last executing test programs: 5.663300007s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000030000000100000ff3fdffff050000003dcc00000000000205000000000000000900000003000000060000000000010004000000010000000100000081000000000000000f03000000032a08000000615f2e"], &(0x7f0000000780)=""/2, 0x6b, 0x2, 0x1}, 0x20) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) ioperm(0x0, 0x82, 0x1f) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000180000000090400000503000000092100000001220500090581030000000000090502030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) close_range(r0, r2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 4.735982105s ago: executing program 2 (id=703): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x78, 0x56, 0xbb, 0x40, 0xbda, 0x8153, 0xe23d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x19, &(0x7f0000000440)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 3.265575056s ago: executing program 2 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket(0x11, 0x3, 0x2) r2 = getpid() r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 3.190671023s ago: executing program 0 (id=709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xaf, 0x2101) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000280)={0x8, 0x4, 0x80000001, 0x4, '\x00', 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x0, 0x8, 0x1}, 0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000005050505050500000000000000000000064000000000602020202020201a1710700000000000000dd8e6930a969de8ce3f558ac53d9a46fc056a85ab1ece80f535fb634973ceb8474cda45a6dc924a2522bff"], 0x2a5) 1.909103357s ago: executing program 3 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030022d6850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='percpu_alloc_percpu_fail\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1.751877536s ago: executing program 3 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x8}]}}}]}, 0x40}}, 0x0) 1.54288686s ago: executing program 0 (id=719): r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000400)={0x0, 0x0, "4483e704505f23bac5ee86c9eb6f6c768789a7cf5b7a804e62f675470225b830"}) 1.495264145s ago: executing program 3 (id=720): r0 = socket$kcm(0x10, 0x3, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x2101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000180)=0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffee3, &(0x7f0000000540)=[{&(0x7f0000000280)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000080)={0x2, 0xfffe, @local}, 0x10, 0x0}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x4744, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000400)=""/64, 0xb4, 0x40, 0x1, 0x5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2d, 0x7, 0xd40, 0x3ae, 0x870, r4, 0xffffffff, '\x00', r5, r6, 0x4, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r8 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000140)={r7, &(0x7f00000002c0), 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400400000408030000000000000000000000000006000240430500002400048008000140000000ff080001400000000808000140000000060800014000000002"], 0x40}}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.450168407s ago: executing program 1 (id=721): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='3\x00'}) write$input_event(r4, &(0x7f0000001140)={{0x0, 0x2710}, 0x15, 0xffff, 0x48}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0x7ffc, 0x4) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)=""/88, &(0x7f0000000140)=0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = dup(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, r7, 0x605, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfee7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci, {0x1c}, {0xffffffffffffffad}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x3e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x24000001) write$UHID_INPUT(r5, &(0x7f0000000080)={0xf, {"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", 0x1000}}, 0x1006) 1.376017795s ago: executing program 0 (id=723): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$P9_RXATTRCREATE(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000cc4dfd5edd5f00009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0xba9}}, 0x30) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x28, 0x7, 0x0, 0x0, 0xffff}}, 0x50) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f00000000c0), 0x2) 1.144838832s ago: executing program 3 (id=724): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, r1, 0x29800f6803d6a469, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x0) 1.000570608s ago: executing program 3 (id=725): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4c4000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0x26, 0x0, &(0x7f0000000140)={0x11, 0x16, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x20}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xfdef) r6 = userfaultfd(0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000140)={0xb, 0x10, 0x8f, {0x0}}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast1}, @ib={0x1b, 0x0, 0x0, {"230963d6ced8bd17e8200000000e00"}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f00000000c0)={0x1, 0x10}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) io_uring_setup(0x3eaa, &(0x7f0000000180)={0x0, 0x9c71, 0x800, 0x1, 0x31c, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x9ff2}, {0x7}, {0x6}]}) 993.103811ms ago: executing program 4 (id=726): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 950.311197ms ago: executing program 1 (id=727): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}}) 853.77946ms ago: executing program 1 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) close(r1) 802.876731ms ago: executing program 3 (id=729): r0 = syz_io_uring_setup(0x4f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = memfd_secret(0x0) ftruncate(r2, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000cb880)={{0x0, 0x40, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x10000, 0xf0, 0x81, 0x1, 0x0, 0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x8829, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r10, 0xc040564b, &(0x7f00000003c0)) r11 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) listen(r11, 0x20200007) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000000), 0x4) io_uring_enter(r0, 0x2d3e, 0xb0de, 0x5, 0x0, 0x0) 735.407392ms ago: executing program 0 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x8}]}}}]}, 0x40}}, 0x0) 702.300988ms ago: executing program 4 (id=731): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) 669.606416ms ago: executing program 0 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(0x0, &(0x7f0000000c80)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x24c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x1050000, 0xfffe, 0x101}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x1, 0x1, 0x0, 0x1, 0x66e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 602.739382ms ago: executing program 1 (id=733): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0x88, 0x4, 0x370, 0xffffffff, 0x1b8, 0xd0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'pim6reg0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @remote, [], [], 'veth0_vlan\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 602.097134ms ago: executing program 2 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8, 0x6}, {0x8}, [@IFLA_GTP_ROLE={0x8}]}}}}]}, 0x48}}, 0x0) 585.755949ms ago: executing program 4 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000017c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x5, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 539.230933ms ago: executing program 4 (id=736): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="31ab732abda06e22281b2f0df75394f0", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/166, 0xa6}], 0x1}}], 0x1, 0x60, 0x0) 533.682198ms ago: executing program 1 (id=737): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='3\x00'}) write$input_event(r4, &(0x7f0000001140)={{0x0, 0x2710}, 0x15, 0xffff, 0x48}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0x7ffc, 0x4) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)=""/88, &(0x7f0000000140)=0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = dup(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, r7, 0x605, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfee7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci, {0x1c}, {0xffffffffffffffad}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x3e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x24000001) write$UHID_INPUT(r5, &(0x7f0000000080)={0xf, {"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", 0x1000}}, 0x1006) 453.676006ms ago: executing program 2 (id=738): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 299.219174ms ago: executing program 2 (id=739): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 222.490002ms ago: executing program 4 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 210.326609ms ago: executing program 2 (id=741): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x14f13b79faf8e7df) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5f23150"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) open(0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') fcntl$notify(r2, 0x402, 0x80000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000000000002000000080000000000000000000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0a010102ac1414aa000000001400000000000000000000000100000005000000000000003c00000000000000000000000700000044144c43ffffffff000000020a01010100000000943801008612000000000709fe712315e4ce300503ac01000000000011000000000000000000000001000000050000000000000085b6553a1ded790cfd3ec4de2d44fd06c608d611c991ccfeaa0d651160b19c8ad2c32949dce196180c813e119e9e437e2574d425140722615dc2dc3a22f8a17aea17abd627e7cb286dcc17313b9c57"], 0xa0}, 0x40000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000180)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socket$inet6(0xa, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x401, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0xfd}, @in6=@private0={0xfc, 0x0, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x33}, @in=@remote, {}, {0x0, 0x0, 0x8}}, 0x8, 0xffffffff}}, 0xf8}}, 0x0) add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000001000)={'syz', 0x3}, &(0x7f0000001000)='.', 0x1, 0x0) 118.135199ms ago: executing program 1 (id=742): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000080)={&(0x7f0000000440)={{@host, 0xe09}, {@my=0x1, 0xf}, 0x400, "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"}, 0x418, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x2, &(0x7f0000000100)=[{0xb, 0x7, 0xff, 0x7b0a}, {0x4, 0x0, 0xff, 0xfffff629}]}) socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040), 0x8) getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f00000008c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x7fff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100001000000000000000000ac1414aa000000000000000000000000fe80000000000000000000570c0000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000023c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00fc0200"/188], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xf, 0xfffffb9e}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e44f30110"], 0x47) r10 = dup2(r1, r1) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r10, 0x5382, &(0x7f0000000140)) fsetxattr$security_ima(r11, &(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0x2, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 0s ago: executing program 4 (id=743): sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000000)={0x0, 0x0, 0x13580}, 0x0, 0x0) r2 = dup(r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 52.360567][ T5070] cgroup: Unknown subsys name 'net' [ 52.461207][ T5070] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.861546][ T5070] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.961077][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.973770][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.983940][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.992221][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.998653][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.000463][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.014878][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.019321][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.022225][ T5091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.029407][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.036878][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.046173][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.050653][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.057738][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.071841][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.073075][ T5091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.079081][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.086348][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.095062][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.107960][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.110286][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.116082][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.123204][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.129248][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.137884][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.143151][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.151026][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.164573][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.165254][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.188423][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.770926][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 56.782396][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 56.793143][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 56.858868][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 56.941536][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.949016][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.957321][ T5082] bridge_slave_0: entered allmulticast mode [ 56.964522][ T5082] bridge_slave_0: entered promiscuous mode [ 56.986531][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 57.003682][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.010989][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.018557][ T5082] bridge_slave_1: entered allmulticast mode [ 57.025450][ T5082] bridge_slave_1: entered promiscuous mode [ 57.123654][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.151645][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.158885][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.166674][ T5081] bridge_slave_0: entered allmulticast mode [ 57.173409][ T5081] bridge_slave_0: entered promiscuous mode [ 57.182746][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.223799][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.231023][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.238519][ T5081] bridge_slave_1: entered allmulticast mode [ 57.245591][ T5081] bridge_slave_1: entered promiscuous mode [ 57.276475][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.283585][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.291554][ T5088] bridge_slave_0: entered allmulticast mode [ 57.299283][ T5088] bridge_slave_0: entered promiscuous mode [ 57.306337][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.313449][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.322305][ T5094] bridge_slave_0: entered allmulticast mode [ 57.329594][ T5094] bridge_slave_0: entered promiscuous mode [ 57.363062][ T5082] team0: Port device team_slave_0 added [ 57.369331][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.376552][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.383689][ T5088] bridge_slave_1: entered allmulticast mode [ 57.391497][ T5088] bridge_slave_1: entered promiscuous mode [ 57.398169][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.405654][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.412868][ T5094] bridge_slave_1: entered allmulticast mode [ 57.420482][ T5094] bridge_slave_1: entered promiscuous mode [ 57.460547][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.471599][ T5082] team0: Port device team_slave_1 added [ 57.511421][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.521092][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.528563][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.536449][ T5093] bridge_slave_0: entered allmulticast mode [ 57.543092][ T5093] bridge_slave_0: entered promiscuous mode [ 57.550710][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.557875][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.565305][ T5093] bridge_slave_1: entered allmulticast mode [ 57.571974][ T5093] bridge_slave_1: entered promiscuous mode [ 57.580424][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.619158][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.652782][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.660027][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.686511][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.700415][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.712498][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.745549][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.757894][ T5081] team0: Port device team_slave_0 added [ 57.767352][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.777012][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.783958][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.810339][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.855439][ T5081] team0: Port device team_slave_1 added [ 57.863876][ T5094] team0: Port device team_slave_0 added [ 57.891471][ T5088] team0: Port device team_slave_0 added [ 57.904164][ T5088] team0: Port device team_slave_1 added [ 57.911917][ T5094] team0: Port device team_slave_1 added [ 57.952841][ T5093] team0: Port device team_slave_0 added [ 58.001835][ T5093] team0: Port device team_slave_1 added [ 58.028531][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.035687][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.062685][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.075501][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.082443][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.108685][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.133530][ T5082] hsr_slave_0: entered promiscuous mode [ 58.140118][ T5082] hsr_slave_1: entered promiscuous mode [ 58.149384][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.156651][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.182612][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.195135][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.202083][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.228985][ T5100] Bluetooth: hci3: command tx timeout [ 58.229256][ T5100] Bluetooth: hci1: command tx timeout [ 58.240307][ T5090] Bluetooth: hci2: command tx timeout [ 58.240564][ T5092] Bluetooth: hci0: command tx timeout [ 58.251620][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.263301][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.270358][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.284193][ T5091] Bluetooth: hci4: command tx timeout [ 58.296514][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.329279][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.336301][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.363028][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.385998][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.393356][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.420351][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.443461][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.450606][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.476554][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.579409][ T5081] hsr_slave_0: entered promiscuous mode [ 58.586353][ T5081] hsr_slave_1: entered promiscuous mode [ 58.592419][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.601583][ T5081] Cannot create hsr debugfs directory [ 58.626836][ T5094] hsr_slave_0: entered promiscuous mode [ 58.633113][ T5094] hsr_slave_1: entered promiscuous mode [ 58.639623][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.647551][ T5094] Cannot create hsr debugfs directory [ 58.697894][ T5088] hsr_slave_0: entered promiscuous mode [ 58.704931][ T5088] hsr_slave_1: entered promiscuous mode [ 58.711408][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.719254][ T5088] Cannot create hsr debugfs directory [ 58.804950][ T5093] hsr_slave_0: entered promiscuous mode [ 58.811108][ T5093] hsr_slave_1: entered promiscuous mode [ 58.817662][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.825306][ T5093] Cannot create hsr debugfs directory [ 59.185423][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.201506][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.211341][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.220990][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.266914][ T5094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.279819][ T5094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.290938][ T5094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.309463][ T5094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.392499][ T5081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.402878][ T5081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.427894][ T5081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.467139][ T5081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.525495][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.562292][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.572681][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.613734][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.683571][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.715988][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.728006][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.740022][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.766090][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.782620][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.837987][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.852731][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.865189][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.913019][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.920405][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.957063][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.964260][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.001660][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.008833][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.023674][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.047085][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.054258][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.097822][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.105061][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.117918][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.125052][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.216994][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.249104][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.263476][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.284433][ T5091] Bluetooth: hci2: command tx timeout [ 60.294346][ T5090] Bluetooth: hci1: command tx timeout [ 60.295810][ T5092] Bluetooth: hci3: command tx timeout [ 60.299815][ T5091] Bluetooth: hci0: command tx timeout [ 60.316311][ T5094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.364253][ T5091] Bluetooth: hci4: command tx timeout [ 60.401509][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.437360][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.507034][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.514379][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.546333][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.553503][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.573461][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.580657][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.619967][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.627128][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.758989][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.786470][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.946638][ T5094] veth0_vlan: entered promiscuous mode [ 60.966722][ T5081] veth0_vlan: entered promiscuous mode [ 61.019933][ T5081] veth1_vlan: entered promiscuous mode [ 61.046926][ T5094] veth1_vlan: entered promiscuous mode [ 61.076610][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.160881][ T5081] veth0_macvtap: entered promiscuous mode [ 61.210925][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.219522][ T5081] veth1_macvtap: entered promiscuous mode [ 61.257272][ T5094] veth0_macvtap: entered promiscuous mode [ 61.286939][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.312590][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.335352][ T5094] veth1_macvtap: entered promiscuous mode [ 61.353193][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.365026][ T5081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.373877][ T5081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.383059][ T5081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.393854][ T5081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.475972][ T5093] veth0_vlan: entered promiscuous mode [ 61.490721][ T5093] veth1_vlan: entered promiscuous mode [ 61.543600][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.555120][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.567346][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.599952][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.610563][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.623093][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.646343][ T5093] veth0_macvtap: entered promiscuous mode [ 61.663577][ T5094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.672410][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.682162][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.690892][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.717932][ T5088] veth0_vlan: entered promiscuous mode [ 61.743680][ T5093] veth1_macvtap: entered promiscuous mode [ 61.797585][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.807518][ T5082] veth0_vlan: entered promiscuous mode [ 61.815479][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.825581][ T5088] veth1_vlan: entered promiscuous mode [ 61.876701][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.889141][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.899833][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.910484][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.922645][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.951611][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.965022][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.985937][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.997741][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.008716][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.021982][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.033527][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.074218][ T5082] veth1_vlan: entered promiscuous mode [ 62.087383][ T5088] veth0_macvtap: entered promiscuous mode [ 62.108368][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.117983][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.130841][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.140092][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.167466][ T5088] veth1_macvtap: entered promiscuous mode [ 62.182936][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.198693][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.242742][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.255174][ T5082] veth0_macvtap: entered promiscuous mode [ 62.262605][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.349610][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.364883][ T5091] Bluetooth: hci0: command tx timeout [ 62.364909][ T5092] Bluetooth: hci1: command tx timeout [ 62.370306][ T5091] Bluetooth: hci2: command tx timeout [ 62.376170][ T5092] Bluetooth: hci3: command tx timeout [ 62.389793][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.401622][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.412265][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.422148][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.432729][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.446871][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.454327][ T5092] Bluetooth: hci4: command tx timeout [ 62.463019][ T5082] veth1_macvtap: entered promiscuous mode [ 62.489871][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.520140][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.530295][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.544115][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.553951][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.565133][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.586733][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.610865][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.622170][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.631471][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.641091][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.670086][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.683892][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.695895][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.712796][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.731975][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.743036][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.759080][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.770691][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.788650][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.834708][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.847660][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.858217][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.868892][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.878754][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.889301][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.992551][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.992645][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.260427][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.646582][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.680140][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.692016][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.701059][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.715091][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.724582][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.791640][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.814282][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.865359][ T5182] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.949739][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.974228][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.040764][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.079092][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.139451][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.150046][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.174775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.190810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.445178][ T5100] Bluetooth: hci1: command tx timeout [ 64.445237][ T5090] Bluetooth: hci3: command tx timeout [ 64.450649][ T5092] Bluetooth: hci2: command tx timeout [ 64.456564][ T5091] Bluetooth: hci0: command tx timeout [ 64.524707][ T5091] Bluetooth: hci4: command tx timeout [ 65.181189][ T5220] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.452532][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 65.671654][ T5245] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 65.714679][ T5245] overlayfs: missing 'lowerdir' [ 65.861553][ T5254] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.586620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.708733][ T5269] syz.0.41: attempt to access beyond end of device [ 66.708733][ T5269] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 66.723346][ T5269] syz.0.41: attempt to access beyond end of device [ 66.723346][ T5269] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 66.737713][ T5269] syz.0.41: attempt to access beyond end of device [ 66.737713][ T5269] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 66.755562][ T5269] syz.0.41: attempt to access beyond end of device [ 66.755562][ T5269] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 66.784368][ T5269] syz.0.41: attempt to access beyond end of device [ 66.784368][ T5269] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 66.809604][ T5269] syz.0.41: attempt to access beyond end of device [ 66.809604][ T5269] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 66.822581][ T5269] VFS: unable to find oldfs superblock on device loop0 [ 66.847963][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 67.203497][ T29] audit: type=1326 audit(1721230951.725:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5290 comm="syz.4.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc44d75a99 code=0x0 [ 67.362228][ T5299] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.504865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.179654][ T5309] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 68.187312][ T5309] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 68.284574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.894804][ T5306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.566565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 69.830384][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 70.457039][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.749962][ T5329] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 70.756769][ T5329] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.829091][ T5337] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.834075][ T5329] vhci_hcd vhci_hcd.0: Device attached [ 70.855491][ T25] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 70.905463][ T5336] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 70.919923][ T5340] syz.0.62: attempt to access beyond end of device [ 70.919923][ T5340] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.936192][ T5340] syz.0.62: attempt to access beyond end of device [ 70.936192][ T5340] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 70.956665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.969185][ T5340] syz.0.62: attempt to access beyond end of device [ 70.969185][ T5340] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 70.984153][ T5340] syz.0.62: attempt to access beyond end of device [ 70.984153][ T5340] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 71.004362][ T25] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 71.008789][ T5340] VFS: unable to find oldfs superblock on device loop0 [ 71.055596][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.068048][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 71.164333][ T5133] usb 18-1: SetAddress Request (2) to port 0 [ 71.183618][ T25] usb 4-1: config 0 descriptor?? [ 71.193866][ T5133] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.210741][ T25] usb 4-1: bad CDC descriptors [ 71.432469][ T25] usb 4-1: USB disconnect, device number 2 [ 71.532618][ T5331] vhci_hcd: connection reset by peer [ 71.566489][ T2932] vhci_hcd: stop threads [ 71.572810][ T2932] vhci_hcd: release socket [ 71.583310][ T2932] vhci_hcd: disconnect device [ 71.728813][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.735396][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.456543][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.796941][ T25] usb 1-1: device descriptor read/64, error -71 [ 73.064271][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.224246][ T25] usb 1-1: device descriptor read/64, error -71 [ 73.345084][ T25] usb usb1-port1: attempt power cycle [ 74.544149][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.596837][ T25] usb 1-1: device descriptor read/8, error -71 [ 75.014258][ T5091] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 75.022941][ T5091] Bluetooth: hci1: Injecting HCI hardware error event [ 75.032017][ T5090] Bluetooth: hci1: hardware error 0x00 [ 75.944073][ T5382] sched: RT throttling activated [ 75.976638][ T5384] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.302362][ T5133] usb 18-1: device descriptor read/8, error -110 [ 76.562367][ T5393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 76.568935][ T5393] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.607619][ T29] audit: type=1326 audit(1721230961.135:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 76.619472][ T5393] vhci_hcd vhci_hcd.0: Device attached [ 76.640155][ T29] audit: type=1326 audit(1721230961.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 76.662124][ T29] audit: type=1326 audit(1721230961.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 76.745755][ T5133] usb usb18-port1: attempt power cycle [ 76.766669][ T29] audit: type=1326 audit(1721230961.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 76.787794][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.838619][ T29] audit: type=1326 audit(1721230961.135:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 76.873579][ T9] cfg80211: failed to load regulatory.db [ 76.890440][ T29] audit: type=1326 audit(1721230961.135:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 77.022164][ T5135] usb 14-1: SetAddress Request (2) to port 0 [ 77.028738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.094460][ T5135] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.115150][ T29] audit: type=1326 audit(1721230961.135:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 77.151766][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 77.232879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.404092][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.428963][ T29] audit: type=1326 audit(1721230961.135:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 77.468004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.511585][ T5133] usb usb18-port1: unable to enumerate USB device [ 77.539968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.756026][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 77.783866][ T29] audit: type=1326 audit(1721230961.135:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 78.179023][ T5413] input: syz1 as /devices/virtual/input/input5 [ 78.238783][ T29] audit: type=1326 audit(1721230961.135:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f24f75a99 code=0x7ffc0000 [ 78.364632][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 78.446219][ T5397] vhci_hcd: connection reset by peer [ 78.507147][ T2480] vhci_hcd: stop threads [ 78.529892][ T2480] vhci_hcd: release socket [ 78.564053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 78.972833][ T2480] vhci_hcd: disconnect device [ 78.999291][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.274822][ T25] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 79.398883][ T25] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 79.534206][ T25] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 79.538910][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.554127][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.562146][ T25] usb 5-1: Product: syz [ 79.593624][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.613746][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice=51.2c [ 79.628326][ T25] usb 5-1: Manufacturer: syz [ 79.643163][ T25] usb 5-1: SerialNumber: syz [ 80.245906][ T25] usb 5-1: bad CDC descriptors [ 80.251860][ T25] option 5-1:7.0: GSM modem (1-port) converter detected [ 80.270045][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.322427][ T9] usb 2-1: config 0 descriptor?? [ 80.343276][ T9] usb 2-1: can't set config #0, error -71 [ 80.369281][ T9] usb 2-1: USB disconnect, device number 2 [ 80.738815][ T5434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.92'. [ 80.776456][ T5434] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 81.203236][ T5449] input: syz1 as /devices/virtual/input/input6 [ 82.637076][ T25] usb 5-1: USB disconnect, device number 2 [ 82.729018][ T25] option 5-1:7.0: device disconnected [ 82.779424][ T5135] usb 14-1: device descriptor read/8, error -110 [ 83.024089][ T5463] Bluetooth: MGMT ver 1.23 [ 83.038940][ T5463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.216749][ T5135] usb usb14-port1: attempt power cycle [ 83.649084][ T5491] futex_wake_op: syz.3.116 tries to shift op by -1; fix this program [ 83.794318][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.905768][ T5135] usb usb14-port1: unable to enumerate USB device [ 83.984079][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 84.024814][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.036607][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.062574][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.084159][ T9] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 84.103464][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.128005][ T9] usb 5-1: config 0 descriptor?? [ 84.144483][ T5486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.166097][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 84.175163][ T5480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.192259][ T9] usb 5-1: Detected SIO [ 84.236590][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.374695][ T5504] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 84.381327][ T5504] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.416449][ T5504] vhci_hcd vhci_hcd.0: Device attached [ 84.438223][ T5506] vhci_hcd: connection closed [ 84.438558][ T2451] vhci_hcd: stop threads [ 84.474632][ T9] usb 5-1: USB disconnect, device number 3 [ 84.496781][ T2451] vhci_hcd: release socket [ 84.501238][ T2451] vhci_hcd: disconnect device [ 84.524711][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.540234][ T9] ftdi_sio 5-1:0.0: device disconnected [ 85.320817][ T5538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.131'. [ 86.195240][ T5553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 86.201757][ T5553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.212639][ T5553] vhci_hcd vhci_hcd.0: Device attached [ 86.422224][ T5554] vhci_hcd: connection closed [ 86.423759][ T35] vhci_hcd: stop threads [ 86.436981][ T35] vhci_hcd: release socket [ 86.443402][ T35] vhci_hcd: disconnect device [ 86.484158][ T5138] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 86.491762][ T5138] usb 9-1: enqueue for inactive port 0 [ 86.574213][ T5138] vhci_hcd: vhci_device speed not set [ 86.603342][ T5090] Bluetooth: hci2: unexpected event 0x30 length: 8 > 3 [ 86.684751][ T5563] process 'syz.2.135' launched './file0' with NULL argv: empty string added [ 86.942845][ T5529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.220445][ T5090] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 87.230210][ T5090] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 87.250334][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 87.305229][ T5573] netdevsim netdevsim3 ä: renamed from netdevsim0 (while UP) [ 87.323955][ T5573] A link change request failed with some changes committed already. Interface ä may have been left with an inconsistent configuration, please check. [ 87.646109][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.730469][ T5594] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 87.775192][ T5588] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.143'. [ 87.775232][ T5588] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 87.874112][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 87.875949][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.875981][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.876006][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.876046][ T8] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 87.876069][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.878666][ T8] usb 1-1: config 0 descriptor?? [ 87.879538][ T5581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.883437][ T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 87.899698][ T8] usb 1-1: Detected SIO [ 87.904733][ T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.201360][ T5137] usb 1-1: USB disconnect, device number 6 [ 88.242158][ T5137] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.276988][ T5137] ftdi_sio 1-1:0.0: device disconnected [ 89.375754][ T5138] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.744131][ T5138] usb 5-1: device descriptor read/64, error -71 [ 89.901097][ T5636] tipc: Can't bind to reserved service type 0 [ 90.014978][ T5138] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.023812][ T5643] netlink: 'syz.0.166': attribute type 3 has an invalid length. [ 90.194244][ T5138] usb 5-1: device descriptor read/64, error -71 [ 90.351140][ T5138] usb usb5-port1: attempt power cycle [ 90.774831][ T5138] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.804947][ T5138] usb 5-1: device descriptor read/8, error -71 [ 90.945852][ T5677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'. [ 92.002101][ T5686] netlink: 'syz.2.183': attribute type 3 has an invalid length. [ 93.364110][ T5138] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.404331][ T5715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 93.410982][ T5715] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.436639][ T5715] vhci_hcd vhci_hcd.0: Device attached [ 93.456700][ T5724] vhci_hcd: connection closed [ 93.457165][ T35] vhci_hcd: stop threads [ 93.480559][ T35] vhci_hcd: release socket [ 93.498334][ T35] vhci_hcd: disconnect device [ 93.524522][ T5138] usb 3-1: device descriptor read/64, error -71 [ 93.804158][ T5138] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.988915][ T5138] usb 3-1: device descriptor read/64, error -71 [ 95.020462][ T5138] usb usb3-port1: attempt power cycle [ 95.223921][ T5749] netlink: 'syz.0.211': attribute type 3 has an invalid length. [ 95.495748][ T5758] netlink: 'syz.4.216': attribute type 21 has an invalid length. [ 95.503512][ T5758] netlink: 128 bytes leftover after parsing attributes in process `syz.4.216'. [ 95.524199][ T5758] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 95.531918][ T5758] netlink: 'syz.4.216': attribute type 5 has an invalid length. [ 95.589175][ T5758] netlink: 3 bytes leftover after parsing attributes in process `syz.4.216'. [ 95.613450][ T5764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.793911][ T5772] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 95.828062][ T5772] netlink: 'syz.3.223': attribute type 3 has an invalid length. [ 95.844731][ T5772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.223'. [ 95.877633][ T5138] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 96.050228][ T5138] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.230444][ T5138] usb 3-1: Using ep0 maxpacket: 16 [ 96.238263][ T5138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 96.253162][ T5138] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 96.270587][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.282343][ T5138] usb 3-1: config 0 descriptor?? [ 97.884345][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.054222][ T8] usb 5-1: device descriptor read/64, error -71 [ 98.210353][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.258167][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.305259][ T5138] hid (null): invalid report_count 983040256 [ 98.342795][ T5138] hid (null): unknown global tag 0xc [ 98.354506][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.389964][ T5138] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 98.399247][ T5138] hid-generic 0003:0158:0100.0001: invalid report_count 983040256 [ 98.554887][ T5138] hid-generic 0003:0158:0100.0001: item 0 4 1 9 parsing failed [ 98.582052][ T5138] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 98.638491][ T5138] usb 3-1: USB disconnect, device number 5 [ 98.669099][ T5813] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 98.688079][ T8] usb 5-1: device descriptor read/64, error -71 [ 98.740196][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 99.460634][ T5813] team0: Port device netdevsim0 added [ 99.475588][ T8] usb usb5-port1: attempt power cycle [ 99.977170][ T5835] capability: warning: `syz.2.244' uses deprecated v2 capabilities in a way that may be insecure [ 101.504122][ T5838] syz.1.241 (5838): drop_caches: 2 [ 101.514248][ T5838] syz.1.241 (5838): drop_caches: 2 [ 101.964726][ T5848] netlink: 'syz.2.248': attribute type 3 has an invalid length. [ 101.972412][ T5848] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.248'. [ 102.030861][ T5852] netlink: 320 bytes leftover after parsing attributes in process `syz.4.247'. [ 102.109158][ T5854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.826413][ T5137] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.217149][ T5851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.234113][ T5137] usb 1-1: device descriptor read/64, error -71 [ 103.514350][ T5137] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.530497][ T5883] netlink: 'syz.1.262': attribute type 3 has an invalid length. [ 103.540996][ T5884] warning: `syz.2.261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.560101][ T5883] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.262'. [ 103.575305][ T5886] netlink: 320 bytes leftover after parsing attributes in process `syz.3.263'. [ 103.674151][ T5137] usb 1-1: device descriptor read/64, error -71 [ 106.325198][ T5137] usb usb1-port1: attempt power cycle [ 106.391100][ T5909] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 106.809266][ T5915] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 106.883423][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 106.988572][ T5915] team0: Failed to send options change via netlink (err -105) [ 106.996194][ T5915] team0: Port device netdevsim0 added [ 107.399382][ T5915] syz.2.273 (5915) used greatest stack depth: 19440 bytes left [ 107.480075][ T5137] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.536470][ T5921] netlink: 'syz.4.275': attribute type 3 has an invalid length. [ 107.549017][ T5919] capability: warning: `syz.1.270' uses 32-bit capabilities (legacy support in use) [ 107.558892][ T5921] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.275'. [ 107.572920][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 107.586689][ T5137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.609527][ T5137] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.623807][ T5923] netlink: 320 bytes leftover after parsing attributes in process `syz.2.276'. [ 107.644949][ T5137] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.681723][ T5137] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.693668][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.718136][ T5137] usb 1-1: SerialNumber: syz [ 107.761288][ T5137] cdc_ether 1-1:1.0: skipping garbage [ 107.776293][ T5137] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 107.933805][ T5935] MTD: Attempt to mount non-MTD device "./file0" [ 107.949305][ T5935] bio_check_eod: 2 callbacks suppressed [ 107.949322][ T5935] syz.4.280: attempt to access beyond end of device [ 107.949322][ T5935] loop8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 108.064821][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.069082][ T5135] usb 1-1: USB disconnect, device number 9 [ 108.374116][ T5137] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.644187][ T5137] usb 2-1: Using ep0 maxpacket: 16 [ 108.696563][ T5949] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 108.735175][ T5949] team0: Failed to send options change via netlink (err -105) [ 108.742781][ T5949] team0: Port device netdevsim0 added [ 108.842363][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 109.104980][ T25] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.203609][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 109.337904][ T5137] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 109.347899][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.361606][ T5137] usb 2-1: config 0 descriptor?? [ 110.501258][ T5959] 9pnet_fd: Insufficient options for proto=fd [ 111.194144][ T5137] usbhid 2-1:0.0: can't add hid device: -71 [ 111.225983][ T5137] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.278384][ T5964] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 111.321664][ T5137] usb 2-1: USB disconnect, device number 3 [ 111.326037][ T5964] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.291'. [ 111.422950][ T5964] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 111.464922][ T5970] MTD: Attempt to mount non-MTD device "./file0" [ 111.477969][ T5970] syz.4.294: attempt to access beyond end of device [ 111.477969][ T5970] loop8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 112.092785][ T5995] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 112.106604][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 113.730409][ T6013] syz.0.302 (6013): drop_caches: 2 [ 113.758579][ T6013] syz.0.302 (6013): drop_caches: 2 [ 114.657321][ T6043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 114.663885][ T6043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.672893][ T6043] vhci_hcd vhci_hcd.0: Device attached [ 114.725842][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 114.889907][ T6045] vhci_hcd: connection closed [ 114.904393][ T12] vhci_hcd: stop threads [ 114.924906][ T12] vhci_hcd: release socket [ 114.929521][ T12] vhci_hcd: disconnect device [ 115.470626][ T6054] syz.3.318 (6054): drop_caches: 2 [ 115.498914][ T6054] syz.3.318 (6054): drop_caches: 2 [ 116.151180][ T5999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.171984][ T6030] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 116.196357][ T6030] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.313'. [ 116.224239][ T6030] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 116.870371][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 116.903048][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 116.915058][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 116.922586][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 116.931471][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 116.965979][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.000588][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.019326][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.028664][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.047778][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.055597][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.063005][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.073194][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.084896][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.092416][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.101408][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.111383][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.147553][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.180964][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.189423][ T6109] overlayfs: conflicting lowerdir path [ 117.203864][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.238828][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.274528][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.292308][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.313727][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.332090][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.349209][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.359383][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.368694][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.372122][ T6113] kvm: emulating exchange as write [ 117.379652][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.391008][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.401473][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.425040][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.434158][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.454814][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.469744][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 117.501152][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.527172][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.545238][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.652321][ T6132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 117.658885][ T6132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.674144][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.690246][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.705533][ T6132] vhci_hcd vhci_hcd.0: Device attached [ 117.715933][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.735539][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.743954][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.752836][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.760719][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.768474][ T5138] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.784959][ T5138] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 117.856409][ T6133] vhci_hcd: connection closed [ 117.857727][ T2480] vhci_hcd: stop threads [ 117.884715][ T2480] vhci_hcd: release socket [ 117.904555][ T2480] vhci_hcd: disconnect device [ 118.368057][ T6104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.381992][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.465553][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 118.867849][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.171385][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.234129][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.263904][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.288167][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.330154][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.348282][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.357177][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.364898][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.376957][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.381050][ T6165] overlayfs: conflicting lowerdir path [ 119.399318][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.420164][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.456058][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.482007][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.511959][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.547191][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.567161][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.589150][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.606838][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.634115][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.656173][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.673719][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.687669][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.705079][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.718631][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.739591][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.764540][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.800841][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.842880][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.852428][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.868161][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.884365][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.912977][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.944062][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.951494][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.960966][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.980537][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.988325][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.996260][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.003664][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.017449][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.069282][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.111931][ T5137] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.151883][ T5137] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.474403][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.801280][ T8] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 120.842401][ T8] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 120.894863][ T8] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 120.950982][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.067503][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 121.226653][ T8] usb 3-1: language id specifier not provided by device, defaulting to English [ 121.445307][ T8] usb 3-1: USB disconnect, device number 6 [ 122.103049][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 122.277197][ T6259] Bluetooth: MGMT ver 1.23 [ 122.281793][ T6259] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 122.781596][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 122.900251][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 123.125347][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 123.144076][ T5138] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.149130][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.346659][ T5138] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 123.364342][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 123.375843][ T5138] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 123.394617][ T8] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 123.402556][ T5138] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.413429][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.427764][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.442570][ T8] usb 4-1: Product: syz [ 123.450243][ T8] usb 4-1: Manufacturer: syz [ 123.463113][ T8] usb 4-1: SerialNumber: syz [ 123.463813][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.425'. [ 123.485542][ T8] usb 4-1: config 0 descriptor?? [ 123.516275][ T8] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 123.679807][ T5138] usb 1-1: language id specifier not provided by device, defaulting to English [ 123.687647][ T6331] netlink: 'syz.4.431': attribute type 6 has an invalid length. [ 123.707879][ T6331] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.431'. [ 123.775879][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 123.899743][ T5138] usb 1-1: USB disconnect, device number 10 [ 123.933892][ T5137] usb 4-1: USB disconnect, device number 3 [ 124.001345][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'. [ 124.713421][ T5135] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.914095][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 124.930790][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.943083][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.960509][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.975025][ T5135] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 124.986161][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.009958][ T5137] kernel read not supported for file /dsp (pid: 5137 comm: kworker/1:4) [ 125.012521][ T5135] usb 3-1: config 0 descriptor?? [ 125.482849][ T5135] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 125.520385][ T5135] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 125.552841][ T5135] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 125.564316][ T5135] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 125.572701][ T5135] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 125.622575][ T5135] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 125.754570][ T5135] usb 3-1: USB disconnect, device number 7 [ 125.808182][ T5137] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.004046][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 126.014296][ T6397] batadv_slave_0: mtu less than device minimum [ 126.028133][ T5137] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 126.068011][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.111946][ T5137] usb 2-1: Product: syz [ 126.149859][ T5137] usb 2-1: Manufacturer: syz [ 126.166698][ T5137] usb 2-1: SerialNumber: syz [ 126.195170][ T5137] usb 2-1: config 0 descriptor?? [ 126.232819][ T5137] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 126.773370][ T6403] syz.0.459 (6403): drop_caches: 2 [ 126.784215][ T6403] syz.0.459 (6403): drop_caches: 2 [ 127.297250][ T6398] usb 2-1: USB disconnect, device number 4 [ 128.038159][ T6411] binder: 6410:6411 ioctl c0306201 0 returned -14 [ 128.835982][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 128.836000][ T29] audit: type=1804 audit(1721231013.345:39): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.474" name="/newroot/100/file0" dev="fuse" ino=1 res=1 errno=0 [ 129.882538][ T6447] fuse: Bad value for 'fd' [ 131.229178][ T6461] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 131.688774][ T6473] bond0: option arp_interval: invalid value (18446744073709551615) [ 131.726605][ T6473] bond0: option arp_interval: allowed values 0 - 2147483647 [ 133.070571][ T6487] fuse: Bad value for 'fd' [ 133.169767][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.178250][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.892651][ T6503] syz.4.497 uses obsolete (PF_INET,SOCK_PACKET) [ 133.946842][ T6505] bond0: option arp_interval: invalid value (18446744073709551615) [ 133.970907][ T6505] bond0: option arp_interval: allowed values 0 - 2147483647 [ 133.979679][ T6506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.377714][ T6512] xt_TCPMSS: Only works on TCP SYN packets [ 135.122755][ T6529] bond0: option arp_interval: invalid value (18446744073709551615) [ 135.148654][ T6529] bond0: option arp_interval: allowed values 0 - 2147483647 [ 135.638929][ T6544] syzkaller0: entered promiscuous mode [ 135.665455][ T6544] syzkaller0: entered allmulticast mode [ 135.997168][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.007251][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.021504][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.043635][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.060081][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.067634][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.509026][ T2480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.555903][ T6563] batadv_slave_0: mtu less than device minimum [ 136.708181][ T2480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.939704][ T2480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.212139][ T2480] netdevsim netdevsim3 ä (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.277580][ T6584] vlan2: entered promiscuous mode [ 137.291463][ T6584] vlan2: entered allmulticast mode [ 137.433827][ T6591] fuse: Bad value for 'fd' [ 137.581934][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 137.709137][ T6597] kvm: kvm [6596]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x82001091270000 [ 137.883544][ T2480] bridge_slave_1: left allmulticast mode [ 137.925862][ T2480] bridge_slave_1: left promiscuous mode [ 137.933536][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.005631][ T2480] bridge_slave_0: left allmulticast mode [ 138.029148][ T2480] bridge_slave_0: left promiscuous mode [ 138.046589][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.125049][ T5090] Bluetooth: hci3: command tx timeout [ 138.385464][ T5091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.396160][ T5091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.472667][ T5091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.481655][ T5091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.504716][ T5091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.512182][ T5091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.868367][ T6631] syz.1.547[6631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.868533][ T6631] syz.1.547[6631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.204355][ T5091] Bluetooth: hci3: command tx timeout [ 140.470815][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.496734][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.517408][ T2480] bond0 (unregistering): Released all slaves [ 140.607150][ T5091] Bluetooth: hci5: command tx timeout [ 140.647103][ T6615] batadv_slave_0: mtu less than device minimum [ 141.160636][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.182082][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.190891][ T6552] bridge_slave_0: entered allmulticast mode [ 141.201762][ T6552] bridge_slave_0: entered promiscuous mode [ 141.262840][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.278112][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.295609][ T6552] bridge_slave_1: entered allmulticast mode [ 141.310712][ T6552] bridge_slave_1: entered promiscuous mode [ 141.488540][ T6662] fuse: Bad value for 'fd' [ 142.314162][ T5091] Bluetooth: hci3: command tx timeout [ 142.542990][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.567051][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.612766][ T2480] hsr_slave_0: left promiscuous mode [ 142.625708][ T2480] hsr_slave_1: left promiscuous mode [ 142.634706][ T6671] Zero length message leads to an empty skb [ 142.675470][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.682955][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.690907][ T5091] Bluetooth: hci5: command tx timeout [ 142.754676][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.789324][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.893248][ T2480] veth1_macvtap: left promiscuous mode [ 142.909582][ T2480] veth0_macvtap: left promiscuous mode [ 142.922501][ T2480] veth1_vlan: left promiscuous mode [ 142.935415][ T2480] veth0_vlan: left promiscuous mode [ 143.600311][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 143.646635][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 143.936743][ T5135] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.071287][ T6552] team0: Port device team_slave_0 added [ 144.128071][ T6552] team0: Port device team_slave_1 added [ 144.146084][ T5135] usb 1-1: device descriptor read/all, error -61 [ 144.299059][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.306807][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.333808][ T5135] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.341480][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.364324][ T5091] Bluetooth: hci3: command tx timeout [ 144.384810][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.402000][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.455625][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.496894][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.514296][ T5135] usb 1-1: device descriptor read/64, error -71 [ 144.581577][ T6620] chnl_net:caif_netlink_parms(): no params data found [ 144.654168][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 144.654671][ T5135] usb usb1-port1: attempt power cycle [ 144.674352][ T46] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.691118][ T46] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.720782][ T6552] hsr_slave_0: entered promiscuous mode [ 144.730536][ T46] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 144.752365][ T6552] hsr_slave_1: entered promiscuous mode [ 144.764178][ T5091] Bluetooth: hci5: command tx timeout [ 144.769233][ T46] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.780855][ T6552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.799626][ T6552] Cannot create hsr debugfs directory [ 144.844725][ T46] usb 5-1: config 128 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 144.878519][ T46] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 144.897951][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.107526][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.115907][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.124451][ T5135] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.134400][ T6620] bridge_slave_0: entered allmulticast mode [ 145.149764][ T6620] bridge_slave_0: entered promiscuous mode [ 145.161792][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.171044][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.180836][ T6620] bridge_slave_1: entered allmulticast mode [ 145.187638][ T5135] usb 1-1: device descriptor read/8, error -71 [ 145.202434][ T6620] bridge_slave_1: entered promiscuous mode [ 145.304393][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.326900][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.337430][ T46] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 145.347262][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.364347][ T46] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 145.375536][ T46] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 145.391785][ T46] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 145.406853][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.412041][ T46] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 145.438469][ T46] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 145.484404][ T5135] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 145.528856][ T6620] team0: Port device team_slave_0 added [ 145.545304][ T5135] usb 1-1: device descriptor read/8, error -71 [ 145.559919][ T46] usb 5-1: USB disconnect, device number 11 [ 145.589344][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.664684][ T5135] usb usb1-port1: unable to enumerate USB device [ 145.686762][ T6620] team0: Port device team_slave_1 added [ 145.811162][ T35] team0: Port device netdevsim0 removed [ 145.830999][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.948537][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.982185][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.051939][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.085602][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.102758][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.159522][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.510877][ T29] audit: type=1326 audit(1721231031.025:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.1.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1f75a99 code=0x0 [ 146.847471][ T5091] Bluetooth: hci5: command tx timeout [ 147.110057][ T6748] autofs: Unknown parameter '0x0000000000000000' [ 147.146634][ T6748] netlink: 'syz.4.570': attribute type 4 has an invalid length. [ 147.191822][ T6748] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.570'. [ 147.282680][ T6620] hsr_slave_0: entered promiscuous mode [ 147.302490][ T6620] hsr_slave_1: entered promiscuous mode [ 147.323707][ T6620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.337855][ T6620] Cannot create hsr debugfs directory [ 147.575594][ T35] bridge_slave_1: left allmulticast mode [ 147.582093][ T35] bridge_slave_1: left promiscuous mode [ 147.588485][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.609334][ T35] bridge_slave_0: left allmulticast mode [ 147.615164][ T35] bridge_slave_0: left promiscuous mode [ 147.631117][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.046634][ T5137] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.074517][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.090269][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.103726][ T35] bond0 (unregistering): Released all slaves [ 148.234355][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 148.262260][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.284196][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.312543][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 148.336355][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.348347][ T5137] usb 1-1: config 128 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.354389][ T1172] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.367670][ T5137] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 148.381911][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.447629][ T6552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.530713][ T6552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.555241][ T1172] usb 5-1: device descriptor read/64, error -71 [ 148.659547][ T6552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.729206][ T6552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.847018][ T5137] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 148.857725][ T1172] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 148.867586][ T5137] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 148.876158][ T5137] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 148.893285][ T5137] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 148.910778][ T5137] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 148.942402][ T5137] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 149.024130][ T1172] usb 5-1: device descriptor read/64, error -71 [ 149.031279][ T35] hsr_slave_0: left promiscuous mode [ 149.041473][ T35] hsr_slave_1: left promiscuous mode [ 149.057896][ T5137] usb 1-1: USB disconnect, device number 15 [ 149.070550][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.080643][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.099862][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.116077][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.161381][ T35] veth1_macvtap: left promiscuous mode [ 149.169507][ T1172] usb usb5-port1: attempt power cycle [ 149.181931][ T35] veth0_macvtap: left promiscuous mode [ 149.188113][ T35] veth1_vlan: left promiscuous mode [ 149.193543][ T35] veth0_vlan: left promiscuous mode [ 149.604459][ T1172] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.632454][ T35] team0 (unregistering): Port device team_slave_1 removed [ 149.649953][ T1172] usb 5-1: device descriptor read/8, error -71 [ 149.679949][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.947377][ T1172] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.995968][ T1172] usb 5-1: device descriptor read/8, error -71 [ 150.115077][ T1172] usb usb5-port1: unable to enumerate USB device [ 150.192955][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.261495][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.281649][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.288835][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.309084][ T1172] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.363127][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.370358][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.504188][ T1172] usb 5-1: device descriptor read/64, error -71 [ 150.549733][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.594502][ T6620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.635137][ T6620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.681194][ T6620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.717687][ T6620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.774608][ T1172] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 151.022369][ T6829] vlan2: entered promiscuous mode [ 151.104445][ T6829] vlan2: entered allmulticast mode [ 151.193328][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.335670][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.401100][ T6620] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.427801][ T6552] veth0_vlan: entered promiscuous mode [ 151.467345][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.474593][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.531799][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.539039][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.582295][ T6552] veth1_vlan: entered promiscuous mode [ 151.837925][ T6552] veth0_macvtap: entered promiscuous mode [ 151.883749][ T6552] veth1_macvtap: entered promiscuous mode [ 151.929166][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.954776][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.004171][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.032716][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.049383][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.060000][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.090857][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.112428][ T6857] fuse: Bad value for 'fd' [ 152.149125][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.154275][ T1172] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.179554][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.215666][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.242938][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.268446][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.306398][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.334604][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.387969][ T6620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.424085][ T1172] usb 5-1: Using ep0 maxpacket: 16 [ 152.438981][ T6552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.439025][ T6552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.439041][ T6552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.439057][ T6552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.478479][ T1172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.532652][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.532704][ T1172] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.532728][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.560241][ T1172] usb 5-1: config 0 descriptor?? [ 152.656244][ T6620] veth0_vlan: entered promiscuous mode [ 152.677976][ T6620] veth1_vlan: entered promiscuous mode [ 152.787628][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.787703][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.813927][ T6620] veth0_macvtap: entered promiscuous mode [ 152.826251][ T6620] veth1_macvtap: entered promiscuous mode [ 152.877236][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.877263][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.939518][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.939543][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.939554][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.939568][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.939578][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.939591][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.939603][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.939616][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.940993][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.985997][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.986023][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.986035][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.986049][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.986059][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.986072][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.986085][ T6620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.986098][ T6620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.987516][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.011474][ T6620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.011512][ T6620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.011540][ T6620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.011566][ T6620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.017142][ T6841] raw-gadget.0 gadget.4: fail, usb_ep_set_wedge returned -11 [ 153.068322][ T1172] usbhid 5-1:0.0: can't add hid device: -71 [ 153.068429][ T1172] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.090353][ T1172] usb 5-1: USB disconnect, device number 18 [ 153.233547][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.233572][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.353387][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.353412][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.574344][ T6895] binder: 6893:6895 ioctl 4018620d 0 returned -22 [ 154.149269][ T29] audit: type=1326 audit(1721231038.285:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149316][ T29] audit: type=1326 audit(1721231038.285:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149352][ T29] audit: type=1326 audit(1721231038.285:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149386][ T29] audit: type=1326 audit(1721231038.285:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149422][ T29] audit: type=1326 audit(1721231038.285:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149458][ T29] audit: type=1326 audit(1721231038.285:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149495][ T29] audit: type=1326 audit(1721231038.285:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.149552][ T29] audit: type=1326 audit(1721231038.285:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 154.859906][ T6915] fuse: Bad value for 'fd' [ 155.533770][ T6932] 9pnet_fd: Insufficient options for proto=fd [ 155.643726][ T6933] Bluetooth: MGMT ver 1.23 [ 155.646621][ T6937] binder: 6935:6937 ioctl 4018620d 0 returned -22 [ 155.684425][ T5091] Bluetooth: hci4: unexpected cc 0x1001 length: 65 > 9 [ 155.770871][ T29] audit: type=1800 audit(1721231040.295:49): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.613" name="/newroot/138/file0" dev="tmpfs" ino=760 res=0 errno=0 [ 156.094526][ T29] audit: type=1326 audit(1721231040.615:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 156.722988][ T6968] netlink: 'syz.3.627': attribute type 11 has an invalid length. [ 158.075213][ T6979] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 158.324457][ T6986] overlayfs: failed to resolve './file0': -2 [ 158.879651][ T6990] binder: 6989:6990 ioctl 4018620d 0 returned -22 [ 159.395741][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 159.395792][ T29] audit: type=1326 audit(1721231043.915:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6989 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 159.487954][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 65 > 9 [ 159.495452][ T5090] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 159.624378][ T29] audit: type=1326 audit(1721231044.155:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6989 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918e575a99 code=0x7ffc0000 [ 159.716187][ T29] audit: type=1800 audit(1721231044.245:56): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.634" name="/newroot/136/file0" dev="tmpfs" ino=730 res=0 errno=0 [ 160.446077][ T7030] netlink: 168 bytes leftover after parsing attributes in process `syz.3.648'. [ 160.458550][ T7020] usb usb8: usbfs: process 7020 (syz.1.645) did not claim interface 0 before use [ 160.554286][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 160.604557][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 160.632265][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 160.717796][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 65 > 9 [ 160.947950][ T5137] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.007897][ T7053] netlink: 'syz.4.655': attribute type 11 has an invalid length. [ 161.040259][ T29] audit: type=1800 audit(1721231045.565:57): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.653" name="/newroot/145/file0" dev="tmpfs" ino=796 res=0 errno=0 [ 161.174272][ T5137] usb 3-1: Using ep0 maxpacket: 16 [ 161.190618][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.212972][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.241277][ T5137] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.277248][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.321196][ T5137] usb 3-1: config 0 descriptor?? [ 161.637492][ T7059] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.658'. [ 161.748202][ T7032] raw-gadget.0 gadget.2: fail, usb_ep_set_wedge returned -11 [ 161.775138][ T5137] usbhid 3-1:0.0: can't add hid device: -71 [ 161.798870][ T5137] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 161.837682][ T5137] usb 3-1: USB disconnect, device number 8 [ 161.986014][ T7068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.662'. [ 162.649271][ T7081] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 163.124361][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 65 > 9 [ 163.131352][ T5091] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 163.405322][ T7097] netlink: 168 bytes leftover after parsing attributes in process `syz.2.674'. [ 163.576283][ T29] audit: type=1800 audit(1721231048.105:58): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.668" name="/newroot/147/file0" dev="tmpfs" ino=787 res=0 errno=0 [ 163.699173][ T7108] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 164.113941][ T7126] cgroup: noprefix used incorrectly [ 164.331081][ T7132] netlink: 168 bytes leftover after parsing attributes in process `syz.0.687'. [ 164.411420][ T5090] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 164.512813][ T7130] usb usb8: usbfs: process 7130 (syz.1.684) did not claim interface 0 before use [ 165.057767][ T7152] batadv_slave_0: mtu less than device minimum [ 165.324428][ T5137] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 165.574560][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 165.615073][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.634166][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.652907][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 165.658240][ T7166] vxcan1: tx address claim with dest, not broadcast [ 165.672403][ T5137] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.687174][ T5137] usb 1-1: config 128 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 165.702507][ T5137] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 165.744105][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.854721][ T7175] XFS (nullb0): Invalid superblock magic number [ 166.044244][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.134105][ T5139] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.187790][ T5137] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 166.196342][ T5137] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 166.203251][ T5137] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 166.211399][ T5137] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 166.222540][ T5137] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 166.231950][ T5137] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 166.249280][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.260183][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.272850][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.285961][ T5090] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 166.294778][ T5090] Bluetooth: hci4: Injecting HCI hardware error event [ 166.294875][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.303127][ T5091] Bluetooth: hci4: hardware error 0x00 [ 166.319068][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.332280][ T46] usb 4-1: Product: syz [ 166.340574][ T46] usb 4-1: Manufacturer: syz [ 166.346339][ T46] usb 4-1: SerialNumber: syz [ 166.361569][ T46] hub 4-1:1.0: bad descriptor, ignoring hub [ 166.371071][ T46] hub 4-1:1.0: probe with driver hub failed with error -5 [ 166.371102][ T5139] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 166.395518][ T5137] usb 1-1: USB disconnect, device number 16 [ 166.418099][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.428266][ T5139] usb 3-1: Product: syz [ 166.432587][ T5139] usb 3-1: Manufacturer: syz [ 166.437382][ T5139] usb 3-1: SerialNumber: syz [ 166.471977][ T5139] r8152-cfgselector 3-1: Unknown version 0x0000 [ 166.478452][ T5139] r8152-cfgselector 3-1: config 0 descriptor?? [ 166.580061][ T46] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.710019][ T5139] r8152-cfgselector 3-1: Unknown version 0x0000 [ 166.729082][ T5139] r8152-cfgselector 3-1: bad CDC descriptors [ 166.751231][ T5139] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 166.929636][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 166.968062][ T1172] usb 4-1: USB disconnect, device number 4 [ 166.989128][ T1172] usblp0: removed [ 167.332664][ T7194] netlink: 276 bytes leftover after parsing attributes in process `syz.1.707'. [ 167.762202][ T7201] xt_socket: unknown flags 0x50 [ 167.770286][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.401674][ T5091] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 168.940400][ T5091] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 169.153458][ T7226] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.720'. [ 169.272559][ T7229] netlink: 276 bytes leftover after parsing attributes in process `syz.1.721'. [ 169.607993][ T7241] 9pnet_fd: Insufficient options for proto=fd [ 169.658140][ T29] audit: type=1800 audit(1721231054.185:59): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.725" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 170.054514][ T7266] netlink: 'syz.2.734': attribute type 6 has an invalid length. [ 170.082962][ T7269] ªªªªªª: renamed from vlan0 (while UP) [ 170.094286][ T1172] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.140456][ T7272] netlink: 276 bytes leftover after parsing attributes in process `syz.1.737'. [ 170.304177][ T1172] usb 4-1: Using ep0 maxpacket: 32 [ 170.306327][ T1172] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 170.306357][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.310461][ T1172] usb 4-1: config 0 descriptor?? [ 170.325861][ T1172] gspca_main: sunplus-2.14.0 probing 041e:400b [ 170.392481][ T7284] ======================================================= [ 170.392481][ T7284] WARNING: The mand mount option has been deprecated and [ 170.392481][ T7284] and is ignored by this kernel. Remove the mand [ 170.392481][ T7284] option from the mount to silence this warning. [ 170.392481][ T7284] ======================================================= [ 170.599220][ T5082] [ 170.601582][ T5082] ====================================================== [ 170.608599][ T5082] WARNING: possible circular locking dependency detected [ 170.615612][ T5082] 6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted [ 170.622385][ T5082] ------------------------------------------------------ [ 170.629394][ T5082] syz-executor/5082 is trying to acquire lock: [ 170.635541][ T5082] ffff88807f73c078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.645866][ T5082] [ 170.645866][ T5082] but task is already holding lock: [ 170.653231][ T5082] ffff88807f73c690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x4e/0x220 [ 170.663517][ T5082] [ 170.663517][ T5082] which lock already depends on the new lock. [ 170.663517][ T5082] [ 170.672341][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 170.673902][ T5082] [ 170.673902][ T5082] the existing dependency chain (in reverse order) is: [ 170.673912][ T5082] [ 170.673912][ T5082] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 170.700184][ T5082] lock_acquire+0x1ed/0x550 [ 170.700787][ T7253] batman_adv: batadv1: Adding interface: netdevsim0 [ 170.705199][ T5082] __mutex_lock+0x136/0xd70 [ 170.705227][ T5082] hci_cmd_sync_queue_once+0x43/0x240 [ 170.705246][ T5082] le_conn_complete_evt+0xae1/0x12e0 [ 170.705261][ T5082] hci_le_conn_complete_evt+0x18c/0x420 [ 170.705281][ T5082] hci_event_packet+0xa55/0x1540 [ 170.705299][ T5082] hci_rx_work+0x3e8/0xca0 [ 170.705318][ T5082] process_scheduled_works+0xa2c/0x1830 [ 170.705335][ T5082] worker_thread+0x86d/0xd40 [ 170.705351][ T5082] kthread+0x2f0/0x390 [ 170.705368][ T5082] ret_from_fork+0x4b/0x80 [ 170.705388][ T5082] ret_from_fork_asm+0x1a/0x30 [ 170.705409][ T5082] [ 170.705409][ T5082] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 170.705438][ T5082] validate_chain+0x18e0/0x5900 [ 170.705459][ T5082] __lock_acquire+0x1346/0x1fd0 [ 170.705475][ T5082] lock_acquire+0x1ed/0x550 [ 170.705492][ T5082] __mutex_lock+0x136/0xd70 [ 170.705511][ T5082] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.705533][ T5082] hci_cmd_sync_clear+0x107/0x220 [ 170.705546][ T5082] hci_unregister_dev+0x181/0x510 [ 170.715151][ T7253] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.717193][ T5082] vhci_release+0x83/0xd0 [ 170.723152][ T7253] batman_adv: batadv1: Interface activated: netdevsim0 [ 170.728869][ T5082] __fput+0x24a/0x8a0 [ 170.728886][ T5082] task_work_run+0x24f/0x310 [ 170.728906][ T5082] do_exit+0xa2f/0x27f0 [ 170.728923][ T5082] do_group_exit+0x207/0x2c0 [ 170.728940][ T5082] __x64_sys_exit_group+0x3f/0x40 [ 170.728959][ T5082] x64_sys_call+0x2634/0x2640 [ 170.728978][ T5082] do_syscall_64+0xf3/0x230 [ 170.728995][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.729012][ T5082] [ 170.729012][ T5082] other info that might help us debug this: [ 170.729012][ T5082] [ 170.729018][ T5082] Possible unsafe locking scenario: [ 170.729018][ T5082] [ 170.729024][ T5082] CPU0 CPU1 [ 170.729029][ T5082] ---- ---- [ 170.729035][ T5082] lock(&hdev->cmd_sync_work_lock); [ 170.729049][ T5082] lock(&hdev->lock); [ 170.729068][ T5082] lock(&hdev->cmd_sync_work_lock); [ 170.729082][ T5082] lock(&hdev->lock); [ 170.729093][ T5082] [ 170.729093][ T5082] *** DEADLOCK *** [ 170.729093][ T5082] [ 170.729098][ T5082] 1 lock held by syz-executor/5082: [ 170.729109][ T5082] #0: ffff88807f73c690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x4e/0x220 [ 170.729156][ T5082] [ 170.729156][ T5082] stack backtrace: [ 170.729172][ T5082] CPU: 1 PID: 5082 Comm: syz-executor Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 170.729191][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.729205][ T5082] Call Trace: [ 170.729213][ T5082] [ 170.729221][ T5082] dump_stack_lvl+0x241/0x360 [ 170.729242][ T5082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.729264][ T5082] ? print_circular_bug+0x130/0x1a0 [ 170.729288][ T5082] check_noncircular+0x36a/0x4a0 [ 170.729313][ T5082] ? __pfx_check_noncircular+0x10/0x10 [ 170.729335][ T5082] ? lockdep_lock+0x123/0x2b0 [ 170.729360][ T5082] validate_chain+0x18e0/0x5900 [ 170.729391][ T5082] ? validate_chain+0x11e/0x5900 [ 170.729413][ T5082] ? __pfx_validate_chain+0x10/0x10 [ 170.729436][ T5082] ? __schedule+0x17b6/0x4a10 [ 170.729457][ T5082] ? __lock_acquire+0x1346/0x1fd0 [ 170.729479][ T5082] ? __pfx_validate_chain+0x10/0x10 [ 170.729504][ T5082] ? __pfx___schedule+0x10/0x10 [ 170.729527][ T5082] ? mark_lock+0x9a/0x350 [ 170.729548][ T5082] __lock_acquire+0x1346/0x1fd0 [ 170.729576][ T5082] lock_acquire+0x1ed/0x550 [ 170.729594][ T5082] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.729623][ T5082] ? __pfx_lock_acquire+0x10/0x10 [ 170.729643][ T5082] ? __pfx___might_resched+0x10/0x10 [ 170.729665][ T5082] ? bpf_trace_run2+0x1fc/0x540 [ 170.729684][ T5082] __mutex_lock+0x136/0xd70 [ 170.729705][ T5082] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.729730][ T5082] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.752208][ T1172] gspca_sunplus: reg_w_riv err -71 [ 170.757262][ T5082] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.757293][ T5082] ? __pfx___mutex_lock+0x10/0x10 [ 170.757313][ T5082] ? rcu_is_watching+0x15/0xb0 [ 170.757334][ T5082] ? __mutex_lock+0x2ef/0xd70 [ 170.757355][ T5082] ? lockdep_hardirqs_on+0x99/0x150 [ 170.757376][ T5082] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 170.757400][ T5082] ? __pfx___mutex_lock+0x10/0x10 [ 170.757422][ T5082] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 170.757444][ T5082] ? __pfx_enable_work+0x10/0x10 [ 170.762923][ T1172] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 170.766943][ T5082] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 170.766970][ T5082] hci_cmd_sync_clear+0x107/0x220 [ 170.773577][ T1172] usb 4-1: USB disconnect, device number 5 [ 170.779479][ T5082] hci_unregister_dev+0x181/0x510 [ 170.779511][ T5082] vhci_release+0x83/0xd0 [ 170.842873][ T29] audit: type=1800 audit(1721231055.335:60): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.742" name="/newroot/168/file0" dev="tmpfs" ino=904 res=0 errno=0 [ 170.843405][ T5082] ? __pfx_vhci_release+0x10/0x10 [ 171.235785][ T5082] __fput+0x24a/0x8a0 [ 171.239805][ T5082] task_work_run+0x24f/0x310 [ 171.244389][ T5082] ? __pfx_task_work_run+0x10/0x10 [ 171.249489][ T5082] ? do_exit+0xa2a/0x27f0 [ 171.253822][ T5082] ? kmem_cache_free+0x145/0x350 [ 171.258762][ T5082] do_exit+0xa2f/0x27f0 [ 171.262905][ T5082] ? __pfx_do_exit+0x10/0x10 [ 171.267482][ T5082] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.273448][ T5082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.279759][ T5082] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.284946][ T5082] ? lockdep_hardirqs_on+0x99/0x150 [ 171.290125][ T5082] do_group_exit+0x207/0x2c0 [ 171.294719][ T5082] __x64_sys_exit_group+0x3f/0x40 [ 171.299763][ T5082] x64_sys_call+0x2634/0x2640 [ 171.304459][ T5082] do_syscall_64+0xf3/0x230 [ 171.308975][ T5082] ? clear_bhb_loop+0x35/0x90 [ 171.313658][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.319553][ T5082] RIP: 0033:0x7fbc44d75a99 [ 171.323994][ T5082] Code: Unable to access opcode bytes at 0x7fbc44d75a6f. [ 171.331048][ T5082] RSP: 002b:00007fff46984498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 171.339453][ T5082] RAX: ffffffffffffffda RBX: 00007fbc44de34be RCX: 00007fbc44d75a99 [ 171.347422][ T5082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 171.355381][ T5082] RBP: 0000000000000016 R08: 00007fff46982236 R09: 00007fff46985750 [ 171.363361][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff46985750 [ 171.371319][ T5082] R13: 00007fbc44de344c R14: 000055558413b4a8 R15: 0000000000029969 [ 171.379286][ T5082] [ 171.955038][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.020567][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.092615][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.169702][ T35] team0: Port device netdevsim0 removed [ 172.176845][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.243459][ T35] bridge_slave_1: left allmulticast mode [ 172.249285][ T35] bridge_slave_1: left promiscuous mode [ 172.257638][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.268777][ T35] bridge_slave_0: left allmulticast mode [ 172.276595][ T35] bridge_slave_0: left promiscuous mode [ 172.282299][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.543646][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.556810][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.568787][ T35] bond0 (unregistering): Released all slaves [ 172.849292][ T35] hsr_slave_0: left promiscuous mode [ 172.856317][ T35] hsr_slave_1: left promiscuous mode [ 172.862159][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.870667][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.881361][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.895160][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.905144][ T35] veth1_macvtap: left promiscuous mode [ 172.910663][ T35] veth0_macvtap: left promiscuous mode [ 172.918020][ T35] veth1_vlan: left promiscuous mode [ 172.923307][ T35] veth0_vlan: left promiscuous mode [ 173.173080][ T35] team0 (unregistering): Port device team_slave_1 removed [ 173.198825][ T35] team0 (unregistering): Port device team_slave_0 removed