last executing test programs: 1m2.17268524s ago: executing program 0 (id=354): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x5, 0x61a4) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = gettid() r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100594b2e1d970d91700000008000000000000000000000070000000000000008000000000000000500000000000000020400000800000001000000000000002f7c14f913546decdf7c519f79915c1dcb1e226eba1316fc015a141220f61dbd8e0fab047e4680763923cfffbb3262ce65e106a33ca2bcbb9024322e97877be204dc18106a9b4d9559f40973f7854561b18980f60ad809b10a2d0bbcb08fdb6eaec0d3628ff4e53e54b8dec2c438c9c7c26e1163259b95682e38d3ca94b1436469e5b97ccec1"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m1.143824737s ago: executing program 0 (id=358): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) read$midi(r0, &(0x7f0000000280)=""/54, 0x36) 1m0.708284674s ago: executing program 0 (id=359): openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x80) ioctl$TIOCSETD(r1, 0x5423, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0, 0xabf}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x3f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x4008550c, 0x0) 59.659738352s ago: executing program 0 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x7, 0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='nilfs2_mdt_insert_new_block\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2388, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4100, 0xa15b0}, {&(0x7f00000001c0)=""/57}], 0x1, 0x0, 0x63695dc5e766}, 0x700) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r4, 0xde34) msgget$private(0x0, 0x51) 58.600689242s ago: executing program 0 (id=363): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x48bf, &(0x7f0000000140), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) 58.480284742s ago: executing program 0 (id=364): r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 56.080820375s ago: executing program 3 (id=372): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0xc0406619, &(0x7f0000000240)=0x2) 55.916622469s ago: executing program 3 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timerfd_create(0x7, 0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='nilfs2_mdt_insert_new_block\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2388, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4100, 0xa15b0}, {&(0x7f00000001c0)=""/57}], 0x1, 0x0, 0x63695dc5e766}, 0x700) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r4, 0xde34) msgget$private(0x0, 0x51) 54.83882803s ago: executing program 3 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r4, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x2c020400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) 53.561696057s ago: executing program 3 (id=377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0xf8, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x31}}, {@in, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x20000000}}}, 0xf8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000380)=@framed={{}, [@snprintf, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) 52.409005314s ago: executing program 3 (id=379): syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002980)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 50.960736317s ago: executing program 3 (id=380): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000280)="78d04a34", 0x4, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") socket$inet_tcp(0x2, 0x1, 0x0) truncate(&(0x7f00000002c0)='./file1\x00', 0x9) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 10.795487749s ago: executing program 2 (id=457): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd"], 0xfdef) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 10.572292577s ago: executing program 2 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, 0x0, 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x11, 0x3, 0x0) memfd_secret(0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xa4, 0x8}}}}, 0x15) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) 9.293568105s ago: executing program 2 (id=461): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_cache\x00') readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x9, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0xc40a, 0x101}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = dup(r1) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000540), 0x0, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) getitimer(0x1, &(0x7f0000000080)) 7.884930504s ago: executing program 4 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) lseek(r4, 0x38, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r5, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) 6.883117709s ago: executing program 4 (id=465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'batadv_slave_0\x00'}) 6.823648514s ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) poll(&(0x7f0000000000)=[{r0, 0x8400}], 0x1, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6.557502196s ago: executing program 4 (id=467): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd"], 0xfdef) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) 6.360305733s ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02002302230102090500000004"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d04"]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r4, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) unshare(0x2c020400) r7 = socket(0x2, 0x2, 0x1) bind$inet6(r7, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201) 6.27029817s ago: executing program 4 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, 0x0, 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x11, 0x3, 0x0) memfd_secret(0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xa4, 0x8}}}}, 0x15) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) 5.053828693s ago: executing program 4 (id=470): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x522, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000780)=""/126, 0x7e, 0x8, 0x0) 4.628095689s ago: executing program 4 (id=473): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) 3.029369745s ago: executing program 2 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'batadv_slave_0\x00'}) 1.070908309s ago: executing program 1 (id=482): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 893.731794ms ago: executing program 1 (id=483): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a80000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 870.909516ms ago: executing program 1 (id=484): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_cache\x00') readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = dup(r1) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000540), 0x0, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) getitimer(0x1, &(0x7f0000000080)) 160.637626ms ago: executing program 1 (id=485): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64], 0xe0}}, 0x0) 103.296611ms ago: executing program 1 (id=486): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd"], 0xfdef) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) 0s ago: executing program 1 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)=@ipv4_getnexthop={0x20, 0x6a, 0x125, 0x70bd29, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) kernel console output (not intermixed with test programs): 560 would solve the problem. [ 173.935032][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.003452][ T3695] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 174.547093][ T4614] device hsr_slave_0 entered promiscuous mode [ 174.563617][ T4614] device hsr_slave_1 entered promiscuous mode [ 174.752715][ T3695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.771693][ T3695] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.781086][ T3695] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.794506][ T3695] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.803864][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.863887][ T3695] hub 1-1:1.0: bad descriptor, ignoring hub [ 174.869847][ T3695] hub: probe of 1-1:1.0 failed with error -5 [ 174.887009][ T3695] cdc_wdm 1-1:1.0: skipping garbage [ 174.892245][ T3695] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 174.895418][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.941441][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.015356][ T4645] device bridge_slave_0 entered promiscuous mode [ 175.143062][ T3662] Bluetooth: hci2: command tx timeout [ 175.152908][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.170998][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.267311][ T4645] device bridge_slave_1 entered promiscuous mode [ 175.381631][ T3755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.490384][ T3755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.556040][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.571790][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.617676][ T3755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.867096][ T3662] Bluetooth: hci3: command tx timeout [ 175.898347][ T3755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.028266][ T4645] team0: Port device team_slave_0 added [ 176.067268][ T4645] team0: Port device team_slave_1 added [ 176.186591][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.209501][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.235493][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.329437][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.348124][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.453615][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.523953][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.150328][ T4645] device hsr_slave_0 entered promiscuous mode [ 177.167870][ T4645] device hsr_slave_1 entered promiscuous mode [ 177.212231][ T4645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.226204][ T4645] Cannot create hsr debugfs directory [ 177.495425][ T3724] usb 1-1: USB disconnect, device number 8 [ 178.066483][ T3662] Bluetooth: hci3: command tx timeout [ 178.177248][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 179.303015][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 179.303031][ T27] audit: type=1326 audit(1729079124.287:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 179.895064][ T27] audit: type=1326 audit(1729079124.287:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.123039][ T3657] Bluetooth: hci3: command tx timeout [ 180.175968][ T27] audit: type=1326 audit(1729079124.287:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.198060][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.220985][ T4614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.283286][ T4614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.302591][ T27] audit: type=1326 audit(1729079124.287:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.368598][ T27] audit: type=1326 audit(1729079124.287:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.439273][ T27] audit: type=1326 audit(1729079124.287:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.540036][ T27] audit: type=1326 audit(1729079124.287:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.593157][ T27] audit: type=1326 audit(1729079124.287:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.615934][ T27] audit: type=1326 audit(1729079124.287:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.639540][ T27] audit: type=1326 audit(1729079124.287:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 180.691293][ T4736] netlink: 104 bytes leftover after parsing attributes in process `syz.0.170'. [ 180.783665][ T3657] Bluetooth: Wrong link type (-22) [ 181.421980][ T4614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.990080][ T4614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.129805][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 183.830296][ T3695] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 184.109346][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.850621][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 184.850638][ T27] audit: type=1326 audit(1729079129.227:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 184.897666][ T27] audit: type=1326 audit(1729079129.227:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 184.973294][ T3695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.002858][ T3695] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.019845][ T3695] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.044476][ T3695] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 185.052618][ T27] audit: type=1326 audit(1729079129.227:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 185.086785][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.164922][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.187085][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.211979][ T27] audit: type=1326 audit(1729079129.227:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 185.248375][ T4645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.290033][ T4614] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.310851][ T4645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.313030][ T27] audit: type=1326 audit(1729079129.237:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 185.440316][ T27] audit: type=1326 audit(1729079129.237:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faf5e17dff9 code=0x7ffc0000 [ 185.503729][ T4645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.514827][ T27] audit: type=1326 audit(1729079129.237:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf5e17dff9 code=0x0 [ 185.549774][ T4645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.599218][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.632988][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.663171][ T27] audit: type=1326 audit(1729079129.877:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4471f7dbfb code=0x7ffc0000 [ 185.693553][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.700646][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.726372][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.736740][ T27] audit: type=1326 audit(1729079129.927:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4471f7dbfb code=0x7ffc0000 [ 185.831238][ T27] audit: type=1326 audit(1729079129.957:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4471f7dbfb code=0x7ffc0000 [ 186.734020][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.767950][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.793135][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.800255][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.896272][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.953764][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.979353][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.021689][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.050300][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.058752][ T3695] usb 1-1: can't set config #1, error -71 [ 187.073046][ T3695] usb 1-1: USB disconnect, device number 9 [ 187.099150][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.206911][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.227164][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.269383][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.570432][ T4797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.182'. [ 187.582589][ T3662] Bluetooth: Wrong link type (-22) [ 188.262443][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.318469][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.392086][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.447411][ T3755] device hsr_slave_0 left promiscuous mode [ 188.473325][ T3755] device hsr_slave_1 left promiscuous mode [ 188.481099][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.512591][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.533248][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.540686][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.573749][ T3755] device bridge_slave_1 left promiscuous mode [ 188.579981][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.621306][ T3755] device bridge_slave_0 left promiscuous mode [ 188.632689][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.652797][ T3755] device hsr_slave_0 left promiscuous mode [ 188.661364][ T3755] device hsr_slave_1 left promiscuous mode [ 188.673952][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.694854][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.730558][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.738178][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.769895][ T3755] device bridge_slave_1 left promiscuous mode [ 188.783486][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.811287][ T3755] device bridge_slave_0 left promiscuous mode [ 188.830707][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.899569][ T3755] device veth1_macvtap left promiscuous mode [ 188.905843][ T3755] device veth0_macvtap left promiscuous mode [ 188.912027][ T3755] device veth1_vlan left promiscuous mode [ 188.919144][ T3755] device veth0_vlan left promiscuous mode [ 188.926930][ T3755] device veth1_macvtap left promiscuous mode [ 188.933470][ T3755] device veth0_macvtap left promiscuous mode [ 188.946309][ T3755] device veth1_vlan left promiscuous mode [ 188.961717][ T3755] device veth0_vlan left promiscuous mode [ 189.015276][ T4805] loop0: detected capacity change from 0 to 256 [ 189.101838][ T4805] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.043054][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 191.557016][ T3755] team0 (unregistering): Port device team_slave_1 removed [ 191.811903][ T3755] team0 (unregistering): Port device team_slave_0 removed [ 191.878828][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.916320][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 191.916358][ T27] audit: type=1326 audit(1729079136.937:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 191.945419][ T27] audit: type=1326 audit(1729079136.937:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 191.968931][ T27] audit: type=1326 audit(1729079136.937:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 192.585457][ T27] audit: type=1326 audit(1729079136.937:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 192.620368][ T27] audit: type=1326 audit(1729079136.947:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 192.642818][ T27] audit: type=1326 audit(1729079136.947:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 192.666505][ T27] audit: type=1326 audit(1729079136.947:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x0 [ 192.728095][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.902949][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.909833][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.331822][ T27] audit: type=1326 audit(1729079140.357:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 195.354015][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.433019][ T27] audit: type=1326 audit(1729079140.437:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 195.497711][ T27] audit: type=1326 audit(1729079140.437:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4471f7c990 code=0x7ffc0000 [ 195.832595][ T22] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 196.203085][ T22] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 196.253956][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.279550][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.361679][ T22] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 196.399173][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.951231][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 197.080747][ T3755] bond0 (unregistering): Released all slaves [ 198.394197][ T22] usb 1-1: can't set config #1, error -71 [ 198.422384][ T22] usb 1-1: USB disconnect, device number 10 [ 198.793455][ T3755] team0 (unregistering): Port device team_slave_1 removed [ 198.877296][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 198.877328][ T27] audit: type=1326 audit(1729079143.897:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 198.905672][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.212857][ T27] audit: type=1326 audit(1729079143.897:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 199.460309][ T27] audit: type=1326 audit(1729079143.907:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 199.482835][ T27] audit: type=1326 audit(1729079143.907:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 199.505249][ T27] audit: type=1326 audit(1729079143.907:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 199.549581][ T3755] team0 (unregistering): Port device team_slave_0 removed [ 199.563295][ T27] audit: type=1326 audit(1729079143.907:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 199.752644][ T27] audit: type=1326 audit(1729079143.907:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.0.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x0 [ 199.794396][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.899742][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.565010][ T3755] bond0 (unregistering): Released all slaves [ 201.634664][ T4883] fuse: Bad value for 'fd' [ 201.924187][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.979860][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.126297][ T27] audit: type=1326 audit(1729079147.157:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 202.182272][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.286982][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.367471][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.387950][ T27] audit: type=1326 audit(1729079147.157:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 202.412455][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.519851][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.527023][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.552829][ T27] audit: type=1326 audit(1729079147.177:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 202.578159][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.629293][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.662732][ T3751] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 202.696453][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.703640][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.775734][ T4903] device pim6reg1 entered promiscuous mode [ 202.859158][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.873810][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.909527][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.970452][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.998627][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.041942][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.052674][ T3751] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 203.083072][ T3751] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.093441][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.119361][ T3751] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.133796][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.166859][ T4645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.172568][ T3751] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 203.465780][ T3751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.490297][ T4645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.515731][ T3751] hub 1-1:1.0: bad descriptor, ignoring hub [ 203.526529][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.549558][ T3751] hub: probe of 1-1:1.0 failed with error -5 [ 203.582141][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.605693][ T3751] cdc_wdm 1-1:1.0: skipping garbage [ 203.627282][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.643337][ T3751] cdc_wdm 1-1:1.0: skipping garbage [ 203.666110][ T3751] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 203.685024][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.762119][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.811907][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.851196][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.920960][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.300877][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.314761][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.341446][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.537798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.567185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.716166][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.734702][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.770478][ T4645] device veth0_vlan entered promiscuous mode [ 204.782625][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.801265][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.845466][ T4645] device veth1_vlan entered promiscuous mode [ 204.895028][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.179506][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.203561][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.213491][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.228108][ T4645] device veth0_macvtap entered promiscuous mode [ 205.320946][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.340833][ T4645] device veth1_macvtap entered promiscuous mode [ 205.421547][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.454110][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.482570][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.512578][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.532638][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.626651][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.674127][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.686629][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.708795][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.774627][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.842711][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.902581][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.930895][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.943603][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.410904][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.431099][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.447680][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.471111][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.490267][ T4645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.499638][ T4645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.514483][ T4645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.769752][ T3648] usb 1-1: USB disconnect, device number 11 [ 206.782581][ T4645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.353782][ T4614] device veth0_vlan entered promiscuous mode [ 207.403055][ T4614] device veth1_vlan entered promiscuous mode [ 207.988173][ T4614] device veth0_macvtap entered promiscuous mode [ 208.036991][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.083320][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.085550][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 208.085565][ T27] audit: type=1326 audit(1729079153.117:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.115983][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.149784][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.157728][ T27] audit: type=1326 audit(1729079153.157:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.173517][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.203572][ T27] audit: type=1326 audit(1729079153.157:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.209257][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.260976][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.274847][ T27] audit: type=1326 audit(1729079153.157:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.276075][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.319305][ T27] audit: type=1326 audit(1729079153.157:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.381595][ T27] audit: type=1326 audit(1729079153.157:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.405291][ T4614] device veth1_macvtap entered promiscuous mode [ 208.439512][ T27] audit: type=1326 audit(1729079153.157:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.453219][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.518308][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.540134][ T27] audit: type=1326 audit(1729079153.157:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.541507][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.576927][ T27] audit: type=1326 audit(1729079153.157:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 208.603367][ T27] audit: type=1326 audit(1729079153.157:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 209.354894][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.383454][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.393375][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.423391][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.462601][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.502571][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.544063][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.572540][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.623738][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.734374][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.756496][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.784184][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.807546][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.819018][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.829884][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.840096][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.851867][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.867624][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.878272][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.889903][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.899626][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.914690][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.936715][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.952345][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.963961][ T4996] loop2: detected capacity change from 0 to 512 [ 209.971243][ T4996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.989403][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.998363][ T4996] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.222: casefold flag without casefold feature [ 210.024501][ T4614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.041647][ T4614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.051029][ T4996] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.222: couldn't read orphan inode 15 (err -117) [ 210.067207][ T4614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.072973][ T4996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.088079][ T4614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.151551][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.161844][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.178577][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.281691][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.298589][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.378387][ T5001] loop0: detected capacity change from 0 to 1024 [ 210.586611][ T4999] syz.0.220: attempt to access beyond end of device [ 210.586611][ T4999] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 210.724504][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 210.793098][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.814315][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.841821][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.944086][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.443686][ T3662] Bluetooth: hci4: command 0x0406 tx timeout [ 212.617354][ T5021] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 212.876472][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.885901][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.894342][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.905094][ T3657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.914139][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.916380][ T3657] Bluetooth: hci0: link tx timeout [ 212.922173][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.926529][ T3657] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 212.947497][ T5022] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 213.255924][ T5024] chnl_net:caif_netlink_parms(): no params data found [ 213.821702][ T5022] syz.1.224 (5022) used greatest stack depth: 19032 bytes left [ 213.914170][ T5024] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.921370][ T5024] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.936126][ T5024] device bridge_slave_0 entered promiscuous mode [ 213.949821][ T5024] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.965872][ T5024] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.993607][ T5024] device bridge_slave_1 entered promiscuous mode [ 214.126968][ T5041] loop4: detected capacity change from 0 to 512 [ 214.175944][ T5024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.193655][ T5041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.213256][ T5024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.274211][ T5041] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.232: casefold flag without casefold feature [ 214.310677][ T5041] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 214.346761][ T3692] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.369448][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.458603][ T5024] team0: Port device team_slave_0 added [ 214.516949][ T5024] team0: Port device team_slave_1 added [ 214.656774][ T4614] EXT4-fs (loop4): unmounting filesystem. [ 214.705662][ T5024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.740773][ T5024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.752691][ T3692] usb 1-1: config 0 has no interfaces? [ 214.809751][ T5024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.889342][ T5024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.922658][ T5024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.982818][ T3662] Bluetooth: hci0: command 0x0406 tx timeout [ 214.983132][ T3657] Bluetooth: hci1: command tx timeout [ 214.995938][ T5024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.123874][ T3692] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.169355][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.194997][ T3692] usb 1-1: Product: syz [ 215.215722][ T3692] usb 1-1: Manufacturer: syz [ 215.226964][ T3692] usb 1-1: SerialNumber: syz [ 215.301635][ T5024] device hsr_slave_0 entered promiscuous mode [ 215.314340][ T3692] usb 1-1: config 0 descriptor?? [ 215.330905][ T5024] device hsr_slave_1 entered promiscuous mode [ 215.416563][ T5024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.442913][ T5024] Cannot create hsr debugfs directory [ 215.628843][ T3756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.812260][ T3756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.929895][ T3756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.046073][ T3756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.094607][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 216.094625][ T27] audit: type=1326 audit(1729079161.117:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 216.248357][ T5024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.440115][ T27] audit: type=1326 audit(1729079161.157:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 216.446216][ T5024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.542849][ T3631] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 216.609716][ T27] audit: type=1326 audit(1729079161.167:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 216.637424][ T3662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.801754][ T3662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.810544][ T3662] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.839331][ T27] audit: type=1326 audit(1729079161.167:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 217.094600][ T3662] Bluetooth: hci1: command tx timeout [ 217.275929][ T3653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.289880][ T3653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.483350][ T3653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.548273][ T27] audit: type=1326 audit(1729079161.167:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 217.665332][ T27] audit: type=1326 audit(1729079161.187:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 217.689899][ T27] audit: type=1326 audit(1729079161.217:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 217.712902][ T27] audit: type=1326 audit(1729079161.227:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 217.741264][ T27] audit: type=1326 audit(1729079161.247:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 217.764018][ T27] audit: type=1326 audit(1729079161.267:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 217.853573][ T3631] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 217.891922][ T3631] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.910564][ T3631] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.956440][ T3631] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 218.029501][ T3631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.158396][ T3631] hub 2-1:1.0: bad descriptor, ignoring hub [ 218.196362][ T3631] hub: probe of 2-1:1.0 failed with error -5 [ 218.235256][ T3631] cdc_wdm 2-1:1.0: skipping garbage [ 218.267744][ T3631] cdc_wdm 2-1:1.0: skipping garbage [ 218.298136][ T3631] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 218.378285][ T5024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.592428][ T5024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.877110][ T3631] usb 1-1: USB disconnect, device number 12 [ 219.142645][ T3657] Bluetooth: hci1: command tx timeout [ 219.594007][ T3653] Bluetooth: hci2: command tx timeout [ 220.759637][ T5024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.872052][ T5024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.894042][ T5024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.077438][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 221.100747][ T5024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.223215][ T3657] Bluetooth: hci1: command tx timeout [ 222.615027][ T3657] Bluetooth: hci2: command tx timeout [ 223.135641][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.170842][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.285331][ T5060] device bridge_slave_0 entered promiscuous mode [ 223.294941][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.302036][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.310744][ T5060] device bridge_slave_1 entered promiscuous mode [ 223.482923][ T14] usb 2-1: USB disconnect, device number 3 [ 224.402789][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 224.402808][ T27] audit: type=1326 audit(1729144934.043:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 225.664344][ T3653] Bluetooth: hci2: command tx timeout [ 225.734742][ T27] audit: type=1326 audit(1729144934.043:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 225.739811][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.776164][ T27] audit: type=1326 audit(1729144934.153:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 226.017125][ T27] audit: type=1326 audit(1729144934.153:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 226.090607][ T27] audit: type=1326 audit(1729144934.153:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 226.146789][ T27] audit: type=1326 audit(1729144934.163:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 226.170943][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.976493][ T5060] team0: Port device team_slave_0 added [ 227.004847][ T27] audit: type=1326 audit(1729144934.173:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5128 comm="syz.1.245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x0 [ 227.061348][ T5024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.138512][ T3756] device hsr_slave_0 left promiscuous mode [ 227.171835][ T3756] device hsr_slave_1 left promiscuous mode [ 227.194227][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.342946][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.353056][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.360480][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.368770][ T3756] device bridge_slave_1 left promiscuous mode [ 227.375279][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.189434][ T3657] Bluetooth: hci2: command tx timeout [ 228.221600][ T5160] loop1: detected capacity change from 0 to 256 [ 228.256791][ T3756] device bridge_slave_0 left promiscuous mode [ 228.257125][ T5160] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 228.286372][ T27] audit: type=1800 audit(1729144938.313:522): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="bus" dev="loop1" ino=1048624 res=0 errno=0 [ 228.295698][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.542687][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.589218][ T3756] device veth1_macvtap left promiscuous mode [ 228.624648][ T3756] device veth0_macvtap left promiscuous mode [ 228.697660][ T3756] device veth1_vlan left promiscuous mode [ 228.718284][ T3756] device veth0_vlan left promiscuous mode [ 228.922875][ T14] usb 1-1: config 0 has no interfaces? [ 231.212693][ T14] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.221781][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.252402][ T14] usb 1-1: Product: syz [ 231.274311][ T14] usb 1-1: Manufacturer: syz [ 231.295747][ T14] usb 1-1: config 0 descriptor?? [ 231.309805][ T3657] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 231.327575][ T3657] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 231.335818][ T14] usb 1-1: can't set config #0, error -71 [ 231.351439][ T14] usb 1-1: USB disconnect, device number 13 [ 231.694766][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 231.788153][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 231.864658][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.114938][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.588309][ T3756] bond0 (unregistering): Released all slaves [ 234.572877][ T5186] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 234.572877][ T5186] program syz.1.258 not setting count and/or reply_len properly [ 234.931763][ T5060] team0: Port device team_slave_1 added [ 235.165782][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.193594][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.258065][ T5024] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.363340][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.380538][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.492601][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.259408][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.282349][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.355970][ T3832] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.363161][ T3832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.396335][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.451623][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.513389][ T3832] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.520690][ T3832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.566433][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.574379][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.606187][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.682190][ T5024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.708887][ T5024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.799564][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.819903][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.888155][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.990109][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.051216][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.095984][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.141149][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.841486][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.867394][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.882009][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.897061][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.013858][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.083031][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.175681][ T5060] device hsr_slave_0 entered promiscuous mode [ 238.202802][ T5060] device hsr_slave_1 entered promiscuous mode [ 238.239737][ T3653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.248413][ T3653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.256416][ T3653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.269035][ T3653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.286676][ T3653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.293999][ T3653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.507353][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.541175][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.549199][ T3692] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.607434][ T5024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.740103][ T3756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.863570][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.888574][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.932857][ T3692] usb 2-1: config 0 has no interfaces? [ 239.045426][ T3756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.108600][ T5024] device veth0_vlan entered promiscuous mode [ 239.128395][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.140991][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.149994][ T3692] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.167786][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.188039][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.213040][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.220383][ T3692] usb 2-1: Product: syz [ 239.293330][ T3692] usb 2-1: Manufacturer: syz [ 239.297976][ T3692] usb 2-1: SerialNumber: syz [ 239.376548][ T3756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.506149][ T5024] device veth1_vlan entered promiscuous mode [ 239.590449][ T3692] usb 2-1: config 0 descriptor?? [ 239.842080][ T3756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.916780][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 239.944565][ T5024] device veth0_macvtap entered promiscuous mode [ 240.100460][ T5024] device veth1_macvtap entered promiscuous mode [ 240.116925][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.128541][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.294467][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.402844][ T3657] Bluetooth: hci3: command tx timeout [ 241.117168][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.461583][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.422708][ T3662] Bluetooth: hci3: command tx timeout [ 242.806114][ T27] audit: type=1326 audit(1729144952.823:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.594289][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.618987][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.631689][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.632901][ T27] audit: type=1326 audit(1729144952.823:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.642806][ T27] audit: type=1326 audit(1729144952.823:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.642846][ T27] audit: type=1326 audit(1729144952.823:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.709555][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.722626][ T27] audit: type=1326 audit(1729144952.823:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.744822][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.757234][ T27] audit: type=1326 audit(1729144952.833:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4471f7dff9 code=0x7ffc0000 [ 243.777472][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.779413][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.796757][ T27] audit: type=1326 audit(1729144952.833:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.0.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4471f7dff9 code=0x0 [ 243.819704][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.832607][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.852782][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.864579][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.875352][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.966320][ T5024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.200108][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.223564][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.236350][ T3692] usb 2-1: USB disconnect, device number 4 [ 244.247287][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.276901][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.296712][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.307572][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.317656][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.328318][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.338251][ T5024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.348767][ T5024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.387320][ T5024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.435949][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.448401][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.466412][ T5024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.486371][ T5024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.500719][ T5024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.512717][ T3662] Bluetooth: hci3: command tx timeout [ 244.533306][ T5024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.607671][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.629047][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.641469][ T5229] device bridge_slave_0 entered promiscuous mode [ 244.651071][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.658953][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.754662][ T5229] device bridge_slave_1 entered promiscuous mode [ 246.458737][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.471845][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.540750][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.562158][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.592901][ T3662] Bluetooth: hci3: command tx timeout [ 246.619368][ T5229] team0: Port device team_slave_0 added [ 246.628897][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.668769][ T5229] team0: Port device team_slave_1 added [ 246.685698][ T5060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.766201][ T5060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.777863][ T5060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.794216][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.801360][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.863856][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.923283][ T5060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.924270][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.951795][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.963556][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.997775][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.017975][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.183339][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.361648][ T5229] device hsr_slave_0 entered promiscuous mode [ 247.394549][ T5229] device hsr_slave_1 entered promiscuous mode [ 247.472676][ T5317] loop2: detected capacity change from 0 to 256 [ 247.494860][ T27] audit: type=1326 audit(1729144957.513:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f39f7dff9 code=0x7ffc0000 [ 248.193103][ T27] audit: type=1326 audit(1729144957.513:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8f39f7dff9 code=0x7ffc0000 [ 248.268122][ T27] audit: type=1326 audit(1729144957.513:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f39f7dff9 code=0x7ffc0000 [ 248.290752][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.318843][ T5229] Cannot create hsr debugfs directory [ 248.403889][ T27] audit: type=1326 audit(1729144957.513:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f39f7dff9 code=0x7ffc0000 [ 248.724884][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.877983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.897190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.018993][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.940999][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.045433][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.087280][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.094544][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.123195][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.153957][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.213165][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.220374][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.258666][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.271374][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.333824][ T5349] process 'syz.0.286' launched './file0' with NULL argv: empty string added [ 250.360798][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.399891][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.448783][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.490051][ T3756] device hsr_slave_0 left promiscuous mode [ 250.519013][ T3756] device hsr_slave_1 left promiscuous mode [ 250.553992][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.561440][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.608268][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.640956][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.682059][ T3756] device bridge_slave_1 left promiscuous mode [ 250.699538][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.738919][ T3756] device bridge_slave_0 left promiscuous mode [ 250.760555][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.841378][ T3756] device veth1_macvtap left promiscuous mode [ 250.862673][ T3756] device veth0_macvtap left promiscuous mode [ 250.886821][ T3756] device veth1_vlan left promiscuous mode [ 250.907323][ T3756] device veth0_vlan left promiscuous mode [ 252.482837][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 252.777393][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 252.933980][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.095364][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.466114][ T3662] Bluetooth: hci0: link tx timeout [ 253.471310][ T3662] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 253.479089][ T3662] Bluetooth: hci0: link tx timeout [ 253.484610][ T3662] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.757343][ T3756] bond0 (unregistering): Released all slaves [ 255.089612][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.117662][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.156027][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.184203][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.215729][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.387357][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.393787][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.542905][ T3657] Bluetooth: hci0: command 0x0406 tx timeout [ 255.562754][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.571254][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.287484][ T5403] loop1: detected capacity change from 0 to 256 [ 256.339741][ T5403] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 256.385788][ T27] audit: type=1800 audit(1729144966.403:534): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.299" name="bus" dev="loop1" ino=1048628 res=0 errno=0 [ 257.453421][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.468189][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.518200][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.384174][ T5416] device syzkaller0 entered promiscuous mode [ 258.476646][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.545357][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.782838][ T3657] Bluetooth: hci3: command tx timeout [ 262.812763][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.833373][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.174398][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.217854][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.244709][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.270315][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.300326][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.316376][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.346950][ T3859] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.354154][ T3859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.409684][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.430224][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.455125][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.470845][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.478013][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.494906][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.539400][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.587765][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.643259][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.682378][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.731882][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.760835][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.045365][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.245539][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.264337][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.310602][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.382427][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.407222][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.416129][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.443859][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.523458][ T5506] 9pnet_fd: Insufficient options for proto=fd [ 264.587746][ T5060] device veth0_vlan entered promiscuous mode [ 264.631116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.658237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.716903][ T5060] device veth1_vlan entered promiscuous mode [ 264.753851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.772093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.825304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.921787][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.940358][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.121021][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.197055][ T5060] device veth0_macvtap entered promiscuous mode [ 265.247411][ T5060] device veth1_macvtap entered promiscuous mode [ 265.388888][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.544339][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.562625][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.405710][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.449759][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.501292][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.541018][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.592513][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.604926][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.629765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.639007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.693103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.733541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.886575][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.900321][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.925012][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.202742][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.222443][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.274057][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.324097][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.412530][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.475091][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.502867][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.511773][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.536362][ T5060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.552703][ T5060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.561435][ T5060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.592908][ T5060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.654561][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.663578][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.673093][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.867246][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.880630][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.918692][ T3756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.950281][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.961576][ T3756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.975050][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.996637][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.011320][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.029552][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.045775][ T5229] device veth0_vlan entered promiscuous mode [ 268.097470][ T5229] device veth1_vlan entered promiscuous mode [ 268.138023][ T3756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.151721][ T3756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.187265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.210221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.263608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.288081][ T5229] device veth0_macvtap entered promiscuous mode [ 268.351670][ T5229] device veth1_macvtap entered promiscuous mode [ 268.370497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.388482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.417260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.445908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.508060][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.541765][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.557172][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.577634][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.608217][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.629165][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.649669][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.705443][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.715803][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.772514][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.992409][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.752213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.804732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.826060][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.854908][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.903571][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.923683][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.943930][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.978403][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.009149][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.182611][ T5601] loop4: detected capacity change from 0 to 1024 [ 270.208406][ T5601] syz.4.236: attempt to access beyond end of device [ 270.208406][ T5601] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 270.230270][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.803724][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.832561][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.949819][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.978719][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.019353][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.059289][ T5607] netlink: 14566 bytes leftover after parsing attributes in process `syz.2.339'. [ 271.133181][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.212693][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.236893][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.294586][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.265698][ T3754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.287267][ T3754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.368945][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.423577][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.444304][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.479837][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.709846][ T5648] sch_tbf: burst 2097157 is lower than device lo mtu (11337746) ! [ 274.577904][ T3657] Bluetooth: hci1: command 0x0406 tx timeout [ 274.840877][ T5663] netlink: 14566 bytes leftover after parsing attributes in process `syz.0.352'. [ 275.741212][ T27] audit: type=1326 audit(1729144985.763:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 275.782072][ T27] audit: type=1326 audit(1729144985.793:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 276.079900][ T5685] loop2: detected capacity change from 0 to 1024 [ 276.142575][ T3691] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 276.154197][ T5685] syz.2.350: attempt to access beyond end of device [ 276.154197][ T5685] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 276.168778][ T27] audit: type=1326 audit(1729144985.803:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 276.281462][ T27] audit: type=1326 audit(1729144985.843:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 276.434598][ T27] audit: type=1326 audit(1729144985.853:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafed77c990 code=0x7ffc0000 [ 276.532764][ T3691] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.554239][ T3691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.582950][ T27] audit: type=1326 audit(1729144985.873:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 276.622770][ T3691] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.692716][ T3691] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.724738][ T27] audit: type=1326 audit(1729144985.873:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafed77dff9 code=0x7ffc0000 [ 276.798633][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.873324][ T27] audit: type=1326 audit(1729144985.883:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafed77c990 code=0x7ffc0000 [ 276.969809][ T3691] hub 4-1:1.0: bad descriptor, ignoring hub [ 276.994549][ T3691] hub: probe of 4-1:1.0 failed with error -5 [ 277.041188][ T3691] cdc_wdm 4-1:1.0: skipping garbage [ 277.065709][ T3691] cdc_wdm 4-1:1.0: skipping garbage [ 277.083426][ T27] audit: type=1326 audit(1729144985.903:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafed77dbfb code=0x7ffc0000 [ 277.090118][ T3691] cdc_wdm 4-1:1.0: skipping garbage [ 277.185726][ T3691] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 277.250561][ T27] audit: type=1326 audit(1729144985.903:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafed77dbfb code=0x7ffc0000 [ 277.491530][ T5709] fuse: Bad value for 'fd' [ 279.662508][ T5737] loop4: detected capacity change from 0 to 256 [ 280.438010][ T5737] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 281.122909][ T22] usb 4-1: USB disconnect, device number 2 [ 282.826721][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 285.068826][ T5786] loop3: detected capacity change from 0 to 256 [ 285.817227][ T5786] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 285.839577][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 285.839591][ T27] audit: type=1800 audit(1729144995.863:572): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.379" name="bus" dev="loop3" ino=1048636 res=0 errno=0 [ 288.117786][ T5805] loop3: detected capacity change from 0 to 1024 [ 288.462118][ T5805] syz.3.380: attempt to access beyond end of device [ 288.462118][ T5805] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 288.519810][ T27] audit: type=1326 audit(1729144998.533:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 288.716027][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 288.840074][ T27] audit: type=1326 audit(1729144998.553:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 288.862943][ T3631] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 289.053387][ T27] audit: type=1326 audit(1729144998.553:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 289.117890][ T5826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.385'. [ 289.502622][ T3653] Bluetooth: Wrong link type (-22) [ 289.670203][ T27] audit: type=1326 audit(1729144998.553:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 289.802944][ T3631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.958238][ T3631] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.002295][ T3631] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 290.832335][ T27] audit: type=1326 audit(1729144998.553:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 290.885400][ T3631] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.922090][ T3631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.952136][ T27] audit: type=1326 audit(1729144998.553:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 292.402358][ T5845] kAFS: unparsable volume name [ 293.920534][ T5845] afs: Unknown parameter '`' [ 293.929200][ T27] audit: type=1326 audit(1729144998.553:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 293.951716][ T27] audit: type=1326 audit(1729144998.553:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 293.981147][ T27] audit: type=1326 audit(1729144998.603:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.092558][ T27] audit: type=1326 audit(1729144998.833:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.326458][ T27] audit: type=1326 audit(1729144999.043:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.457530][ T27] audit: type=1326 audit(1729144999.063:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.551254][ T27] audit: type=1326 audit(1729144999.733:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.628889][ T3657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.641580][ T3657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.642247][ T3657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.644129][ T3657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.644703][ T3657] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.645083][ T3657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.719787][ T27] audit: type=1326 audit(1729144999.773:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 294.719835][ T27] audit: type=1326 audit(1729144999.773:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 295.632671][ T3631] usb 2-1: can't set config #1, error -71 [ 295.666366][ T3631] usb 2-1: USB disconnect, device number 5 [ 295.827614][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 296.369731][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.395110][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.435262][ T5854] device bridge_slave_0 entered promiscuous mode [ 296.476585][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.519334][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.570601][ T5854] device bridge_slave_1 entered promiscuous mode [ 296.662669][ T3653] Bluetooth: hci5: command tx timeout [ 296.735023][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.804604][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.985366][ T5854] team0: Port device team_slave_0 added [ 297.021622][ T5854] team0: Port device team_slave_1 added [ 297.283635][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.290615][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.334032][ T3657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.343693][ T3657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.352178][ T3657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.361029][ T3657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.369237][ T3657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.377069][ T3657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.691340][ T5888] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'. [ 297.705172][ T3653] Bluetooth: Wrong link type (-22) [ 298.404116][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.742759][ T3657] Bluetooth: hci5: command tx timeout [ 299.594228][ T3657] Bluetooth: hci3: command tx timeout [ 299.610907][ T3756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.759858][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.772574][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.849396][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.435973][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 300.435990][ T27] audit: type=1326 audit(1729145010.463:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 300.603624][ T27] audit: type=1326 audit(1729145010.503:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 300.625898][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.752854][ T22] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 300.852178][ T27] audit: type=1326 audit(1729145010.503:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 300.923306][ T3657] Bluetooth: hci5: command tx timeout [ 300.969677][ T27] audit: type=1326 audit(1729145010.513:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 300.991892][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.016241][ T3756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.402704][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.421322][ T27] audit: type=1326 audit(1729145010.513:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 301.441784][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.481461][ T5854] device hsr_slave_0 entered promiscuous mode [ 301.489405][ T22] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 301.528223][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.547605][ T27] audit: type=1326 audit(1729145010.513:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 301.622665][ T3657] Bluetooth: hci3: command tx timeout [ 301.642974][ T5854] device hsr_slave_1 entered promiscuous mode [ 301.670121][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.688205][ T5854] Cannot create hsr debugfs directory [ 301.705130][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.713959][ T27] audit: type=1326 audit(1729145010.513:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 301.772455][ T5911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.813970][ T3756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.856594][ T5921] netlink: 104 bytes leftover after parsing attributes in process `syz.2.407'. [ 301.952665][ T3653] Bluetooth: Wrong link type (-22) [ 301.958454][ T3653] Bluetooth: hci1: link tx timeout [ 301.964351][ T3653] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 302.626449][ T27] audit: type=1326 audit(1729145010.513:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 302.655234][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.661213][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 302.789753][ T27] audit: type=1326 audit(1729145010.563:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 302.869389][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 302.890164][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 302.895834][ T22] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 302.982841][ T3657] Bluetooth: hci5: command tx timeout [ 302.989324][ T27] audit: type=1326 audit(1729145010.563:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 303.023064][ T3756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.342740][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.516430][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 303.646991][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.702682][ T3657] Bluetooth: hci3: command tx timeout [ 303.816186][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.001521][ T5956] loop4: detected capacity change from 0 to 256 [ 305.952725][ T3657] Bluetooth: hci3: command tx timeout [ 305.994197][ T5956] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 306.034207][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 306.034220][ T27] audit: type=1800 audit(1729145016.063:616): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.413" name="bus" dev="loop4" ino=1048637 res=0 errno=0 [ 306.060870][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.113896][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.552539][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.567553][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.601950][ T5883] device bridge_slave_0 entered promiscuous mode [ 306.653929][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.661055][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.700008][ T5883] device bridge_slave_1 entered promiscuous mode [ 306.970871][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.072981][ T14] usb 2-1: USB disconnect, device number 6 [ 307.139346][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.367150][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.499816][ T5979] netlink: 104 bytes leftover after parsing attributes in process `syz.2.417'. [ 307.512758][ T3657] Bluetooth: Wrong link type (-22) [ 307.518372][ T3657] Bluetooth: hci1: link tx timeout [ 307.523675][ T3657] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 308.344726][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.371680][ T5883] team0: Port device team_slave_0 added [ 308.691889][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.717633][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.921096][ T5883] team0: Port device team_slave_1 added [ 310.344597][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.351569][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.414568][ T27] audit: type=1326 audit(1729145020.443:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 310.545521][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.569668][ T3756] device hsr_slave_0 left promiscuous mode [ 310.584847][ T3756] device hsr_slave_1 left promiscuous mode [ 310.593887][ T27] audit: type=1326 audit(1729145020.443:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 310.616934][ T27] audit: type=1326 audit(1729145020.583:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 310.641353][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.649053][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.657908][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.665461][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.672803][ T27] audit: type=1326 audit(1729145020.583:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 310.699100][ T3756] device bridge_slave_1 left promiscuous mode [ 310.705583][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.714380][ T3756] device bridge_slave_0 left promiscuous mode [ 310.721091][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.759900][ T3756] device veth1_macvtap left promiscuous mode [ 310.766620][ T27] audit: type=1326 audit(1729145020.583:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 310.767260][ T3756] device veth0_macvtap left promiscuous mode [ 310.796240][ T3756] device veth1_vlan left promiscuous mode [ 310.802864][ T3756] device veth0_vlan left promiscuous mode [ 310.862723][ T3692] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 310.887857][ T27] audit: type=1326 audit(1729145020.583:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29157c990 code=0x7ffc0000 [ 310.911244][ T27] audit: type=1326 audit(1729145020.583:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 311.022673][ T27] audit: type=1326 audit(1729145020.583:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29157dff9 code=0x7ffc0000 [ 311.055653][ T27] audit: type=1326 audit(1729145020.593:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29157c990 code=0x7ffc0000 [ 311.088250][ T27] audit: type=1326 audit(1729145020.593:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.124590][ T27] audit: type=1326 audit(1729145020.593:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.173019][ T27] audit: type=1326 audit(1729145020.623:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.210449][ T27] audit: type=1326 audit(1729145020.623:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.235017][ T27] audit: type=1326 audit(1729145020.943:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.258145][ T27] audit: type=1326 audit(1729145020.963:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.281197][ T27] audit: type=1326 audit(1729145021.193:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.312707][ T3692] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.328072][ T3692] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.357755][ T3692] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 311.377754][ T27] audit: type=1326 audit(1729145021.223:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 311.400683][ T3692] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 311.533925][ T3692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.573323][ T6017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 311.593720][ T3692] hub 5-1:1.0: bad descriptor, ignoring hub [ 311.599648][ T3692] hub: probe of 5-1:1.0 failed with error -5 [ 311.613275][ T3692] cdc_wdm 5-1:1.0: skipping garbage [ 311.618599][ T3692] cdc_wdm 5-1:1.0: skipping garbage [ 311.632697][ T3692] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 311.641195][ T27] audit: type=1326 audit(1729145021.263:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa29157dbfb code=0x7ffc0000 [ 312.771874][ T6033] netlink: 104 bytes leftover after parsing attributes in process `syz.1.428'. [ 313.552582][ T3657] Bluetooth: Wrong link type (-22) [ 313.821123][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 313.946524][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 314.138242][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.341471][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.728912][ T14] usb 5-1: USB disconnect, device number 11 [ 316.827263][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.835101][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.525153][ T3756] bond0 (unregistering): Released all slaves [ 317.621432][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.628710][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.657369][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.842117][ T5883] device hsr_slave_0 entered promiscuous mode [ 317.990909][ T5883] device hsr_slave_1 entered promiscuous mode [ 318.005720][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.025811][ T5883] Cannot create hsr debugfs directory [ 318.056851][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.166565][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.251478][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.278998][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.370888][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.383086][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.409581][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.416759][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.462563][ T6075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.437'. [ 318.475505][ T3657] Bluetooth: Wrong link type (-22) [ 318.481051][ T3657] Bluetooth: hci1: link tx timeout [ 318.487441][ T3657] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 318.917361][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.284809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.295282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.318316][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.325468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.481021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.281757][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.296256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.369138][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.438358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.473219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.504111][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.541315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.570196][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.612169][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.663965][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.690735][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.716611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.430950][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.514601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.537878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.377738][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.419186][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.731546][ T6132] netlink: 104 bytes leftover after parsing attributes in process `syz.4.448'. [ 323.744416][ T3657] Bluetooth: Wrong link type (-22) [ 324.527077][ T5854] device veth0_vlan entered promiscuous mode [ 324.560926][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.609167][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.646734][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.670550][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.690329][ T5883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.888829][ T5883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.904567][ T5883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.221220][ T5854] device veth1_vlan entered promiscuous mode [ 325.842416][ T5883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.861443][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 325.861456][ T27] audit: type=1326 audit(1729145035.883:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 325.863588][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.900677][ T27] audit: type=1326 audit(1729145035.933:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 325.979387][ T27] audit: type=1326 audit(1729145035.953:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 326.036621][ T27] audit: type=1326 audit(1729145035.953:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 326.058185][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.087648][ T5854] device veth0_macvtap entered promiscuous mode [ 326.120216][ T27] audit: type=1326 audit(1729145035.963:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537fd7dff9 code=0x7ffc0000 [ 326.174241][ T27] audit: type=1326 audit(1729145035.983:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537fd7c990 code=0x7ffc0000 [ 326.206401][ T27] audit: type=1326 audit(1729145035.983:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 326.237591][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.245708][ T3691] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 326.266579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.285343][ T27] audit: type=1326 audit(1729145035.983:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 326.313695][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.352423][ T5854] device veth1_macvtap entered promiscuous mode [ 326.360663][ T27] audit: type=1326 audit(1729145036.043:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 326.420179][ T27] audit: type=1326 audit(1729145036.043:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f537fd7dbfb code=0x7ffc0000 [ 326.587991][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.614521][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.625066][ T3691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.642580][ T3691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.661332][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.672885][ T3691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 326.801017][ T3691] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.810573][ T3691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.844226][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.844513][ T6157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.940920][ T6178] netlink: 104 bytes leftover after parsing attributes in process `syz.2.459'. [ 326.953744][ T3657] Bluetooth: Wrong link type (-22) [ 326.959291][ T3657] Bluetooth: hci1: link tx timeout [ 326.964897][ T3657] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 326.994778][ T3691] hub 2-1:1.0: bad descriptor, ignoring hub [ 327.000823][ T3691] hub: probe of 2-1:1.0 failed with error -5 [ 327.047582][ T3691] cdc_wdm 2-1:1.0: skipping garbage [ 327.053215][ T3691] cdc_wdm 2-1:1.0: skipping garbage [ 327.555448][ T3691] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 327.592181][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.603159][ T3691] cdc_wdm 2-1:1.0: Unknown control protocol [ 327.634776][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.671602][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.708023][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.719688][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.730817][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.864449][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.874647][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.899285][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.934420][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.485938][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.508037][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.531542][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.544889][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.555114][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.565980][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.583958][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.609789][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.620462][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.633933][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.133380][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.258327][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.400879][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.415019][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.437571][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.452848][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.462199][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.149090][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.164925][ T6222] program syz.2.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.185141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.205329][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.244795][ T6223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 331.257123][ T3657] Bluetooth: Wrong link type (-22) [ 332.076779][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.123856][ T14] usb 2-1: USB disconnect, device number 7 [ 332.367619][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.383182][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.438702][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.527939][ T3756] device hsr_slave_0 left promiscuous mode [ 332.957230][ T3756] device hsr_slave_1 left promiscuous mode [ 332.973660][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.021802][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.093755][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.101324][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.119752][ T3756] device bridge_slave_1 left promiscuous mode [ 333.140779][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.162165][ T3756] device bridge_slave_0 left promiscuous mode [ 333.173976][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.202241][ T3756] device hsr_slave_0 left promiscuous mode [ 333.225204][ T3756] device hsr_slave_1 left promiscuous mode [ 333.232276][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.261877][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.346218][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.471052][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.500234][ T3756] device bridge_slave_1 left promiscuous mode [ 333.716878][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.830658][ T3756] device bridge_slave_0 left promiscuous mode [ 333.872703][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.955122][ T3756] device veth1_macvtap left promiscuous mode [ 333.961214][ T3756] device veth0_macvtap left promiscuous mode [ 333.975283][ T3756] device veth1_vlan left promiscuous mode [ 333.981119][ T3756] device veth0_vlan left promiscuous mode [ 333.996460][ T3756] device veth1_macvtap left promiscuous mode [ 334.006900][ T3756] device veth0_macvtap left promiscuous mode [ 334.017726][ T3756] device veth1_vlan left promiscuous mode [ 334.028195][ T3756] device veth0_vlan left promiscuous mode [ 334.701934][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 334.768168][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 334.828535][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.867110][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.949767][ T6271] netlink: 104 bytes leftover after parsing attributes in process `syz.1.478'. [ 334.963811][ T3657] Bluetooth: Wrong link type (-22) [ 336.263151][ T3756] bond0 (unregistering): Released all slaves [ 337.271558][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 337.306679][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 337.314024][ T3657] ------------[ cut here ]------------ [ 337.314092][ T3657] WARNING: CPU: 0 PID: 3657 at net/bluetooth/hci_conn.c:617 hci_conn_timeout+0xf8/0x1e0 [ 337.314131][ T3657] Modules linked in: [ 337.314157][ T3657] CPU: 0 PID: 3657 Comm: kworker/u5:5 Not tainted 6.1.112-syzkaller #0 [ 337.314179][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.314193][ T3657] Workqueue: hci1 hci_conn_timeout [ 337.314217][ T3657] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 337.314240][ T3657] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 337.314263][ T3657] RSP: 0018:ffffc9000446fc28 EFLAGS: 00010293 [ 337.314283][ T3657] RAX: ffffffff89ac4db8 RBX: ffff88806245c330 RCX: ffff888078591dc0 [ 337.314299][ T3657] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 337.314313][ T3657] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100c48b803 [ 337.314329][ T3657] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 337.314344][ T3657] R13: 1ffff11003cce8e3 R14: ffff88806245c000 R15: ffffffff815ae9e9 [ 337.314361][ T3657] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 337.314389][ T3657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.314403][ T3657] CR2: 00005555775d65c8 CR3: 0000000060b41000 CR4: 00000000003506f0 [ 337.452075][ T3657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.460083][ T3657] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 337.468088][ T3657] Call Trace: [ 337.471361][ T3657] [ 337.474319][ T3657] ? __warn+0x15a/0x520 [ 337.478489][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.483484][ T3657] ? report_bug+0x2af/0x500 [ 337.488015][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.493031][ T3657] ? handle_bug+0x3d/0x70 [ 337.497368][ T3657] ? exc_invalid_op+0x16/0x40 [ 337.502042][ T3657] ? asm_exc_invalid_op+0x16/0x20 [ 337.507117][ T3657] ? process_one_work+0x7a9/0x11d0 [ 337.512250][ T3657] ? hci_conn_timeout+0x61/0x1e0 [ 337.517261][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.522229][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.527211][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.532165][ T3657] ? process_one_work+0x7a9/0x11d0 [ 337.537333][ T3657] process_one_work+0x8a9/0x11d0 [ 337.542304][ T3657] ? worker_detach_from_pool+0x260/0x260 [ 337.547977][ T3657] ? _raw_spin_lock_irqsave+0x120/0x120 [ 337.553558][ T3657] ? kthread_data+0x4e/0xc0 [ 337.558082][ T3657] ? wq_worker_running+0x97/0x190 [ 337.563174][ T3657] worker_thread+0xa47/0x1200 [ 337.567895][ T3657] ? release_firmware_map_entry+0x186/0x186 [ 337.573868][ T3657] kthread+0x28d/0x320 [ 337.577972][ T3657] ? worker_clr_flags+0x190/0x190 [ 337.583040][ T3657] ? kthread_blkcg+0xd0/0xd0 [ 337.587662][ T3657] ret_from_fork+0x1f/0x30 [ 337.592119][ T3657] [ 337.595233][ T3657] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.602526][ T3657] CPU: 0 PID: 3657 Comm: kworker/u5:5 Not tainted 6.1.112-syzkaller #0 [ 337.610770][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.620831][ T3657] Workqueue: hci1 hci_conn_timeout [ 337.625944][ T3657] Call Trace: [ 337.629217][ T3657] [ 337.632147][ T3657] dump_stack_lvl+0x1e3/0x2cb [ 337.636857][ T3657] ? nf_tcp_handle_invalid+0x642/0x642 [ 337.642334][ T3657] ? panic+0x764/0x764 [ 337.646397][ T3657] ? vscnprintf+0x59/0x80 [ 337.650721][ T3657] panic+0x318/0x764 [ 337.654612][ T3657] ? __warn+0x169/0x520 [ 337.658763][ T3657] ? memcpy_page_flushcache+0xfc/0xfc [ 337.664135][ T3657] ? ret_from_fork+0x1f/0x30 [ 337.668749][ T3657] __warn+0x348/0x520 [ 337.672727][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.677670][ T3657] report_bug+0x2af/0x500 [ 337.682004][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.686958][ T3657] handle_bug+0x3d/0x70 [ 337.691134][ T3657] exc_invalid_op+0x16/0x40 [ 337.695657][ T3657] asm_exc_invalid_op+0x16/0x20 [ 337.700639][ T3657] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 337.706217][ T3657] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 337.725831][ T3657] RSP: 0018:ffffc9000446fc28 EFLAGS: 00010293 [ 337.731909][ T3657] RAX: ffffffff89ac4db8 RBX: ffff88806245c330 RCX: ffff888078591dc0 [ 337.739872][ T3657] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 337.747857][ T3657] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100c48b803 [ 337.755850][ T3657] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 337.763835][ T3657] R13: 1ffff11003cce8e3 R14: ffff88806245c000 R15: ffffffff815ae9e9 [ 337.771803][ T3657] ? process_one_work+0x7a9/0x11d0 [ 337.776921][ T3657] ? hci_conn_timeout+0x61/0x1e0 [ 337.781871][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.787336][ T3657] ? hci_conn_timeout+0xf8/0x1e0 [ 337.792282][ T3657] ? process_one_work+0x7a9/0x11d0 [ 337.797411][ T3657] process_one_work+0x8a9/0x11d0 [ 337.802365][ T3657] ? worker_detach_from_pool+0x260/0x260 [ 337.808020][ T3657] ? _raw_spin_lock_irqsave+0x120/0x120 [ 337.813572][ T3657] ? kthread_data+0x4e/0xc0 [ 337.818102][ T3657] ? wq_worker_running+0x97/0x190 [ 337.823143][ T3657] worker_thread+0xa47/0x1200 [ 337.827841][ T3657] ? release_firmware_map_entry+0x186/0x186 [ 337.833740][ T3657] kthread+0x28d/0x320 [ 337.837813][ T3657] ? worker_clr_flags+0x190/0x190 [ 337.842879][ T3657] ? kthread_blkcg+0xd0/0xd0 [ 337.847468][ T3657] ret_from_fork+0x1f/0x30 [ 337.851888][ T3657] [ 337.855275][ T3657] Kernel Offset: disabled [ 337.859671][ T3657] Rebooting in 86400 seconds..