last executing test programs: 3m14.559603038s ago: executing program 0 (id=763): r0 = socket$kcm(0x2, 0x0, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x11) 3m12.927718016s ago: executing program 0 (id=767): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 2m47.975372105s ago: executing program 1 (id=827): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m47.226682232s ago: executing program 1 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x4920e7af812c3f03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 2m46.499436492s ago: executing program 1 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x81, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$getflags(r3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, 0x0, 0x0, 0xffffff80}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x3f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r9 = eventfd2(0x4000b6b9, 0x801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4, {0x1, 0x1720}}, './file0\x00'}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r12 = eventfd(0x4a05) r13 = eventfd(0x7) r14 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r7, 0xa, &(0x7f0000000e80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x2, r8, &(0x7f0000000480)="fec8aac7fa0b49605bc2606b13b09960152074375e7855154452d94aab7c329d5e60ba92b9dd10b7a1287bc3b7ff52b75810ce59e1baab7d20e7da37cd0bdd673c1e07eb93a8a5399146e4e1e3a3d6f810e379929bf2c27ca5716b1ff00c9f527a082117ae1ff64207b876fcb97e92deeddee5fc02e2a953c9ac192702027dd11eae4af10667650124dce129975ae6ca48874edf09809625a854ba58e6f9c428afc15d5d13b5780c00f1d1a5cf7a42707424fa5d31c7593d4f576de8fdcdf4c39ce4861b919772", 0xc7, 0x3, 0x0, 0x2, r9}, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000680)="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", 0xfe, 0x0, 0x0, 0x0, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0xffff, r10, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x1, r11}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0xeec, r1, &(0x7f0000000840)="72e08bc947", 0x5, 0x1, 0x0, 0x3, r3}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x29, r3, &(0x7f00000008c0)="c96b3cde233b6aa1dcca28148701c53aef4bc72d75150b3d78dbacd92b11271c74d7ba08ced1c405703b6654347200757445daa810225fb462b079393f2174661a4b567710dc84e7fd2db67a1616dfe2a42fbdf2898f58d430bc0295fb15397ef754331681a6650df18e94275ff71ba98607d431bca690b998fb8d70b411eeea84d3fec8af9f9f6611958f218165e5b14452ea11563bb25806e8dcc7db0079a6a12cdce7743a9c7ef3263cafc1330ea3a991", 0xb2, 0x40e, 0x0, 0x2, r12}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x5, 0x101, r0, &(0x7f00000009c0)="3e353bc719d8bb072b81be68c717d223545ad0ee5bddb8b1113f4504f8e5266b9be19d1a1836f8c7e06f32735e4fb06652c5a8013d615b69bd6df072c28a0cbe0ed5d053e683377fbdf5299384fcd5a5c9babeae62d58da0e3ee1b28e7177551f189557cebfdecc5e257d86a6cafc38c2744439bf3423173dc615c9c2f9c87f0c96e9fb99a3ee83e6c5a4fe03a347d48cc64d2a7cbafa50144a9c7174bcba093054c23c5bcc82de9bf61ea62927b276e279e863952", 0xb5, 0x7f, 0x0, 0x2, r13}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x3, 0x0, r14, &(0x7f0000000ac0)="2ed6abe09efabbdc4a8b33e4fe9861ba942d035f2b9afc664ca10d167496f11a590670da230332bbd1c26b7881fdadc538684c69a5837320d7b4187c5e3373bf602cddbd931c046c4360f11abc89c27d82d19e587edd8403b778db2b491184031006c7fcec4ad81d7f8955401e86a23c7e0fe1e924273f23f9d8b0325200873eab5f3624cb9b35af9770f2095056e947781c351b006a4a7fad3cd00c5988646221d71ee74f1e3f83aaf7121a9418986c77fdaf0c37519a3697ac3bea0b56781cc88cbf107a3b156f82791f79a623fe825fc8adc67ee538", 0xd7, 0x7, 0x0, 0x2, r4}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0xdc0, r0, &(0x7f0000000c00)="dc062f2e6d208f4379be8d2c41acc5195b7ede66a95b7cb19dc973201ac7a0467156493cf13719a4a8f6f33c71f293ffa89db60a776d584fb692b530bee0d4db12de1845dea150bde1364e23193aa2c6b9eadbfd3a6a2d84975d4edc3d2772514dc5f6aa19d1a9d7fb55bfd3ff10fccc3c7d3a2185a03757445d6ca0450b0395e1043d7ff72e7fd690624491458b379086a2c0ad394fc7cd69b9e9bf885da5c8cd9b6dc6134cbd0f973acac779d625abe3dcf625ee936a2e2e92d789412bf173d254d5f11049986c3adbcdfa71a003df0210010490925b8066e45cfefc68ee0e8b39ed", 0xe3, 0x1, 0x0, 0x3, r3}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x2, 0x7ff, r3, &(0x7f0000000d40)="7d846f0b7b5233dc5771627dee16a33f4041c9a67dede2aef2cc4f2e0041b098fb47afa73b01dd3baf09274a5602d1e888f7e6b15e5734be27285d3d37c6f836d2370e8f9244688113bd9cc3e8fa47104da657e597d985f5616995f5b097d25475b07860f2116673b6ee6febb1ed58166da75f806ddd5662a2cfc55a19657d7350fe8787b19fcfe29752ef96b751a6b7154e19bfc4197dafb9e82542ac3d0a2e44214b79f2c9cac4993ae14b4eca8adceca8d027ce426d1cc06f4d1979c6bf3bd25df67b14", 0xc5, 0x3, 0x0, 0x1}]) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r16, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 2m45.002946124s ago: executing program 1 (id=836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.906770626s ago: executing program 0 (id=786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f00000002c0)=@udp6, 0x2}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b000000"], 0x4c}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12011003000000082505a8a44000fc01030109021b000101000000090401000007010000090501020000000000"], &(0x7f0000000980)={0x0, 0x0, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="050f0f00410a"]}) 2m42.183570095s ago: executing program 1 (id=837): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x0, 0x2, 0x21}, 0x7, 0x8, 0x0, 0x0, &(0x7f0000001540)="e8865f3ada67ab60994d5df139b659", 0x5}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) r6 = syz_clone(0x1003400, &(0x7f0000000300), 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)) process_vm_writev(r6, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0) 2m40.994196751s ago: executing program 0 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021200000700000008000000000000000500170004c018273a5f8ca2947229e2683f3b0000000a14000000000000fc0200"/70], 0x38}}, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'wlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0xffffffffffffffff, 0x0, 0x0, 0x70, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a40000005304"], 0xa4}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4) r7 = socket(0x27, 0x6, 0x6) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000005c0)=ANY=[@ANYRES32=r4], 0x3c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000006b40)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) getsockname$netrom(r7, 0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYBLOB="80002200ffffffffffff080211000001505050505050000000000000000000001e030000000602020202020204063fff080000000503", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r5], 0x45) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="070106ef850200003d000000be000000080200000700000000000000000000005fe78d85238b1e3154e07c9b561fd77c3ce193fb19cb1d41f97757c5379de738e15fd01e0168d8d7386a9032d6a07294b4407524a37798b4140696a0b4ac6f3cbcde6b9433f04af10f8a1121fb9f67e3a7f5b6c6454be2ebcbc17bb4917fd7e4632f8b17833333dab94cb01aa0bfd5f14666526e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faff00"/920], 0x492) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x8, 0x4, [0xfffb, 0x1, 0x4, 0x796]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000340)={r9, 0x2}, &(0x7f0000000380)=0x8) write(r2, 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) syz_emit_ethernet(0x46, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a4b47700102100fe800000000000000000000100000000ff02000000000000000000000000000100000000047d"], 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000580)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x2e, 0x0, 0x0, {0x0, @usr_ip6_spec={@private0, @empty}, {0x0, @local}, @usr_ip6_spec={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x80, 0x0}}, 0x0, 0x0, 0x80}, {}, 0x0, 0x4}}}) socket$inet_sctp(0x2, 0x1, 0x84) 2m40.526258261s ago: executing program 1 (id=844): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) 2m36.675956841s ago: executing program 0 (id=852): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m33.98525769s ago: executing program 0 (id=854): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 2m18.158276108s ago: executing program 3 (id=886): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2m17.646534882s ago: executing program 3 (id=887): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r0}, 0x20) 2m17.559377687s ago: executing program 3 (id=888): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x6, 0x6, 0x500, 0x4, 0x41020019}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x3c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x5, 0x4000007fffffff}) fcntl$lock(r8, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @private}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x0, r9}) 2m15.324281895s ago: executing program 3 (id=890): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r5, &(0x7f0000000300)=""/236, 0xec, 0x21, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev, 0x2}}]}, 0x38}}, 0x0) 2m14.704303096s ago: executing program 3 (id=892): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) r3 = syz_clone(0x1003400, &(0x7f0000000300), 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)) process_vm_writev(r3, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0) 2m13.60954006s ago: executing program 3 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x0, 0x11) 9.815400117s ago: executing program 2 (id=1050): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r5, &(0x7f0000000300)=""/236, 0xec, 0x21, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev, 0x2}}]}, 0x38}}, 0x0) 9.027050864s ago: executing program 4 (id=1051): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 8.438033978s ago: executing program 2 (id=1052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) setrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = gettid() r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) syz_open_procfs(r2, &(0x7f0000000400)='cpuset\x00') ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b7030000000000008513bb141200afaed03dd3e1b4550000009b0000009500"/109], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x3, {}, 0x0, 0x0}}) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x2, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) 8.063753295s ago: executing program 4 (id=1053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) 7.417721182s ago: executing program 2 (id=1054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522e2b4aa47ee54661c562570a6cd964f6009dad3ddf260"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0cc}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.128990886s ago: executing program 4 (id=1055): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000180)={0xff, 0xf139}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, r0, 0x84cad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) socketpair(0x21, 0x6, 0xfff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt(r4, 0x1, 0x217, &(0x7f0000000380), 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x4030582a, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x100, 0xfff5, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x3c}, 0x0, @in6=@private1}}, 0xe8) close(r9) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.062806517s ago: executing program 4 (id=1056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe2$9p(&(0x7f0000000280), 0x4000) getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000003c0)=0x1, 0x4) write$binfmt_script(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11}, 0x11) 4.69981096s ago: executing program 4 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 3.823773905s ago: executing program 4 (id=1058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f00000002c0)=@udp6, 0x2}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b000000"], 0x4c}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12011003000000082505a8a44000fc01030109021b000101000000090401000007010000090501020000000000"], &(0x7f0000000980)={0x0, 0x0, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="050f0f00410a"]}) 2.747549425s ago: executing program 2 (id=1059): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, &(0x7f0000000000)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r5, &(0x7f0000000300)=""/236, 0xec, 0x21, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev, 0x2}}]}, 0x38}}, 0x0) 1.322667567s ago: executing program 2 (id=1060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 0s ago: executing program 2 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) setrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = gettid() r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) syz_open_procfs(r2, &(0x7f0000000400)='cpuset\x00') ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b7030000000000008513bb141200afaed03dd3e1b4550000009b0000009500"/109], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x3, {}, 0x0, 0x0}}) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x2, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) kernel console output (not intermixed with test programs): T7550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.447839][ T29] audit: type=1107 audit(1720724621.461:79): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 315.501613][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.518850][ T7435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.557122][ T7623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.610582][ T7435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.725569][ T7435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.755610][ T7435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.776043][ T7622] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 315.918394][ T7550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.200264][ T7550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.681274][ T7635] fuse: Bad value for 'fd' [ 318.236446][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.242836][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.618293][ T5333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.642952][ T5333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.046148][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.079412][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.165699][ T7550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.328344][ T7647] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.677'. [ 319.344470][ T7550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.597597][ T7550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.707527][ T7550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.906178][ T5135] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 320.137476][ T5135] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 320.168059][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.224843][ T5135] usb 5-1: config 0 descriptor?? [ 320.249658][ T5135] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 320.488021][ T5135] usb 5-1: USB disconnect, device number 13 [ 320.576365][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.748683][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.795995][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.803261][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.879943][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.887295][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.760778][ T7677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.919969][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.319220][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.670187][ T7550] veth0_vlan: entered promiscuous mode [ 322.787315][ T7550] veth1_vlan: entered promiscuous mode [ 322.817349][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 322.984052][ T7550] veth0_macvtap: entered promiscuous mode [ 323.032473][ T7550] veth1_macvtap: entered promiscuous mode [ 323.130751][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.165724][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.216221][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.240943][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.284844][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.324576][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.345471][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.402614][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.470748][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.538616][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.587404][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.661785][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.700181][ T7709] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.694'. [ 323.738977][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.775660][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.815504][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.865763][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.915524][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.945573][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.977283][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.042392][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.090237][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.125566][ T5138] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 324.230370][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.285644][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.338289][ T5138] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 324.357807][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.385509][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.409014][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.445020][ T5138] usb 5-1: config 0 descriptor?? [ 324.472811][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.474473][ T5138] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 324.492679][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.565618][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.615771][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.659398][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.800619][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.813095][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.826521][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.836794][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.847350][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.861446][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.872137][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.891340][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.908070][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.933065][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.982764][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.061952][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.110965][ T5138] usb 5-1: USB disconnect, device number 14 [ 325.185365][ T7550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.272245][ T7550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.322989][ T7550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.461034][ T7550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.224154][ T5333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.291378][ T5333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.441092][ T5333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.497156][ T5333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.105604][ T784] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.218297][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 329.465658][ T784] usb 4-1: Using ep0 maxpacket: 16 [ 329.473059][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 329.486488][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 329.501844][ T784] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 329.515375][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.536062][ T784] usb 4-1: config 0 descriptor?? [ 330.023850][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.115844][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.136996][ T29] audit: type=1107 audit(1720724636.151:80): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 330.140081][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.192537][ T784] hid (null): bogus close delimiter [ 330.226345][ T784] hid (null): invalid report_count 58028 [ 330.232019][ T784] hid (null): unknown global tag 0xd [ 330.282395][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.298669][ T784] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 330.323084][ T784] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 330.368948][ T784] hid-generic 0003:0158:0100.0009: bogus close delimiter [ 330.386691][ T7758] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 330.415763][ T7748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.705'. [ 330.425227][ T784] hid-generic 0003:0158:0100.0009: item 0 0 2 10 parsing failed [ 330.446396][ T784] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 332.032789][ T784] usb 4-1: USB disconnect, device number 13 [ 333.924957][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 334.510224][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.532864][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.549735][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.559288][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.567890][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.575828][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.616271][ T5088] Bluetooth: hci7: command tx timeout [ 336.644617][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 336.916458][ T29] audit: type=1107 audit(1720724642.931:81): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 336.943292][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.191820][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.193508][ T7814] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 337.696084][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.703584][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.733716][ T7794] bridge_slave_0: entered allmulticast mode [ 337.739054][ T7794] bridge_slave_0: entered promiscuous mode [ 337.742387][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.742517][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.742687][ T7794] bridge_slave_1: entered allmulticast mode [ 337.776521][ T7794] bridge_slave_1: entered promiscuous mode [ 337.974155][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.079803][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.785613][ T5088] Bluetooth: hci7: command tx timeout [ 339.146730][ T7827] tty tty1: ldisc open failed (-12), clearing slot 0 [ 339.506298][ T7794] team0: Port device team_slave_0 added [ 339.570530][ T7794] team0: Port device team_slave_1 added [ 339.758434][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.790903][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.816984][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.908078][ T7794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.955711][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.984957][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.109093][ T7794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.430884][ T7840] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 340.437484][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.672037][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 340.801551][ T7794] hsr_slave_0: entered promiscuous mode [ 340.865572][ T5088] Bluetooth: hci7: command tx timeout [ 340.909516][ T7794] hsr_slave_1: entered promiscuous mode [ 340.946236][ T7794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.953861][ T7794] Cannot create hsr debugfs directory [ 340.965596][ T785] usb 15-1: new high-speed USB device number 5 using vhci_hcd [ 341.942401][ T7841] vhci_hcd: connection reset by peer [ 341.965868][ T11] vhci_hcd: stop threads [ 342.003692][ T11] vhci_hcd: release socket [ 342.040254][ T11] vhci_hcd: disconnect device [ 342.185718][ T5199] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 342.308121][ T29] audit: type=1107 audit(1720724648.321:82): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 342.314369][ T7794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.359259][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.389731][ T5199] usb 5-1: device descriptor read/64, error -71 [ 342.484919][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.577990][ T7867] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 342.675226][ T7794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.687132][ T5199] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 342.865700][ T5199] usb 5-1: device descriptor read/64, error -71 [ 342.935930][ T5088] Bluetooth: hci7: command tx timeout [ 343.011556][ T7794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.237877][ T5199] usb usb5-port1: attempt power cycle [ 343.665960][ T5199] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 344.086323][ T5199] usb 5-1: device descriptor read/8, error -71 [ 344.315169][ T7794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.380493][ T5199] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 344.426263][ T5199] usb 5-1: device descriptor read/8, error -71 [ 344.561153][ T5199] usb usb5-port1: unable to enumerate USB device [ 344.938143][ T7794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.011285][ T7794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.112296][ T7794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.189739][ T7794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.256182][ T7897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 345.262765][ T7897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 345.319483][ T7897] vhci_hcd vhci_hcd.0: Device attached [ 345.371559][ T7898] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 345.405996][ T35] vhci_hcd: stop threads [ 345.458613][ T35] vhci_hcd: release socket [ 345.506674][ T35] vhci_hcd: disconnect device [ 345.548859][ T5199] vhci_hcd: vhci_device speed not set [ 346.234477][ T785] vhci_hcd: vhci_device speed not set [ 346.693170][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.092943][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.117581][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.189539][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.225775][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.233066][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.288410][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.295853][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.371799][ T7912] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 348.361059][ T7794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.826224][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.858738][ T5088] Bluetooth: hci8: unexpected event 0x01 length: 6 > 1 [ 348.880479][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.905897][ T7935] netlink: 'syz.4.757': attribute type 72 has an invalid length. [ 349.027991][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.215645][ T784] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 349.248011][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.556163][ T784] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 350.852966][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.672767][ T784] usb 5-1: config 0 descriptor?? [ 351.777129][ T7794] veth0_vlan: entered promiscuous mode [ 351.829894][ T784] usb 5-1: can't set config #0, error -71 [ 351.862327][ T784] usb 5-1: USB disconnect, device number 19 [ 351.922257][ T7794] veth1_vlan: entered promiscuous mode [ 351.945660][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 352.195905][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 352.208784][ T45] usb 1-1: descriptor type invalid, skip [ 352.246260][ T45] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 352.254322][ T45] usb 1-1: config 1 has no interface number 0 [ 352.276004][ T7794] veth0_macvtap: entered promiscuous mode [ 352.287728][ T45] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 352.324510][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 352.344169][ T45] usb 1-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 352.375836][ T45] usb 1-1: Product: syz [ 352.384933][ T7794] veth1_macvtap: entered promiscuous mode [ 352.390997][ T45] usb 1-1: Manufacturer: syz [ 352.405544][ T45] usb 1-1: SerialNumber: syz [ 352.501702][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.556620][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.595539][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.635574][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.722775][ T45] usb 1-1: USB disconnect, device number 12 [ 352.787825][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.858704][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.935801][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.995507][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.005382][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.082950][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.125517][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.165644][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.195511][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.368960][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.379105][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.392466][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.404448][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.429288][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.546637][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.617729][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.683479][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.877869][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.235561][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.295812][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.346163][ T5088] Bluetooth: hci8: unexpected event 0x01 length: 6 > 1 [ 354.402078][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.435854][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.529837][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.565519][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.577989][ T7974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 354.579655][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.584542][ T7974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.605610][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.765498][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.806471][ T29] audit: type=1107 audit(1720724660.821:83): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 354.824079][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.827996][ T7980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.885499][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.896841][ T7974] vhci_hcd vhci_hcd.0: Device attached [ 354.918466][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.969803][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.970420][ T7984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.111131][ T7984] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 355.125535][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.177172][ T784] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 355.207849][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.263941][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.311927][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.362990][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.421910][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.480315][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.539068][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.586686][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.645545][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.695520][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.775531][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.835584][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.870784][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.973937][ T7794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.003793][ T7794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.035531][ T7794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.085662][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 356.103529][ T7794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.231689][ T7975] vhci_hcd: connection reset by peer [ 356.265851][ T184] vhci_hcd: stop threads [ 356.276873][ T184] vhci_hcd: release socket [ 356.288426][ T184] vhci_hcd: disconnect device [ 356.305683][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 356.339584][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 356.395472][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 356.435778][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 356.467432][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.526035][ T25] usb 4-1: config 0 descriptor?? [ 356.547700][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.628438][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.785645][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.847122][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.118926][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.241816][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.291750][ T7999] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.770'. [ 357.388192][ T25] hid (null): bogus close delimiter [ 357.394505][ T25] hid (null): invalid report_count 58028 [ 357.422896][ T25] hid (null): unknown global tag 0xd [ 357.443763][ T25] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 357.489865][ T25] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 357.528431][ T25] hid-generic 0003:0158:0100.000A: bogus close delimiter [ 357.555711][ T25] hid-generic 0003:0158:0100.000A: item 0 0 2 10 parsing failed [ 357.589659][ T25] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 357.620712][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.769'. [ 357.629968][ T5132] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 357.852211][ T5132] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 357.879138][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.953774][ T5132] usb 5-1: config 0 descriptor?? [ 358.020266][ T5132] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 358.225575][ T5132] usb 5-1: USB disconnect, device number 20 [ 358.269627][ T7303] udevd[7303]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory [ 358.345923][ T7303] udevd[7303]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory [ 360.664461][ T784] vhci_hcd: vhci_device speed not set [ 360.934642][ T5136] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.975167][ T25] usb 4-1: USB disconnect, device number 14 [ 361.155783][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 361.178401][ T5136] usb 2-1: descriptor type invalid, skip [ 361.203175][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 361.208700][ T5136] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 361.245331][ T5136] usb 2-1: config 1 has no interface number 0 [ 361.256043][ T5136] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 361.345631][ T5136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 361.371138][ T5136] usb 2-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 361.422350][ T5136] usb 2-1: Product: syz [ 361.447941][ T5136] usb 2-1: Manufacturer: syz [ 361.464483][ T5136] usb 2-1: SerialNumber: syz [ 361.514573][ T5136] usb 2-1: can't set config #1, error -71 [ 361.592789][ T5136] usb 2-1: USB disconnect, device number 15 [ 362.292966][ T8028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.071034][ T8028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.204173][ T29] audit: type=1107 audit(1720724669.211:84): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 363.207870][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.297007][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.349526][ T8036] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 363.411278][ T8041] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 363.418028][ T8041] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 363.516295][ T8041] vhci_hcd vhci_hcd.0: Device attached [ 363.563466][ T8042] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 2 [ 363.597540][ T35] vhci_hcd: stop threads [ 363.604012][ T35] vhci_hcd: release socket [ 363.619892][ T35] vhci_hcd: disconnect device [ 364.966813][ T8063] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.784'. [ 365.318004][ T784] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 365.682398][ T784] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 365.706856][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.764874][ T784] usb 2-1: config 0 descriptor?? [ 365.847158][ T784] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 366.062257][ T5083] usb 2-1: USB disconnect, device number 16 [ 366.288542][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 366.457081][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 366.476837][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 366.488749][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 366.501064][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 366.510600][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 366.520464][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 366.710736][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.895863][ T5088] Bluetooth: hci9: unexpected event 0x01 length: 6 > 1 [ 366.897905][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.170828][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.350342][ T29] audit: type=1107 audit(1720724673.361:85): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 367.386497][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.513844][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.649118][ T8109] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 367.943577][ T8090] chnl_net:caif_netlink_parms(): no params data found [ 368.325777][ T5199] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 368.465816][ T8120] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 368.472474][ T8120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.617410][ T5088] Bluetooth: hci10: command tx timeout [ 368.736217][ T5199] usb 2-1: Using ep0 maxpacket: 16 [ 368.744614][ T5199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 368.765682][ T5199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 368.776344][ T5199] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 368.785837][ T5199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.857406][ T5199] usb 2-1: config 0 descriptor?? [ 368.895577][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.903173][ T8120] vhci_hcd vhci_hcd.0: Device attached [ 368.985965][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.016679][ T8090] bridge_slave_0: entered allmulticast mode [ 369.069130][ T8090] bridge_slave_0: entered promiscuous mode [ 369.095244][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.143988][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.170162][ T8090] bridge_slave_1: entered allmulticast mode [ 369.207627][ T8090] bridge_slave_1: entered promiscuous mode [ 369.275528][ T5132] usb 13-1: new high-speed USB device number 4 using vhci_hcd [ 369.436151][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.548417][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.601828][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.714603][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.866611][ T5199] hid (null): bogus close delimiter [ 369.916881][ T5199] hid (null): invalid report_count 58028 [ 369.938921][ T5199] hid (null): unknown global tag 0xd [ 370.014268][ T5199] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 370.045680][ T5199] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 370.084637][ T5199] hid-generic 0003:0158:0100.000B: bogus close delimiter [ 370.107126][ T8111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.796'. [ 370.148603][ T5199] hid-generic 0003:0158:0100.000B: item 0 0 2 10 parsing failed [ 370.158761][ T8090] team0: Port device team_slave_0 added [ 370.199904][ T5199] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 370.222381][ T8090] team0: Port device team_slave_1 added [ 370.471643][ T8124] vhci_hcd: connection reset by peer [ 370.515648][ T5846] vhci_hcd: stop threads [ 370.519973][ T5846] vhci_hcd: release socket [ 370.547660][ T5846] vhci_hcd: disconnect device [ 370.588260][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.634947][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.700543][ T5088] Bluetooth: hci10: command tx timeout [ 370.797234][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.816439][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.838729][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.951738][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.229581][ T8090] hsr_slave_0: entered promiscuous mode [ 371.356149][ T8090] hsr_slave_1: entered promiscuous mode [ 371.375764][ T8090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.383381][ T8090] Cannot create hsr debugfs directory [ 371.678705][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 371.842097][ T8167] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.805'. [ 372.056177][ T5139] usb 2-1: USB disconnect, device number 17 [ 372.305748][ T5199] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 372.555549][ T5199] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 372.570710][ T8090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.574958][ T5199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.668577][ T5199] usb 4-1: config 0 descriptor?? [ 372.704496][ T5199] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 372.775779][ T5088] Bluetooth: hci10: command tx timeout [ 372.903302][ T29] audit: type=1107 audit(1720724678.911:86): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 372.918855][ T8173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.964583][ T5199] usb 4-1: USB disconnect, device number 15 [ 373.041402][ T8090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.222191][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.326518][ T8173] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 373.429827][ T8090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.741584][ T8090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.415633][ T5132] vhci_hcd: vhci_device speed not set [ 374.420064][ T8090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.570372][ T8090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.642674][ T8196] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 374.649359][ T8196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.699381][ T8090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.761091][ T8090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.803563][ T8196] vhci_hcd vhci_hcd.0: Device attached [ 374.857482][ T53] Bluetooth: hci10: command tx timeout [ 374.996294][ T5083] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 375.125544][ T5136] usb 17-1: new high-speed USB device number 4 using vhci_hcd [ 375.205533][ T5083] usb 4-1: Using ep0 maxpacket: 16 [ 375.211389][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 375.258515][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 375.362675][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 375.393542][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.445560][ T5083] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 375.454663][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.502171][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.569271][ T5083] usb 4-1: config 0 descriptor?? [ 375.586595][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.594181][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.760496][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.767869][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.138474][ T8198] vhci_hcd: connection reset by peer [ 376.189270][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.209891][ T2899] vhci_hcd: stop threads [ 376.214242][ T2899] vhci_hcd: release socket [ 376.227422][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 376.243942][ T2899] vhci_hcd: disconnect device [ 376.274777][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.411966][ T5083] hid (null): bogus close delimiter [ 376.418920][ T5083] hid (null): invalid report_count 58028 [ 376.424697][ T5083] hid (null): unknown global tag 0xd [ 376.455350][ T5083] hid-generic 0003:0158:0100.000C: unknown main item tag 0x0 [ 376.474393][ T5083] hid-generic 0003:0158:0100.000C: unknown main item tag 0x0 [ 376.495173][ T5083] hid-generic 0003:0158:0100.000C: bogus close delimiter [ 376.502524][ T5083] hid-generic 0003:0158:0100.000C: item 0 0 2 10 parsing failed [ 376.516888][ T5083] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 376.947865][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'. [ 377.110983][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.395989][ T8090] veth0_vlan: entered promiscuous mode [ 377.498977][ T8090] veth1_vlan: entered promiscuous mode [ 377.687418][ T8090] veth0_macvtap: entered promiscuous mode [ 377.745897][ T8090] veth1_macvtap: entered promiscuous mode [ 377.829542][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.883854][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.906816][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.976448][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.035667][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.061696][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.131709][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.294385][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.333251][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.419696][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.472186][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.511449][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.549026][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.611836][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.672744][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.715447][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.785528][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.838712][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.874607][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.927875][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.974598][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.984439][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.120359][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.177365][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.239135][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.305945][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.343710][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.402055][ T29] audit: type=1107 audit(1720724685.411:87): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 379.410292][ T8240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.448816][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.485648][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.525506][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.561467][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.592859][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.610663][ T8241] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 379.652781][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.727843][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.772377][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.828349][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.871279][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.976745][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.015506][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.037771][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.048079][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.085503][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.135687][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.176946][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.227937][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.305599][ T5136] vhci_hcd: vhci_device speed not set [ 380.311360][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.384662][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.437536][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.455511][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.522000][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.587938][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.640521][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.685494][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.729933][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.796961][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.849741][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.963674][ T8090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.989160][ T8090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.013522][ T785] usb 4-1: USB disconnect, device number 16 [ 381.045594][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 381.069676][ T8090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.140022][ T8090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.435761][ T8258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 381.442355][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 381.545764][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 381.648343][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 381.825663][ T5199] usb 17-1: new high-speed USB device number 5 using vhci_hcd [ 381.892292][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.915602][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.118297][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.152646][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.135569][ T8260] vhci_hcd: connection reset by peer [ 385.153202][ T5333] vhci_hcd: stop threads [ 385.170755][ T5333] vhci_hcd: release socket [ 385.198399][ T784] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 385.234955][ T5333] vhci_hcd: disconnect device [ 385.417842][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 385.442913][ T784] usb 1-1: descriptor type invalid, skip [ 385.477125][ T784] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 385.485189][ T784] usb 1-1: config 1 has no interface number 0 [ 385.542109][ T784] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 385.578138][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 385.578681][ T784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 385.649869][ T784] usb 1-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 386.697818][ T784] usb 1-1: Product: syz [ 386.702051][ T784] usb 1-1: Manufacturer: syz [ 386.715512][ T784] usb 1-1: SerialNumber: syz [ 386.724868][ T784] usb 1-1: can't set config #1, error -71 [ 386.733252][ T784] usb 1-1: USB disconnect, device number 13 [ 387.195856][ T5199] vhci_hcd: vhci_device speed not set [ 388.035977][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.116562][ T29] audit: type=1107 audit(1720724694.121:88): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 388.188481][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.277554][ T5088] Bluetooth: hci9: unexpected event 0x01 length: 6 > 1 [ 388.290899][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.495006][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.505725][ T784] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 389.602483][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.689546][ T8319] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 389.729035][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 389.777175][ T784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.837927][ T784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.871670][ T784] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.932579][ T784] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 389.976085][ T784] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 390.043667][ T784] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 390.122381][ T784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.173827][ T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.218451][ T784] usb 5-1: Product: syz [ 390.231173][ T784] usb 5-1: Manufacturer: syz [ 390.258919][ T784] usb 5-1: SerialNumber: syz [ 390.313246][ T784] usb 5-1: can't set config #1, error -71 [ 390.367298][ T784] usb 5-1: USB disconnect, device number 21 [ 390.899449][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 393.665828][ T5136] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 393.886062][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 393.898790][ T5136] usb 3-1: descriptor type invalid, skip [ 393.935192][ T5136] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 393.950851][ T5136] usb 3-1: config 1 has no interface number 0 [ 393.997223][ T5136] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.065289][ T5136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 394.095685][ T5136] usb 3-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 394.114213][ T5136] usb 3-1: Product: syz [ 394.134446][ T5136] usb 3-1: Manufacturer: syz [ 394.148537][ T5136] usb 3-1: SerialNumber: syz [ 394.482890][ T5199] usb 3-1: USB disconnect, device number 8 [ 397.045649][ T29] audit: type=1107 audit(1720724703.051:89): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 397.060002][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.166982][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.241239][ T8370] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 398.177673][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 398.221932][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 398.236266][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 398.249161][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 398.258652][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 398.267664][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 398.537359][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 400.310527][ T5088] Bluetooth: hci11: command tx timeout [ 401.623263][ T8392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.868'. [ 401.868649][ T784] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 402.111214][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 402.376868][ T5088] Bluetooth: hci11: command tx timeout [ 402.788951][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.789160][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.789331][ T8381] bridge_slave_0: entered allmulticast mode [ 402.790758][ T8381] bridge_slave_0: entered promiscuous mode [ 402.793513][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.793606][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.793742][ T8381] bridge_slave_1: entered allmulticast mode [ 402.801898][ T8381] bridge_slave_1: entered promiscuous mode [ 403.786597][ T184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.948445][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.967810][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.276599][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 404.456886][ T5088] Bluetooth: hci11: command tx timeout [ 404.928631][ T184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.965564][ T5136] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 405.208874][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 405.223047][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 405.232092][ T5136] usb 4-1: Using ep0 maxpacket: 32 [ 405.245617][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 405.257331][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 405.266470][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 405.273957][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 405.300372][ T5136] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 405.312582][ T5140] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 405.341324][ T8381] team0: Port device team_slave_0 added [ 405.348892][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.362948][ T5136] usb 4-1: config 0 descriptor?? [ 405.484586][ T5136] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 405.527612][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 405.556319][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 405.604521][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 405.640343][ T184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.651229][ T5140] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 405.685674][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.790416][ T5140] usb 5-1: config 0 descriptor?? [ 405.939348][ T8381] team0: Port device team_slave_1 added [ 406.247093][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.268079][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.291054][ T8434] Illegal XDP return value 4294967274 on prog (id 172) dev N/A, expect packet loss! [ 406.318435][ T5140] hid (null): bogus close delimiter [ 406.324464][ T5140] hid (null): invalid report_count 58028 [ 406.364669][ T5140] hid (null): unknown global tag 0xd [ 406.394172][ T5140] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 406.433476][ T5140] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 406.449434][ T184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.475602][ T5140] hid-generic 0003:0158:0100.000D: bogus close delimiter [ 406.506721][ T5140] hid-generic 0003:0158:0100.000D: item 0 0 2 10 parsing failed [ 406.515127][ T5140] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 406.538745][ T5088] Bluetooth: hci11: command tx timeout [ 406.544720][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.883'. [ 406.875627][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.921092][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.947201][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.046373][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.141869][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.163683][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.297143][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.336063][ T5088] Bluetooth: hci7: command tx timeout [ 407.377199][ T5136] gspca_vc032x: reg_w err -110 [ 407.442577][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.486777][ T25] usb 5-1: USB disconnect, device number 23 [ 407.493005][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.526687][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.561034][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.592198][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.635879][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.641237][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.685558][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.790130][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.858312][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.889797][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.905910][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.923871][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.953642][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.990149][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.023732][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.045739][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.065702][ T5136] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.096205][ T5136] gspca_vc032x: Unknown sensor... [ 408.101318][ T5136] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 408.203082][ T8381] hsr_slave_0: entered promiscuous mode [ 408.340338][ T8381] hsr_slave_1: entered promiscuous mode [ 408.367881][ T8381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.445836][ T8381] Cannot create hsr debugfs directory [ 408.798103][ T184] bridge_slave_1: left allmulticast mode [ 408.826155][ T184] bridge_slave_1: left promiscuous mode [ 408.859138][ T184] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.901330][ T184] bridge_slave_0: left allmulticast mode [ 408.926343][ T184] bridge_slave_0: left promiscuous mode [ 408.953009][ T184] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.162580][ T5135] usb 4-1: USB disconnect, device number 17 [ 409.425492][ T5088] Bluetooth: hci7: command tx timeout [ 411.496502][ T5094] Bluetooth: hci7: command tx timeout [ 411.574935][ T184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.669868][ T184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.706438][ T184] bond0 (unregistering): Released all slaves [ 411.738360][ T5094] Bluetooth: hci9: command 0x0406 tx timeout [ 412.926442][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 413.705520][ T5088] Bluetooth: hci7: command tx timeout [ 414.216704][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.485680][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.515762][ T5088] Bluetooth: hci9: unexpected event 0x01 length: 6 > 1 [ 414.666441][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 414.830519][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.464699][ T184] hsr_slave_0: left promiscuous mode [ 415.682185][ T184] hsr_slave_1: left promiscuous mode [ 415.806556][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.824677][ T184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.117072][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.148846][ T184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.335572][ T5132] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 416.415023][ T184] veth1_macvtap: left promiscuous mode [ 416.445439][ T184] veth0_macvtap: left promiscuous mode [ 416.476448][ T184] veth1_vlan: left promiscuous mode [ 416.503751][ T184] veth0_vlan: left promiscuous mode [ 416.725609][ T5132] usb 3-1: Using ep0 maxpacket: 16 [ 416.843263][ T5132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 416.902642][ T5132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 416.980344][ T5132] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 417.041429][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.108412][ T5132] usb 3-1: config 0 descriptor?? [ 417.705698][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.780983][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.869432][ T5132] hid (null): bogus close delimiter [ 418.069542][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'. [ 418.150384][ T5132] hid (null): invalid report_count 58028 [ 418.160226][ T5132] hid (null): unknown global tag 0xd [ 418.227554][ T5132] hid-generic 0003:0158:0100.000E: unknown main item tag 0x0 [ 418.267912][ T5132] hid-generic 0003:0158:0100.000E: unknown main item tag 0x0 [ 418.297124][ T5132] hid-generic 0003:0158:0100.000E: bogus close delimiter [ 418.350364][ T5132] hid-generic 0003:0158:0100.000E: item 0 0 2 10 parsing failed [ 418.395231][ T5132] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 420.210490][ T184] team0 (unregistering): Port device team_slave_1 removed [ 420.490418][ T184] team0 (unregistering): Port device team_slave_0 removed [ 423.990808][ T5132] usb 3-1: USB disconnect, device number 9 [ 424.830530][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.887354][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 424.906896][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.914312][ T8440] bridge_slave_0: entered allmulticast mode [ 424.984941][ T8440] bridge_slave_0: entered promiscuous mode [ 425.159545][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.225674][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.280088][ T8440] bridge_slave_1: entered allmulticast mode [ 425.318497][ T8440] bridge_slave_1: entered promiscuous mode [ 425.546288][ T5094] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 425.582444][ T5094] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 425.592355][ T5094] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 425.615710][ T5094] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 425.625347][ T5094] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 425.636740][ T5094] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 425.953438][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.021924][ T8568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.035547][ T785] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 426.053519][ T8381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 426.153554][ T8381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.314830][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.365546][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 426.374738][ T785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.427846][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 426.475306][ T785] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.542248][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.556235][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.565064][ T8381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.645602][ T785] usb 3-1: Product: syz [ 426.649918][ T785] usb 3-1: Manufacturer: syz [ 426.654534][ T785] usb 3-1: SerialNumber: syz [ 426.766932][ T785] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 426.773816][ T785] cdc_ncm 3-1:1.0: bind() failure [ 426.775207][ T8440] team0: Port device team_slave_0 added [ 427.087929][ T45] usb 3-1: USB disconnect, device number 10 [ 427.256892][ T8381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.386449][ T8440] team0: Port device team_slave_1 added [ 427.735779][ T5088] Bluetooth: hci12: command tx timeout [ 428.080085][ T5846] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.278149][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.347015][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.526861][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.687832][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.694818][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.859022][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.307264][ T5846] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.768333][ T5846] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.825531][ T5088] Bluetooth: hci12: command tx timeout [ 430.075601][ T5136] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 430.259184][ T5846] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.305574][ T5136] usb 5-1: Using ep0 maxpacket: 16 [ 430.313030][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 430.360788][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 430.411773][ T5136] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 430.465573][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.492887][ T8440] hsr_slave_0: entered promiscuous mode [ 430.508495][ T5136] usb 5-1: config 0 descriptor?? [ 430.585950][ T8440] hsr_slave_1: entered promiscuous mode [ 430.618200][ T8440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.700777][ T8440] Cannot create hsr debugfs directory [ 430.928051][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.939274][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.950805][ T5136] hid (null): bogus close delimiter [ 430.956858][ T5136] hid (null): invalid report_count 58028 [ 430.962737][ T5136] hid (null): unknown global tag 0xd [ 430.973576][ T5136] hid-generic 0003:0158:0100.000F: unknown main item tag 0x0 [ 430.981450][ T5136] hid-generic 0003:0158:0100.000F: unknown main item tag 0x0 [ 430.990371][ T5136] hid-generic 0003:0158:0100.000F: bogus close delimiter [ 431.000477][ T5136] hid-generic 0003:0158:0100.000F: item 0 0 2 10 parsing failed [ 431.022891][ T5136] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 431.161801][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.909'. [ 431.895516][ T5094] Bluetooth: hci12: command tx timeout [ 432.042312][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 432.173244][ T5846] bridge_slave_1: left allmulticast mode [ 432.195655][ T5846] bridge_slave_1: left promiscuous mode [ 432.201537][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.220250][ T5094] Bluetooth: hci5: command 0x0406 tx timeout [ 432.291533][ T5132] usb 5-1: USB disconnect, device number 24 [ 432.517732][ T5846] bridge_slave_0: left allmulticast mode [ 432.523445][ T5846] bridge_slave_0: left promiscuous mode [ 432.565973][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 432.605851][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.719416][ T8627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.986007][ T5088] Bluetooth: hci12: command tx timeout [ 434.465688][ T5088] Bluetooth: Unexpected start frame (len 0) [ 434.579763][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.596007][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.611446][ T5846] bond0 (unregistering): Released all slaves [ 434.656643][ T5088] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 436.416174][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.423435][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.486021][ T8563] bridge_slave_0: entered allmulticast mode [ 436.530623][ T8563] bridge_slave_0: entered promiscuous mode [ 436.773302][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.827981][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.875528][ T8563] bridge_slave_1: entered allmulticast mode [ 436.915603][ T8563] bridge_slave_1: entered promiscuous mode [ 437.619676][ T8440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.994751][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.086539][ T5846] hsr_slave_0: left promiscuous mode [ 438.156721][ T5846] hsr_slave_1: left promiscuous mode [ 438.176847][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.184365][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.247886][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.280500][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.344356][ T5846] veth1_macvtap: left promiscuous mode [ 438.365725][ T5846] veth0_macvtap: left promiscuous mode [ 438.392500][ T5846] veth1_vlan: left promiscuous mode [ 438.425642][ T5846] veth0_vlan: left promiscuous mode [ 439.660492][ T8670] fuse: Bad value for 'fd' [ 440.410815][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.425504][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.765500][ T785] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 440.966946][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 441.008107][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 441.040366][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 441.117886][ T785] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 441.127436][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.196915][ T785] usb 5-1: config 0 descriptor?? [ 441.428604][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 441.620115][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.654638][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.708246][ T785] hid (null): bogus close delimiter [ 441.714504][ T785] hid (null): invalid report_count 58028 [ 441.716304][ T8673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.730817][ T785] hid (null): unknown global tag 0xd [ 441.752817][ T785] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 441.779372][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 441.845685][ T785] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 441.853202][ T785] hid-generic 0003:0158:0100.0010: bogus close delimiter [ 441.921719][ T8672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.921'. [ 441.931002][ T785] hid-generic 0003:0158:0100.0010: item 0 0 2 10 parsing failed [ 441.957894][ T785] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 444.186341][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 444.777991][ T8440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.882232][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.994370][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.076701][ T8381] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.148736][ T5135] usb 5-1: USB disconnect, device number 25 [ 445.414271][ T8440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.862312][ T8440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.985726][ T5139] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 446.114387][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.121592][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.158743][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.165993][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.276475][ T5139] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 446.325498][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.377210][ T5139] usb 5-1: config 0 descriptor?? [ 446.417686][ T5139] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 446.633830][ T5139] usb 5-1: USB disconnect, device number 26 [ 446.739430][ T8563] team0: Port device team_slave_0 added [ 446.779554][ T8563] team0: Port device team_slave_1 added [ 447.255912][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.263485][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.455481][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.536797][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.543805][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.670491][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.078414][ T5088] Bluetooth: Unexpected start frame (len 0) [ 448.506379][ T5088] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 448.698923][ T8563] hsr_slave_0: entered promiscuous mode [ 448.758329][ T8563] hsr_slave_1: entered promiscuous mode [ 448.905245][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.945477][ T8563] Cannot create hsr debugfs directory [ 449.022003][ T8724] fuse: Bad value for 'fd' [ 449.031061][ T8440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.170493][ T8440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.327327][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.333351][ T8440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.476754][ T8440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.619187][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.653323][ T8381] veth0_vlan: entered promiscuous mode [ 451.143394][ T8381] veth1_vlan: entered promiscuous mode [ 451.155700][ T5199] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 451.465553][ T5199] usb 3-1: Using ep0 maxpacket: 16 [ 451.491370][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 451.563679][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 451.624698][ T5199] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 451.735560][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.822479][ T5199] usb 3-1: config 0 descriptor?? [ 452.253172][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.436828][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.546965][ T5199] hid (null): bogus close delimiter [ 452.553294][ T5199] hid (null): invalid report_count 58028 [ 452.596366][ T5199] hid (null): unknown global tag 0xd [ 452.722612][ T5199] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 452.767746][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.932'. [ 452.824522][ T5199] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 452.906438][ T5199] hid-generic 0003:0158:0100.0011: bogus close delimiter [ 452.913532][ T5199] hid-generic 0003:0158:0100.0011: item 0 0 2 10 parsing failed [ 453.019459][ T5199] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 453.455037][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.538798][ T8381] veth0_macvtap: entered promiscuous mode [ 453.741937][ T8381] veth1_macvtap: entered promiscuous mode [ 453.808684][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.002175][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.009413][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.086209][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.093409][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.253135][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.333180][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.395047][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.415822][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.445525][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.490464][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.505672][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 454.560976][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.595413][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.646730][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.678045][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.710340][ T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 454.725477][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.745602][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.785880][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.801507][ T25] usb 5-1: config 0 descriptor?? [ 454.815810][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.828720][ T25] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 454.875552][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.900070][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.955493][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.025525][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.113303][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.165482][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.205509][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.265649][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.315513][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.339466][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.412138][ T25] usb 5-1: USB disconnect, device number 27 [ 455.428789][ T5135] usb 3-1: USB disconnect, device number 11 [ 455.569817][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.655731][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.720996][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.845557][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.896798][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.955568][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.042806][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.085604][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.115437][ T5088] Bluetooth: Unexpected start frame (len 0) [ 456.245548][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.335571][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.389092][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.435542][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.538902][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.604876][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.617080][ T5088] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 456.685546][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.839122][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.902858][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.995559][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.101382][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.196016][ T8780] fuse: Bad value for 'fd' [ 457.215424][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.274637][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.315765][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.371877][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.537306][ T8381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.615454][ T8381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.676117][ T8381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.771271][ T8381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.976898][ T8563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.085256][ T8563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.286107][ T8563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.391796][ T8563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.496819][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.415965][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.520971][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.817190][ T5094] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 459.839712][ T5094] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 459.858676][ T5094] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 459.875290][ T5094] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 459.893866][ T5094] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 459.906014][ T5094] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 460.058551][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.065716][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.130979][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.138221][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.239052][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.564951][ T5846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.291434][ T5846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.976827][ T5088] Bluetooth: hci8: command tx timeout [ 462.182120][ T5846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.558492][ T5846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.786790][ T8440] veth0_vlan: entered promiscuous mode [ 464.056831][ T5088] Bluetooth: hci8: command tx timeout [ 464.632810][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 464.700857][ T5846] bridge_slave_1: left allmulticast mode [ 464.730731][ T5846] bridge_slave_1: left promiscuous mode [ 464.764774][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.992565][ T5846] bridge_slave_0: left allmulticast mode [ 465.045547][ T5846] bridge_slave_0: left promiscuous mode [ 465.051410][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.438752][ T5094] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 465.452792][ T5094] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 465.464042][ T5094] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 465.497399][ T5094] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 465.506137][ T5094] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 465.513904][ T5094] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 466.138488][ T5088] Bluetooth: hci8: command tx timeout [ 466.635754][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.860233][ T8884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.968650][ T8884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.575646][ T5088] Bluetooth: hci11: command tx timeout [ 467.631091][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.701739][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.724866][ T5846] bond0 (unregistering): Released all slaves [ 468.226354][ T5088] Bluetooth: hci8: command tx timeout [ 468.556490][ T5846] hsr_slave_0: left promiscuous mode [ 468.675733][ T5846] hsr_slave_1: left promiscuous mode [ 468.715769][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.723295][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.906698][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.936671][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.346147][ T5846] veth1_macvtap: left promiscuous mode [ 469.351746][ T5846] veth0_macvtap: left promiscuous mode [ 469.426983][ T5846] veth1_vlan: left promiscuous mode [ 469.432552][ T5846] veth0_vlan: left promiscuous mode [ 469.659646][ T5088] Bluetooth: hci11: command tx timeout [ 469.695559][ T5199] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 469.905465][ T5199] usb 3-1: Using ep0 maxpacket: 16 [ 469.997988][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 470.036312][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 470.086475][ T5199] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 470.165810][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.214754][ T5199] usb 3-1: config 0 descriptor?? [ 470.771492][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.818549][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.892541][ T5199] hid (null): bogus close delimiter [ 470.962209][ T5199] hid (null): invalid report_count 58028 [ 471.055499][ T5199] hid (null): unknown global tag 0xd [ 471.091769][ T5199] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 471.099476][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.953'. [ 471.215734][ T5199] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 471.298905][ T5199] hid-generic 0003:0158:0100.0012: bogus close delimiter [ 471.387862][ T5199] hid-generic 0003:0158:0100.0012: item 0 0 2 10 parsing failed [ 471.439830][ T5199] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 471.738737][ T5094] Bluetooth: hci11: command tx timeout [ 472.974365][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 473.288063][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 473.818066][ T5094] Bluetooth: hci11: command tx timeout [ 476.225936][ T5199] usb 3-1: USB disconnect, device number 12 [ 476.374189][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.425610][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.432984][ T8797] bridge_slave_0: entered allmulticast mode [ 476.516819][ T8797] bridge_slave_0: entered promiscuous mode [ 476.615879][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.623081][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.697142][ T8797] bridge_slave_1: entered allmulticast mode [ 476.704959][ T8797] bridge_slave_1: entered promiscuous mode [ 476.784409][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.957736][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.162979][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.214099][ T8957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.346588][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.354146][ T8949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.860630][ T8797] team0: Port device team_slave_0 added [ 477.942891][ T8797] team0: Port device team_slave_1 added [ 478.509423][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.545627][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.665453][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.732999][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.770782][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.905570][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.866748][ T8797] hsr_slave_0: entered promiscuous mode [ 479.912871][ T8797] hsr_slave_1: entered promiscuous mode [ 479.985464][ T8797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.025543][ T8797] Cannot create hsr debugfs directory [ 480.385708][ T5135] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 480.656669][ T5135] usb 3-1: Using ep0 maxpacket: 16 [ 480.692578][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 480.745572][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 480.774251][ T5135] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 480.835753][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.867428][ T5135] usb 3-1: config 0 descriptor?? [ 481.001113][ T8563] veth0_vlan: entered promiscuous mode [ 481.343487][ T8563] veth1_vlan: entered promiscuous mode [ 481.531861][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.596947][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.703192][ T5135] hid (null): bogus close delimiter [ 481.746372][ T5135] hid (null): invalid report_count 58028 [ 481.752036][ T5135] hid (null): unknown global tag 0xd [ 481.863703][ T5135] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 481.924335][ T8982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.964'. [ 481.951219][ T5135] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 481.981056][ T5135] hid-generic 0003:0158:0100.0013: bogus close delimiter [ 482.028945][ T5135] hid-generic 0003:0158:0100.0013: item 0 0 2 10 parsing failed [ 482.306640][ T5135] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 482.759280][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 482.943593][ T8563] veth0_macvtap: entered promiscuous mode [ 483.047630][ T8563] veth1_macvtap: entered promiscuous mode [ 483.235722][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.530509][ T5846] bridge_slave_1: left allmulticast mode [ 483.540929][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.566800][ T5846] bridge_slave_1: left promiscuous mode [ 483.603529][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.618181][ T5136] usb 3-1: USB disconnect, device number 13 [ 483.648860][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.687499][ T5846] bridge_slave_0: left allmulticast mode [ 483.693215][ T5846] bridge_slave_0: left promiscuous mode [ 483.766820][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.528051][ T5094] Bluetooth: Unexpected start frame (len 0) [ 485.837091][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.876622][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.933141][ T5846] bond0 (unregistering): Released all slaves [ 486.296596][ T5088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 486.357401][ T5088] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 486.365759][ T5088] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 486.376852][ T5088] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 486.415736][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 486.424629][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 486.432328][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 487.119336][ T5846] hsr_slave_0: left promiscuous mode [ 487.178299][ T5846] hsr_slave_1: left promiscuous mode [ 487.275830][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.404321][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.556844][ T5846] veth0_vlan: left promiscuous mode [ 488.455947][ T53] Bluetooth: hci7: command tx timeout [ 489.835581][ T5135] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 490.089829][ T5135] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 490.135111][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.171358][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 490.180885][ T5135] usb 5-1: config 0 descriptor?? [ 490.200065][ T5135] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 490.417045][ T25] usb 5-1: USB disconnect, device number 28 [ 490.515918][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 490.558894][ T53] Bluetooth: hci7: command tx timeout [ 491.646295][ T9056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.652264][ T9056] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 491.773317][ T9056] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 491.780284][ T9056] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 491.946988][ T9056] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 491.975653][ T9056] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 492.617276][ T5094] Bluetooth: hci7: command tx timeout [ 492.627307][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.949959][ T9069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.184095][ T9069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.658436][ T5094] Bluetooth: hci10: command 0x0406 tx timeout [ 493.672382][ T9056] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 493.685566][ T9056] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 493.757140][ T9056] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 493.763112][ T9056] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 493.817435][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.835601][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.842986][ T8865] bridge_slave_0: entered allmulticast mode [ 493.868721][ T9056] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 493.874766][ T9056] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 493.916591][ T8865] bridge_slave_0: entered promiscuous mode [ 493.968286][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.010538][ T9056] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 494.035848][ T9056] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 494.046151][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.053501][ T8865] bridge_slave_1: entered allmulticast mode [ 494.165995][ T8865] bridge_slave_1: entered promiscuous mode [ 495.232821][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.300642][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.866275][ T8865] team0: Port device team_slave_0 added [ 495.973310][ T8865] team0: Port device team_slave_1 added [ 496.325678][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 496.395905][ T5135] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 496.607740][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.614740][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.676042][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 496.695483][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 496.750045][ T5135] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.772066][ T5135] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.772238][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.783182][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.844119][ T5135] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.908416][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.926232][ T5135] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 496.938652][ T25] usb 3-1: config 0 descriptor?? [ 496.944208][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.974725][ T5135] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.986758][ T25] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 497.035676][ T5135] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 497.115813][ T5135] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.125519][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.181640][ T25] usb 3-1: USB disconnect, device number 14 [ 497.188008][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.256393][ T5135] usb 5-1: Product: syz [ 497.325616][ T5135] usb 5-1: Manufacturer: syz [ 497.342960][ T5135] usb 5-1: SerialNumber: syz [ 497.937526][ T8797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.014351][ T8797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.667473][ T8865] hsr_slave_0: entered promiscuous mode [ 498.741714][ T8865] hsr_slave_1: entered promiscuous mode [ 498.883594][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.953987][ T8865] Cannot create hsr debugfs directory [ 499.321818][ T8797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.418155][ T8797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.434740][ T5135] cdc_ncm 5-1:1.0: bind() failure [ 499.479773][ T5135] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 499.523708][ T5135] cdc_ncm 5-1:1.1: bind() failure [ 499.586709][ T5135] usb 5-1: USB disconnect, device number 29 [ 500.391654][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 501.149033][ T29] audit: type=1107 audit(1720724807.161:90): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 501.163768][ T9136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.304871][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.397025][ T9138] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 501.819544][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.831747][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.005268][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.035193][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.095771][ T9034] bridge_slave_0: entered allmulticast mode [ 502.103620][ T9034] bridge_slave_0: entered promiscuous mode [ 502.840612][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.899655][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.946927][ T9034] bridge_slave_1: entered allmulticast mode [ 502.955025][ T9034] bridge_slave_1: entered promiscuous mode [ 504.301643][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.717776][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.034186][ T5846] bridge_slave_1: left allmulticast mode [ 505.040055][ T5846] bridge_slave_1: left promiscuous mode [ 505.070643][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.243957][ T5846] bridge_slave_0: left allmulticast mode [ 505.285644][ T5846] bridge_slave_0: left promiscuous mode [ 505.321947][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.827510][ T29] audit: type=1107 audit(1720724811.811:91): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 505.839123][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.019673][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.416062][ T9183] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 507.846962][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.935667][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.984029][ T5846] bond0 (unregistering): Released all slaves [ 509.611556][ T5846] hsr_slave_0: left promiscuous mode [ 509.771580][ T5846] hsr_slave_1: left promiscuous mode [ 509.845645][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.876274][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.477115][ T5846] veth1_macvtap: left promiscuous mode [ 510.482721][ T5846] veth0_macvtap: left promiscuous mode [ 510.529239][ T5846] veth1_vlan: left promiscuous mode [ 510.534652][ T5846] veth0_vlan: left promiscuous mode [ 512.978793][ T29] audit: type=1107 audit(1720724818.991:92): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 512.981685][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.165447][ T9224] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 513.709478][ T9223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.633771][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 515.248901][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 519.626950][ T5094] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 519.638238][ T5094] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 519.647953][ T5094] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 519.660363][ T5094] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 519.679940][ T5094] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 519.690710][ T5094] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 519.735145][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 519.782879][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 519.797348][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 519.840135][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 519.848293][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 519.856731][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 520.018552][ T9034] team0: Port device team_slave_0 added [ 520.071827][ T9034] team0: Port device team_slave_1 added [ 520.932392][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.109430][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.326282][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.400764][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.455597][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.596625][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.904156][ T5094] Bluetooth: hci12: command tx timeout [ 523.645502][ T5136] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 523.717006][ T9034] hsr_slave_0: entered promiscuous mode [ 523.759584][ T9034] hsr_slave_1: entered promiscuous mode [ 523.797217][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.804924][ T9034] Cannot create hsr debugfs directory [ 523.905692][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 523.949842][ T8865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.980143][ T5094] Bluetooth: hci12: command tx timeout [ 524.026590][ T5136] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.034911][ T5136] usb 3-1: config 179 has no interface number 0 [ 524.048075][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.059775][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 524.075523][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11 [ 524.091020][ T5136] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57890, setting to 1024 [ 524.103102][ T5136] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.117024][ T5136] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.126210][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.137915][ T8865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.139656][ T9289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.248406][ T8865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.466395][ T8865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.857065][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 525.870783][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 525.896992][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 525.916991][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 525.946902][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 525.986973][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 526.065767][ T53] Bluetooth: hci12: command tx timeout [ 526.158598][ T45] usb 3-1: USB disconnect, device number 15 [ 526.158616][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 526.173075][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 527.530225][ T9259] chnl_net:caif_netlink_parms(): no params data found [ 528.056822][ T53] Bluetooth: hci8: command tx timeout [ 528.145887][ T53] Bluetooth: hci12: command tx timeout [ 529.338213][ T5846] bridge_slave_1: left allmulticast mode [ 529.380018][ T5846] bridge_slave_1: left promiscuous mode [ 529.419899][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.461678][ T5846] bridge_slave_0: left allmulticast mode [ 529.486011][ T5846] bridge_slave_0: left promiscuous mode [ 529.525746][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.698372][ T9344] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 529.704433][ T9344] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 529.913211][ T9344] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 529.915630][ T5140] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 530.077767][ T9344] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 530.137197][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 530.137555][ T53] Bluetooth: hci8: command tx timeout [ 530.146378][ T5140] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 530.163009][ T5140] usb 5-1: config 179 has no interface number 0 [ 530.258134][ T5140] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 530.308089][ T5140] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 530.365421][ T5140] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11 [ 530.425449][ T5140] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57890, setting to 1024 [ 530.477729][ T5140] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.516611][ T5140] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 530.552292][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.584369][ T9346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 530.671012][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.786462][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.928527][ T5846] bond0 (unregistering): Released all slaves [ 531.016788][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.024301][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.135654][ T9259] bridge_slave_0: entered allmulticast mode [ 531.143293][ T9259] bridge_slave_0: entered promiscuous mode [ 531.925625][ T5846] hsr_slave_0: left promiscuous mode [ 532.015679][ T5846] hsr_slave_1: left promiscuous mode [ 532.024886][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.180848][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.208675][ T5139] usb 5-1: USB disconnect, device number 30 [ 532.208717][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 532.223000][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 533.118439][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 533.242658][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 534.124593][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.147638][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.406556][ T9259] bridge_slave_1: entered allmulticast mode [ 534.422213][ T9259] bridge_slave_1: entered promiscuous mode [ 537.672254][ T9259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.708162][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 537.718671][ T9369] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 537.815557][ T785] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 537.918519][ T9259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.525189][ T785] usb 5-1: device not accepting address 31, error -71 [ 538.650474][ T9259] team0: Port device team_slave_0 added [ 538.858159][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 539.036518][ T9259] team0: Port device team_slave_1 added [ 539.503785][ T9034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.803325][ T9034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 539.952439][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.972077][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.005011][ T9259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.147505][ T9034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 540.288700][ T9034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.382527][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.423965][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.596189][ T9259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.665549][ T5140] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 540.862165][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.906002][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 540.959248][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.013433][ T9305] bridge_slave_0: entered allmulticast mode [ 541.021497][ T5140] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 541.090861][ T9305] bridge_slave_0: entered promiscuous mode [ 541.101487][ T5140] usb 3-1: config 179 has no interface number 0 [ 541.166680][ T5140] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 541.292846][ T5140] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 541.342753][ T5140] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11 [ 541.398891][ T5140] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57890, setting to 1024 [ 541.492264][ T5140] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 541.534315][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.573543][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.601698][ T9305] bridge_slave_1: entered allmulticast mode [ 541.645446][ T5140] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 541.706008][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.719630][ T9305] bridge_slave_1: entered promiscuous mode [ 541.782575][ T9259] hsr_slave_0: entered promiscuous mode [ 541.796767][ T9387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 541.930067][ T9259] hsr_slave_1: entered promiscuous mode [ 541.985480][ T9259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.178655][ T9259] Cannot create hsr debugfs directory [ 543.151062][ T784] usb 3-1: USB disconnect, device number 16 [ 543.151065][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 543.151113][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 543.570163][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.676780][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.388587][ T784] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 544.646982][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 544.676549][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'. [ 544.688134][ T9421] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 544.712669][ T784] usb 5-1: descriptor type invalid, skip [ 544.753977][ T784] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 544.788321][ T784] usb 5-1: config 1 has no interface number 0 [ 544.855598][ T784] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 544.997564][ T784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 545.070253][ T784] usb 5-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 545.081855][ T9305] team0: Port device team_slave_0 added [ 545.177749][ T784] usb 5-1: Product: syz [ 545.286000][ T784] usb 5-1: Manufacturer: syz [ 545.290617][ T9305] team0: Port device team_slave_1 added [ 545.380519][ T784] usb 5-1: SerialNumber: syz [ 546.680237][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.794718][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.988074][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.082625][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.167743][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.295623][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.486914][ T5094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.500520][ T5094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.556645][ T5094] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.600588][ T5094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.625978][ T5094] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 547.654670][ T5094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 547.729604][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.776065][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.825835][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.850160][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.865948][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 547.874222][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 547.884377][ T9442] ------------[ cut here ]------------ [ 547.889890][ T9442] WARNING: CPU: 1 PID: 9442 at kernel/workqueue.c:2282 __queue_work+0xc5e/0xee0 [ 547.898978][ T9442] Modules linked in: [ 547.902916][ T9442] CPU: 1 PID: 9442 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 547.913173][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 547.923349][ T9442] RIP: 0010:__queue_work+0xc5e/0xee0 [ 547.928669][ T9442] Code: ff e8 86 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 78 83 36 00 eb 13 e8 71 83 36 00 eb 0c e8 6a 83 36 00 eb 05 e8 63 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 547.948315][ T9442] RSP: 0018:ffffc9001595f810 EFLAGS: 00010093 [ 547.954396][ T9442] RAX: ffffffff815fa3bf RBX: ffff8880239b3c00 RCX: ffff8880239b3c00 [ 547.962381][ T9442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.970357][ T9442] RBP: 0000000000000000 R08: ffffffff815f9893 R09: 0000000000000000 [ 547.978343][ T9442] R10: ffffc9001595f8e0 R11: fffff52002b2bf1d R12: ffff88804bfb11c0 [ 547.986348][ T9442] R13: dffffc0000000000 R14: ffff88804bfb1000 R15: 0000000000000008 [ 547.994349][ T9442] FS: 00005555886e1500(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 548.003290][ T9442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.009882][ T9442] CR2: 00007fbb57cf7fe4 CR3: 000000002fd4c000 CR4: 00000000003506f0 [ 548.017861][ T9442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.025839][ T9442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.033821][ T9442] Call Trace: [ 548.037118][ T9442] [ 548.040056][ T9442] ? __warn+0x163/0x4e0 [ 548.044250][ T9442] ? __queue_work+0xc5e/0xee0 [ 548.048956][ T9442] ? report_bug+0x2b3/0x500 [ 548.053492][ T9442] ? __queue_work+0xc5e/0xee0 [ 548.058247][ T9442] ? handle_bug+0x3e/0x70 [ 548.062593][ T9442] ? exc_invalid_op+0x1a/0x50 [ 548.067291][ T9442] ? asm_exc_invalid_op+0x1a/0x20 [ 548.072342][ T9442] ? __queue_work+0x123/0xee0 [ 548.077034][ T9442] ? __queue_work+0xc4f/0xee0 [ 548.081724][ T9442] ? __queue_work+0xc5e/0xee0 [ 548.086425][ T9442] queue_work_on+0x1c2/0x380 [ 548.091042][ T9442] ? __pfx_queue_work_on+0x10/0x10 [ 548.096171][ T9442] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 548.102076][ T9442] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 548.108420][ T9442] ? skb_queue_tail+0x36/0x120 [ 548.113217][ T9442] __hci_cmd_sync_sk+0x7b1/0x1130 [ 548.118263][ T9442] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 548.123741][ T9442] ? __pfx_lock_release+0x10/0x10 [ 548.128772][ T9442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.134776][ T9442] __hci_cmd_sync_status+0x37/0x130 [ 548.139990][ T9442] hci_dev_cmd+0x51c/0xa50 [ 548.144418][ T9442] ? __pfx_hci_dev_cmd+0x10/0x10 [ 548.149366][ T9442] ? proc_do_large_bitmap+0x1a0/0x13c0 [ 548.154850][ T9442] ? hci_sock_ioctl+0x6c4/0xa40 [ 548.159730][ T9442] sock_do_ioctl+0x158/0x460 [ 548.164338][ T9442] ? __pfx_smack_log+0x10/0x10 [ 548.169123][ T9442] ? __pfx_sock_do_ioctl+0x10/0x10 [ 548.174248][ T9442] ? smk_tskacc+0x300/0x370 [ 548.178772][ T9442] ? smack_file_ioctl+0x2a1/0x3a0 [ 548.183814][ T9442] sock_ioctl+0x629/0x8e0 [ 548.188162][ T9442] ? __pfx_sock_ioctl+0x10/0x10 [ 548.193033][ T9442] ? __fget_files+0x3f6/0x470 [ 548.197726][ T9442] ? __fget_files+0x29/0x470 [ 548.202324][ T9442] ? bpf_lsm_file_ioctl+0x9/0x10 [ 548.207270][ T9442] ? security_file_ioctl+0x87/0xb0 [ 548.212401][ T9442] ? __pfx_sock_ioctl+0x10/0x10 [ 548.217269][ T9442] __se_sys_ioctl+0xfc/0x170 [ 548.221876][ T9442] do_syscall_64+0xf3/0x230 [ 548.226394][ T9442] ? clear_bhb_loop+0x35/0x90 [ 548.231079][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.236986][ T9442] RIP: 0033:0x7f5ab83757db [ 548.241418][ T9442] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 548.261041][ T9442] RSP: 002b:00007fff9d7e0ba0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.269476][ T9442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ab83757db [ 548.277459][ T9442] RDX: 00007fff9d7e0c18 RSI: 00000000400448dd RDI: 0000000000000003 [ 548.285437][ T9442] RBP: 00005555886e14a8 R08: 0000000000000000 R09: 0000000000000000 [ 548.293423][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 548.301398][ T9442] R13: 0000000000000007 R14: 0000000000000005 R15: 0000000000000009 [ 548.309390][ T9442] [ 548.312424][ T9442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 548.319702][ T9442] CPU: 1 PID: 9442 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 548.329938][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 548.339993][ T9442] Call Trace: [ 548.343271][ T9442] [ 548.346206][ T9442] dump_stack_lvl+0x241/0x360 [ 548.350902][ T9442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.356125][ T9442] ? __pfx__printk+0x10/0x10 [ 548.360741][ T9442] ? _printk+0xd5/0x120 [ 548.364921][ T9442] ? vscnprintf+0x5d/0x90 [ 548.369264][ T9442] panic+0x349/0x860 [ 548.373175][ T9442] ? __warn+0x172/0x4e0 [ 548.377345][ T9442] ? __pfx_panic+0x10/0x10 [ 548.381771][ T9442] ? show_trace_log_lvl+0x4e6/0x520 [ 548.386999][ T9442] __warn+0x346/0x4e0 [ 548.390994][ T9442] ? __queue_work+0xc5e/0xee0 [ 548.395681][ T9442] report_bug+0x2b3/0x500 [ 548.400022][ T9442] ? __queue_work+0xc5e/0xee0 [ 548.404706][ T9442] handle_bug+0x3e/0x70 [ 548.408868][ T9442] exc_invalid_op+0x1a/0x50 [ 548.413379][ T9442] asm_exc_invalid_op+0x1a/0x20 [ 548.418252][ T9442] RIP: 0010:__queue_work+0xc5e/0xee0 [ 548.423555][ T9442] Code: ff e8 86 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 78 83 36 00 eb 13 e8 71 83 36 00 eb 0c e8 6a 83 36 00 eb 05 e8 63 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 548.443176][ T9442] RSP: 0018:ffffc9001595f810 EFLAGS: 00010093 [ 548.449255][ T9442] RAX: ffffffff815fa3bf RBX: ffff8880239b3c00 RCX: ffff8880239b3c00 [ 548.457323][ T9442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.465309][ T9442] RBP: 0000000000000000 R08: ffffffff815f9893 R09: 0000000000000000 [ 548.473295][ T9442] R10: ffffc9001595f8e0 R11: fffff52002b2bf1d R12: ffff88804bfb11c0 [ 548.481279][ T9442] R13: dffffc0000000000 R14: ffff88804bfb1000 R15: 0000000000000008 [ 548.489264][ T9442] ? __queue_work+0x123/0xee0 [ 548.493952][ T9442] ? __queue_work+0xc4f/0xee0 [ 548.498656][ T9442] queue_work_on+0x1c2/0x380 [ 548.503255][ T9442] ? __pfx_queue_work_on+0x10/0x10 [ 548.508378][ T9442] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 548.514278][ T9442] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 548.520633][ T9442] ? skb_queue_tail+0x36/0x120 [ 548.525414][ T9442] __hci_cmd_sync_sk+0x7b1/0x1130 [ 548.530495][ T9442] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 548.535972][ T9442] ? __pfx_lock_release+0x10/0x10 [ 548.541006][ T9442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.547011][ T9442] __hci_cmd_sync_status+0x37/0x130 [ 548.552221][ T9442] hci_dev_cmd+0x51c/0xa50 [ 548.556653][ T9442] ? __pfx_hci_dev_cmd+0x10/0x10 [ 548.561610][ T9442] ? proc_do_large_bitmap+0x1a0/0x13c0 [ 548.567102][ T9442] ? hci_sock_ioctl+0x6c4/0xa40 [ 548.571971][ T9442] sock_do_ioctl+0x158/0x460 [ 548.576570][ T9442] ? __pfx_smack_log+0x10/0x10 [ 548.581354][ T9442] ? __pfx_sock_do_ioctl+0x10/0x10 [ 548.586481][ T9442] ? smk_tskacc+0x300/0x370 [ 548.591021][ T9442] ? smack_file_ioctl+0x2a1/0x3a0 [ 548.596065][ T9442] sock_ioctl+0x629/0x8e0 [ 548.600416][ T9442] ? __pfx_sock_ioctl+0x10/0x10 [ 548.605282][ T9442] ? __fget_files+0x3f6/0x470 [ 548.609972][ T9442] ? __fget_files+0x29/0x470 [ 548.614573][ T9442] ? bpf_lsm_file_ioctl+0x9/0x10 [ 548.619520][ T9442] ? security_file_ioctl+0x87/0xb0 [ 548.624635][ T9442] ? __pfx_sock_ioctl+0x10/0x10 [ 548.629504][ T9442] __se_sys_ioctl+0xfc/0x170 [ 548.634112][ T9442] do_syscall_64+0xf3/0x230 [ 548.638638][ T9442] ? clear_bhb_loop+0x35/0x90 [ 548.643321][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.649231][ T9442] RIP: 0033:0x7f5ab83757db [ 548.653674][ T9442] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 548.673299][ T9442] RSP: 002b:00007fff9d7e0ba0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.681725][ T9442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ab83757db [ 548.689705][ T9442] RDX: 00007fff9d7e0c18 RSI: 00000000400448dd RDI: 0000000000000003 [ 548.697682][ T9442] RBP: 00005555886e14a8 R08: 0000000000000000 R09: 0000000000000000 [ 548.705660][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 548.713632][ T9442] R13: 0000000000000007 R14: 0000000000000005 R15: 0000000000000009 [ 548.721621][ T9442] [ 548.724880][ T9442] Kernel Offset: disabled [ 548.729211][ T9442] Rebooting in 86400 seconds..