last executing test programs: 1m8.380251998s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 53.540751859s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 43.721520768s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 29.824773451s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 16.339082833s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 4.844148209s ago: executing program 3 (id=2498): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x4e67, 0xfee4, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 4.746780044s ago: executing program 1 (id=2499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 4.67948098s ago: executing program 3 (id=2500): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x0, 0x2}) 4.467808011s ago: executing program 2 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 4.323216237s ago: executing program 1 (id=2502): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = dup(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r3, &(0x7f0000003100)={0x50}, 0x50) tee(r2, r1, 0xff, 0x0) 4.322821466s ago: executing program 3 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1, 0x0, 0x8}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 4.245003947s ago: executing program 1 (id=2504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 4.191286899s ago: executing program 1 (id=2505): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) 4.158062956s ago: executing program 2 (id=2506): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.252335218s ago: executing program 1 (id=2507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) 2.999808911s ago: executing program 2 (id=2510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "a7de92a0a0006c90"}]}}}}}}}}, 0x0) 2.946925971s ago: executing program 3 (id=2511): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)="cdf5083070ea05552d", 0x9}}, 0x0) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0x10}}], 0x1, 0x0, 0x0) 2.90330639s ago: executing program 4 (id=2512): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080003000400000005000609000000000800040005"], 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.878025956s ago: executing program 2 (id=2513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0xaf, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "b61d79ca5e15eb48a4ea54b0ca89a23126507ad2c748e7afa4dd28b40522e593c32eadf8bfe5fc66ce4b343dc5915424081bc5c45acc1feb0713bcff21edcd3d7353290bd07b913a6916dcf4919611a722b76ea0f1a919eaf65512e953c0bd55e448bc34b33def"}]}}}}}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.840729819s ago: executing program 3 (id=2514): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x1, {0x7, 0x9, 0x7, 0x21, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) 2.744414733s ago: executing program 3 (id=2515): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 2.710119271s ago: executing program 4 (id=2516): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000040), 0x12) r1 = socket$alg(0x26, 0x5, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) 2.669879192s ago: executing program 0 (id=263): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500030000000000080001"], 0x44}, 0x1, 0x2}, 0x0) 2.636667543s ago: executing program 4 (id=2517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 444.568273ms ago: executing program 1 (id=2518): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 443.053572ms ago: executing program 2 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="66b9170101c066b857000000f30f1efe0f300f00935b00f30fc737baf80c66b8da5dc98966efbafc0cb80090eff083a30000d3b878000f00d066b9db09000066b87908000066ba000000000f300f01c5660f382599b8000f23f5", 0x5a}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 442.345503ms ago: executing program 4 (id=2520): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2000000000000146, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 256.610358ms ago: executing program 4 (id=2521): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') chdir(&(0x7f0000001000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r0, 0x504) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7c77619b76911798, 0x1) 47.359711ms ago: executing program 4 (id=2522): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085504, &(0x7f00000000c0)={{r1}, "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"}) 0s ago: executing program 2 (id=2523): syz_open_dev$sg(&(0x7f0000000780), 0x44, 0x400100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) kernel console output (not intermixed with test programs): adv: batadv0: Adding interface: batadv_slave_1 [ 267.376229][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.413656][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.593617][T14736] hsr_slave_0: entered promiscuous mode [ 267.601252][T14736] hsr_slave_1: entered promiscuous mode [ 267.607758][T14736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.616439][T14736] Cannot create hsr debugfs directory [ 267.631086][T15233] sp0: Synchronizing with TNC [ 267.788781][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 267.999068][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 268.016893][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 268.048325][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.089410][ T8] usb 5-1: config 0 descriptor?? [ 268.104129][T15334] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1721'. [ 268.105878][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 268.121494][T15334] openvswitch: netlink: Key type 29 is not supported [ 268.649594][ T5217] Bluetooth: hci1: command tx timeout [ 268.841575][T15399] input: syz0 as /devices/virtual/input/input35 [ 268.848360][T15399] input: failed to attach handler leds to device input35, error: -6 [ 268.908536][ T8516] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 269.019013][T14736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.054085][T14736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.086458][T14736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.117830][ T8516] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 269.132286][T14736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.139740][ T8] gspca_sunplus: reg_w_riv err -71 [ 269.145135][ T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 269.148245][ T8516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.176606][ T8] usb 5-1: USB disconnect, device number 20 [ 269.208906][ T8516] usb 3-1: config 0 descriptor?? [ 269.445974][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.506856][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.556020][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.563490][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.612589][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.619871][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.640757][ T8516] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 269.700439][T15442] bridge0: port 3(macvlan2) entered blocking state [ 269.707325][T15442] bridge0: port 3(macvlan2) entered disabled state [ 269.716944][T15442] macvlan2: entered allmulticast mode [ 269.727490][T15442] macvlan2: entered promiscuous mode [ 270.045745][ T8516] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 270.084926][ T8516] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 270.281729][T15472] input: syz0 as /devices/virtual/input/input36 [ 270.302689][ T8] usb 3-1: USB disconnect, device number 26 [ 270.310990][T14736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.400438][T15484] input: syz0 as /devices/virtual/input/input37 [ 270.411770][T14736] veth0_vlan: entered promiscuous mode [ 270.455718][T14736] veth1_vlan: entered promiscuous mode [ 270.590967][T14736] veth0_macvtap: entered promiscuous mode [ 270.628612][T15496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1743'. [ 270.651665][T14736] veth1_macvtap: entered promiscuous mode [ 270.701109][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.728815][ T5217] Bluetooth: hci1: command tx timeout [ 270.758363][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.785493][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.808317][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.838219][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.865219][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.887805][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.908651][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.928206][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.958779][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.995244][T14736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.059666][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.086172][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.113550][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.140262][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.154523][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.167733][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.178453][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.213237][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.227824][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.247765][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.275158][T14736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.308102][T15516] netlink: 'syz.2.1750': attribute type 9 has an invalid length. [ 271.327050][T15516] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1750'. [ 271.384865][T14736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.414187][T14736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.437737][T14736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.456676][T14736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.780848][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.803840][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.860320][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.906557][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.443811][T15614] overlayfs: upper fs does not support tmpfile. [ 272.659675][T15623] usb usb8: usbfs: process 15623 (syz.3.1771) did not claim interface 0 before use [ 273.997144][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.161736][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.236998][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.322094][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.422478][ T35] bridge_slave_1: left allmulticast mode [ 275.428853][ T35] bridge_slave_1: left promiscuous mode [ 275.434546][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.446586][ T35] bridge_slave_0: left allmulticast mode [ 275.452634][ T35] bridge_slave_0: left promiscuous mode [ 275.458476][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.168969][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.181416][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.210455][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.220385][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.228762][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.236202][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.642330][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.660021][ T25] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 276.681115][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.695882][ T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 276.724058][ T35] bond0 (unregistering): Released all slaves [ 276.751527][ T6183] udevd[6183]: failed to send result of seq 18119 to main daemon: Connection refused [ 276.752953][ T25] usb 4-1: USB disconnect, device number 13 [ 276.830847][T15743] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1799'. [ 276.854234][T15743] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1799'. [ 277.005613][T15755] netlink: 'syz.4.1802': attribute type 10 has an invalid length. [ 277.016286][T15755] geneve0: entered promiscuous mode [ 277.046621][T15755] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 277.138433][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 277.257721][ T35] hsr_slave_0: left promiscuous mode [ 277.272324][ T35] hsr_slave_1: left promiscuous mode [ 277.289617][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.297182][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.305881][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.314233][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.327923][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.348332][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.366844][ T35] veth1_macvtap: left promiscuous mode [ 277.372637][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.378650][ T35] veth0_macvtap: left promiscuous mode [ 277.383500][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.395832][ T35] veth1_vlan: left promiscuous mode [ 277.399540][ T25] usb 4-1: config 0 descriptor?? [ 277.402802][ T35] veth0_vlan: left promiscuous mode [ 277.558455][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 277.764749][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 277.777963][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 277.813769][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 277.837286][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 277.849556][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.883657][ T25] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 277.889607][ T8] usb 5-1: config 0 descriptor?? [ 277.897749][T15788] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 277.913533][ T25] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 277.949924][ T25] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 278.246426][ T25] usb 4-1: USB disconnect, device number 14 [ 278.314634][ T35] team0 (unregistering): Port device team_slave_1 removed [ 278.324994][ T5217] Bluetooth: hci1: command tx timeout [ 278.335113][ T8] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 278.353487][ T8] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 278.360724][ T8] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 278.367739][ T8] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 278.375065][ T8] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 278.384618][ T8] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 278.417722][ T35] team0 (unregistering): Port device team_slave_0 removed [ 278.540119][ T8] cp2112 0003:10C4:EA90.001B: error requesting version [ 278.557277][ T8] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 278.578036][ T8] usb 5-1: USB disconnect, device number 21 [ 279.007865][T15823] vlan2: entered promiscuous mode [ 279.015846][T15823] vlan0: entered promiscuous mode [ 279.026607][T15823] vlan0: left promiscuous mode [ 279.315095][T15725] chnl_net:caif_netlink_parms(): no params data found [ 279.575104][T15725] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.587638][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.596883][T15725] bridge_slave_0: entered allmulticast mode [ 279.618602][T15725] bridge_slave_0: entered promiscuous mode [ 279.641314][T15725] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.657704][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.665868][T15725] bridge_slave_1: entered allmulticast mode [ 279.674358][T15725] bridge_slave_1: entered promiscuous mode [ 279.714061][T15725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.745071][T15725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.795231][T15725] team0: Port device team_slave_0 added [ 279.842884][T15725] team0: Port device team_slave_1 added [ 279.913147][T15725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.920964][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 279.931270][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.963073][T15725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.992249][T15725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.007701][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.041388][T15725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.138298][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 280.149931][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.169653][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 280.189152][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.203758][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.225928][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 280.236438][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.258662][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.261448][T15725] hsr_slave_0: entered promiscuous mode [ 280.266777][ T25] usb 3-1: Product: syz [ 280.293754][ T25] usb 3-1: Manufacturer: syz [ 280.312011][ T25] usb 3-1: SerialNumber: syz [ 280.317057][T15725] hsr_slave_1: entered promiscuous mode [ 280.348540][T15725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.375070][T15725] Cannot create hsr debugfs directory [ 280.399372][ T5217] Bluetooth: hci1: command tx timeout [ 280.566244][ T25] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 280.584764][ T25] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 280.766816][ T25] usb 3-1: USB disconnect, device number 27 [ 281.378764][T15725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.503574][T15725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.530135][T15725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.543213][T15725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.789802][T15725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.844322][T15725] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.910546][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.917712][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.934999][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.942238][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.239276][ T5216] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.304497][T15725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.454267][T15725] veth0_vlan: entered promiscuous mode [ 282.463576][ T5216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.476697][T15725] veth1_vlan: entered promiscuous mode [ 282.482757][ T5216] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 282.493898][ T5217] Bluetooth: hci1: command tx timeout [ 282.511063][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.523908][ T5216] usb 4-1: config 0 descriptor?? [ 282.532994][ T5216] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 282.540830][ T5216] usb 4-1: No valid video chain found. [ 282.556998][T15725] veth0_macvtap: entered promiscuous mode [ 282.569437][T15725] veth1_macvtap: entered promiscuous mode [ 282.589952][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.601674][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.613202][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.624045][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.634180][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.645845][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.656648][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.667356][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.677347][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.678295][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 282.688047][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.712635][T15725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.745944][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.756716][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.766683][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.776071][ T942] usb 4-1: USB disconnect, device number 15 [ 282.777523][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.795549][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.807945][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.825968][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.837085][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.856607][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.867298][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.887504][T15725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.910872][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.934025][T15725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.944932][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.957044][T15725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.968290][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.976944][T15725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.977355][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.987527][T15725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.998329][T16332] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 283.022286][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.156456][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.173457][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.210275][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.223701][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.338212][ T5264] usb 5-1: USB disconnect, device number 22 [ 283.619057][T16416] bridge0: port 3(vlan2) entered blocking state [ 283.625683][T16416] bridge0: port 3(vlan2) entered disabled state [ 283.635100][T16416] vlan2: entered allmulticast mode [ 283.642083][T16419] syz.3.1871[16419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.642329][T16419] syz.3.1871[16419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.643921][T16416] xfrm0: entered allmulticast mode [ 283.695145][T16416] vlan2: entered promiscuous mode [ 283.699245][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 283.720191][T16416] xfrm0: entered promiscuous mode [ 283.726166][T16416] bridge0: port 3(vlan2) entered blocking state [ 283.732675][T16416] bridge0: port 3(vlan2) entered forwarding state [ 283.900210][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.912250][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 283.946964][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.970492][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.011019][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.029128][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.046121][ T25] usb 2-1: config 0 descriptor?? [ 284.075827][T16396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.532686][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 284.543340][ T25] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 284.555646][ T25] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 284.887455][ T942] usb 2-1: USB disconnect, device number 26 [ 285.689439][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.028339][ T5216] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 286.209363][ T5216] usb 2-1: Using ep0 maxpacket: 8 [ 286.216139][ T5216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.228067][ T5216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.237950][ T5216] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.248586][ T5216] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 286.258376][ T5216] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.268050][ T5216] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 286.280805][ T5216] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.290115][ T5216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.298187][ T5216] usb 2-1: Product: syz [ 286.302358][ T5216] usb 2-1: Manufacturer: syz [ 286.306934][ T5216] usb 2-1: SerialNumber: syz [ 286.522384][ T5216] cdc_ncm 2-1:1.0: bind() failure [ 286.531938][ T5216] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 286.538974][ T5216] cdc_ncm 2-1:1.1: bind() failure [ 286.546972][ T5216] usb 2-1: USB disconnect, device number 27 [ 287.301845][T16533] input: syz1 as /devices/virtual/input/input39 [ 287.746784][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.761529][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.771502][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.782684][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.789985][ T51] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 287.800523][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.808443][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.876506][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.962239][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.992820][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.031968][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.048579][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.067249][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.098759][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 288.125414][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.136192][ T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.174945][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.215721][ T51] usb 3-1: config 0 descriptor?? [ 288.237181][T16554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.300747][ T25] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 288.310485][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.343298][ T25] usb 4-1: config 0 descriptor?? [ 288.356005][ T25] cp210x 4-1:0.0: cp210x converter detected [ 288.433195][T16566] chnl_net:caif_netlink_parms(): no params data found [ 288.505662][ T1127] bridge_slave_1: left allmulticast mode [ 288.511741][ T1127] bridge_slave_1: left promiscuous mode [ 288.517511][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.535644][ T1127] bridge_slave_0: left allmulticast mode [ 288.547001][ T1127] bridge_slave_0: left promiscuous mode [ 288.556986][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.667157][ T51] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 288.692057][ T51] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 288.714748][ T51] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 288.784624][ T25] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 288.800557][ T25] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 288.817485][ T25] usb 4-1: cp210x converter now attached to ttyUSB0 [ 288.869362][ T942] kernel write not supported for file bpf-prog (pid: 942 comm: kworker/0:2) [ 288.946765][ T942] usb 3-1: USB disconnect, device number 28 [ 289.039592][ T8] usb 4-1: USB disconnect, device number 16 [ 289.067369][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.079064][ T8] cp210x 4-1:0.0: device disconnected [ 289.448538][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.461356][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.473861][ T1127] bond0 (unregistering): Released all slaves [ 289.802924][T16808] lo: entered promiscuous mode [ 289.819555][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.838060][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.846851][ T5217] Bluetooth: hci1: command tx timeout [ 289.854437][T16566] bridge_slave_0: entered allmulticast mode [ 289.880373][T16566] bridge_slave_0: entered promiscuous mode [ 289.923368][T16807] lo: left promiscuous mode [ 289.928979][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.936418][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.943946][T16566] bridge_slave_1: entered allmulticast mode [ 289.951450][T16566] bridge_slave_1: entered promiscuous mode [ 290.196632][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.289985][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.461613][ T1127] hsr_slave_0: left promiscuous mode [ 290.477482][ T1127] hsr_slave_1: left promiscuous mode [ 290.487638][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.493494][T16907] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 290.498289][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.518326][T16907] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 290.531382][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.546926][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.608161][ T1127] veth1_macvtap: left promiscuous mode [ 290.617775][ T1127] veth0_macvtap: left promiscuous mode [ 290.633132][ T1127] veth1_vlan: left promiscuous mode [ 290.654185][ T1127] veth0_vlan: left promiscuous mode [ 290.748433][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 290.940187][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.958486][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.982031][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.006181][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.024738][ T25] usb 2-1: SerialNumber: syz [ 291.254733][ T25] usb 2-1: 0:2 : does not exist [ 291.276970][ T25] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 291.299532][ T25] usb 2-1: USB disconnect, device number 28 [ 291.429888][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 291.489963][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 291.924183][ T5217] Bluetooth: hci1: command tx timeout [ 292.092527][T16566] team0: Port device team_slave_0 added [ 292.111134][T16566] team0: Port device team_slave_1 added [ 292.174549][T16923] dvmrp1: entered allmulticast mode [ 292.215831][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.223528][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.253293][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.269538][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 292.275446][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.305533][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.332820][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.344531][T16925] dvmrp1: left allmulticast mode [ 292.471165][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 292.489603][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 292.521553][ T25] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 292.532099][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.548993][ T25] usb 2-1: Product: syz [ 292.558592][ T5217] Bluetooth: hci0: command tx timeout [ 292.562004][T16566] hsr_slave_0: entered promiscuous mode [ 292.573399][ T25] usb 2-1: Manufacturer: syz [ 292.578050][ T25] usb 2-1: SerialNumber: syz [ 292.608448][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 292.608468][ T29] audit: type=1326 audit(2134218433.757:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17009 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 292.648303][ T25] usb 2-1: config 0 descriptor?? [ 292.656978][T16566] hsr_slave_1: entered promiscuous mode [ 292.657155][T16949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.677342][T16566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.692722][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.705326][ T29] audit: type=1326 audit(2134218433.767:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17009 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 292.724849][T16566] Cannot create hsr debugfs directory [ 292.761755][ T29] audit: type=1326 audit(2134218433.767:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17009 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 292.807236][ T29] audit: type=1326 audit(2134218433.767:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17009 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 292.896475][T17036] macsec1: entered allmulticast mode [ 292.912201][T17036] macvlan0: entered allmulticast mode [ 292.948672][T17036] veth1_vlan: entered allmulticast mode [ 293.020168][ T9] usb 2-1: USB disconnect, device number 29 [ 293.197434][T17036] macvlan0: left allmulticast mode [ 293.210082][T17036] veth1_vlan: left allmulticast mode [ 293.439753][T17118] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1972'. [ 293.561900][T17135] trusted_key: syz.3.1974 sent an empty control message without MSG_MORE. [ 293.716982][T17150] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 293.742702][T17150] macvlan2: entered promiscuous mode [ 293.752667][T17150] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 293.774461][T17156] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 293.833991][T17156] CIFS mount error: No usable UNC path provided in device string! [ 293.833991][T17156] [ 293.859554][T17156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.003083][ T5225] Bluetooth: hci1: command tx timeout [ 294.282417][T16566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.322328][T16566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.348052][T16566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.396724][T16566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.437554][T17198] sctp: [Deprecated]: syz.3.1990 (pid 17198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.437554][T17198] Use struct sctp_sack_info instead [ 294.937771][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.981789][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.010108][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.017281][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.156203][T17236] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1996'. [ 295.179658][T17231] sctp: [Deprecated]: syz.4.1995 (pid 17231) Use of int in max_burst socket option. [ 295.179658][T17231] Use struct sctp_assoc_value instead [ 295.202166][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.209402][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.078689][ T5225] Bluetooth: hci1: command 0x0419 tx timeout [ 296.087679][ T29] audit: type=1326 audit(2134218437.237:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.135784][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.177097][ T29] audit: type=1326 audit(2134218437.237:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.201867][ T29] audit: type=1326 audit(2134218437.247:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.223349][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.238622][T17278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2009'. [ 296.254579][ T29] audit: type=1326 audit(2134218437.247:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.354263][ T29] audit: type=1326 audit(2134218437.247:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.401694][T16566] veth0_vlan: entered promiscuous mode [ 296.446775][ T29] audit: type=1326 audit(2134218437.247:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17275 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f67779e79 code=0x7ffc0000 [ 296.480178][T16566] veth1_vlan: entered promiscuous mode [ 296.539707][T16566] veth0_macvtap: entered promiscuous mode [ 296.561260][T16566] veth1_macvtap: entered promiscuous mode [ 296.607214][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.624854][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.653824][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.679371][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.700364][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.707691][T17301] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 296.715974][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.741206][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.755590][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.766185][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.777461][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.789580][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.822291][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.837780][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.849982][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.861896][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.872658][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.883499][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.897888][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.918479][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.933405][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.944761][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.956643][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.016528][T16566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.050658][T16566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.070436][T16566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.092535][T16566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.243557][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.262107][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.299718][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.308423][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.445163][T17335] syz.3.2024 (17335) used greatest stack depth: 17360 bytes left [ 297.735419][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 297.847250][T17357] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 297.860645][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2035'. [ 297.902578][T17357] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 298.158872][ T5221] Bluetooth: hci1: command 0x0419 tx timeout [ 298.317334][ T25] IPVS: starting estimator thread 0... [ 298.345934][T17379] tipc: Started in network mode [ 298.359881][T17379] tipc: Node identity ac1414aa, cluster identity 4711 [ 298.393841][T17379] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.408810][T17379] tipc: Enabled bearer , priority 30 [ 298.419532][T17384] IPVS: using max 19 ests per chain, 45600 per kthread [ 298.531366][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.668526][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.808394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.948356][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.088376][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.204110][ T5225] Bluetooth: hci5: command 0x0406 tx timeout [ 299.228435][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.368534][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.509959][ T25] tipc: Node number set to 2886997162 [ 299.579153][T17439] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.814980][T17457] netlink: 'syz.4.2070': attribute type 29 has an invalid length. [ 299.851438][T17457] netlink: 'syz.4.2070': attribute type 29 has an invalid length. [ 299.912767][T17460] syzkaller1: entered promiscuous mode [ 299.926019][T17460] syzkaller1: entered allmulticast mode [ 300.604242][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.683733][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.745358][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.829559][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.922366][ T1127] bridge_slave_1: left allmulticast mode [ 300.928064][ T1127] bridge_slave_1: left promiscuous mode [ 300.934466][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.944696][ T1127] bridge_slave_0: left allmulticast mode [ 300.951278][ T1127] bridge_slave_0: left promiscuous mode [ 300.956963][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.279120][ T5217] Bluetooth: hci5: command 0x0406 tx timeout [ 301.321440][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.332931][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.344947][ T1127] bond0 (unregistering): Released all slaves [ 301.596882][ T1127] hsr_slave_0: left promiscuous mode [ 301.604127][ T1127] hsr_slave_1: left promiscuous mode [ 301.611342][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.619199][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.627048][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.634628][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.656967][ T1127] veth1_macvtap: left promiscuous mode [ 301.663224][ T1127] veth0_macvtap: left promiscuous mode [ 301.668965][ T1127] veth1_vlan: left promiscuous mode [ 301.674301][ T1127] veth0_vlan: left promiscuous mode [ 302.359237][T17512] sctp: [Deprecated]: syz.1.2081 (pid 17512) Use of int in max_burst socket option. [ 302.359237][T17512] Use struct sctp_assoc_value instead [ 302.396381][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 302.531820][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 302.540257][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 302.676509][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.692123][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.715515][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.735151][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.747701][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.755283][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.778485][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 302.797158][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.818327][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 302.829330][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 302.842270][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.853439][ T8] usb 4-1: config 1 interface 1 has no altsetting 0 [ 302.862993][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.877543][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.886323][ T8] usb 4-1: Product: syz [ 302.895170][ T8] usb 4-1: Manufacturer: syz [ 302.899939][ T8] usb 4-1: SerialNumber: syz [ 303.179374][ T8] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 303.187368][ T8] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 303.282310][ T8] usb 4-1: USB disconnect, device number 17 [ 303.599954][ C1] net_ratelimit: 5 callbacks suppressed [ 303.599979][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.197215][T17525] chnl_net:caif_netlink_parms(): no params data found [ 304.238810][T17703] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 304.368557][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 304.396181][T17525] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.404258][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.412050][T17525] bridge_slave_0: entered allmulticast mode [ 304.419669][T17525] bridge_slave_0: entered promiscuous mode [ 304.447720][T17525] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.455217][T17525] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.462623][T17525] bridge_slave_1: entered allmulticast mode [ 304.470790][T17525] bridge_slave_1: entered promiscuous mode [ 304.523048][T17525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.549764][T17525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.579498][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 304.595103][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.624488][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.638269][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.639849][T17525] team0: Port device team_slave_0 added [ 304.660816][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.664431][T17525] team0: Port device team_slave_1 added [ 304.675881][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.675908][ T25] usb 3-1: Product: syz [ 304.675923][ T25] usb 3-1: Manufacturer: syz [ 304.675937][ T25] usb 3-1: SerialNumber: syz [ 304.681734][ T25] usb 3-1: config 0 descriptor?? [ 304.723950][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.739438][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 304.798428][ T5225] Bluetooth: hci1: command tx timeout [ 304.811863][T17525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.825610][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.860771][T17525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.882702][T17525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.895438][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.938926][T17525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.064100][T17525] hsr_slave_0: entered promiscuous mode [ 305.087607][T17525] hsr_slave_1: entered promiscuous mode [ 305.103074][T17525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.119500][T17525] Cannot create hsr debugfs directory [ 305.327345][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 305.343948][ T25] em28xx 3-1:0.0: Config register raw data: 0x41 [ 305.378646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 305.641241][ T8] usb 3-1: USB disconnect, device number 29 [ 305.663021][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 305.678356][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.715743][ T8] em28xx 3-1:0.0: Freeing device [ 306.183242][T17525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.212157][T17525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.236206][T17525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.281533][T17525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.516335][T17525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.558713][T18012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2123'. [ 306.577793][T18015] netem: change failed [ 306.614373][T17525] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.654462][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.661703][ T2579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.718459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 306.741590][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.748820][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.875418][T17525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.883304][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 306.883325][ T29] audit: type=1400 audit(2134218448.037:75): lsm=SMACK fn=smack_task_setpgid action=denied subject="N" object="_" requested=w pid=18033 comm="syz.3.2130" opid=18033 ocomm="syz.3.2130" [ 306.922435][ T5225] Bluetooth: hci1: command tx timeout [ 307.229813][T17525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.347978][T17525] veth0_vlan: entered promiscuous mode [ 307.365823][ T5264] psmouse serio5: Failed to reset mouse on : -5 [ 307.372263][T17525] veth1_vlan: entered promiscuous mode [ 307.402908][T18062] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.2139'. [ 307.435574][T18062] openvswitch: netlink: IP tunnel dst address not specified [ 307.447691][T17525] veth0_macvtap: entered promiscuous mode [ 307.463017][T18064] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 307.477539][T17525] veth1_macvtap: entered promiscuous mode [ 307.530755][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.564643][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.582518][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.593270][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.606184][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.616864][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.628073][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.640215][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.650140][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.660845][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.673030][T17525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.691595][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.704348][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.716643][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.727559][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.737911][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.749791][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.758292][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 307.760257][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.778293][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.788977][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.799582][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.811238][T17525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.828275][T17525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.837150][T17525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.846982][T17525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.855893][T17525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.865465][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.951564][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.964913][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.991008][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.001716][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.052513][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.069863][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.086221][ T9] usb 4-1: config 0 descriptor?? [ 308.098020][ T9] cp210x 4-1:0.0: cp210x converter detected [ 308.517187][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 308.544377][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 308.766378][ T8516] usb 4-1: USB disconnect, device number 18 [ 308.784215][ T8516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.798428][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 308.819337][ T8516] cp210x 4-1:0.0: device disconnected [ 309.033832][T18158] hsr_slave_0: left promiscuous mode [ 309.043122][T18158] hsr_slave_1: left promiscuous mode [ 309.838395][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.086399][T18203] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2178'. [ 310.298980][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.398738][ T5265] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 310.590320][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.602189][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.613630][ T5265] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 310.623464][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.634645][ T5265] usb 2-1: config 0 descriptor?? [ 310.878321][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 311.056251][ T5265] hid-led 0003:27B8:01ED.001E: unknown main item tag 0x0 [ 311.063648][ T5265] hid-led 0003:27B8:01ED.001E: unknown main item tag 0x0 [ 311.070882][ T5265] hid-led 0003:27B8:01ED.001E: unknown main item tag 0x0 [ 311.077940][ T5265] hid-led 0003:27B8:01ED.001E: unknown main item tag 0x0 [ 311.085308][ T5265] hid-led 0003:27B8:01ED.001E: unknown main item tag 0x0 [ 311.138359][ T5264] misc userio: Buffer overflowed, userio client isn't keeping up [ 311.453813][ T5265] hid-led 0003:27B8:01ED.001E: probe with driver hid-led failed with error -71 [ 311.465632][ T5265] usb 2-1: USB disconnect, device number 30 [ 311.918316][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 312.204113][ T5264] input: PS/2 Generic Mouse as /devices/serio5/input/input41 [ 312.244461][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.461934][ T5264] psmouse serio5: Failed to enable mouse on [ 312.537597][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.696656][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.728267][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.738088][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.749901][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.751755][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.778395][ T5217] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.786048][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.958294][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.226072][ T52] bridge_slave_1: left allmulticast mode [ 313.232916][ T52] bridge_slave_1: left promiscuous mode [ 313.247335][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.264677][ T52] bridge_slave_0: left allmulticast mode [ 313.274454][ T52] bridge_slave_0: left promiscuous mode [ 313.280702][ T29] audit: type=1326 audit(2134218454.437:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.304113][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.317767][ T29] audit: type=1326 audit(2134218454.467:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.405186][ T29] audit: type=1326 audit(2134218454.507:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.426671][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.457067][ T29] audit: type=1326 audit(2134218454.507:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.481801][ T29] audit: type=1326 audit(2134218454.507:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.509489][ T29] audit: type=1326 audit(2134218454.507:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.540119][ T29] audit: type=1326 audit(2134218454.507:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.562877][ T29] audit: type=1326 audit(2134218454.517:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.597616][ T29] audit: type=1326 audit(2134218454.517:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.628710][ T29] audit: type=1326 audit(2134218454.517:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18325 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1af79e79 code=0x7ffc0000 [ 313.998393][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.076405][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.092215][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.103139][ T52] bond0 (unregistering): Released all slaves [ 314.121648][T18328] netlink: 'syz.2.2193': attribute type 21 has an invalid length. [ 314.133156][T18328] netlink: 'syz.2.2193': attribute type 16 has an invalid length. [ 314.143826][T18328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2193'. [ 314.594759][T18263] chnl_net:caif_netlink_parms(): no params data found [ 314.817308][T18476] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.835848][T18476] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 314.861172][ T52] hsr_slave_0: left promiscuous mode [ 314.879619][ T5225] Bluetooth: hci1: command tx timeout [ 314.907986][ T52] hsr_slave_1: left promiscuous mode [ 314.919299][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.948721][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.956966][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.986116][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.038345][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 315.063821][ T52] veth1_macvtap: left promiscuous mode [ 315.073898][ T52] veth0_macvtap: left promiscuous mode [ 315.080855][ T52] veth1_vlan: left promiscuous mode [ 315.086242][ T52] veth0_vlan: left promiscuous mode [ 315.136288][T18490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.772053][ T52] team0 (unregistering): Port device team_slave_1 removed [ 315.820782][ T52] team0 (unregistering): Port device team_slave_0 removed [ 316.078327][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 316.364204][T18492] pim6reg: entered allmulticast mode [ 316.540335][T18534] Bluetooth: hci3: unsupported parameter 64512 [ 316.546564][T18534] Bluetooth: hci3: invalid len left 3, exp >= 7 [ 316.620877][T18536] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 316.685295][T18263] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.709459][T18263] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.717027][T18263] bridge_slave_0: entered allmulticast mode [ 316.726502][T18263] bridge_slave_0: entered promiscuous mode [ 316.740065][T18263] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.757539][T18263] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.783042][T18263] bridge_slave_1: entered allmulticast mode [ 316.792900][T18263] bridge_slave_1: entered promiscuous mode [ 316.849316][T18574] Invalid ELF header len 8 [ 316.924402][T18263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.963179][T18263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.972373][ T5225] Bluetooth: hci1: command tx timeout [ 317.118398][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.178020][T18263] team0: Port device team_slave_0 added [ 317.219524][T18263] team0: Port device team_slave_1 added [ 317.307922][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 317.355046][T18655] batman_adv: batadv0: Adding interface: macvtap1 [ 317.367087][T18655] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.397523][T18655] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 317.410065][T18263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.417992][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.501326][T18263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.552133][T18263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.568207][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.614827][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.628590][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.644733][T18263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.934420][T18263] hsr_slave_0: entered promiscuous mode [ 317.970903][T18263] hsr_slave_1: entered promiscuous mode [ 318.012953][T18263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.034177][T18263] Cannot create hsr debugfs directory [ 318.158394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 318.552512][T18793] netlink: 3068 bytes leftover after parsing attributes in process `syz.2.2253'. [ 318.577707][T18786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2252'. [ 318.588356][T18793] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2253'. [ 318.608288][T18786] bond0: entered allmulticast mode [ 318.636904][T18786] bond_slave_0: entered allmulticast mode [ 318.663550][T18786] bond_slave_1: entered allmulticast mode [ 318.687268][T18794] netlink: 'syz.3.2252': attribute type 10 has an invalid length. [ 319.039197][ T5225] Bluetooth: hci1: command tx timeout [ 319.198342][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 319.320710][T18263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.341458][T18263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.382280][T18263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.422045][T18263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.658639][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.703601][T18263] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.735912][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.743188][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.755035][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 319.755053][ T29] audit: type=1326 audit(2134218460.907:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 319.786255][ T29] audit: type=1326 audit(2134218460.907:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 319.816100][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.823323][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.831842][ T29] audit: type=1326 audit(2134218460.917:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 319.853341][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.868207][ T29] audit: type=1326 audit(2134218460.917:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 319.929396][ T29] audit: type=1326 audit(2134218460.917:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 319.960259][T18263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.980068][ T29] audit: type=1326 audit(2134218460.927:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 320.001598][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.010328][ T29] audit: type=1326 audit(2134218460.927:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 320.036805][ T29] audit: type=1326 audit(2134218460.927:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 320.040925][ T5216] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 320.109045][ T29] audit: type=1326 audit(2134218460.927:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 320.147569][ T29] audit: type=1326 audit(2134218460.977:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.1.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 320.169196][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.238450][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 320.278288][ T5216] usb 4-1: Using ep0 maxpacket: 16 [ 320.296541][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.326356][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.360901][ T5216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.406350][ T5216] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.417735][T18263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.448258][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.479310][ T5216] usb 4-1: config 0 descriptor?? [ 320.574418][T18263] veth0_vlan: entered promiscuous mode [ 320.603870][T18263] veth1_vlan: entered promiscuous mode [ 320.648996][T18862] sctp: [Deprecated]: syz.4.2270 (pid 18862) Use of int in maxseg socket option. [ 320.648996][T18862] Use struct sctp_assoc_value instead [ 320.687745][T18263] veth0_macvtap: entered promiscuous mode [ 320.731784][T18263] veth1_macvtap: entered promiscuous mode [ 320.791317][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.816520][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.834865][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.858743][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.875242][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.886684][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.909273][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.930478][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.941057][ T5216] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001F/input/input42 [ 320.950392][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.980714][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.005773][T18263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.048788][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.072282][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.093243][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.106529][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.117661][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.133791][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.138527][ T5225] Bluetooth: hci1: command tx timeout [ 321.144514][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.157981][ T5216] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 321.178250][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.185522][ T5216] usb 4-1: USB disconnect, device number 19 [ 321.204422][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.222881][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.263076][T18263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.278407][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.309117][T18263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.320059][T18263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.346076][T18263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.366076][T18263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.552222][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.565448][T18897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.589110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.669693][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.697895][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.318437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.041380][T18965] MTD: Attempt to mount non-MTD device "./file0" [ 323.250627][T18972] 9pnet: p9_errstr2errno: server reported unknown error @hQIte [ 323.358455][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.249050][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.279930][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.327620][T18978] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 324.398430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.470167][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.487207][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.508356][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 324.525677][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 324.533939][ T25] usb 5-1: SerialNumber: syz [ 324.751208][ T25] usb 5-1: 0:2 : does not exist [ 324.764012][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 324.777050][ T25] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 324.797816][ T25] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 324.810187][ T25] usb 5-1: USB disconnect, device number 23 [ 325.369464][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.443407][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 325.456910][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.541872][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.640145][ T52] bridge_slave_1: left allmulticast mode [ 325.646457][ T52] bridge_slave_1: left promiscuous mode [ 325.652762][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.661731][ T52] bridge_slave_0: left allmulticast mode [ 325.667383][ T52] bridge_slave_0: left promiscuous mode [ 325.674418][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.027180][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.038083][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.049640][ T52] bond0 (unregistering): Released all slaves [ 326.277668][T19047] ALSA: mixer_oss: invalid OSS volume '' [ 326.478316][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 326.718354][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 326.733478][ T52] hsr_slave_0: left promiscuous mode [ 326.780501][ T52] hsr_slave_1: left promiscuous mode [ 326.820335][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.831140][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.851013][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.864090][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.874081][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.894419][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.905288][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.914365][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 326.922439][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 326.935276][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.942951][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 326.954830][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.968051][ T5217] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.973738][ T52] veth1_macvtap: left promiscuous mode [ 326.981375][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.994779][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 327.009604][ T52] veth0_macvtap: left promiscuous mode [ 327.026894][ T8] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 327.031532][ T52] veth1_vlan: left promiscuous mode [ 327.035694][ T8] usb 3-1: Product: syz [ 327.045149][ T8] usb 3-1: Manufacturer: syz [ 327.050633][ T8] usb 3-1: SerialNumber: syz [ 327.056952][ T52] veth0_vlan: left promiscuous mode [ 327.067762][T19062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.080969][ T8] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input43 [ 327.090866][ T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 327.302812][ T9] usb 4-1: config 0 has no interfaces? [ 327.309392][ T9] usb 4-1: New USB device found, idVendor=0548, idProduct=0069, bcdDevice= a.8d [ 327.338390][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.348949][ T9] usb 4-1: config 0 descriptor?? [ 327.406724][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 327.429975][ T9] usb 3-1: USB disconnect, device number 30 [ 327.483959][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 327.518343][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.822721][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.848381][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.865459][ T8] usb 4-1: USB disconnect, device number 20 [ 327.916030][T19133] sg_read: process 1172 (syz.4.2323) changed security contexts after opening file descriptor, this is not allowed. [ 328.199043][T19144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.566959][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 328.598332][ T5293] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 328.820364][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.832667][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.866938][ T5293] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 328.895440][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.919585][ T5293] usb 5-1: config 0 descriptor?? [ 329.048493][ T5217] Bluetooth: hci1: command tx timeout [ 329.074060][ T52] team0 (unregistering): Port device team_slave_1 removed [ 329.235365][ T52] team0 (unregistering): Port device team_slave_0 removed [ 329.360622][T19150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.421738][T19150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.457035][ T5293] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 329.488610][ T5293] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 329.528766][ T5293] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0020/input/input45 [ 329.584187][ T5293] cm6533_jd 0003:0D8C:0022.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 329.598362][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 329.798883][ T5293] usb 5-1: USB disconnect, device number 24 [ 330.045674][T19227] block nbd2: shutting down sockets [ 330.106017][T19233] block nbd2: NBD_DISCONNECT [ 330.128351][T19233] block nbd2: Send disconnect failed -32 [ 330.499922][T19252] IPv6: addrconf: prefix option has invalid lifetime [ 330.638313][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 330.719151][ T5216] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 330.734179][T19259] atomic_op ffff888062d34198 conn xmit_atomic 0000000000000000 [ 330.929048][ T5216] usb 4-1: Using ep0 maxpacket: 32 [ 330.948933][ T5216] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 330.971274][ T5216] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 331.002326][ T5216] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 331.062037][ T5216] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 331.072808][T19300] input: syz0 as /devices/virtual/input/input46 [ 331.076537][ T5216] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.092857][ T5216] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 331.112465][ T5216] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 331.121243][ T5217] Bluetooth: hci1: command tx timeout [ 331.126800][ T5216] usb 4-1: Product: syz [ 331.131666][ T5216] usb 4-1: Manufacturer: syz [ 331.136301][ T5216] usb 4-1: SerialNumber: syz [ 331.144530][ T5216] usb 4-1: config 0 descriptor?? [ 331.154115][ T5216] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 331.167933][ T5216] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.279063][T19081] chnl_net:caif_netlink_parms(): no params data found [ 331.569889][ T5264] usb 4-1: USB disconnect, device number 21 [ 331.613402][ T5264] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 331.675433][T19081] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.682867][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 331.704101][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.713640][T19081] bridge_slave_0: entered allmulticast mode [ 331.727557][T19081] bridge_slave_0: entered promiscuous mode [ 331.738429][T19081] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.745838][T19081] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.754091][T19081] bridge_slave_1: entered allmulticast mode [ 331.763378][T19081] bridge_slave_1: entered promiscuous mode [ 331.956734][T19081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.971675][T19081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.048391][ T51] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 332.055486][T19081] team0: Port device team_slave_0 added [ 332.098031][T19081] team0: Port device team_slave_1 added [ 332.104801][ T942] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 332.163260][T19081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.186938][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.223799][T19081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.237223][T19081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.244731][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.271490][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.286852][ T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.288190][T19081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.307653][ T51] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.317322][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.334758][ T51] usb 2-1: SerialNumber: syz [ 332.348204][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 332.355156][ T942] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.386965][ T942] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.407219][ T942] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.428851][ T942] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.456926][ T942] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 332.476637][T19081] hsr_slave_0: entered promiscuous mode [ 332.484778][T19081] hsr_slave_1: entered promiscuous mode [ 332.485962][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.499135][T19081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.510008][T19081] Cannot create hsr debugfs directory [ 332.510139][T19583] IPVS: Scheduler module ip_vs_sip not found [ 332.526527][T19603] IPVS: length: 8 != 1152 [ 332.529338][ T942] usb 5-1: config 0 descriptor?? [ 332.573103][ T51] usb 2-1: 0:2 : does not exist [ 332.586559][ T51] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 332.606709][ T51] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 332.641334][ T51] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 332.682490][ T51] usb 2-1: USB disconnect, device number 31 [ 332.718373][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 332.762785][T19652] netlink: 'syz.2.2376': attribute type 12 has an invalid length. [ 332.782253][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.792203][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.800806][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.809639][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.818932][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.827737][T19652] netlink: 'syz.2.2376': attribute type 11 has an invalid length. [ 332.837225][T19652] netlink: 196720 bytes leftover after parsing attributes in process `syz.2.2376'. [ 332.962492][ T942] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 332.991269][ T942] hid-steam 0003:28DE:1102.0021: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 333.080465][ T942] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' connected [ 333.117225][ T942] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0021/input/input47 [ 333.175688][ T942] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 333.199589][ T5217] Bluetooth: hci1: command tx timeout [ 333.220146][ T942] hid-steam 0003:28DE:1102.0022: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 333.253490][ T942] usb 5-1: USB disconnect, device number 25 [ 333.311290][ T942] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' disconnected [ 333.399072][T19081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.413366][T19081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.433726][T19081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.468972][T19081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.518401][ T5216] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 333.579632][T19081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.610528][T19081] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.633916][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.641141][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.672409][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.679631][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.718361][ T5216] usb 4-1: Using ep0 maxpacket: 8 [ 333.735579][ T5216] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 333.758280][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 333.761116][ T5216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 333.790076][ T5216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.815002][ T5216] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.829115][ T5216] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.839095][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.013857][T19081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.067959][ T5216] usb 4-1: GET_CAPABILITIES returned 0 [ 334.076827][T19081] veth0_vlan: entered promiscuous mode [ 334.077266][ T5216] usbtmc 4-1:16.0: can't read capabilities [ 334.120523][T19081] veth1_vlan: entered promiscuous mode [ 334.172875][T19081] veth0_macvtap: entered promiscuous mode [ 334.190131][T19081] veth1_macvtap: entered promiscuous mode [ 334.222015][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.232712][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.244712][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.256223][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.274653][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.306606][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.321067][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.335351][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.342115][ T5216] usb 4-1: USB disconnect, device number 22 [ 334.345611][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.378674][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'. [ 334.388614][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.400953][T19081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.425315][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.460264][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.476726][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.496163][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.507597][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.522696][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.536913][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.547971][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.560179][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.570782][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.582563][T19081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.595385][T19081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.604660][T19081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.613642][T19081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.658328][T19081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.798371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 334.875223][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.889836][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.966984][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.013104][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.292318][T19823] loop0: detected capacity change from 0 to 16384 [ 335.372301][T19823] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 335.458966][T19832] pim6reg: left allmulticast mode [ 335.838550][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.878315][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.929284][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 336.929301][ T29] audit: type=1326 audit(2134218734.098:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.3.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa045f79e79 code=0x0 [ 337.387690][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 337.402011][T19899] vlan3: entered allmulticast mode [ 337.730259][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.918321][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 338.958325][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 339.367925][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.441139][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.503783][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.595580][ T1127] bridge_slave_1: left allmulticast mode [ 339.602167][ T1127] bridge_slave_1: left promiscuous mode [ 339.607863][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.616831][ T1127] bridge_slave_0: left allmulticast mode [ 339.625679][ T1127] bridge_slave_0: left promiscuous mode [ 339.631747][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.998286][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 340.008932][ T5293] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 340.029785][ T5265] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 340.153251][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.167663][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.181386][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.215526][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.225579][ T5221] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.232774][ T5293] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.242579][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.254643][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.254760][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.278028][ T5293] usb 2-1: config 0 descriptor?? [ 340.281797][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.300601][ T5293] cp210x 2-1:0.0: cp210x converter detected [ 340.323070][ T5265] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 340.339915][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.355138][ T5265] usb 4-1: config 0 descriptor?? [ 340.513509][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.528244][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.541008][ T1127] bond0 (unregistering): Released all slaves [ 340.711591][ T5293] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 340.732738][ T5293] usb 2-1: cp210x converter now attached to ttyUSB0 [ 341.007167][ T5265] usb 2-1: USB disconnect, device number 32 [ 341.038275][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 341.048766][ T5265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.059848][ T1127] hsr_slave_0: left promiscuous mode [ 341.098680][ T5265] cp210x 2-1:0.0: device disconnected [ 341.105329][ T1127] hsr_slave_1: left promiscuous mode [ 341.129276][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.136768][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.146711][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.168952][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.227219][ T1127] veth1_macvtap: left promiscuous mode [ 341.275966][ T1127] veth0_macvtap: left promiscuous mode [ 341.290930][ T1127] veth1_vlan: left promiscuous mode [ 341.296300][ T1127] veth0_vlan: left promiscuous mode [ 342.078283][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 342.329068][ T5217] Bluetooth: hci1: command tx timeout [ 343.118269][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 343.331009][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 343.383349][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 343.943751][ T5265] usb 4-1: USB disconnect, device number 23 [ 343.950244][T19950] chnl_net:caif_netlink_parms(): no params data found [ 344.158268][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 344.309445][T19950] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.316619][T19950] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.348323][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.361397][T19950] bridge_slave_0: entered allmulticast mode [ 344.380443][T19950] bridge_slave_0: entered promiscuous mode [ 344.397172][T19950] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.410321][ T5217] Bluetooth: hci1: command tx timeout [ 344.418599][T19950] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.426038][T19950] bridge_slave_1: entered allmulticast mode [ 344.443063][T19950] bridge_slave_1: entered promiscuous mode [ 344.522499][T20202] tipc: Started in network mode [ 344.527530][T20202] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 344.542333][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.548758][T20202] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 344.551214][ T25] usb 5-1: config 0 has no interface number 0 [ 344.559376][ T5293] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 344.567429][ T25] usb 5-1: config 0 interface 1 has no altsetting 0 [ 344.581960][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.583122][T20202] tipc: Enabled bearer , priority 30 [ 344.597581][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.611200][T19950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.623639][ T25] usb 5-1: config 0 descriptor?? [ 344.637415][T19950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.662826][ T25] cp210x 5-1:0.1: cp210x converter detected [ 344.767319][T19950] team0: Port device team_slave_0 added [ 344.778964][ T5293] usb 3-1: Using ep0 maxpacket: 8 [ 344.786025][ T5293] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.791853][T19950] team0: Port device team_slave_1 added [ 344.812983][ T5293] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.833861][ T5293] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.876896][ T5293] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.892200][ T5293] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 344.912163][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.929926][T19950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.937366][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.938631][ T5293] usb 3-1: config 0 descriptor?? [ 344.966821][T19950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.984225][T19950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.993326][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.021508][T19950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.077844][ T25] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 345.141645][T19950] hsr_slave_0: entered promiscuous mode [ 345.150870][T19950] hsr_slave_1: entered promiscuous mode [ 345.160535][T19950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.169230][T19950] Cannot create hsr debugfs directory [ 345.198315][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.305332][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 345.434267][ T5293] hid-steam 0003:28DE:1102.0024: unknown main item tag 0x0 [ 345.460254][ T5293] hid-steam 0003:28DE:1102.0024: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 345.552527][ T5293] hid-steam 0003:28DE:1102.0024: Steam Controller 'XXXXXXXXXX' connected [ 345.588166][ T5216] tipc: Node number set to 1 [ 345.602472][ T5293] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0024/input/input48 [ 345.627125][ T5216] usb 5-1: USB disconnect, device number 26 [ 345.657670][ T5293] hid-steam 0003:28DE:1102.0025: unknown main item tag 0x0 [ 345.675032][ T5216] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 345.712115][ T5293] hid-steam 0003:28DE:1102.0025: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 345.726336][ T5216] cp210x 5-1:0.1: device disconnected [ 345.747231][ T5293] usb 3-1: USB disconnect, device number 31 [ 345.787040][ T5293] hid-steam 0003:28DE:1102.0024: Steam Controller 'XXXXXXXXXX' disconnected [ 346.101276][T19950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.123950][T19950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.150140][T19950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.185589][T20588] macvlan3: entered allmulticast mode [ 346.214360][T20588] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 346.231016][T20588] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 346.238269][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 346.255879][T20588] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 346.265066][T19950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.480562][ T5217] Bluetooth: hci1: command tx timeout [ 346.513785][T19950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.530016][T20603] netdevsim netdevsim1: Direct firmware load for .cpu/syz1 failed with error -2 [ 346.545722][T20606] tipc: Started in network mode [ 346.553129][T20606] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 346.562845][T20606] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 346.576303][T20603] netdevsim netdevsim1: Falling back to sysfs fallback for: .cpu/syz1 [ 346.588742][T20606] tipc: Enabled bearer , priority 30 [ 346.631019][T19950] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.654706][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.661959][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.699831][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.707068][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.080818][T19950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.187432][T19950] veth0_vlan: entered promiscuous mode [ 347.215323][T19950] veth1_vlan: entered promiscuous mode [ 347.278333][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.279471][T19950] veth0_macvtap: entered promiscuous mode [ 347.310768][T19950] veth1_macvtap: entered promiscuous mode [ 347.333074][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.345153][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.357274][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.398798][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.409461][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.425917][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.436396][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.450213][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.461168][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.472289][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.483997][T19950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.541632][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.568692][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.583992][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.605901][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.626173][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.652290][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.676334][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.695102][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.705509][ T942] tipc: Node number set to 1 [ 347.725779][T19950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.746603][T19950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.769101][T19950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.867391][T19950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.883710][T19950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.898386][T19950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.917100][T19950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.229479][T20641] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 348.275575][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.284642][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.320423][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.560783][ T5217] Bluetooth: hci1: command tx timeout [ 348.566577][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.583324][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.778499][ T942] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 348.980533][ T942] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 349.008400][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.021343][ T942] usb 5-1: config 0 descriptor?? [ 349.042103][T20731] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 349.295053][ T29] audit: type=1326 audit(2134218746.458:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.358305][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 349.380295][ T29] audit: type=1326 audit(2134218746.458:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.419051][ T29] audit: type=1326 audit(2134218746.498:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.447457][ T29] audit: type=1326 audit(2134218746.508:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6661babf65 code=0x7ffc0000 [ 349.480514][ T29] audit: type=1326 audit(2134218746.508:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.514320][ T29] audit: type=1326 audit(2134218746.648:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.555460][ T29] audit: type=1326 audit(2134218746.678:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.577171][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.590537][ T29] audit: type=1326 audit(2134218746.678:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20739 comm="syz.1.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6661b79e79 code=0x7ffc0000 [ 349.612618][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.636256][T20746] macvlan0: entered promiscuous mode [ 349.651091][T20746] ipvlan0: entered promiscuous mode [ 349.660217][T20746] ipvlan0: left promiscuous mode [ 349.665724][T20746] macvlan0: left promiscuous mode [ 349.938282][ T5264] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 350.131542][ T5264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.144551][ T5264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.167516][ T5264] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.177180][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.189606][ T5264] usb 4-1: SerialNumber: syz [ 350.262524][ T942] pegasus 5-1:0.0: can't reset MAC [ 350.276724][ T942] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 350.296336][ T942] usb 5-1: USB disconnect, device number 27 [ 350.398312][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.413554][ T5264] usb 4-1: 0:2 : does not exist [ 350.441577][ T5264] usb 4-1: USB disconnect, device number 24 [ 351.033464][T20800] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 351.149247][T20804] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 351.164220][T20804] netlink: 'syz.4.2512': attribute type 10 has an invalid length. [ 351.414999][ T2579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.439164][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 351.487662][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 352.157053][T20814] syz.3.2515: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 352.177613][T20814] CPU: 0 UID: 0 PID: 20814 Comm: syz.3.2515 Not tainted 6.11.0-rc4-syzkaller-00011-g521b1e7f4cf0 #0 [ 352.188418][T20814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.198516][T20814] Call Trace: [ 352.201830][T20814] [ 352.204781][T20814] dump_stack_lvl+0x241/0x360 [ 352.209474][T20814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.214680][T20814] ? __pfx__printk+0x10/0x10 [ 352.219266][T20814] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 352.225704][T20814] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 352.232215][T20814] warn_alloc+0x278/0x410 [ 352.236562][T20814] ? __pfx_warn_alloc+0x10/0x10 [ 352.241429][T20814] ? vb2_vmalloc_alloc+0xf2/0x340 [ 352.246463][T20814] ? __get_vm_area_node+0x23d/0x270 [ 352.251666][T20814] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 352.257587][T20814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.263943][T20814] ? __kasan_kmalloc+0x98/0xb0 [ 352.268724][T20814] ? vb2_vmalloc_alloc+0xb5/0x340 [ 352.273776][T20814] vmalloc_user_noprof+0x74/0x80 [ 352.278716][T20814] ? vb2_vmalloc_alloc+0xf2/0x340 [ 352.283750][T20814] vb2_vmalloc_alloc+0xf2/0x340 [ 352.288604][T20814] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 352.294060][T20814] __vb2_queue_alloc+0xa0f/0x16f0 [ 352.299109][T20814] vb2_core_reqbufs+0xd2e/0x17c0 [ 352.304061][T20814] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 352.309464][T20814] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 352.314844][T20814] __video_do_ioctl+0xc26/0xde0 [ 352.319715][T20814] ? __pfx___video_do_ioctl+0x10/0x10 [ 352.325093][T20814] ? smack_log+0x123/0x540 [ 352.329509][T20814] ? __might_fault+0xc6/0x120 [ 352.334189][T20814] video_usercopy+0x89b/0x1180 [ 352.338960][T20814] ? __pfx___video_do_ioctl+0x10/0x10 [ 352.344504][T20814] ? __pfx_video_usercopy+0x10/0x10 [ 352.349702][T20814] ? smack_file_ioctl+0x2fa/0x3a0 [ 352.354743][T20814] ? __fget_files+0x3f6/0x470 [ 352.359415][T20814] ? __fget_files+0x29/0x470 [ 352.364007][T20814] v4l2_ioctl+0x18c/0x1e0 [ 352.368344][T20814] ? __pfx_v4l2_ioctl+0x10/0x10 [ 352.373194][T20814] __se_sys_ioctl+0xfc/0x170 [ 352.377791][T20814] do_syscall_64+0xf3/0x230 [ 352.382290][T20814] ? clear_bhb_loop+0x35/0x90 [ 352.386966][T20814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.392870][T20814] RIP: 0033:0x7fa045f79e79 [ 352.397294][T20814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.417008][T20814] RSP: 002b:00007fa046d1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.425426][T20814] RAX: ffffffffffffffda RBX: 00007fa046115f80 RCX: 00007fa045f79e79 [ 352.433395][T20814] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 352.441366][T20814] RBP: 00007fa045fe7916 R08: 0000000000000000 R09: 0000000000000000 [ 352.449344][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.457309][T20814] R13: 0000000000000000 R14: 00007fa046115f80 R15: 00007fff8b1ac998 [ 352.465390][T20814] [ 352.468487][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.478337][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.485920][T20814] Mem-Info: [ 352.495190][T20814] active_anon:261 inactive_anon:18533 isolated_anon:0 [ 352.495190][T20814] active_file:17545 inactive_file:38420 isolated_file:0 [ 352.495190][T20814] unevictable:768 dirty:227 writeback:0 [ 352.495190][T20814] slab_reclaimable:9456 slab_unreclaimable:98922 [ 352.495190][T20814] mapped:21587 shmem:16400 pagetables:784 [ 352.495190][T20814] sec_pagetables:0 bounce:0 [ 352.495190][T20814] kernel_misc_reclaimable:0 [ 352.495190][T20814] free:1305071 free_pcp:7302 free_cma:0 [ 352.541213][T20814] Node 0 active_anon:1044kB inactive_anon:74132kB active_file:70096kB inactive_file:153680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86348kB dirty:908kB writeback:0kB shmem:64064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10064kB pagetables:3136kB sec_pagetables:0kB all_unreclaimable? no [ 352.574199][T20814] Node 1 active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 352.606516][T20814] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.633617][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.640384][T20814] lowmem_reserve[]: 0 2563 2565 0 0 [ 352.645666][T20814] Node 0 DMA32 free:1269856kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:74088kB active_file:68584kB inactive_file:153616kB unevictable:1536kB writepending:908kB present:3129332kB managed:2653288kB mlocked:0kB bounce:0kB free_pcp:10596kB local_pcp:1252kB free_cma:0kB [ 352.676378][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.683293][T20814] lowmem_reserve[]: 0 0 1 0 0 [ 352.688049][T20814] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1512kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 352.715311][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.722551][T20814] lowmem_reserve[]: 0 0 0 0 0 [ 352.727309][T20814] Node 1 Normal free:3934860kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:18864kB local_pcp:18864kB free_cma:0kB [ 352.756715][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.763237][T20814] lowmem_reserve[]: 0 0 0 0 0 [ 352.768034][T20814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.781980][T20814] Node 0 DMA32: 457*4kB (ME) 215*8kB (UME) 149*16kB (UME) 78*32kB (UME) 44*64kB (ME) 28*128kB (UME) 11*256kB (ME) 17*512kB (ME) 10*1024kB (ME) 4*2048kB (ME) 299*4096kB (M) = 1269484kB [ 352.800926][T20814] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 352.813001][T20814] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (U) 0*128kB 2*256kB (UM) 2*512kB (U) 3*1024kB (UM) 3*2048kB (U) 958*4096kB (M) = 3934860kB [ 352.832178][T20814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.841853][T20814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.851286][T20814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.860908][T20814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.870400][T20814] 72365 total pagecache pages [ 352.875078][T20814] 0 pages in swap cache [ 352.880394][T20814] Free swap = 124292kB [ 352.885324][T20814] Total swap = 124996kB [ 352.889742][T20814] 2097051 pages RAM [ 352.893568][T20814] 0 pages HighMem/MovableOnly [ 352.898334][T20814] 402199 pages reserved [ 352.902565][T20814] 0 pages cma reserved [ 352.920551][ T2579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.005151][ T2579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.103391][ T2579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.270484][ T2579] bridge_slave_1: left allmulticast mode [ 353.276185][ T2579] bridge_slave_1: left promiscuous mode [ 353.289389][ T2579] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.308045][ T2579] bridge_slave_0: left allmulticast mode [ 353.313932][ T2579] bridge_slave_0: left promiscuous mode [ 353.326786][ T2579] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.518397][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.033884][T20849] ================================================================== [ 354.042089][T20849] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 354.049574][T20849] Read of size 8 at addr ffff88802f16a1b0 by task syz.2.2523/20849 [ 354.057487][T20849] [ 354.059828][T20849] CPU: 0 UID: 0 PID: 20849 Comm: syz.2.2523 Not tainted 6.11.0-rc4-syzkaller-00011-g521b1e7f4cf0 #0 [ 354.070606][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 354.080680][T20849] Call Trace: [ 354.083964][T20849] [ 354.086896][T20849] dump_stack_lvl+0x241/0x360 [ 354.091595][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.096827][T20849] ? __pfx__printk+0x10/0x10 [ 354.101453][T20849] ? _printk+0xd5/0x120 [ 354.105623][T20849] ? __virt_addr_valid+0x183/0x530 [ 354.110747][T20849] ? __virt_addr_valid+0x183/0x530 [ 354.115878][T20849] print_report+0x169/0x550 [ 354.120406][T20849] ? __virt_addr_valid+0x183/0x530 [ 354.125544][T20849] ? __virt_addr_valid+0x183/0x530 [ 354.130670][T20849] ? __virt_addr_valid+0x45f/0x530 [ 354.135798][T20849] ? __phys_addr+0xba/0x170 [ 354.140322][T20849] ? uprobe_mmap+0xb9a/0x11a0 [ 354.145002][T20849] kasan_report+0x143/0x180 [ 354.149507][T20849] ? uprobe_mmap+0xb9a/0x11a0 [ 354.154194][T20849] uprobe_mmap+0xb9a/0x11a0 [ 354.158699][T20849] ? __pfx_uprobe_mmap+0x10/0x10 [ 354.163640][T20849] mmap_region+0x1891/0x2090 [ 354.168225][T20849] ? mark_lock+0x9a/0x350 [ 354.172648][T20849] ? __pfx_mmap_region+0x10/0x10 [ 354.177576][T20849] ? mm_get_unmapped_area+0xa5/0xd0 [ 354.182774][T20849] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 354.188406][T20849] ? cap_mmap_addr+0x163/0x2c0 [ 354.193179][T20849] ? __get_unmapped_area+0x2f0/0x360 [ 354.198460][T20849] do_mmap+0x8f9/0x1010 [ 354.202618][T20849] ? __pfx_do_mmap+0x10/0x10 [ 354.207201][T20849] ? __pfx_down_write_killable+0x10/0x10 [ 354.212832][T20849] ? __pfx_ima_file_mmap+0x10/0x10 [ 354.217944][T20849] ? security_mmap_file+0x178/0x1a0 [ 354.223169][T20849] vm_mmap_pgoff+0x1dd/0x3d0 [ 354.227844][T20849] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 354.232960][T20849] ? __fget_files+0x29/0x470 [ 354.237543][T20849] ? __fget_files+0x3f6/0x470 [ 354.242220][T20849] ksys_mmap_pgoff+0x4f1/0x720 [ 354.246977][T20849] ? __x64_sys_mmap+0x7f/0x140 [ 354.251738][T20849] do_syscall_64+0xf3/0x230 [ 354.256235][T20849] ? clear_bhb_loop+0x35/0x90 [ 354.260922][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.266806][T20849] RIP: 0033:0x7f0f67779e79 [ 354.271236][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.290839][T20849] RSP: 002b:00007f0f684bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 354.299246][T20849] RAX: ffffffffffffffda RBX: 00007f0f67915f80 RCX: 00007f0f67779e79 [ 354.307298][T20849] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 354.315262][T20849] RBP: 00007f0f677e7916 R08: 0000000000000003 R09: 0000000000000000 [ 354.323240][T20849] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 354.331204][T20849] R13: 0000000000000000 R14: 00007f0f67915f80 R15: 00007fffc5433648 [ 354.339175][T20849] [ 354.342193][T20849] [ 354.344504][T20849] Allocated by task 20637: [ 354.348905][T20849] kasan_save_track+0x3f/0x80 [ 354.353572][T20849] __kasan_kmalloc+0x98/0xb0 [ 354.358156][T20849] __kmalloc_cache_noprof+0x19c/0x2c0 [ 354.363521][T20849] percpu_ref_init+0xbf/0x360 [ 354.368275][T20849] ioctx_alloc+0x25e/0x7b0 [ 354.372684][T20849] __se_sys_io_setup+0x7b/0x1a0 [ 354.377547][T20849] do_syscall_64+0xf3/0x230 [ 354.382037][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.388441][T20849] [ 354.390752][T20849] Freed by task 5293: [ 354.394721][T20849] kasan_save_track+0x3f/0x80 [ 354.399392][T20849] kasan_save_free_info+0x40/0x50 [ 354.404420][T20849] poison_slab_object+0xe0/0x150 [ 354.409351][T20849] __kasan_slab_free+0x37/0x60 [ 354.414106][T20849] kfree+0x149/0x360 [ 354.417994][T20849] free_ioctx+0x57/0xa0 [ 354.422142][T20849] process_scheduled_works+0xa2c/0x1830 [ 354.427694][T20849] worker_thread+0x86d/0xd40 [ 354.432278][T20849] kthread+0x2f0/0x390 [ 354.436348][T20849] ret_from_fork+0x4b/0x80 [ 354.440759][T20849] ret_from_fork_asm+0x1a/0x30 [ 354.445516][T20849] [ 354.447825][T20849] Last potentially related work creation: [ 354.453521][T20849] kasan_save_stack+0x3f/0x60 [ 354.458187][T20849] __kasan_record_aux_stack+0xac/0xc0 [ 354.463550][T20849] call_rcu+0x167/0xa70 [ 354.467699][T20849] __percpu_ref_switch_mode+0x375/0x600 [ 354.473233][T20849] percpu_ref_kill_and_confirm+0x98/0x130 [ 354.478985][T20849] free_ioctx_users+0x19b/0x1c0 [ 354.483838][T20849] percpu_ref_put+0x244/0x250 [ 354.488514][T20849] rcu_core+0xafd/0x1830 [ 354.492747][T20849] handle_softirqs+0x2c4/0x970 [ 354.497501][T20849] do_softirq+0x11b/0x1e0 [ 354.501817][T20849] __local_bh_enable_ip+0x1bb/0x200 [ 354.507002][T20849] addrconf_permanent_addr+0xb98/0xc50 [ 354.512446][T20849] addrconf_notify+0x9f5/0x1020 [ 354.517280][T20849] notifier_call_chain+0x19f/0x3e0 [ 354.522386][T20849] __dev_notify_flags+0x207/0x400 [ 354.527408][T20849] dev_change_flags+0xf0/0x1a0 [ 354.532162][T20849] do_setlink+0xcd0/0x41f0 [ 354.536576][T20849] rtnl_newlink+0x180d/0x20a0 [ 354.541247][T20849] rtnetlink_rcv_msg+0x73f/0xcf0 [ 354.546229][T20849] netlink_rcv_skb+0x1e3/0x430 [ 354.550986][T20849] netlink_unicast+0x7f6/0x990 [ 354.555763][T20849] netlink_sendmsg+0x8e4/0xcb0 [ 354.558621][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.560521][T20849] __sock_sendmsg+0x221/0x270 [ 354.560553][T20849] __sys_sendto+0x3a4/0x4f0 [ 354.576617][T20849] __x64_sys_sendto+0xde/0x100 [ 354.581377][T20849] do_syscall_64+0xf3/0x230 [ 354.585871][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.591756][T20849] [ 354.594075][T20849] The buggy address belongs to the object at ffff88802f16a180 [ 354.594075][T20849] which belongs to the cache kmalloc-64 of size 64 [ 354.608031][T20849] The buggy address is located 48 bytes inside of [ 354.608031][T20849] freed 64-byte region [ffff88802f16a180, ffff88802f16a1c0) [ 354.621642][T20849] [ 354.623956][T20849] The buggy address belongs to the physical page: [ 354.630368][T20849] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f16a [ 354.639206][T20849] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 354.646735][T20849] page_type: 0xfdffffff(slab) [ 354.651403][T20849] raw: 00fff00000000000 ffff8880154418c0 ffffea00008b3280 dead000000000005 [ 354.659976][T20849] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 354.668560][T20849] page dumped because: kasan: bad access detected [ 354.674972][T20849] page_owner tracks the page as allocated [ 354.680672][T20849] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4648, tgid 4648 (rcS), ts 19070209296, free_ts 19051518181 [ 354.699112][T20849] post_alloc_hook+0x1f3/0x230 [ 354.703880][T20849] get_page_from_freelist+0x2e4c/0x2f10 [ 354.709428][T20849] __alloc_pages_noprof+0x256/0x6c0 [ 354.714620][T20849] alloc_slab_page+0x5f/0x120 [ 354.719287][T20849] allocate_slab+0x5a/0x2f0 [ 354.723780][T20849] ___slab_alloc+0xcd1/0x14b0 [ 354.728451][T20849] __slab_alloc+0x58/0xa0 [ 354.732777][T20849] __kmalloc_noprof+0x25a/0x400 [ 354.737623][T20849] tomoyo_commit_ok+0x29/0x1d0 [ 354.743071][T20849] tomoyo_update_domain+0x557/0x8b0 [ 354.748282][T20849] tomoyo_write_file+0x397/0xe50 [ 354.753231][T20849] tomoyo_write_domain2+0x1e0/0x250 [ 354.758471][T20849] tomoyo_supervisor+0xf09/0x11f0 [ 354.763489][T20849] tomoyo_find_next_domain+0x404/0x1cf0 [ 354.769042][T20849] tomoyo_bprm_check_security+0x115/0x180 [ 354.774749][T20849] security_bprm_check+0x65/0x90 [ 354.779675][T20849] page last free pid 942 tgid 942 stack trace: [ 354.785816][T20849] free_unref_page+0xd19/0xea0 [ 354.790574][T20849] vfree+0x186/0x2e0 [ 354.794465][T20849] delayed_vfree_work+0x56/0x80 [ 354.799316][T20849] process_scheduled_works+0xa2c/0x1830 [ 354.804853][T20849] worker_thread+0x86d/0xd40 [ 354.809438][T20849] kthread+0x2f0/0x390 [ 354.813510][T20849] ret_from_fork+0x4b/0x80 [ 354.817927][T20849] ret_from_fork_asm+0x1a/0x30 [ 354.822772][T20849] [ 354.825079][T20849] Memory state around the buggy address: [ 354.830695][T20849] ffff88802f16a080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 354.838743][T20849] ffff88802f16a100: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 354.846790][T20849] >ffff88802f16a180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 354.854833][T20849] ^ [ 354.860448][T20849] ffff88802f16a200: 00 00 00 00 00 06 fc fc fc fc fc fc fc fc fc fc [ 354.868497][T20849] ffff88802f16a280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 354.876559][T20849] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.884824][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.918605][T20849] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 354.925838][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.2.2523 Not tainted 6.11.0-rc4-syzkaller-00011-g521b1e7f4cf0 #0 [ 354.936604][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 354.946658][T20849] Call Trace: [ 354.950020][T20849] [ 354.952943][T20849] dump_stack_lvl+0x241/0x360 [ 354.957625][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.962817][T20849] ? __pfx__printk+0x10/0x10 [ 354.967406][T20849] ? preempt_schedule+0xe1/0xf0 [ 354.972344][T20849] ? vscnprintf+0x5d/0x90 [ 354.976668][T20849] panic+0x349/0x860 [ 354.980576][T20849] ? check_panic_on_warn+0x21/0xb0 [ 354.985695][T20849] ? __pfx_panic+0x10/0x10 [ 354.990110][T20849] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 354.996086][T20849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.002416][T20849] ? print_report+0x502/0x550 [ 355.007092][T20849] check_panic_on_warn+0x86/0xb0 [ 355.012023][T20849] ? uprobe_mmap+0xb9a/0x11a0 [ 355.016690][T20849] end_report+0x77/0x160 [ 355.020923][T20849] kasan_report+0x154/0x180 [ 355.025418][T20849] ? uprobe_mmap+0xb9a/0x11a0 [ 355.030087][T20849] uprobe_mmap+0xb9a/0x11a0 [ 355.034592][T20849] ? __pfx_uprobe_mmap+0x10/0x10 [ 355.039528][T20849] mmap_region+0x1891/0x2090 [ 355.044113][T20849] ? mark_lock+0x9a/0x350 [ 355.048446][T20849] ? __pfx_mmap_region+0x10/0x10 [ 355.053369][T20849] ? mm_get_unmapped_area+0xa5/0xd0 [ 355.058560][T20849] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 355.064192][T20849] ? cap_mmap_addr+0x163/0x2c0 [ 355.068955][T20849] ? __get_unmapped_area+0x2f0/0x360 [ 355.074238][T20849] do_mmap+0x8f9/0x1010 [ 355.078390][T20849] ? __pfx_do_mmap+0x10/0x10 [ 355.082971][T20849] ? __pfx_down_write_killable+0x10/0x10 [ 355.088596][T20849] ? __pfx_ima_file_mmap+0x10/0x10 [ 355.093698][T20849] ? security_mmap_file+0x178/0x1a0 [ 355.098893][T20849] vm_mmap_pgoff+0x1dd/0x3d0 [ 355.103482][T20849] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.108588][T20849] ? __fget_files+0x29/0x470 [ 355.113170][T20849] ? __fget_files+0x3f6/0x470 [ 355.117840][T20849] ksys_mmap_pgoff+0x4f1/0x720 [ 355.122603][T20849] ? __x64_sys_mmap+0x7f/0x140 [ 355.127383][T20849] do_syscall_64+0xf3/0x230 [ 355.131980][T20849] ? clear_bhb_loop+0x35/0x90 [ 355.136667][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.142565][T20849] RIP: 0033:0x7f0f67779e79 [ 355.146974][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.166589][T20849] RSP: 002b:00007f0f684bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.175004][T20849] RAX: ffffffffffffffda RBX: 00007f0f67915f80 RCX: 00007f0f67779e79 [ 355.182978][T20849] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 355.190943][T20849] RBP: 00007f0f677e7916 R08: 0000000000000003 R09: 0000000000000000 [ 355.198904][T20849] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 355.206861][T20849] R13: 0000000000000000 R14: 00007f0f67915f80 R15: 00007fffc5433648 [ 355.214833][T20849] [ 355.218166][T20849] Kernel Offset: disabled [ 355.222473][T20849] Rebooting in 86400 seconds..