.402741][ T5834] Bluetooth: hci3: command tx timeout [ 593.445926][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 593.456074][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 593.496259][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 593.510115][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 593.526207][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 593.543298][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 593.878024][ T11] hsr_slave_0: left promiscuous mode [ 593.897643][ T11] hsr_slave_1: left promiscuous mode [ 593.932929][ T5962] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 593.950773][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.975090][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.999881][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.014878][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.060462][ T11] veth1_macvtap: left promiscuous mode [ 594.070423][ T11] veth0_macvtap: left promiscuous mode [ 594.076702][ T11] veth1_vlan: left promiscuous mode [ 594.082005][ T11] veth0_vlan: left promiscuous mode [ 594.132891][ T5962] usb 9-1: Using ep0 maxpacket: 32 [ 594.139790][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.160223][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.170219][ T5962] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 594.182315][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.200291][ T5962] usb 9-1: config 0 descriptor?? [ 594.343028][ T5878] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 594.523330][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 594.550830][ T5878] usb 2-1: config 0 has no interfaces? [ 594.576767][ T5878] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 594.597869][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 594.608635][ T5878] usb 2-1: Product: syz [ 594.613265][ T5878] usb 2-1: SerialNumber: syz [ 594.620558][ T5962] hid_mf 0003:0079:1801.003E: unknown main item tag 0x0 [ 594.630825][ T5878] usb 2-1: config 0 descriptor?? [ 594.636280][ T5962] hid_mf 0003:0079:1801.003E: unknown main item tag 0x0 [ 594.663840][ T5962] hid_mf 0003:0079:1801.003E: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.8-1/input0 [ 594.684454][ T5962] hid_mf 0003:0079:1801.003E: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 594.712332][ T11] team0 (unregistering): Port device team_slave_1 removed [ 594.766156][ T11] team0 (unregistering): Port device team_slave_0 removed [ 594.823302][ T5962] usb 9-1: USB disconnect, device number 43 [ 594.858515][ T3076] usb 2-1: USB disconnect, device number 29 [ 595.433176][ T5834] Bluetooth: hci3: command tx timeout [ 595.585246][T23322] chnl_net:caif_netlink_parms(): no params data found [ 595.593782][ T5834] Bluetooth: hci1: command tx timeout [ 595.876800][T23379] chnl_net:caif_netlink_parms(): no params data found [ 595.891322][T23322] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.899234][T23322] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.907041][T23322] bridge_slave_0: entered allmulticast mode [ 595.918527][T23322] bridge_slave_0: entered promiscuous mode [ 595.929274][T23322] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.936638][T23322] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.946125][T23322] bridge_slave_1: entered allmulticast mode [ 595.959722][T23322] bridge_slave_1: entered promiscuous mode [ 596.055014][T23322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.090974][T23322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.257877][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.280075][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.368462][ T29] audit: type=1326 audit(1734500879.713:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.402687][ T29] audit: type=1326 audit(1734500879.713:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.457371][ T29] audit: type=1326 audit(1734500879.713:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.563327][ T29] audit: type=1326 audit(1734500879.713:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.585992][ T29] audit: type=1326 audit(1734500879.713:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.608323][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.614508][ T29] audit: type=1326 audit(1734500879.713:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.637261][ T29] audit: type=1326 audit(1734500879.723:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.659578][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.666219][ T29] audit: type=1326 audit(1734500879.723:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.688452][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.709500][ T29] audit: type=1326 audit(1734500879.723:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23451 comm="syz.8.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b32f85d29 code=0x7ffc0000 [ 596.754913][T23322] team0: Port device team_slave_0 added [ 596.787222][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.811463][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.920056][T23322] team0: Port device team_slave_1 added [ 596.951859][T23466] kvm: kvm [23465]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 596.993817][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.017033][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.043359][T23379] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.063126][T23379] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.099927][T23379] bridge_slave_0: entered allmulticast mode [ 597.110543][T23379] bridge_slave_0: entered promiscuous mode [ 597.146668][T23379] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.162733][T23379] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.172815][T23379] bridge_slave_1: entered allmulticast mode [ 597.180440][T23379] bridge_slave_1: entered promiscuous mode [ 597.335047][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.362650][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.413353][T23322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.420331][T23322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.446207][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.503721][T23322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.523195][ T5834] Bluetooth: hci3: command tx timeout [ 597.544256][T23322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.582876][T23322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.608774][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.650581][T23322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.672901][ T5834] Bluetooth: hci1: command tx timeout [ 597.685760][T23379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.697664][T23379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.004322][T23379] team0: Port device team_slave_0 added [ 598.013975][T23379] team0: Port device team_slave_1 added [ 598.043400][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.055100][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.063348][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.071895][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.079950][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 598.087401][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.203717][T23379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.234480][T23379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.266644][T23379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.346194][T23322] hsr_slave_0: entered promiscuous mode [ 598.358317][T23322] hsr_slave_1: entered promiscuous mode [ 598.377528][T23322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.402654][T23322] Cannot create hsr debugfs directory [ 598.411787][T23379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.442049][T23379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.470729][T23379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.486807][ T11] bridge_slave_1: left allmulticast mode [ 598.512761][ T11] bridge_slave_1: left promiscuous mode [ 598.518504][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.543049][ T11] bridge_slave_0: left allmulticast mode [ 598.549213][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.041099][ T11] batman_adv: batadv0: Interface deactivated: macvlan2 [ 599.087061][ T11] gretap0 (unregistering): left promiscuous mode [ 599.144118][ T11] batman_adv: batadv0: Removing interface: macvlan2 [ 599.601549][ T5835] Bluetooth: hci3: command tx timeout [ 599.775049][ T5835] Bluetooth: hci1: command tx timeout [ 599.989662][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.036618][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.060574][ T11] bond0 (unregistering): Released all slaves [ 600.143078][T23584] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 600.173067][ T5835] Bluetooth: hci4: command tx timeout [ 600.406485][T23379] hsr_slave_0: entered promiscuous mode [ 600.406867][T23614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.432632][T23379] hsr_slave_1: entered promiscuous mode [ 600.445907][T23379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.464158][T23379] Cannot create hsr debugfs directory [ 601.111151][ T11] hsr_slave_0: left promiscuous mode [ 601.133396][ T11] hsr_slave_1: left promiscuous mode [ 601.139961][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.151139][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.159033][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.178860][ T11] veth1_macvtap: left promiscuous mode [ 601.184743][ T11] veth0_macvtap: left promiscuous mode [ 601.190362][ T11] veth1_vlan: left promiscuous mode [ 601.196201][ T11] veth0_vlan: left promiscuous mode [ 601.415741][ T5962] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 601.588176][ T5962] usb 9-1: config 0 has an invalid interface number: 250 but max is 0 [ 601.598897][ T5962] usb 9-1: config 0 has no interface number 0 [ 601.605555][ T5962] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 601.615002][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.624997][ T5962] usb 9-1: config 0 descriptor?? [ 601.647446][ T11] team0 (unregistering): Port device team_slave_1 removed [ 601.687681][ T11] team0 (unregistering): Port device team_slave_0 removed [ 601.762986][ T5962] usb 9-1: reset high-speed USB device number 44 using dummy_hcd [ 601.836115][ T5835] Bluetooth: hci1: command tx timeout [ 602.233176][ T5835] Bluetooth: hci4: command tx timeout [ 602.437352][T23511] chnl_net:caif_netlink_parms(): no params data found [ 602.482753][ T5962] usb 9-1: device descriptor read/64, error -71 [ 602.714989][T23511] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.722156][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.732877][ T5962] usb 9-1: reset high-speed USB device number 44 using dummy_hcd [ 602.763820][T23511] bridge_slave_0: entered allmulticast mode [ 602.770510][T23511] bridge_slave_0: entered promiscuous mode [ 602.832841][T23511] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.853030][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.881789][T23511] bridge_slave_1: entered allmulticast mode [ 602.896581][T23511] bridge_slave_1: entered promiscuous mode [ 602.928469][ T5962] usb 9-1: device firmware changed [ 602.939315][ T5962] usb 9-1: USB disconnect, device number 44 [ 602.989569][T23511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.018932][T23511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.054081][T23511] team0: Port device team_slave_0 added [ 603.070737][T23511] team0: Port device team_slave_1 added [ 603.102701][ T5962] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 603.124934][T23511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.131902][T23511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.168676][T23511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.256083][ T5962] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 603.257992][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.264390][ T5962] usb 9-1: config 0 has no interface number 0 [ 603.266313][ T5962] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 603.299090][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.307212][ T5962] usb 9-1: Product: syz [ 603.311379][ T5962] usb 9-1: Manufacturer: syz [ 603.316211][ T5962] usb 9-1: SerialNumber: syz [ 603.330249][ T5962] usb 9-1: config 0 descriptor?? [ 603.336592][T23511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.343721][T23511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.369788][T23511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.605183][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.663142][T23322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.670086][ T5962] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 603.697610][ T5962] usb 9-1: USB disconnect, device number 45 [ 603.714257][T23322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.740093][T23322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.809329][T23511] hsr_slave_0: entered promiscuous mode [ 603.830586][T23511] hsr_slave_1: entered promiscuous mode [ 603.860114][T23511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.880240][T23511] Cannot create hsr debugfs directory [ 603.954786][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.976958][T23322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.096346][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.174883][T23379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.185071][T23379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.232778][T23379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.312773][ T5835] Bluetooth: hci4: command tx timeout [ 604.354679][T23379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 604.510463][ T35] bridge_slave_1: left allmulticast mode [ 604.519323][ T35] bridge_slave_1: left promiscuous mode [ 604.526242][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.583612][ T35] bridge_slave_0: left allmulticast mode [ 604.589293][ T35] bridge_slave_0: left promiscuous mode [ 604.605414][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.941859][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.957999][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.968563][ T35] bond0 (unregistering): Released all slaves [ 605.576204][T23322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.785573][T23322] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.800608][T23379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.875465][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.882617][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.937010][ T35] hsr_slave_0: left promiscuous mode [ 605.943342][ T35] hsr_slave_1: left promiscuous mode [ 605.950505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.962526][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.970853][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.978927][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.998687][ T35] veth1_macvtap: left promiscuous mode [ 606.004625][ T35] veth0_macvtap: left promiscuous mode [ 606.010219][ T35] veth1_vlan: left promiscuous mode [ 606.015845][ T35] veth0_vlan: left promiscuous mode [ 606.304065][ T35] hsr0 (unregistering): left allmulticast mode [ 606.392859][ T5835] Bluetooth: hci4: command tx timeout [ 606.475861][ T35] team0 (unregistering): Port device team_slave_1 removed [ 606.520716][ T35] team0 (unregistering): Port device team_slave_0 removed [ 606.958364][T23379] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.061763][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.068910][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.105178][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.112312][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.203822][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.210953][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.320317][T23511] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 607.348938][T23511] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 607.388667][T23511] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 607.419829][T23765] trusted_key: syz.1.5278 sent an empty control message without MSG_MORE. [ 607.440856][T23511] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 607.506464][T23322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.535373][T23379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.729664][T23379] veth0_vlan: entered promiscuous mode [ 607.751533][T23322] veth0_vlan: entered promiscuous mode [ 607.778880][T23511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.789343][T23379] veth1_vlan: entered promiscuous mode [ 607.804812][T23322] veth1_vlan: entered promiscuous mode [ 607.881286][T23379] veth0_macvtap: entered promiscuous mode [ 607.902074][T23322] veth0_macvtap: entered promiscuous mode [ 607.910947][T23379] veth1_macvtap: entered promiscuous mode [ 607.922384][T23511] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.931758][T23322] veth1_macvtap: entered promiscuous mode [ 607.947275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.954374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.993938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.001079][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.022479][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.038957][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.049288][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.060607][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.071593][T23322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.097939][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.108543][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.119177][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.130878][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.141853][T23322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.170519][T23322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.185879][T23322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.195440][T23322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.204349][T23322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.216685][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.232030][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.245226][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.255940][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.265866][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.276414][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.287855][T23379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.308358][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.320231][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.330541][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.341141][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.351002][T23379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.361502][T23379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.372265][T23379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.380344][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5285'. [ 608.403216][T23379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.416559][T23379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.425327][T23379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.434516][T23379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.541924][T23511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.550658][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.570305][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.689703][T22238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.703751][T22238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.723126][T22238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.730974][T22238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.795428][T23511] veth0_vlan: entered promiscuous mode [ 608.808197][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.848322][T23511] veth1_vlan: entered promiscuous mode [ 608.875903][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.976184][T23511] veth0_macvtap: entered promiscuous mode [ 609.022144][T23511] veth1_macvtap: entered promiscuous mode [ 609.041377][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.103166][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.132913][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.148728][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.168925][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.224966][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.275173][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.310046][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.333929][T23511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.395049][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.442750][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.472840][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.502739][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.521534][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.542733][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.553061][T23511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.564081][T23511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.577836][T23511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.589201][T23511] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.599026][T23511] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.609569][T23511] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.619096][T23511] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.639832][T23804] batadv_slave_1: entered promiscuous mode [ 609.655557][T23807] batadv_slave_1: left promiscuous mode [ 609.785838][T23812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.063754][T22238] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.213468][T22238] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.359754][T22238] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.488350][T23825] sctp: [Deprecated]: syz.5.5305 (pid 23825) Use of int in maxseg socket option. [ 610.488350][T23825] Use struct sctp_assoc_value instead [ 610.504714][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.512552][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.611443][T22238] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.801602][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 610.811243][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 610.821989][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 610.840053][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 610.851542][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 610.864041][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.914727][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.929779][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.122750][ T3076] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 611.172009][T22238] bridge_slave_1: left allmulticast mode [ 611.193628][T22238] bridge_slave_1: left promiscuous mode [ 611.199383][T22238] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.211014][T22238] bridge_slave_0: left allmulticast mode [ 611.217263][T22238] bridge_slave_0: left promiscuous mode [ 611.223060][T22238] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.331397][ T3076] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 611.340962][ T3076] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.352499][ T3076] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 611.363366][ T8496] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 611.368012][ T3076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.402389][ T3076] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 611.411825][ T3076] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.412228][T22238] xfrm0: left allmulticast mode [ 611.422025][ T3076] usb 2-1: Product: syz [ 611.429544][ T3076] usb 2-1: Manufacturer: syz [ 611.430518][T22238] xfrm0: left promiscuous mode [ 611.453880][ T3076] cdc_wdm 2-1:1.0: skipping garbage [ 611.461012][ T3076] cdc_wdm 2-1:1.0: skipping garbage [ 611.485930][ T3076] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 611.491866][ T3076] cdc_wdm 2-1:1.0: Unknown control protocol [ 611.529970][ T8496] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 611.551752][ T8496] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.573887][ T8496] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 611.583306][ T8496] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.599954][ T8496] usb 10-1: config 0 descriptor?? [ 611.894736][T22238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.910069][T22238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.922153][T22238] bond0 (unregistering): Released all slaves [ 612.082994][ T8496] corsair-psu 0003:1B1C:1C0D.003F: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.9-1/input0 [ 612.245359][ T8496] corsair-psu 0003:1B1C:1C0D.003F: unable to initialize device (-71) [ 612.260334][ T8496] corsair-psu 0003:1B1C:1C0D.003F: probe with driver corsair-psu failed with error -71 [ 612.351915][ T8496] usb 10-1: USB disconnect, device number 15 [ 612.520993][T23834] chnl_net:caif_netlink_parms(): no params data found [ 612.618287][T22238] hsr_slave_0: left promiscuous mode [ 612.655276][T22238] hsr_slave_1: left promiscuous mode [ 612.681786][T22238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.700430][T22238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.714406][T22238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.734151][T22238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.826448][T22238] veth1_macvtap: left promiscuous mode [ 612.832034][T22238] veth0_macvtap: left promiscuous mode [ 612.862835][T22238] veth1_vlan: left promiscuous mode [ 612.880659][T22238] veth0_vlan: left promiscuous mode [ 612.954923][ T5835] Bluetooth: hci0: command tx timeout [ 613.873881][ T8496] usb 2-1: USB disconnect, device number 30 [ 614.093471][T22238] team0 (unregistering): Port device team_slave_1 removed [ 614.178550][T22238] team0 (unregistering): Port device team_slave_0 removed [ 614.382694][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 614.539909][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 614.556148][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.598657][ T8] usb 2-1: config 0 descriptor?? [ 614.618973][ T8] cp210x 2-1:0.0: cp210x converter detected [ 615.031539][ T8] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 615.040267][ T5835] Bluetooth: hci0: command tx timeout [ 615.103079][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 615.280609][T23834] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.306320][T23834] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.318128][ T8] usb 2-1: USB disconnect, device number 31 [ 615.326845][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.348400][T23834] bridge_slave_0: entered allmulticast mode [ 615.365560][ T8] cp210x 2-1:0.0: device disconnected [ 615.374430][T23834] bridge_slave_0: entered promiscuous mode [ 615.392407][T23834] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.401020][T23834] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.416444][T23834] bridge_slave_1: entered allmulticast mode [ 615.443354][T23834] bridge_slave_1: entered promiscuous mode [ 615.674161][T23834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.737932][T23834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.957279][T23834] team0: Port device team_slave_0 added [ 615.981639][T23834] team0: Port device team_slave_1 added [ 616.218574][T23834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.243069][T23834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.300810][T23834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.362515][T23834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.378209][T23834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.441531][T23834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.570609][T23834] hsr_slave_0: entered promiscuous mode [ 616.588321][T23834] hsr_slave_1: entered promiscuous mode [ 616.599056][T23834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.630573][T23834] Cannot create hsr debugfs directory [ 617.112733][ T5835] Bluetooth: hci0: command tx timeout [ 617.647441][T23834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.699989][T23834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.769554][T23834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.800122][T23834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.812807][ T46] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 618.056241][T23834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.059653][ T46] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 618.071283][T23834] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.094269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.101401][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.119946][ T46] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 618.148214][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 618.163538][T22238] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.170655][T22238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.172845][ T46] usb 6-1: config 1 has no interface number 0 [ 618.217975][ T46] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 618.254881][ T46] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 618.303340][ T46] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 618.322875][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.329518][T23834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.375891][ T46] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 618.417698][T23834] veth0_vlan: entered promiscuous mode [ 618.458551][T23834] veth1_vlan: entered promiscuous mode [ 618.518016][T23834] veth0_macvtap: entered promiscuous mode [ 618.561327][T23834] veth1_macvtap: entered promiscuous mode [ 618.606345][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.637921][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.663104][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.691781][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.722417][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.758282][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.783121][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.822017][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.833995][ T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 618.864251][T23834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.894793][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.916987][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.930037][ T46] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 618.937264][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.977683][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.988427][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.002998][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 619.011150][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.029377][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.041052][T23834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.052202][T23834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.067079][ T8] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 619.075868][T23834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.096788][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.116293][T23834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.117868][ T8] usb 10-1: config 0 descriptor?? [ 619.130963][T23834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.161252][T23834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.191636][T23834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.192912][ T5835] Bluetooth: hci0: command tx timeout [ 619.217378][ T5878] usb 6-1: USB disconnect, device number 16 [ 619.233991][ T5878] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 619.404415][T22238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.412279][T22238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.469156][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.488262][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.585872][ T8] appleir 0003:05AC:8241.0040: unknown main item tag 0x0 [ 619.620915][ T8] appleir 0003:05AC:8241.0040: unknown main item tag 0x0 [ 619.638929][ T8] appleir 0003:05AC:8241.0040: unknown main item tag 0x0 [ 619.652676][ T8] appleir 0003:05AC:8241.0040: unknown main item tag 0x0 [ 619.668917][ T8] appleir 0003:05AC:8241.0040: unknown main item tag 0x0 [ 619.693316][ T8] appleir 0003:05AC:8241.0040: No inputs registered, leaving [ 619.746909][ T8] appleir 0003:05AC:8241.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 619.857331][ T8] usb 10-1: USB disconnect, device number 16 [ 620.082816][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 620.247935][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 620.265003][ T5878] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 620.282622][ T5878] usb 5-1: config 0 has no interface number 0 [ 620.288761][ T5878] usb 5-1: config 0 interface 12 has no altsetting 0 [ 620.319966][ T5878] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 620.336413][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.363164][ T5878] usb 5-1: Product: syz [ 620.367361][ T5878] usb 5-1: Manufacturer: syz [ 620.371968][ T5878] usb 5-1: SerialNumber: syz [ 620.392183][ T5878] usb 5-1: config 0 descriptor?? [ 620.648775][ T5878] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 620.672432][ T5878] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 620.691159][ T5878] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 620.699918][ T5878] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 620.739571][ T5878] usb 5-1: USB disconnect, device number 17 [ 621.167970][ T5839] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 621.359931][ T5839] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 621.379775][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.438151][ T5839] usb 6-1: Product: syz [ 621.442373][ T5839] usb 6-1: Manufacturer: syz [ 621.479715][ T5839] usb 6-1: SerialNumber: syz [ 621.504044][ T5839] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 621.537981][ T46] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 622.412216][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 622.622778][ T5878] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 622.633655][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 622.651465][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.673116][ T9] usb 5-1: Product: syz [ 622.685539][ T9] usb 5-1: Manufacturer: syz [ 622.700399][ T9] usb 5-1: SerialNumber: syz [ 622.724512][ T9] usb 5-1: config 0 descriptor?? [ 622.830192][ T5878] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 622.849715][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.874411][ T5878] usb 10-1: config 0 descriptor?? [ 622.885245][ T5878] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 623.113100][ T46] usb 6-1: Service connection timeout for: 257 [ 623.119442][ T46] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 623.136234][ T5878] gp8psk: usb in 128 operation failed. [ 623.168106][ T46] ath9k_htc: Failed to initialize the device [ 623.189954][ T46] usb 6-1: ath9k_htc: USB layer deinitialized [ 623.358110][ T5878] gp8psk: usb in 146 operation failed. [ 623.367605][ T5878] gp8psk: failed to get FW version [ 623.378306][ T5878] gp8psk: FPGA Version = 144 [ 623.465562][ T3076] usb 6-1: USB disconnect, device number 17 [ 623.571984][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 623.578936][ T5878] gp8psk: usb in 138 operation failed. [ 623.580208][ T9] usb 5-1: Please update to version 0.2 or newer [ 623.605070][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 623.624873][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 623.647034][ T5878] usb 10-1: USB disconnect, device number 17 [ 623.667719][T24285] loop2: detected capacity change from 0 to 7 [ 623.689569][T24285] Dev loop2: unable to read RDB block 7 [ 623.695414][T24285] loop2: unable to read partition table [ 623.710210][ T9] usb 5-1: USB disconnect, device number 18 [ 623.732797][T24285] loop2: partition table beyond EOD, truncated [ 623.739020][T24285] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.475332][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.485043][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.764934][ T2908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.069690][ T2908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.337425][ T2908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.736298][ T2908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.737889][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.757405][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.766887][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.808457][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.833575][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 626.841390][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 627.122323][ T2908] bridge_slave_1: left allmulticast mode [ 627.135779][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 627.161062][ T2908] bridge_slave_1: left promiscuous mode [ 627.183242][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.247290][ T2908] bridge_slave_0: left allmulticast mode [ 627.266064][ T2908] bridge_slave_0: left promiscuous mode [ 627.271812][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.333177][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 627.350484][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 627.385686][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.412797][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.424077][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.483510][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.523411][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 627.555757][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.824854][ T9] usb 10-1: usb_control_msg returned -32 [ 627.840895][ T9] usbtmc 10-1:16.0: can't read capabilities [ 628.131898][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.135638][T24460] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5459'. [ 628.152555][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.166190][ T2908] bond0 (unregistering): Released all slaves [ 628.391267][T24465] netlink: 'syz.6.5461': attribute type 32 has an invalid length. [ 628.761639][ T2908] hsr_slave_0: left promiscuous mode [ 628.774579][ T2908] hsr_slave_1: left promiscuous mode [ 628.780581][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.793741][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.828794][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.845835][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.928221][ T2908] veth1_macvtap: left promiscuous mode [ 628.942076][ T2908] veth0_macvtap: left promiscuous mode [ 628.952976][ T5834] Bluetooth: hci0: command tx timeout [ 628.962139][ T2908] veth1_vlan: left promiscuous mode [ 628.974511][ T2908] veth0_vlan: left promiscuous mode [ 629.180198][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.194128][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.202069][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.222972][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.233300][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 629.240610][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.906799][ T9] usb 10-1: USB disconnect, device number 18 [ 630.084632][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 630.221524][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 631.042683][ T5834] Bluetooth: hci0: command tx timeout [ 631.108170][T24521] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5479'. [ 631.215878][T24425] chnl_net:caif_netlink_parms(): no params data found [ 631.362742][ T5834] Bluetooth: hci2: command tx timeout [ 631.546913][T24548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.710834][T24492] chnl_net:caif_netlink_parms(): no params data found [ 631.747123][T24425] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.753690][T24552] [ 631.756232][T24425] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.756496][T24552] ====================================================== [ 631.764450][T24425] bridge_slave_0: entered allmulticast mode [ 631.770497][T24552] WARNING: possible circular locking dependency detected [ 631.770510][T24552] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 631.770522][T24552] ------------------------------------------------------ [ 631.770530][T24552] syz.6.5484/24552 is trying to acquire lock: [ 631.770540][T24552] ffff888148c9b740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x142/0x720 [ 631.770602][T24552] [ 631.770602][T24552] but task is already holding lock: [ 631.770608][T24552] ffff88807f681560 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_create+0x92c/0xf30 [ 631.770651][T24552] [ 631.770651][T24552] which lock already depends on the new lock. [ 631.770651][T24552] [ 631.770658][T24552] [ 631.770658][T24552] the existing dependency chain (in reverse order) is: [ 631.770666][T24552] [ 631.770666][T24552] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 631.770693][T24552] lock_acquire+0x1ed/0x550 [ 631.770713][T24552] __might_fault+0xc6/0x120 [ 631.770728][T24552] _copy_from_user+0x2a/0xc0 [ 631.770748][T24552] blk_trace_ioctl+0x1ad/0x9a0 [ 631.770766][T24552] blkdev_ioctl+0x40c/0x6a0 [ 631.770783][T24552] __se_sys_ioctl+0xf5/0x170 [ 631.770799][T24552] do_syscall_64+0xf3/0x230 [ 631.770821][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.770844][T24552] [ 631.770844][T24552] -> #4 ( [ 631.781058][T24425] bridge_slave_0: entered promiscuous mode [ 631.783718][T24552] &q->debugfs_mutex){+.+.}-{4:4}: [ 631.783744][T24552] lock_acquire+0x1ed/0x550 [ 631.783769][T24552] __mutex_lock+0x1ac/0xee0 [ 631.783793][T24552] blk_mq_init_sched+0x3fa/0x830 [ 631.783811][T24552] elevator_init_mq+0x20e/0x320 [ 631.936423][T24552] add_disk_fwnode+0x10d/0xf80 [ 631.941706][T24552] sd_probe+0xba6/0x1100 [ 631.946468][T24552] really_probe+0x2b8/0xad0 [ 631.951484][T24552] __driver_probe_device+0x1a2/0x390 [ 631.957281][T24552] driver_probe_device+0x50/0x430 [ 631.962814][T24552] __device_attach_driver+0x2d6/0x530 [ 631.968696][T24552] bus_for_each_drv+0x24e/0x2e0 [ 631.974061][T24552] __device_attach_async_helper+0x22d/0x300 [ 631.980461][T24552] async_run_entry_fn+0xa8/0x420 [ 631.985907][T24552] process_scheduled_works+0xa66/0x1840 [ 631.991960][T24552] worker_thread+0x870/0xd30 [ 631.997057][T24552] kthread+0x2f0/0x390 [ 632.001639][T24552] ret_from_fork+0x4b/0x80 [ 632.006564][T24552] ret_from_fork_asm+0x1a/0x30 [ 632.011833][T24552] [ 632.011833][T24552] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 632.020696][T24552] lock_acquire+0x1ed/0x550 [ 632.025714][T24552] blk_queue_enter+0xe1/0x600 [ 632.030898][T24552] blk_mq_alloc_request+0x4fa/0xaa0 [ 632.036609][T24552] scsi_execute_cmd+0x177/0x1090 [ 632.042058][T24552] read_capacity_16+0x2b4/0x1450 [ 632.047518][T24552] sd_revalidate_disk+0x1013/0xbce0 [ 632.053242][T24552] sd_probe+0x9fa/0x1100 [ 632.057995][T24552] really_probe+0x2b8/0xad0 [ 632.063010][T24552] __driver_probe_device+0x1a2/0x390 [ 632.068805][T24552] driver_probe_device+0x50/0x430 [ 632.074338][T24552] __device_attach_driver+0x2d6/0x530 [ 632.080218][T24552] bus_for_each_drv+0x24e/0x2e0 [ 632.085582][T24552] __device_attach_async_helper+0x22d/0x300 [ 632.091988][T24552] async_run_entry_fn+0xa8/0x420 [ 632.097433][T24552] process_scheduled_works+0xa66/0x1840 [ 632.103485][T24552] worker_thread+0x870/0xd30 [ 632.108584][T24552] kthread+0x2f0/0x390 [ 632.113163][T24552] ret_from_fork+0x4b/0x80 [ 632.118089][T24552] ret_from_fork_asm+0x1a/0x30 [ 632.123365][T24552] [ 632.123365][T24552] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 632.131013][T24552] lock_acquire+0x1ed/0x550 [ 632.136034][T24552] __mutex_lock+0x1ac/0xee0 [ 632.141054][T24552] loop_reconfigure_limits+0x43f/0x900 [ 632.147022][T24552] lo_ioctl+0x1351/0x1f50 [ 632.151860][T24552] blkdev_ioctl+0x57d/0x6a0 [ 632.156889][T24552] __se_sys_ioctl+0xf5/0x170 [ 632.162002][T24552] do_syscall_64+0xf3/0x230 [ 632.167033][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.173450][T24552] [ 632.173450][T24552] -> #1 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 632.182061][T24552] lock_acquire+0x1ed/0x550 [ 632.187087][T24552] blk_mq_submit_bio+0x1536/0x2390 [ 632.192719][T24552] __submit_bio+0x2c6/0x560 [ 632.197739][T24552] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 632.203883][T24552] mpage_readahead+0x630/0x780 [ 632.209166][T24552] read_pages+0x176/0x750 [ 632.214012][T24552] page_cache_ra_unbounded+0x606/0x720 [ 632.219986][T24552] page_cache_sync_ra+0x3c5/0xad0 [ 632.225528][T24552] filemap_get_pages+0x605/0x2080 [ 632.231064][T24552] filemap_read+0x452/0xf50 [ 632.236080][T24552] blkdev_read_iter+0x2d8/0x430 [ 632.241447][T24552] vfs_read+0x991/0xb70 [ 632.246114][T24552] ksys_read+0x18f/0x2b0 [ 632.250866][T24552] do_syscall_64+0xf3/0x230 [ 632.255890][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.262301][T24552] [ 632.262301][T24552] -> #0 (mapping.invalidate_lock#2){++++}-{4:4}: [ 632.270822][T24552] validate_chain+0x18ef/0x5920 [ 632.276193][T24552] __lock_acquire+0x1397/0x2100 [ 632.281554][T24552] lock_acquire+0x1ed/0x550 [ 632.286564][T24552] down_read+0xb1/0xa40 [ 632.291235][T24552] page_cache_ra_unbounded+0x142/0x720 [ 632.297211][T24552] filemap_fault+0x818/0x1490 [ 632.302396][T24552] __do_fault+0x135/0x390 [ 632.307235][T24552] handle_pte_fault+0xcab/0x5ed0 [ 632.312687][T24552] handle_mm_fault+0x1106/0x1bb0 [ 632.318142][T24552] __get_user_pages+0x1c82/0x49e0 [ 632.323682][T24552] __gup_longterm_locked+0x49a/0x17f0 [ 632.329562][T24552] pin_user_pages+0x137/0x1f0 [ 632.334746][T24552] xdp_umem_create+0x978/0xf30 [ 632.340022][T24552] xsk_setsockopt+0x732/0x950 [ 632.345207][T24552] do_sock_setsockopt+0x3af/0x720 [ 632.350740][T24552] __x64_sys_setsockopt+0x1ee/0x280 [ 632.356449][T24552] do_syscall_64+0xf3/0x230 [ 632.361470][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.367877][T24552] [ 632.367877][T24552] other info that might help us debug this: [ 632.367877][T24552] [ 632.378089][T24552] Chain exists of: [ 632.378089][T24552] mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock [ 632.378089][T24552] [ 632.392085][T24552] Possible unsafe locking scenario: [ 632.392085][T24552] [ 632.399520][T24552] CPU0 CPU1 [ 632.404871][T24552] ---- ---- [ 632.410220][T24552] rlock(&mm->mmap_lock); [ 632.414627][T24552] lock(&q->debugfs_mutex); [ 632.421727][T24552] lock(&mm->mmap_lock); [ 632.428563][T24552] rlock(mapping.invalidate_lock#2); [ 632.433928][T24552] [ 632.433928][T24552] *** DEADLOCK *** [ 632.433928][T24552] [ 632.442056][T24552] 2 locks held by syz.6.5484/24552: [ 632.447234][T24552] #0: ffff888064b256f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_setsockopt+0x6b2/0x950 [ 632.456372][T24552] #1: ffff88807f681560 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_create+0x92c/0xf30 [ 632.465958][T24552] [ 632.465958][T24552] stack backtrace: [ 632.471844][T24552] CPU: 1 UID: 0 PID: 24552 Comm: syz.6.5484 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 632.482592][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 632.492636][T24552] Call Trace: [ 632.495902][T24552] [ 632.498820][T24552] dump_stack_lvl+0x241/0x360 [ 632.503498][T24552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.508686][T24552] ? __pfx__printk+0x10/0x10 [ 632.513270][T24552] print_circular_bug+0x13a/0x1b0 [ 632.518292][T24552] check_noncircular+0x36a/0x4a0 [ 632.523223][T24552] ? stack_trace_save+0x118/0x1d0 [ 632.528236][T24552] ? __pfx_check_noncircular+0x10/0x10 [ 632.533686][T24552] ? lockdep_lock+0x123/0x2b0 [ 632.538351][T24552] ? __x64_sys_setsockopt+0x1ee/0x280 [ 632.543715][T24552] validate_chain+0x18ef/0x5920 [ 632.548559][T24552] ? mark_lock+0x9a/0x360 [ 632.552888][T24552] ? __pfx_validate_chain+0x10/0x10 [ 632.558082][T24552] ? __pfx_validate_chain+0x10/0x10 [ 632.563275][T24552] ? validate_chain+0x11e/0x5920 [ 632.568208][T24552] ? __pfx_validate_chain+0x10/0x10 [ 632.573399][T24552] ? folio_prealloc+0x2e/0x170 [ 632.578152][T24552] ? __pfx_validate_chain+0x10/0x10 [ 632.583344][T24552] ? __pfx_validate_chain+0x10/0x10 [ 632.588534][T24552] ? mark_lock+0x9a/0x360 [ 632.592853][T24552] ? page_ext_put+0x97/0xc0 [ 632.597346][T24552] __lock_acquire+0x1397/0x2100 [ 632.602191][T24552] lock_acquire+0x1ed/0x550 [ 632.606683][T24552] ? page_cache_ra_unbounded+0x142/0x720 [ 632.612312][T24552] ? __pfx_lock_acquire+0x10/0x10 [ 632.617333][T24552] ? __pfx___might_resched+0x10/0x10 [ 632.622611][T24552] down_read+0xb1/0xa40 [ 632.626761][T24552] ? page_cache_ra_unbounded+0x142/0x720 [ 632.632391][T24552] ? __pfx_down_read+0x10/0x10 [ 632.637149][T24552] ? __pfx_lock_release+0x10/0x10 [ 632.642169][T24552] page_cache_ra_unbounded+0x142/0x720 [ 632.647627][T24552] filemap_fault+0x818/0x1490 [ 632.652294][T24552] ? __pfx_filemap_fault+0x10/0x10 [ 632.657398][T24552] ? blk_cgroup_congested+0x1b/0x200 [ 632.662678][T24552] ? blk_cgroup_congested+0x1f0/0x200 [ 632.668052][T24552] __do_fault+0x135/0x390 [ 632.672375][T24552] handle_pte_fault+0xcab/0x5ed0 [ 632.677304][T24552] ? __lock_acquire+0x1397/0x2100 [ 632.682331][T24552] ? __pfx_handle_pte_fault+0x10/0x10 [ 632.687691][T24552] ? __lock_acquire+0x1397/0x2100 [ 632.692711][T24552] ? __pfx_lock_acquire+0x10/0x10 [ 632.697723][T24552] ? count_memcg_event_mm+0x94/0x420 [ 632.703003][T24552] ? do_raw_spin_lock+0x14f/0x370 [ 632.708018][T24552] handle_mm_fault+0x1106/0x1bb0 [ 632.712955][T24552] ? __pfx_handle_mm_fault+0x10/0x10 [ 632.718232][T24552] ? follow_page_pte+0x97f/0x1ca0 [ 632.723261][T24552] ? __pfx_find_vma+0x10/0x10 [ 632.727941][T24552] ? vma_needs_dirty_tracking+0xa9/0x1f0 [ 632.733572][T24552] ? check_vma_flags+0x52b/0x5a0 [ 632.738500][T24552] __get_user_pages+0x1c82/0x49e0 [ 632.743531][T24552] ? __pfx___get_user_pages+0x10/0x10 [ 632.748903][T24552] __gup_longterm_locked+0x49a/0x17f0 [ 632.754268][T24552] ? __pfx___might_resched+0x10/0x10 [ 632.759547][T24552] ? __pfx___gup_longterm_locked+0x10/0x10 [ 632.765345][T24552] ? down_read+0x82b/0xa40 [ 632.769764][T24552] ? is_valid_gup_args+0x124/0x200 [ 632.774867][T24552] pin_user_pages+0x137/0x1f0 [ 632.779538][T24552] ? __pfx_pin_user_pages+0x10/0x10 [ 632.784731][T24552] ? trace_kmalloc+0x1f/0xd0 [ 632.789324][T24552] xdp_umem_create+0x978/0xf30 [ 632.794084][T24552] xsk_setsockopt+0x732/0x950 [ 632.798752][T24552] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.803942][T24552] ? __pfx_lock_acquire+0x10/0x10 [ 632.808954][T24552] ? aa_sock_opt_perm+0x79/0x120 [ 632.813911][T24552] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.819102][T24552] do_sock_setsockopt+0x3af/0x720 [ 632.824120][T24552] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 632.829658][T24552] ? __fget_files+0x395/0x410 [ 632.834328][T24552] ? __fget_files+0x2a/0x410 [ 632.838914][T24552] __x64_sys_setsockopt+0x1ee/0x280 [ 632.844106][T24552] do_syscall_64+0xf3/0x230 [ 632.848603][T24552] ? clear_bhb_loop+0x35/0x90 [ 632.853266][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.859156][T24552] RIP: 0033:0x7fef90385d29 [ 632.863559][T24552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.883166][T24552] RSP: 002b:00007fef9111c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 632.891574][T24552] RAX: ffffffffffffffda RBX: 00007fef90575fa0 RCX: 00007fef90385d29 [ 632.899533][T24552] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 632.907491][T24552] RBP: 00007fef90401a20 R08: 0000000000000020 R09: 0000000000000000 [ 632.915449][T24552] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 632.923405][T24552] R13: 0000000000000000 R14: 00007fef90575fa0 R15: 00007fef9069fa28 [ 632.931371][T24552] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.132659][ T5834] Bluetooth: hci0: command tx timeout [ 633.241448][ T2908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.284292][T24425] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.314107][T24425] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.321319][T24425] bridge_slave_1: entered allmulticast mode [ 633.356372][T24425] bridge_slave_1: entered promiscuous mode [ 633.434194][ T5834] Bluetooth: hci2: command tx timeout [ 633.441092][ T2908] bridge0: port 3(netdevsim2) entered disabled state [ 633.449574][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 633.459916][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 633.481874][ T2908] bridge0: port 3(netdevsim2) entered disabled state [ 633.510028][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.615571][ T2908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.718480][ T2908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.860207][ T2908] bridge_slave_1: left allmulticast mode [ 633.866120][ T2908] bridge_slave_1: left promiscuous mode [ 633.871792][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.883719][ T2908] bridge_slave_0: left allmulticast mode [ 633.890894][ T2908] bridge_slave_0: left promiscuous mode [ 633.897125][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.969620][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.980118][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.989661][ T2908] bond0 (unregistering): Released all slaves [ 634.183778][ T2908] hsr_slave_0: left promiscuous mode [ 634.189509][ T2908] hsr_slave_1: left promiscuous mode [ 634.198804][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.207675][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.217340][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.224948][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.236508][ T2908] veth1_macvtap: left promiscuous mode [ 634.242023][ T2908] veth0_macvtap: left promiscuous mode [ 634.247863][ T2908] veth1_vlan: left promiscuous mode [ 634.255058][ T2908] veth0_vlan: left promiscuous mode [ 634.430767][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 634.456173][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 634.793818][ T2908] IPVS: stop unused estimator thread 0... [ 634.860893][ T2908] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.919038][ T2908] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.977246][ T2908] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.012810][ T2908] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.111369][ T2908] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.156884][ T2908] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.197861][ T2908] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.247388][ T2908] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.314940][ T2908] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.356008][ T2908] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.410005][ T2908] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.458701][ T2908] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.553499][ T2908] bridge_slave_1: left allmulticast mode [ 635.559167][ T2908] bridge_slave_1: left promiscuous mode [ 635.567144][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.575145][ T2908] bridge_slave_0: left allmulticast mode [ 635.580790][ T2908] bridge_slave_0: left promiscuous mode [ 635.586715][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.596024][ T2908] bridge_slave_1: left allmulticast mode [ 635.601675][ T2908] bridge_slave_1: left promiscuous mode [ 635.607679][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.615801][ T2908] bridge_slave_0: left allmulticast mode [ 635.621430][ T2908] bridge_slave_0: left promiscuous mode [ 635.627385][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.636099][ T2908] bridge_slave_1: left allmulticast mode [ 635.641726][ T2908] bridge_slave_1: left promiscuous mode [ 635.647504][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.655754][ T2908] bridge_slave_0: left allmulticast mode [ 635.661381][ T2908] bridge_slave_0: left promiscuous mode [ 635.667212][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.675625][ T2908] bridge_slave_1: left allmulticast mode [ 635.681268][ T2908] bridge_slave_1: left promiscuous mode [ 635.687615][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.695781][ T2908] bridge_slave_0: left allmulticast mode [ 635.701405][ T2908] bridge_slave_0: left promiscuous mode [ 635.707330][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.114133][ T2908] bond0 (unregistering): Released all slaves [ 636.122101][ T2908] bond0 (unregistering): Released all slaves [ 636.134114][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.145141][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.154507][ T2908] bond0 (unregistering): Released all slaves [ 636.170790][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.181876][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.191469][ T2908] bond0 (unregistering): Released all slaves [ 636.202560][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.212108][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.221435][ T2908] bond0 (unregistering): Released all slaves [ 636.656713][ T2908] hsr_slave_0: left promiscuous mode [ 636.662492][ T2908] hsr_slave_1: left promiscuous mode [ 636.668735][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.677135][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.685500][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.694228][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.704017][ T2908] hsr_slave_0: left promiscuous mode [ 636.709782][ T2908] hsr_slave_1: left promiscuous mode [ 636.715766][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.723454][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.733376][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.740777][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.751460][ T2908] hsr_slave_0: left promiscuous mode [ 636.758583][ T2908] hsr_slave_1: left promiscuous mode [ 636.764561][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.771945][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.779917][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.787902][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.800196][ T2908] veth1_macvtap: left promiscuous mode [ 636.806015][ T2908] veth0_macvtap: left promiscuous mode [ 636.811576][ T2908] veth1_vlan: left promiscuous mode [ 636.817149][ T2908] veth0_vlan: left promiscuous mode [ 636.823979][ T2908] veth1_macvtap: left promiscuous mode [ 636.829481][ T2908] veth0_macvtap: left promiscuous mode [ 636.835340][ T2908] veth1_vlan: left promiscuous mode [ 636.840610][ T2908] veth0_vlan: left promiscuous mode [ 636.846782][ T2908] veth1_macvtap: left promiscuous mode [ 636.852292][ T2908] veth0_macvtap: left promiscuous mode [ 636.858371][ T2908] veth1_vlan: left promiscuous mode [ 636.863698][ T2908] veth0_vlan: left promiscuous mode [ 637.200504][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 637.213953][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 637.459283][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 637.471316][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 637.727606][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 637.743177][ T2908] team0 (unregistering): Port device team_slave_0 removed