last executing test programs: 8.839574362s ago: executing program 0 (id=2609): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0xe, 0x0, &(0x7f0000001180)) 8.587837366s ago: executing program 0 (id=2611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_setup(0x7, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x38}}, 0x0) 8.22568251s ago: executing program 3 (id=2612): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r1, 0x80080400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r5}, 0x8) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r7 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x90e83) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x12002) socket(0x1, 0x4, 0x0) getsockopt$inet_int(r7, 0x0, 0x22, &(0x7f00000001c0), &(0x7f0000000280)=0x4) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9000a0006000500070f02"], 0xf) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 7.528147092s ago: executing program 0 (id=2614): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 7.144109664s ago: executing program 3 (id=2616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1a9000) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x6a2) ioctl$SG_GET_LOW_DMA(r1, 0x227a, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x1000, 0xffffffff, 0xdd95, 0x1000000000000002, 0x8, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7fff}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x412}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301010000000000000000000010000800010001"], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4cf6}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r9, 0x10e, 0x4, 0x0, &(0x7f0000000040)) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303005aced4c314a392ec0000ffff0800010001"], 0x1c}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.840840688s ago: executing program 0 (id=2618): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x4e24, 0x0, @mcast1}}, {{0xa, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="05", 0x1, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4060000", @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESOCT=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9401ff0f", @ANYRES16=r6, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20004004}, 0x40044) syz_usbip_server_init(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) socket$inet(0x2, 0x0, 0x0) 6.811702775s ago: executing program 3 (id=2619): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) getpid() syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) eventfd(0x0) connect$inet6(r1, &(0x7f00000002c0), 0x1c) (async) connect$inet6(r1, &(0x7f00000002c0), 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000003fa201000000000000000a0000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000003fa201000000000000000a0000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_delroute={0x34, 0x19, 0x100, 0x70bd27, 0x2ddfdbfd, {0x2, 0x0, 0x80, 0x5, 0xff, 0x4, 0xfd, 0x6, 0x900}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x34}}, 0x0) 6.532876422s ago: executing program 3 (id=2620): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddcb) close(r2) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000), 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r8, 0x0) accept(r8, 0x0, &(0x7f0000000040)) 6.282919547s ago: executing program 3 (id=2621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x0, 0x100000, 0x2000, &(0x7f00004f0000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0004800800000000000000000000000c000100be000000ee95000008000500", @ANYRES32], 0x60}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="002d361340ce048a04ebb61ea9a21061073400035a2f0102030109021200010000"], 0x0) 4.384967594s ago: executing program 0 (id=2631): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x110) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x216482) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x800, 0x180) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) read(r0, 0x0, 0xfffffffffffffff5) open$dir(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0xbc, 0x6b, 0x20, 0x13b1, 0x42, 0x496b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x5, 0x5a}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="ebf14296a23780c2e52a3c143961eda5466761ec94cfd16dc9884cf9fa1a66c39eb7fd8efeda6701aef0ca81", 0x2c}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x1d, r5, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000180)=0x28) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x26, @mcast1, 0x400}, 0x65) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) 3.447342511s ago: executing program 1 (id=2634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x73}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x80) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) fcntl$setownex(r6, 0xf, &(0x7f00000003c0)={0x0, r7}) r8 = fcntl$getown(r0, 0x9) fcntl$lock(r2, 0x26, &(0x7f0000000400)={0x2, 0x2, 0x3, 0x4, r8}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r9 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r9, &(0x7f00000000c0), 0xfec8) recvmmsg(r9, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/163, 0xa3}], 0x1}}], 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0443050c"], 0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xe) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r12, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}]) 2.986423586s ago: executing program 3 (id=2636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r0, 0x0, r0, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xfffffe3e) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000097402fb164baa24a967eca30000082502000000000000000109025c00020100f92a0904000001020900000524060001053408f86e0d240f0100000000000d00"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000080)) syz_usb_disconnect(r3) 2.97647697s ago: executing program 4 (id=2637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_setup(0x7, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x38}}, 0x0) 2.642329829s ago: executing program 4 (id=2638): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0xffff, 0xfffffffd, 0xc01, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x4, 0x2}, 0x48) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/160, 0xa0}], 0x6, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$security_evm(r8, &(0x7f0000000200), 0x0, 0x0, 0x0) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000180)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r10, 0x0, 0x25a5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdd9) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.533243666s ago: executing program 1 (id=2639): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d29f}]}, 0x44}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r4, 0x0, 0x0, 0xfffffffffffffffd}) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "7941c7610ce9950ac7ee9b8bbfa26cf649476dd811a6c34bbb06e0fe03fff18ae9258e3a4404095ab37c226990e162f0144074d6fccd0cbe8e8f8b48feb54e98a94a5d5349ae93c9eb12008ee1e69906fc89bd26c11e00f73c8796479f74ea1e7abe4778403f32f7602d6a7569a5d6b5205b654b4e0c3e1a04fcd316537a7b4d16ae44107aee9dd378f53ddb6ea852424fd5a48ba5525a9cf3a023209424ed8c08aee6bbfcb9375b1044e5b068f00ae9d66694ed7d362ac158c573bc4d1563a7a685b1f61f143ec6a46cd4450ddc9d25c58b81ac450aac115eaf838d6e4bf6201dcd47335514edae341195db21a70e544a895e632b"}, 0xf9) 2.150100479s ago: executing program 1 (id=2640): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000004a0883, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x5460, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1.955754085s ago: executing program 1 (id=2641): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001900)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) readv(r5, &(0x7f0000000040), 0x1) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty}, &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) 1.585288387s ago: executing program 4 (id=2642): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2f4}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001d0025", 0x7) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x1, 0x40000002, 0x4, 0x3}}, 0x2e) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 1.584514908s ago: executing program 1 (id=2643): socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x8950, 0x2901, 0x0, 0x1b8}, &(0x7f0000000200), 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002180)=""/102398, 0x18ffe}], 0x1, 0xb86, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4}, 0x14) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x11, &(0x7f0000001f00)={@local, @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "ec"}}}}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) (async) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000003c0)="90", 0x1, 0x2}]) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.418439783s ago: executing program 1 (id=2644): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) mmap(&(0x7f0000779000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000120a01020000000000000000030000060800034000000006540042661100010000000000000000000800000a"], 0x44}}, 0x4000800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x1f) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1df20040000102030109027b0003010000000904000000010100000a2401cf0000000201020d240700000000ce6c0d5d7a140a240400008a6f71cc150524040000090401000001"], 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0xfff, 0x1d7f}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = dup(r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) 1.38018282s ago: executing program 4 (id=2645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3ff, 0x8a6}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6f}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x5, 0x4, 0x3}, {0x5, 0x1, 0xd, 0x8}], 0x10, 0x1}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000800)=0x8000, 0x4) (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250200000005002f000000000005002e000000000100000000000000070000030087dce005de6606c464", @ANYRES32=r5, @ANYBLOB="050037000100000005002900000000000a000900ffffffffffff000008000b00ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) (rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) (async) unshare(0x400) (async, rerun: 64) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000000), 0x4) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f103"]) 1.149163083s ago: executing program 0 (id=2646): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) socket$tipc(0x1e, 0x0, 0x0) eventfd2(0x8001, 0x80000) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_usbip_server_init(0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r2) sendmmsg$inet(r2, &(0x7f0000001040), 0x0, 0x240000d2) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x4, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_usb_connect$uac1(0x0, 0x90, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109027e0003010000000904000000010100000a24010000000201020a2407000000008e781f09000400000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101"], 0x0) 1.093007919s ago: executing program 4 (id=2648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x38}}, 0x0) 890.73656ms ago: executing program 2 (id=2649): r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 835.824633ms ago: executing program 4 (id=2650): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040)={r0, r1/1000+10000}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001018b7500"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x3b9, 0x4c2003) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0x3, 0x2000002}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x0}) r6 = dup(r5) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x4000000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x0, r6}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde\x04\x00\x00\x00\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd', 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) 676.885679ms ago: executing program 2 (id=2651): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x8) 639.752709ms ago: executing program 2 (id=2652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10002) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe2b}}, 0x8000) (async) pipe(0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40}, 0x1c) (async) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x36) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x101, 0x200, 0x8, 0x1, 0x10, "5485ac635e6f0bc04a8f92a9eb656d19c80438"}) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="6264652b1600010a00"/20], 0x78}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async) r6 = socket$inet(0x2, 0xa, 0x6) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x1f, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000001840), 0x0, 0x0, 0x0) (async) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRESOCT], 0xc63b9e35) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f00000002c0)={r0, r0, 0xff}) 373.420655ms ago: executing program 2 (id=2653): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x2) 176.511106ms ago: executing program 2 (id=2654): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5411, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, "4f55d5bcb999961ef3351fd59df8a8c3a77e9e"}) syz_io_uring_setup(0x24f8, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x3d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x8, 0x0, 0x0, 0x1, [@generic="25a57beb"]}]}, 0x20}}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/57) 0s ago: executing program 2 (id=2655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x709000) (async) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) fcntl$notify(r1, 0x402, 0x8000002d) preadv(r0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000108", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf256a00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000500d200040000000a0006000802110000000000"], 0x3c}}, 0x0) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @private}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x81, 0x9}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000180)="3c75c2015e8724b5486ba30748a2a4c586f2ae924b277f0443ec773eab27570e2898", 0x22) kernel console output (not intermixed with test programs): c addresses unique to avoid problems! [ 981.214062][T17443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.225128][T17443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.235606][T17443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.256706][T17443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.272244][T17443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.283341][T17443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.297966][T17443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.423717][T17443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.438303][T17443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.455294][T17443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.464645][T17443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.520494][T17456] veth0_vlan: entered promiscuous mode [ 981.535215][T17642] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2458'. [ 981.710156][T17500] veth0_vlan: entered promiscuous mode [ 981.927630][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.047331][T17456] veth1_vlan: entered promiscuous mode [ 982.230750][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.338586][T17500] veth1_vlan: entered promiscuous mode [ 982.425060][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.504495][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.514011][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.523378][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.543370][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 982.556647][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 982.565037][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 982.598344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.637886][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.724673][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.756911][T17456] veth0_macvtap: entered promiscuous mode [ 982.866579][T17456] veth1_macvtap: entered promiscuous mode [ 982.916285][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.933032][T17500] veth0_macvtap: entered promiscuous mode [ 982.952289][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.042812][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.065221][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.075715][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.087958][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.106561][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.133740][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.154669][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.196898][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.223438][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.251490][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.286712][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.323218][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.336377][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.347887][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.360246][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.375269][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.403998][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.430275][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.448217][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.466913][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.491810][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.511248][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.531217][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.557865][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.585320][T17456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.620254][T17500] veth1_macvtap: entered promiscuous mode [ 983.732097][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.767457][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.798201][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.853115][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.875488][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.899263][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.913950][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.951215][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.981414][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.036471][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.056623][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.082181][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.099334][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.110148][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.124750][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.136994][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.148256][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.159100][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.169771][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.180612][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.190692][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.201986][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.213694][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.230787][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.247159][T17456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.282197][ T5145] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 984.314982][T17456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.327149][T17456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.336914][T17456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.346209][T17456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.427212][ T63] bridge_slave_1: left allmulticast mode [ 984.443680][ T63] bridge_slave_1: left promiscuous mode [ 984.456401][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.474300][ T63] bridge_slave_0: left allmulticast mode [ 984.480078][ T63] bridge_slave_0: left promiscuous mode [ 984.487821][ T5145] usb 2-1: Using ep0 maxpacket: 32 [ 984.498514][ T5145] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 984.510110][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.524368][ T5145] usb 2-1: config 0 has no interface number 1 [ 984.534942][ T5145] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 984.559493][ T5145] usb 2-1: config 0 interface 206 has no altsetting 0 [ 984.576190][ T5145] usb 2-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 984.588972][ T5145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.609028][ T5145] usb 2-1: Product: syz [ 984.620116][ T5145] usb 2-1: Manufacturer: syz [ 984.637092][ T5145] usb 2-1: SerialNumber: syz [ 984.645498][ T5145] usb 2-1: config 0 descriptor?? [ 984.695764][ T5092] Bluetooth: hci0: command tx timeout [ 985.290371][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.315246][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.327460][ T63] bond0 (unregistering): Released all slaves [ 985.358587][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.377423][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.388468][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.411060][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.431058][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.451076][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.461420][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.472007][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.481993][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.493932][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.503902][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.514476][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.525124][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.535670][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.549180][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.560069][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.570157][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.581421][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.591348][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.603201][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.613138][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.623686][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.633625][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.644133][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.657865][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.668661][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.683501][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.835707][T17669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.932464][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.953306][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.971988][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.991113][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.002881][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.013649][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.023659][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.034667][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.044813][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.055935][ T5092] Bluetooth: hci1: command tx timeout [ 986.056101][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.076775][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.097660][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.118129][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.139098][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.149297][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.164964][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.175297][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.186091][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.208399][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.231125][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.242209][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.253177][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.268516][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.279558][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.290489][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.302216][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.315209][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.345638][T17500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.377482][T17500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.397072][T17500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.411144][T17500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.771783][ T5092] Bluetooth: hci0: command tx timeout [ 986.963568][ T5141] usb 2-1: USB disconnect, device number 117 [ 987.166867][ T63] hsr_slave_0: left promiscuous mode [ 987.200263][ T63] hsr_slave_1: left promiscuous mode [ 987.207365][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.218320][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.226978][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.235686][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.324309][ T63] veth1_macvtap: left promiscuous mode [ 987.329946][ T63] veth0_macvtap: left promiscuous mode [ 987.351622][ T63] veth1_vlan: left promiscuous mode [ 987.357040][ T63] veth0_vlan: left promiscuous mode [ 987.578189][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 987.592083][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 987.609519][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 987.623501][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 987.643221][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 987.655123][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 988.352358][ T63] team0 (unregistering): Port device team_slave_1 removed [ 988.425660][ T63] team0 (unregistering): Port device team_slave_0 removed [ 988.870703][ T5103] Bluetooth: hci0: command tx timeout [ 989.275163][T17649] chnl_net:caif_netlink_parms(): no params data found [ 989.304873][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.322118][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.583697][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.615071][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.718772][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.731853][ T5103] Bluetooth: hci3: command tx timeout [ 989.776897][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.868437][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.896855][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.058401][ T5146] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 990.271504][ T5146] usb 2-1: Using ep0 maxpacket: 16 [ 990.289790][ T5146] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 990.302131][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.303078][T17726] binder: BINDER_SET_CONTEXT_MGR already set [ 990.319768][T17726] binder: 17720:17726 ioctl 4018620d 20000100 returned -16 [ 990.321837][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.352646][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.363974][ T5146] usb 2-1: Product: syz [ 990.368474][ T5146] usb 2-1: Manufacturer: syz [ 990.377668][T17649] bridge_slave_0: entered allmulticast mode [ 990.384488][ T5146] usb 2-1: SerialNumber: syz [ 990.395976][T17649] bridge_slave_0: entered promiscuous mode [ 990.404280][ T5146] usb 2-1: config 0 descriptor?? [ 990.424798][ T5146] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 990.431529][ T29] audit: type=1326 audit(1719754721.238:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f83375b99 code=0x7ffc0000 [ 990.431595][ T29] audit: type=1326 audit(1719754721.238:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f83375b99 code=0x7ffc0000 [ 990.484571][ T29] audit: type=1326 audit(1719754721.248:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f83375b99 code=0x7ffc0000 [ 990.492365][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.539505][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 990.548928][ T29] audit: type=1326 audit(1719754721.248:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f83375b99 code=0x7ffc0000 [ 990.578449][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.587133][T17649] bridge_slave_1: entered allmulticast mode [ 990.596618][ T29] audit: type=1326 audit(1719754721.248:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f833745d0 code=0x7ffc0000 [ 990.627251][T17649] bridge_slave_1: entered promiscuous mode [ 990.700295][ T29] audit: type=1326 audit(1719754721.248:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8337579b code=0x7ffc0000 [ 990.725669][ T5146] usb 2-1: No valid video chain found. [ 990.725751][ T29] audit: type=1326 audit(1719754721.248:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8337579b code=0x7ffc0000 [ 990.764285][ T29] audit: type=1326 audit(1719754721.248:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8337579b code=0x7ffc0000 [ 990.794449][ T45] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 990.811929][ T29] audit: type=1326 audit(1719754721.248:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8337579b code=0x7ffc0000 [ 990.852526][ T29] audit: type=1326 audit(1719754721.448:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8337579b code=0x7ffc0000 [ 990.931880][ T5103] Bluetooth: hci0: command tx timeout [ 990.970048][ T5146] usb 2-1: USB disconnect, device number 118 [ 990.996706][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.024637][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.067454][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.114357][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 991.172338][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 991.221682][ T45] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 991.231827][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.257939][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.274536][ T45] usb 5-1: Product: syz [ 991.284385][ T45] usb 5-1: Manufacturer: syz [ 991.298210][ T45] usb 5-1: SerialNumber: syz [ 991.319584][ T45] usb 5-1: config 0 descriptor?? [ 991.341435][T17726] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 991.390593][T17701] chnl_net:caif_netlink_parms(): no params data found [ 991.547160][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.774263][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.811459][ T5103] Bluetooth: hci3: command tx timeout [ 991.888297][T17649] team0: Port device team_slave_0 added [ 992.084314][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.149127][T17649] team0: Port device team_slave_1 added [ 992.156491][T17745] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 992.338252][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.452442][T17745] tipc: Started in network mode [ 992.457355][T17745] tipc: Node identity ac14140f, cluster identity 4711 [ 992.472640][T17745] tipc: New replicast peer: 255.255.255.255 [ 992.517169][T17745] tipc: Enabled bearer , priority 10 [ 992.767314][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.831092][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.902010][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.085069][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.121717][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.189164][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.255510][T17701] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.289315][T17701] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.325452][T17701] bridge_slave_0: entered allmulticast mode [ 993.369563][T17701] bridge_slave_0: entered promiscuous mode [ 993.414821][T17701] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.424612][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.434549][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.481109][T17701] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.521401][T17701] bridge_slave_1: entered allmulticast mode [ 993.560140][T17701] bridge_slave_1: entered promiscuous mode [ 993.597790][ T9134] tipc: Node number set to 2886997007 [ 993.865406][T17701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.891787][ T5103] Bluetooth: hci3: command tx timeout [ 993.973198][ T9] usb 5-1: USB disconnect, device number 121 [ 994.183001][T17649] hsr_slave_0: entered promiscuous mode [ 994.214107][T17649] hsr_slave_1: entered promiscuous mode [ 994.246678][T17649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.285370][T17649] Cannot create hsr debugfs directory [ 994.343643][T17701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.376123][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 994.424403][T17769] Cannot find add_set index 0 as target [ 994.615755][T17701] team0: Port device team_slave_0 added [ 994.625632][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 994.636326][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 994.676114][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 994.685118][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 994.708975][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 994.717496][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.800291][T17701] team0: Port device team_slave_1 added [ 994.902667][ T63] bridge_slave_1: left allmulticast mode [ 994.908377][ T63] bridge_slave_1: left promiscuous mode [ 994.931776][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.988865][ T63] bridge_slave_0: left allmulticast mode [ 995.004098][ T63] bridge_slave_0: left promiscuous mode [ 995.013646][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.182133][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 995.399645][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 995.410465][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.441819][ T9] usb 5-1: config 0 descriptor?? [ 995.561443][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 995.696958][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.712060][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.725986][ T63] bond0 (unregistering): Released all slaves [ 995.751999][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 995.769096][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.791404][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 995.803051][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 995.835237][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 995.846958][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.862703][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 995.863539][ T25] usb 4-1: config 0 descriptor?? [ 995.934685][T17701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.952149][T17701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.982490][ T5103] Bluetooth: hci3: command tx timeout [ 995.987994][T17701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.006428][T17701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.013491][T17701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.040255][T17701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.063675][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 996.082023][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 996.138151][ T45] usb 4-1: USB disconnect, device number 2 [ 996.352640][T17701] hsr_slave_0: entered promiscuous mode [ 996.362333][T17701] hsr_slave_1: entered promiscuous mode [ 996.372140][T17701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.379858][T17701] Cannot create hsr debugfs directory [ 996.729132][ T63] hsr_slave_0: left promiscuous mode [ 996.742011][ T63] hsr_slave_1: left promiscuous mode [ 996.781520][ T5103] Bluetooth: hci1: command tx timeout [ 996.836042][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.861206][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.901745][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.909267][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.026775][ T63] veth1_macvtap: left promiscuous mode [ 997.051322][ T63] veth0_macvtap: left promiscuous mode [ 997.057289][ T63] veth1_vlan: left promiscuous mode [ 997.097849][ T63] veth0_vlan: left promiscuous mode [ 997.807418][ T25] usb 5-1: USB disconnect, device number 122 [ 998.526279][ T63] team0 (unregistering): Port device team_slave_1 removed [ 998.686563][ T63] team0 (unregistering): Port device team_slave_0 removed [ 998.853102][ T5103] Bluetooth: hci1: command tx timeout [ 1000.613140][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1000.931503][ T5103] Bluetooth: hci1: command tx timeout [ 1002.120098][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.184540][T17783] chnl_net:caif_netlink_parms(): no params data found [ 1002.384443][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.768452][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.015696][ T5103] Bluetooth: hci1: command tx timeout [ 1003.104761][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.117575][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1003.144427][T17783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.188522][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.196805][T17783] bridge_slave_0: entered allmulticast mode [ 1003.204963][T17783] bridge_slave_0: entered promiscuous mode [ 1003.214726][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.221313][T17110] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1003.233791][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.241749][T17783] bridge_slave_1: entered allmulticast mode [ 1003.249511][T17783] bridge_slave_1: entered promiscuous mode [ 1003.329097][T17649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1003.349086][T17649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1003.429692][T17649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1003.442720][T17110] usb 5-1: too many configurations: 81, using maximum allowed: 8 [ 1003.469656][T17649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1003.473634][T17110] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1003.485055][T17110] usb 5-1: can't read configurations, error -61 [ 1003.497007][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.577759][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.591628][ T5146] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1003.661960][T17110] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1003.742928][T17783] team0: Port device team_slave_0 added [ 1003.765251][T17783] team0: Port device team_slave_1 added [ 1003.803319][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.830929][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1003.850269][ T5146] usb 4-1: config 1 has no interface number 0 [ 1003.868655][ T5146] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.883387][T17110] usb 5-1: too many configurations: 81, using maximum allowed: 8 [ 1003.885288][T17110] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1003.909820][T17110] usb 5-1: can't read configurations, error -61 [ 1003.920753][T17110] usb usb5-port1: attempt power cycle [ 1003.944144][ T5146] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.962198][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.977403][ T63] bridge_slave_1: left allmulticast mode [ 1003.991427][ T5146] usb 4-1: Product: syz [ 1003.995649][ T5146] usb 4-1: Manufacturer: syz [ 1004.000429][ T63] bridge_slave_1: left promiscuous mode [ 1004.006909][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.015235][ T5146] usb 4-1: SerialNumber: syz [ 1004.026805][ T5146] usb 4-1: selecting invalid altsetting 1 [ 1004.045135][ T63] bridge_slave_0: left allmulticast mode [ 1004.051047][ T63] bridge_slave_0: left promiscuous mode [ 1004.057264][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.341205][T17110] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1004.392913][T17110] usb 5-1: too many configurations: 81, using maximum allowed: 8 [ 1004.423118][T17110] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1004.430901][T17110] usb 5-1: can't read configurations, error -61 [ 1004.495674][ T5092] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1004.591561][T17110] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1004.684439][T17110] usb 5-1: too many configurations: 81, using maximum allowed: 8 [ 1004.698155][T17110] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1004.716153][T17110] usb 5-1: can't read configurations, error -61 [ 1004.736772][T17110] usb usb5-port1: unable to enumerate USB device [ 1005.186575][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.201377][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.223566][ T63] bond0 (unregistering): Released all slaves [ 1005.249652][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.258962][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.285421][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.316945][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.339199][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.365738][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.584661][T17783] hsr_slave_0: entered promiscuous mode [ 1005.592421][T17783] hsr_slave_1: entered promiscuous mode [ 1005.599054][T17783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.609107][T17783] Cannot create hsr debugfs directory [ 1006.084058][T17701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.127704][T17701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.252765][ T63] hsr_slave_0: left promiscuous mode [ 1006.259076][ T63] hsr_slave_1: left promiscuous mode [ 1006.273700][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.284971][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.307701][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.324489][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.406832][ T63] veth1_macvtap: left promiscuous mode [ 1006.418132][ T63] veth0_macvtap: left promiscuous mode [ 1006.427781][ T63] veth1_vlan: left promiscuous mode [ 1006.448404][ T63] veth0_vlan: left promiscuous mode [ 1006.638931][ T5146] cdc_ncm 4-1:1.1: bind() failure [ 1006.671905][ T5146] usb 4-1: USB disconnect, device number 3 [ 1007.419104][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1007.504642][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1008.208549][T17701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1008.380668][T17701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1008.623585][T17649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.883749][T17649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.923096][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.930559][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.045090][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.052318][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.318098][T17701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.528770][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.552531][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'. [ 1009.734588][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.824263][T17701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.981316][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1009.994764][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1010.003973][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1010.005284][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.042769][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1010.061741][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1010.069459][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1010.165699][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.173045][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.272324][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.324624][T17783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1010.356997][T17783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1010.402520][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.409822][ T9134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.495412][T17783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1010.608000][T17783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1010.854854][T17649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.109120][ T63] bridge_slave_1: left allmulticast mode [ 1011.124221][ T63] bridge_slave_1: left promiscuous mode [ 1011.130066][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.182258][ T63] bridge_slave_0: left allmulticast mode [ 1011.187967][ T63] bridge_slave_0: left promiscuous mode [ 1011.202606][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.824299][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1011.837314][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1011.852703][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1011.868556][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1011.877674][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1011.893208][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1012.131585][ T5103] Bluetooth: hci2: command tx timeout [ 1012.473060][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.502451][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.528122][ T63] bond0 (unregistering): Released all slaves [ 1012.738458][ T63] tipc: Disabling bearer [ 1012.761955][ T63] tipc: Left network mode [ 1013.039569][T17934] chnl_net:caif_netlink_parms(): no params data found [ 1013.410673][T17649] veth0_vlan: entered promiscuous mode [ 1013.450241][ T63] hsr_slave_0: left promiscuous mode [ 1013.456766][ T63] hsr_slave_1: left promiscuous mode [ 1013.469887][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.478195][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.486521][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.495741][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.532809][ T63] veth1_macvtap: left promiscuous mode [ 1013.538452][ T63] veth0_macvtap: left promiscuous mode [ 1013.544419][ T63] veth1_vlan: left promiscuous mode [ 1013.549795][ T63] veth0_vlan: left promiscuous mode [ 1013.973983][ T5103] Bluetooth: hci4: command tx timeout [ 1014.211713][ T5103] Bluetooth: hci2: command tx timeout [ 1014.352738][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1014.437662][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1015.199574][T17701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.342971][T17649] veth1_vlan: entered promiscuous mode [ 1015.417494][T17934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.431903][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.439278][T17934] bridge_slave_0: entered allmulticast mode [ 1015.474034][T17934] bridge_slave_0: entered promiscuous mode [ 1015.615743][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.641858][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.649239][T17934] bridge_slave_1: entered allmulticast mode [ 1015.693361][T17934] bridge_slave_1: entered promiscuous mode [ 1015.848489][T17934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.894337][T17934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.988054][T17783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.036706][T17969] chnl_net:caif_netlink_parms(): no params data found [ 1016.051567][ T5103] Bluetooth: hci4: command tx timeout [ 1016.094084][T17934] team0: Port device team_slave_0 added [ 1016.146399][T17934] team0: Port device team_slave_1 added [ 1016.291607][T17934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.299951][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.315155][ T5103] Bluetooth: hci2: command tx timeout [ 1016.327158][T17934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.348677][T17649] veth0_macvtap: entered promiscuous mode [ 1016.358801][T17783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.407910][T17934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.415668][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.442715][T17934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.553480][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.560643][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.593776][T17934] hsr_slave_0: entered promiscuous mode [ 1016.607835][T17934] hsr_slave_1: entered promiscuous mode [ 1016.620268][T17934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.629116][T17934] Cannot create hsr debugfs directory [ 1016.664975][T17701] veth0_vlan: entered promiscuous mode [ 1016.677912][T17649] veth1_macvtap: entered promiscuous mode [ 1016.749589][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.757336][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.947691][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.971291][T17969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.978668][T17969] bridge_slave_0: entered allmulticast mode [ 1017.014409][T17969] bridge_slave_0: entered promiscuous mode [ 1017.025121][T17969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.041263][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.048700][T17969] bridge_slave_1: entered allmulticast mode [ 1017.071468][T17969] bridge_slave_1: entered promiscuous mode [ 1017.098734][T17701] veth1_vlan: entered promiscuous mode [ 1017.167036][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.374387][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.452171][T17969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.485329][T17969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.569940][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.604386][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.615683][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.633108][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.643917][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.654854][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.665505][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.675945][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.686711][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.696670][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.710816][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.720825][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.734002][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.744266][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.755268][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.765575][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.776880][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.787179][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.797988][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.823542][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.834439][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.857056][T17649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.926514][T17969] team0: Port device team_slave_0 added [ 1017.950680][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.975836][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.997237][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.021075][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.041039][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.052212][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.062908][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.072897][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.083529][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.093599][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.104276][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.117581][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.128127][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.138217][ T5103] Bluetooth: hci4: command tx timeout [ 1018.145335][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.155929][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.165844][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.176404][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.186324][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.196871][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.206785][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.220487][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.232855][T17649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.274180][T17969] team0: Port device team_slave_1 added [ 1018.304575][T17649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.316052][T17649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.325045][T17649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.334193][T17649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.372402][ T5103] Bluetooth: hci2: command tx timeout [ 1018.494620][T17969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.502061][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.531574][T17969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.659292][T17701] veth0_macvtap: entered promiscuous mode [ 1018.683159][T17969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.690169][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.728793][T17969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.882703][T17969] hsr_slave_0: entered promiscuous mode [ 1018.889770][T17969] hsr_slave_1: entered promiscuous mode [ 1018.901254][T17969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.908853][T17969] Cannot create hsr debugfs directory [ 1018.965035][T17701] veth1_macvtap: entered promiscuous mode [ 1019.204995][ T63] bridge_slave_1: left allmulticast mode [ 1019.210697][ T63] bridge_slave_1: left promiscuous mode [ 1019.219178][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.243223][ T63] bridge_slave_0: left allmulticast mode [ 1019.248920][ T63] bridge_slave_0: left promiscuous mode [ 1019.255490][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.805255][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.832120][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.860252][ T63] bond0 (unregistering): Released all slaves [ 1019.903375][T17783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.995241][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.011268][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.023900][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.037696][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.047713][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.065550][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.075865][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.086612][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.096912][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.108648][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.118574][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.129548][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.140205][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.150805][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.165701][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.178510][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.189065][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.199626][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.209686][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.221518][ T5092] Bluetooth: hci4: command tx timeout [ 1020.222131][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.237399][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.248266][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.288899][T17701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.426410][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.437586][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.449298][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.461653][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.476185][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.487091][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.501030][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.522717][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.533265][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.544040][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.554049][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.564774][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.578640][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.589323][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.599391][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.610076][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.620448][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.631298][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.641212][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.651856][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.661833][T17701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.675766][T17701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.698701][T17701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.871769][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.892736][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.919715][T17701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.929092][T17701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.939769][T17701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.948668][T17701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.067998][ T63] hsr_slave_0: left promiscuous mode [ 1021.083232][ T63] hsr_slave_1: left promiscuous mode [ 1021.093857][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.111561][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.133553][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.151264][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.224367][ T63] veth1_macvtap: left promiscuous mode [ 1021.229993][ T63] veth0_macvtap: left promiscuous mode [ 1021.252177][ T63] veth1_vlan: left promiscuous mode [ 1021.257594][ T63] veth0_vlan: left promiscuous mode [ 1022.104988][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1022.167701][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1022.994626][T17934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1023.018412][T17934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1023.176489][T17934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1023.198555][T17934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1023.243163][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.270496][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.665762][T17783] veth0_vlan: entered promiscuous mode [ 1023.761675][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.769555][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.848976][T17783] veth1_vlan: entered promiscuous mode [ 1023.981480][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.008149][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.208678][T17783] veth0_macvtap: entered promiscuous mode [ 1024.318397][T17783] veth1_macvtap: entered promiscuous mode [ 1024.353900][T18113] netlink: 'syz.0.2468': attribute type 10 has an invalid length. [ 1024.416288][T18113] team0: Port device netdevsim0 added [ 1024.449599][T17969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1024.490321][T17969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1024.563774][T17969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1024.621467][T17969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1024.678888][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.718273][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.739362][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.770237][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.801513][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.831455][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.853377][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.876009][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 1024.881188][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.921498][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.941136][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.969369][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.998682][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.032152][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.053623][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.087364][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.109060][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.120723][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.135913][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.148422][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.170263][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.212096][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.231834][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.265385][T17783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.386136][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.421390][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.451857][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.481166][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.507428][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.518250][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.532566][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.547285][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.557688][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.583930][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.621416][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.637067][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.653011][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.663671][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.673885][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.719038][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.731951][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.761271][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.781105][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.796176][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.806181][T17783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.819497][T17783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.832395][T17783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.907401][T17783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.927153][T17783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.943629][T17783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.955460][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1025.955480][ T29] audit: type=1326 audit(1719754756.768:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1025.985200][T17783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.003929][ T29] audit: type=1326 audit(1719754756.768:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.027775][ T29] audit: type=1326 audit(1719754756.798:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.059276][ T29] audit: type=1326 audit(1719754756.798:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.181325][ T29] audit: type=1326 audit(1719754756.798:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.235166][ T29] audit: type=1326 audit(1719754756.798:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.290544][T17934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.293084][ T29] audit: type=1326 audit(1719754756.798:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.388062][ T29] audit: type=1326 audit(1719754756.808:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.461261][ T29] audit: type=1326 audit(1719754756.848:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.480236][T17934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.531330][ T29] audit: type=1326 audit(1719754756.848:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3142d75b99 code=0x7ffc0000 [ 1026.695048][T16079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.810702][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.817946][T17110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.062319][T16079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.126406][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.133647][ T7182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.208535][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.232010][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.353925][T16079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.628535][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1027.651694][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1027.662616][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1027.670776][T16079] team0: Port device netdevsim0 removed [ 1027.682976][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1027.690909][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1027.702228][T16079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.713085][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1027.961237][ T2436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.969118][ T2436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.992365][T17969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.035070][T17934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.208321][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 1028.337606][T17934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.359233][T17969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.520273][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.527663][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.557553][T16079] bridge_slave_1: left allmulticast mode [ 1028.571401][T16079] bridge_slave_1: left promiscuous mode [ 1028.577235][T16079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.586816][T16079] bridge_slave_0: left allmulticast mode [ 1028.594648][T16079] bridge_slave_0: left promiscuous mode [ 1028.600424][T16079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.632023][ T5093] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1028.766746][ T9134] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1028.831580][ T5093] usb 2-1: Using ep0 maxpacket: 32 [ 1028.839362][ T5093] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 14 [ 1028.871817][ T5093] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1028.891426][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.899479][ T5093] usb 2-1: Product: syz [ 1028.904274][ T5093] usb 2-1: Manufacturer: syz [ 1028.908962][ T5093] usb 2-1: SerialNumber: syz [ 1028.917644][T18194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.963033][ T9134] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 1028.978332][ T9134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1028.986904][ T9134] usb 3-1: can't read configurations, error -61 [ 1029.134950][ T5093] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1029.153881][ T9134] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1029.366152][ T9134] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 1029.368570][ C1] usblp0: nonzero write bulk status received: -71 [ 1029.384180][ T9134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1029.392815][T16079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.394785][ T5093] usb 2-1: USB disconnect, device number 119 [ 1029.412586][ T9134] usb 3-1: can't read configurations, error -61 [ 1029.418445][ T5093] usblp0: removed [ 1029.429841][ T9134] usb usb3-port1: attempt power cycle [ 1029.445007][T16079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.458265][T16079] bond0 (unregistering): Released all slaves [ 1029.540502][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.547816][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.811393][ T5092] Bluetooth: hci3: command tx timeout [ 1029.884011][ T9134] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1029.908078][T17969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1029.918816][T17969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.964030][ T9134] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 1029.992851][T17934] veth0_vlan: entered promiscuous mode [ 1030.001177][ T9134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1030.019613][ T9134] usb 3-1: can't read configurations, error -61 [ 1030.039003][T18185] chnl_net:caif_netlink_parms(): no params data found [ 1030.114798][T17934] veth1_vlan: entered promiscuous mode [ 1030.172236][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 1030.184340][ T9134] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1030.261893][ T9134] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 1030.272956][ T9134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1030.292652][ T9134] usb 3-1: can't read configurations, error -61 [ 1030.323337][ T9134] usb usb3-port1: unable to enumerate USB device [ 1030.586680][T16079] hsr_slave_0: left promiscuous mode [ 1030.594896][T16079] hsr_slave_1: left promiscuous mode [ 1030.607380][T16079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.619296][T16079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.628313][T16079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.636063][T16079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.709941][T16079] veth1_macvtap: left promiscuous mode [ 1030.724653][T16079] veth0_macvtap: left promiscuous mode [ 1030.730355][T16079] veth1_vlan: left promiscuous mode [ 1030.750358][T16079] veth0_vlan: left promiscuous mode [ 1030.924359][T18223] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1031.231110][ T5093] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 1031.427632][ T5093] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 1031.438966][ T5093] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1031.449634][ T5093] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.460470][ T5093] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1031.506765][ T5093] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1031.531204][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.562273][ T5093] usb 2-1: config 0 descriptor?? [ 1031.573430][T18223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1031.891900][ T5092] Bluetooth: hci3: command tx timeout [ 1032.292099][ T5092] Bluetooth: hci1: command tx timeout [ 1032.323743][ T25] usb 2-1: USB disconnect, device number 120 [ 1032.368362][T16079] team0 (unregistering): Port device team_slave_1 removed [ 1032.506600][T16079] team0 (unregistering): Port device team_slave_0 removed [ 1033.971974][ T5092] Bluetooth: hci3: command tx timeout [ 1034.356081][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 1034.387170][T17969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.406902][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.419689][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.430704][T18185] bridge_slave_0: entered allmulticast mode [ 1034.438288][T18185] bridge_slave_0: entered promiscuous mode [ 1034.472059][T17934] veth0_macvtap: entered promiscuous mode [ 1034.500937][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.522199][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.530606][T18185] bridge_slave_1: entered allmulticast mode [ 1034.542284][T18185] bridge_slave_1: entered promiscuous mode [ 1034.743699][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.807044][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.952718][T17934] veth1_macvtap: entered promiscuous mode [ 1035.123732][T18185] team0: Port device team_slave_0 added [ 1035.193881][T18185] team0: Port device team_slave_1 added [ 1035.310662][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.381463][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.411577][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.461175][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.491414][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.511042][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.551306][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.581262][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.614877][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.650500][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.677239][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.714898][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.753478][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.783813][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.817578][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.845898][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.863786][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.888505][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.908525][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.937972][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.955955][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.980321][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.004273][T17934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.041135][T17110] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1036.051710][ T5092] Bluetooth: hci3: command tx timeout [ 1036.214382][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.227318][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.264944][T17110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.274665][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.298120][T17110] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 1036.353916][T17110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.396651][T17110] usb 3-1: config 0 descriptor?? [ 1036.404241][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.444078][T17110] usb 3-1: bad CDC descriptors [ 1036.470068][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.501274][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.539359][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.575604][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.600136][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.655715][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.697810][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.715377][ T5093] usb 3-1: USB disconnect, device number 98 [ 1036.727125][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.750544][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.760534][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.774415][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.796827][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.855027][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.865613][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.876532][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.888461][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.900593][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.921383][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.941888][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.990207][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.022168][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.057478][T17934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.106882][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.177763][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.242927][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.266445][T17934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.276217][T17934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.285711][T17934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.295288][T17934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.347794][T17969] veth0_vlan: entered promiscuous mode [ 1037.509770][T18185] hsr_slave_0: entered promiscuous mode [ 1037.538252][T18185] hsr_slave_1: entered promiscuous mode [ 1037.558938][T18185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1037.579893][T18185] Cannot create hsr debugfs directory [ 1037.704937][T17969] veth1_vlan: entered promiscuous mode [ 1037.909820][T16079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.953171][T16079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.185605][T16079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.233042][T16079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.462428][T17969] veth0_macvtap: entered promiscuous mode [ 1038.500738][T17969] veth1_macvtap: entered promiscuous mode [ 1038.529107][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.548432][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.571137][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.585776][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.621272][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.641474][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.662342][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.711092][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.731413][ T5143] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1038.739489][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.762517][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.783341][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.819614][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.830203][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.854448][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.881495][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.904046][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.922328][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.949537][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.959800][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.982461][ T5143] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.993508][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.021355][ T5143] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.041222][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.052390][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.063046][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.074365][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.085804][ T5143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.131205][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.139269][ T5143] usb 2-1: Product: syz [ 1039.147596][T17969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.165450][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.181876][ T5143] usb 2-1: Manufacturer: syz [ 1039.186537][ T5143] usb 2-1: SerialNumber: syz [ 1039.231122][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.246587][ T5143] usb 2-1: selecting invalid altsetting 1 [ 1039.256007][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.268463][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.279374][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.290559][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.301605][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.326479][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.343110][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.355651][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.368985][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.380609][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.420121][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.433057][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.447703][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.459852][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.470876][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.483426][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.500549][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.519216][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.531849][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.543042][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.556776][T17969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.567990][T17969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.611377][T17969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.795859][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 1039.901164][ T5143] usb 2-1: selecting invalid altsetting 1 [ 1039.906995][ T5143] cdc_ncm 2-1:1.1: bind() failure [ 1039.914606][T17969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.971635][T17969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.028408][T17969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.044272][T17969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.102999][T17110] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1040.117705][ T5145] usb 2-1: USB disconnect, device number 121 [ 1040.369480][T17110] usb 3-1: descriptor type invalid, skip [ 1040.401216][T17110] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1040.423250][T17110] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1040.444186][T17110] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1040.491679][T17110] usb 3-1: config 1 has no interface number 1 [ 1040.497879][T17110] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1040.545027][T17110] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 1040.561819][T17110] usb 3-1: string descriptor 0 read error: -22 [ 1040.568286][T17110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.578310][T17110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.652354][T17110] usb 3-1: low speed audio streaming not supported [ 1040.889648][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.914760][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.115952][ T2436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.141234][ T2436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.538494][T18185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1041.588413][T18185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.628907][T18185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.693089][T18185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1041.746189][T18308] delete_channel: no stack [ 1041.941155][ T5145] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 1042.068443][T18185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.187674][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 1042.208718][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.221118][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1042.259612][T18332] fuse: Bad value for 'user_id' [ 1042.260627][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.288874][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.296123][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.331170][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 248, changing to 4 [ 1042.347402][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.354620][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.371654][ T5145] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1042.407200][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.450152][ T5145] usb 5-1: config 0 descriptor?? [ 1042.493692][T18323] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1042.673149][T18303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.707976][T18303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.749929][ T5141] usb 5-1: USB disconnect, device number 127 [ 1042.775933][ T9] usb 3-1: USB disconnect, device number 99 [ 1042.780065][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.958886][T18185] veth0_vlan: entered promiscuous mode [ 1043.034651][T18185] veth1_vlan: entered promiscuous mode [ 1043.158848][T18185] veth0_macvtap: entered promiscuous mode [ 1043.212093][T18185] veth1_macvtap: entered promiscuous mode [ 1043.278699][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.351203][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.413271][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.443852][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.501139][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.553144][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.599801][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.655356][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.718127][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.756489][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'. [ 1043.766977][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.806455][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.839426][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.871454][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.904438][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.924874][T18349] vivid-002: disconnect [ 1043.949842][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.995959][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.068367][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.110200][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.172347][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.208012][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.236951][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.264085][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.293949][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.327336][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.338805][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.349663][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.405818][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.469330][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.533236][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.567406][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.589151][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.603365][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.618071][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.633878][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.645194][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.671164][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.692552][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.740233][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.771709][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.791098][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.831277][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.851875][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.871381][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.891288][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.911297][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.944315][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.963468][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.980433][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.001369][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.013284][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.035459][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.052467][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.067502][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.099159][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.194786][T18185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.251738][T18185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.260508][T18185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.314602][T18185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.464810][T18372] vivid-002: reconnect [ 1045.697655][T18396] vhci_hcd: default hub control req: 2e00 v0306 i0000 l0 [ 1045.842619][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.877251][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.026444][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.045106][T18408] fuse: Bad value for 'user_id' [ 1046.071452][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.123135][T18407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1046.255917][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1046.321181][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1046.520707][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1046.912112][T17110] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1046.954728][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'. [ 1047.187182][T17110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1047.223974][T17110] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1047.245456][T17110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.266726][T17110] usb 1-1: config 0 descriptor?? [ 1047.391556][ T5143] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1047.512587][T18434] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2560'. [ 1047.582109][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 1047.626666][T17110] ath6kl: Failed to submit usb control message: -71 [ 1047.637936][ T5143] usb 3-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=a6.da [ 1047.651226][T17110] ath6kl: unable to send the bmi data to the device: -71 [ 1047.671362][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.685446][T17110] ath6kl: Unable to send get target info: -71 [ 1047.719354][T17110] ath6kl: Failed to init ath6kl core: -71 [ 1047.727352][ T5143] usb 3-1: config 0 descriptor?? [ 1047.738639][ T5143] mct_u232 3-1:0.0: MCT U232 converter detected [ 1047.748483][T17110] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1047.760273][ T5143] mct_u232 ttyUSB0: expected endpoint missing [ 1047.802363][T17110] usb 1-1: USB disconnect, device number 119 [ 1047.944059][ T5141] usb 3-1: USB disconnect, device number 100 [ 1047.953240][ T5141] mct_u232 3-1:0.0: device disconnected [ 1048.127984][T18452] delete_channel: no stack [ 1048.180842][ T5143] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1048.381426][ T5143] usb 2-1: Using ep0 maxpacket: 8 [ 1048.395771][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1048.429787][ T5143] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1048.456339][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.479745][ T5143] usb 2-1: config 0 descriptor?? [ 1048.483624][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2571'. [ 1048.503926][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.518053][ T5143] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1048.536958][T18474] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1048.543537][T18474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1048.566934][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.583092][ T5143] usb 2-1: Detected SIO [ 1048.599506][ T5143] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1048.601831][T18474] vhci_hcd vhci_hcd.0: Device attached [ 1048.720872][ T25] usb 2-1: USB disconnect, device number 122 [ 1048.753044][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1048.762928][T17110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1048.787789][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.800372][ T25] ftdi_sio 2-1:0.0: device disconnected [ 1048.808603][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.822120][ T5145] vhci_hcd: vhci_device speed not set [ 1048.901308][ T9134] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1048.908944][ T5145] usb 15-1: new full-speed USB device number 7 using vhci_hcd [ 1048.951481][T17110] usb 5-1: Using ep0 maxpacket: 32 [ 1048.972101][T17110] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1048.986104][T17110] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1049.014874][T17110] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1049.047675][T17110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1049.080590][T17110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1049.102918][T17110] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1049.117472][T17110] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1049.130613][T17110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.131217][ T9134] usb 4-1: Using ep0 maxpacket: 8 [ 1049.160868][T17110] usb 5-1: config 0 descriptor?? [ 1049.176651][ T9134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.199904][ T9134] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1049.218165][ T9134] usb 4-1: config 1 has no interface number 1 [ 1049.236868][ T9134] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.264408][ T9134] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.275888][ T9134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.284127][ T9134] usb 4-1: Product: syz [ 1049.288479][ T9134] usb 4-1: Manufacturer: syz [ 1049.314089][ T9134] usb 4-1: SerialNumber: syz [ 1049.391912][T17110] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1049.435298][T17110] usb 5-1: USB disconnect, device number 2 [ 1049.464745][T17110] usblp0: removed [ 1050.144698][T18516] dvmrp1: entered allmulticast mode [ 1051.371274][T17110] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1051.436086][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 1051.476953][T18481] vhci_hcd: connection reset by peer [ 1051.555375][T16079] vhci_hcd: stop threads [ 1051.602650][T16079] vhci_hcd: release socket [ 1051.609535][ T9134] usb 4-1: USB disconnect, device number 4 [ 1051.609625][T17110] usb 3-1: config index 0 descriptor too short (expected 11023, got 96) [ 1051.630718][T16079] vhci_hcd: disconnect device [ 1051.688505][T17110] usb 3-1: config 221 has too many interfaces: 134, using maximum allowed: 32 [ 1051.750272][T17110] usb 3-1: config 221 has an invalid descriptor of length 197, skipping remainder of the config [ 1051.796314][T17110] usb 3-1: config 221 has 0 interfaces, different from the descriptor's value: 134 [ 1051.854123][T17110] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1051.875719][T17110] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1051.919028][T17110] usb 3-1: Product: syz [ 1051.935845][T17110] usb 3-1: Manufacturer: syz [ 1051.992251][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.041702][ T25] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1052.212326][ T25] usb 1-1: device descriptor read/64, error -71 [ 1052.511236][ T25] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1052.682017][ T25] usb 1-1: device descriptor read/64, error -71 [ 1052.843372][ T25] usb usb1-port1: attempt power cycle [ 1052.899600][T18561] xt_policy: neither incoming nor outgoing policy selected [ 1052.990259][T18562] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1052.996883][T18562] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1053.005711][T18562] vhci_hcd vhci_hcd.0: Device attached [ 1053.271734][ T25] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1053.290356][ T5141] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1053.343576][ T25] usb 1-1: device descriptor read/8, error -71 [ 1053.512670][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 1053.549324][ T5141] usb 4-1: config 0 has no interfaces? [ 1053.588328][T17110] usb 3-1: USB disconnect, device number 101 [ 1053.594733][ T5141] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1053.617245][T18063] udevd[18063]: setting owner of /dev/bus/usb/003/101 to uid=0, gid=0 failed: No such file or directory [ 1053.624750][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.671656][ T25] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1053.681922][ T5141] usb 4-1: config 0 descriptor?? [ 1053.723992][ T25] usb 1-1: device descriptor read/8, error -71 [ 1053.876691][ T25] usb usb1-port1: unable to enumerate USB device [ 1053.889592][T18581] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1053.896174][T18581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1053.929037][T18581] vhci_hcd vhci_hcd.0: Device attached [ 1054.072556][T18564] vhci_hcd: connection reset by peer [ 1054.080694][ T25] usb 4-1: USB disconnect, device number 5 [ 1054.093288][ T11] vhci_hcd: stop threads [ 1054.103572][ T11] vhci_hcd: release socket [ 1054.122685][ T11] vhci_hcd: disconnect device [ 1054.131564][ T9134] vhci_hcd: vhci_device speed not set [ 1054.201903][ T5145] vhci_hcd: vhci_device speed not set [ 1054.214287][ T9134] usb 17-1: new full-speed USB device number 10 using vhci_hcd [ 1054.273130][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1054.464620][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 1054.486079][ T786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.503533][ T786] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1054.524795][ T786] usb 5-1: config 1 has no interface number 1 [ 1054.531542][ T786] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1054.562689][ T786] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1054.582411][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.590396][T18598] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.590600][ T786] usb 5-1: Product: syz [ 1054.606995][T18598] binder: 18596:18598 ioctl 4018620d 20000100 returned -16 [ 1054.609900][ T786] usb 5-1: Manufacturer: syz [ 1054.622823][ T786] usb 5-1: SerialNumber: syz [ 1054.843954][T18583] vhci_hcd: connection reset by peer [ 1054.858322][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.865972][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.886204][ T11] vhci_hcd: stop threads [ 1054.900898][ T11] vhci_hcd: release socket [ 1054.911384][T17110] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1054.930695][ T11] vhci_hcd: disconnect device [ 1054.957809][ T786] usb 5-1: USB disconnect, device number 3 [ 1055.221762][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1055.266942][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1055.316826][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.354924][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1055.392768][T17110] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1055.530093][T17110] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 1055.584082][T17110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.600496][T17110] usb 3-1: Product: syz [ 1055.618564][T17110] usb 3-1: Manufacturer: syz [ 1055.649448][T17110] usb 3-1: SerialNumber: syz [ 1055.711711][T17110] usb 3-1: config 0 descriptor?? [ 1055.755700][T18598] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1056.315171][ T5092] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1056.325555][ T5092] Bluetooth: hci2: Injecting HCI hardware error event [ 1056.342209][ T5103] Bluetooth: hci2: hardware error 0x00 [ 1057.019514][T18639] xt_policy: neither incoming nor outgoing policy selected [ 1057.114328][T18639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1057.120977][T18639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1057.151299][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1057.159491][T18639] vhci_hcd vhci_hcd.0: Device attached [ 1057.391142][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1057.443551][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1057.445878][ T786] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1057.453741][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.483125][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 1057.506559][ T25] usb 5-1: Product: syz [ 1057.510784][ T25] usb 5-1: Manufacturer: syz [ 1057.552193][ T5093] usb 3-1: USB disconnect, device number 102 [ 1057.581761][ T25] usb 5-1: SerialNumber: syz [ 1057.603037][ T25] usb 5-1: config 0 descriptor?? [ 1057.665759][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 1057.690735][ T786] usb 1-1: config 0 has no interfaces? [ 1057.697014][ T786] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1057.722102][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.755240][ T786] usb 1-1: config 0 descriptor?? [ 1057.846534][T17110] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1057.857210][T18592] syz.1.2606 (18592): drop_caches: 2 [ 1057.972037][T18655] program syz.2.2622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.028055][T17110] usb 4-1: device descriptor read/64, error -71 [ 1058.114852][ T25] rtl8150 5-1:0.0: couldn't reset the device [ 1058.133963][ T25] rtl8150 5-1:0.0: probe with driver rtl8150 failed with error -5 [ 1058.168811][ T25] usb 5-1: USB disconnect, device number 4 [ 1058.301811][T17110] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1058.339791][ T5145] usb 1-1: USB disconnect, device number 124 [ 1058.350104][T18642] vhci_hcd: connection closed [ 1058.350443][T16079] vhci_hcd: stop threads [ 1058.368314][T16079] vhci_hcd: release socket [ 1058.375750][T16079] vhci_hcd: disconnect device [ 1058.382891][ T5103] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1058.471607][T17110] usb 4-1: device descriptor read/64, error -71 [ 1058.631935][T17110] usb usb4-port1: attempt power cycle [ 1058.711312][ T25] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1058.891665][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1058.912172][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.946655][ T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1058.982589][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 1059.001155][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.020513][ T25] usb 2-1: Product: syz [ 1059.024905][ T25] usb 2-1: Manufacturer: syz [ 1059.029552][ T25] usb 2-1: SerialNumber: syz [ 1059.078232][T17110] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1059.112181][T17110] usb 4-1: device descriptor read/8, error -71 [ 1059.341120][ T9134] vhci_hcd: vhci_device speed not set [ 1059.392681][T17110] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1059.447903][T17110] usb 4-1: device descriptor read/8, error -71 [ 1059.516244][ T25] usb 2-1: 0:2 : does not exist [ 1059.562524][T18691] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.573510][ T25] usb 2-1: USB disconnect, device number 123 [ 1059.584884][T18691] binder: 18689:18691 ioctl 4018620d 20000100 returned -16 [ 1059.601506][T17110] usb usb4-port1: unable to enumerate USB device [ 1059.617601][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1059.851195][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1059.857661][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.883728][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 1059.903116][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.936633][ T9] usb 1-1: config 0 descriptor?? [ 1059.951297][T17110] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1059.977383][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1060.173421][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1060.221297][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1060.252115][T17110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1060.289565][T17110] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1060.344512][T17110] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 1060.388493][T17110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.433859][T17110] usb 3-1: Product: syz [ 1060.456864][T17110] usb 3-1: Manufacturer: syz [ 1060.482687][T17110] usb 3-1: SerialNumber: syz [ 1060.523270][T17110] usb 3-1: config 0 descriptor?? [ 1060.544693][T18691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1061.021501][ T2470] usb 1-1: Failed to submit usb control message: -110 [ 1061.051891][ T2470] usb 1-1: unable to send the bmi data to the device: -110 [ 1061.094168][ T2470] usb 1-1: unable to get target info from device [ 1061.111848][ T2470] usb 1-1: could not get target info (-110) [ 1061.138023][ T2470] usb 1-1: could not probe fw (-110) [ 1061.171907][ T5103] Bluetooth: hci0: command tx timeout [ 1061.345117][T18719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.390504][ T786] usb 1-1: USB disconnect, device number 125 [ 1062.484139][ T5093] usb 3-1: USB disconnect, device number 103 [ 1062.691879][T18749] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1062.698460][T18749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1062.782367][T18749] vhci_hcd vhci_hcd.0: Device attached [ 1062.871197][ T25] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1063.061431][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1063.086566][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.101176][ T5093] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1063.124237][ T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1063.135180][T18768] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2652'. [ 1063.155572][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 1063.184299][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.191612][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1063.194013][ T25] usb 2-1: Product: syz [ 1063.212627][ T25] usb 2-1: Manufacturer: syz [ 1063.221254][ T25] usb 2-1: SerialNumber: syz [ 1063.251121][ T5103] Bluetooth: hci0: command tx timeout [ 1063.331977][ T5093] usb 1-1: Using ep0 maxpacket: 8 [ 1063.340473][ T5093] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.351204][ T5093] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1063.369494][ T5093] usb 1-1: config 1 has no interface number 1 [ 1063.381402][ T5093] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.391352][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1063.398087][ T5093] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.408800][ T5093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.418681][ T5093] usb 1-1: Product: syz [ 1063.423996][ T5093] usb 1-1: Manufacturer: syz [ 1063.427876][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.428644][ T5093] usb 1-1: SerialNumber: syz [ 1063.451282][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.492867][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1063.507184][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.522431][ T9] usb 5-1: Product: syz [ 1063.531627][ T9] usb 5-1: Manufacturer: syz [ 1063.536381][ T9] usb 5-1: SerialNumber: syz [ 1063.545085][ T9] usb 5-1: config 0 descriptor?? [ 1063.670804][T18778] [ 1063.673187][T18778] ===================================================== [ 1063.680142][T18778] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1063.688055][T18778] 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 Not tainted [ 1063.695181][T18778] ----------------------------------------------------- [ 1063.702306][T18778] syz.2.2655/18778 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1063.710113][T18778] ffffffff8e00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xfc/0x360 [ 1063.718702][T18778] [ 1063.718702][T18778] and this task is already holding: [ 1063.725131][T18758] vhci_hcd: connection closed [ 1063.726075][T18778] ffff88801d335a18 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360 [ 1063.739588][T18778] which would create a new lock dependency: [ 1063.745599][T18778] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 1063.753422][T18778] [ 1063.753422][T18778] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1063.762898][T18778] (&client->buffer_lock){-.-.}-{2:2} [ 1063.762938][T18778] [ 1063.762938][T18778] ... which became HARDIRQ-irq-safe at: [ 1063.776050][T18778] lock_acquire+0x1ed/0x550 [ 1063.780839][T18778] _raw_spin_lock+0x2e/0x40 [ 1063.785543][T18778] evdev_pass_values+0xf2/0xad0 [ 1063.790936][T18778] evdev_events+0x1c2/0x300 [ 1063.795537][T18778] input_pass_values+0x84d/0x1200 [ 1063.800774][T18778] input_event_dispose+0x402/0x650 [ 1063.805983][T18778] input_handle_event+0xa71/0xbe0 [ 1063.811114][T18778] input_event+0xa4/0xd0 [ 1063.815478][T18778] hidinput_hid_event+0x138c/0x1ca0 [ 1063.820792][T18778] hid_process_event+0x439/0x590 [ 1063.825841][T18778] hid_report_raw_event+0x1002/0x18a0 [ 1063.831333][T18778] hid_input_report+0x416/0x500 [ 1063.836290][T18778] hid_irq_in+0x4a0/0x6d0 [ 1063.840733][T18778] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 1063.846206][T18778] dummy_timer+0x830/0x45d0 [ 1063.850801][T18778] __hrtimer_run_queues+0x59b/0xd50 [ 1063.856098][T18778] hrtimer_interrupt+0x396/0x990 [ 1063.861137][T18778] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1063.867213][T18778] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1063.872940][T18778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1063.879018][T18778] unwind_next_frame+0x1d89/0x2a00 [ 1063.884234][T18778] arch_stack_walk+0x151/0x1b0 [ 1063.889122][T18778] stack_trace_save+0x118/0x1d0 [ 1063.894062][T18778] kasan_save_track+0x3f/0x80 [ 1063.898829][T18778] __kasan_slab_alloc+0x66/0x80 [ 1063.903787][T18778] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1063.909367][T18778] security_file_alloc+0x28/0x130 [ 1063.914504][T18778] init_file+0x99/0x200 [ 1063.918762][T18778] alloc_empty_file+0xb8/0x1d0 [ 1063.923619][T18778] path_openat+0xfb/0x3280 [ 1063.928126][T18778] do_filp_open+0x235/0x490 [ 1063.932731][T18778] do_sys_openat2+0x13e/0x1d0 [ 1063.937505][T18778] __x64_sys_openat+0x247/0x2a0 [ 1063.942462][T18778] do_syscall_64+0xf3/0x230 [ 1063.947064][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.953076][T18778] [ 1063.953076][T18778] to a HARDIRQ-irq-unsafe lock: [ 1063.960088][T18778] (tasklist_lock){.+.+}-{2:2} [ 1063.960117][T18778] [ 1063.960117][T18778] ... which became HARDIRQ-irq-unsafe at: [ 1063.972744][T18778] ... [ 1063.972753][T18778] lock_acquire+0x1ed/0x550 [ 1063.979922][T18778] _raw_read_lock+0x36/0x50 [ 1063.984522][T18778] __do_wait+0x12d/0x850 [ 1063.988873][T18778] do_wait+0x1e9/0x560 [ 1063.993039][T18778] kernel_wait+0xe9/0x240 [ 1063.997475][T18778] call_usermodehelper_exec_work+0xbd/0x230 [ 1064.003456][T18778] process_scheduled_works+0xa2c/0x1830 [ 1064.009091][T18778] worker_thread+0x86d/0xd50 [ 1064.013785][T18778] kthread+0x2f0/0x390 [ 1064.017966][T18778] ret_from_fork+0x4b/0x80 [ 1064.022496][T18778] ret_from_fork_asm+0x1a/0x30 [ 1064.027370][T18778] [ 1064.027370][T18778] other info that might help us debug this: [ 1064.027370][T18778] [ 1064.037686][T18778] Chain exists of: [ 1064.037686][T18778] &client->buffer_lock --> &f->f_owner.lock --> tasklist_lock [ 1064.037686][T18778] [ 1064.051186][T18778] Possible interrupt unsafe locking scenario: [ 1064.051186][T18778] [ 1064.059520][T18778] CPU0 CPU1 [ 1064.064889][T18778] ---- ---- [ 1064.070257][T18778] lock(tasklist_lock); [ 1064.074568][T18778] local_irq_disable(); [ 1064.081342][T18778] lock(&client->buffer_lock); [ 1064.088736][T18778] lock(&f->f_owner.lock); [ 1064.095775][T18778] [ 1064.099233][T18778] lock(&client->buffer_lock); [ 1064.104267][T18778] [ 1064.104267][T18778] *** DEADLOCK *** [ 1064.104267][T18778] [ 1064.112412][T18778] 3 locks held by syz.2.2655/18778: [ 1064.117627][T18778] #0: ffffffff94811e50 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify+0x53d/0x1f70 [ 1064.127177][T18778] #1: ffff88801c785038 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x61/0x440 [ 1064.136850][T18778] #2: ffff88801d335a18 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360 [ 1064.146181][T18778] [ 1064.146181][T18778] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1064.156588][T18778] -> (&client->buffer_lock){-.-.}-{2:2} { [ 1064.162521][T18778] IN-HARDIRQ-W at: [ 1064.166676][T18778] lock_acquire+0x1ed/0x550 [ 1064.173191][T18778] _raw_spin_lock+0x2e/0x40 [ 1064.179696][T18778] evdev_pass_values+0xf2/0xad0 [ 1064.186553][T18778] evdev_events+0x1c2/0x300 [ 1064.193066][T18778] input_pass_values+0x84d/0x1200 [ 1064.200110][T18778] input_event_dispose+0x402/0x650 [ 1064.207233][T18778] input_handle_event+0xa71/0xbe0 [ 1064.214265][T18778] input_event+0xa4/0xd0 [ 1064.220525][T18778] hidinput_hid_event+0x138c/0x1ca0 [ 1064.227730][T18778] hid_process_event+0x439/0x590 [ 1064.234676][T18778] hid_report_raw_event+0x1002/0x18a0 [ 1064.242077][T18778] hid_input_report+0x416/0x500 [ 1064.248933][T18778] hid_irq_in+0x4a0/0x6d0 [ 1064.255274][T18778] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 1064.262654][T18778] dummy_timer+0x830/0x45d0 [ 1064.269164][T18778] __hrtimer_run_queues+0x59b/0xd50 [ 1064.276390][T18778] hrtimer_interrupt+0x396/0x990 [ 1064.283337][T18778] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1064.291340][T18778] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1064.298999][T18778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.307005][T18778] unwind_next_frame+0x1d89/0x2a00 [ 1064.314132][T18778] arch_stack_walk+0x151/0x1b0 [ 1064.320995][T18778] stack_trace_save+0x118/0x1d0 [ 1064.327860][T18778] kasan_save_track+0x3f/0x80 [ 1064.334544][T18778] __kasan_slab_alloc+0x66/0x80 [ 1064.341526][T18778] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1064.348990][T18778] security_file_alloc+0x28/0x130 [ 1064.356110][T18778] init_file+0x99/0x200 [ 1064.362445][T18778] alloc_empty_file+0xb8/0x1d0 [ 1064.369206][T18778] path_openat+0xfb/0x3280 [ 1064.375625][T18778] do_filp_open+0x235/0x490 [ 1064.382128][T18778] do_sys_openat2+0x13e/0x1d0 [ 1064.388813][T18778] __x64_sys_openat+0x247/0x2a0 [ 1064.395684][T18778] do_syscall_64+0xf3/0x230 [ 1064.402218][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.410123][T18778] IN-SOFTIRQ-W at: [ 1064.414285][T18778] lock_acquire+0x1ed/0x550 [ 1064.420792][T18778] _raw_spin_lock+0x2e/0x40 [ 1064.427296][T18778] evdev_pass_values+0xf2/0xad0 [ 1064.434155][T18778] evdev_events+0x1c2/0x300 [ 1064.440661][T18778] input_pass_values+0x84d/0x1200 [ 1064.447690][T18778] input_event_dispose+0x402/0x650 [ 1064.454818][T18778] input_handle_event+0xa71/0xbe0 [ 1064.461880][T18778] input_event+0xa4/0xd0 [ 1064.468136][T18778] hidinput_hid_event+0x138c/0x1ca0 [ 1064.475347][T18778] hid_process_event+0x439/0x590 [ 1064.482306][T18778] hid_report_raw_event+0x1002/0x18a0 [ 1064.489683][T18778] hid_input_report+0x416/0x500 [ 1064.496544][T18778] hid_irq_in+0x4a0/0x6d0 [ 1064.502995][T18778] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 1064.510380][T18778] dummy_timer+0x830/0x45d0 [ 1064.516892][T18778] __hrtimer_run_queues+0x59b/0xd50 [ 1064.524098][T18778] hrtimer_interrupt+0x396/0x990 [ 1064.531051][T18778] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1064.539058][T18778] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1064.546706][T18778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.554701][T18778] rcu_is_watching+0x74/0xb0 [ 1064.561311][T18778] handle_softirqs+0x309/0x970 [ 1064.568082][T18778] __irq_exit_rcu+0xf4/0x1c0 [ 1064.574674][T18778] irq_exit_rcu+0x9/0x30 [ 1064.580920][T18778] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1064.588593][T18778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.596594][T18778] unwind_next_frame+0x1d89/0x2a00 [ 1064.603721][T18778] arch_stack_walk+0x151/0x1b0 [ 1064.610599][T18778] stack_trace_save+0x118/0x1d0 [ 1064.617453][T18778] kasan_save_track+0x3f/0x80 [ 1064.624320][T18778] __kasan_slab_alloc+0x66/0x80 [ 1064.631196][T18778] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1064.638668][T18778] security_file_alloc+0x28/0x130 [ 1064.645712][T18778] init_file+0x99/0x200 [ 1064.651881][T18778] alloc_empty_file+0xb8/0x1d0 [ 1064.658823][T18778] path_openat+0xfb/0x3280 [ 1064.665244][T18778] do_filp_open+0x235/0x490 [ 1064.671754][T18778] do_sys_openat2+0x13e/0x1d0 [ 1064.678443][T18778] __x64_sys_openat+0x247/0x2a0 [ 1064.685306][T18778] do_syscall_64+0xf3/0x230 [ 1064.691913][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.699820][T18778] INITIAL USE at: [ 1064.703982][T18778] lock_acquire+0x1ed/0x550 [ 1064.710413][T18778] _raw_spin_lock+0x2e/0x40 [ 1064.716847][T18778] evdev_pass_values+0xf2/0xad0 [ 1064.723617][T18778] evdev_events+0x1c2/0x300 [ 1064.730037][T18778] input_pass_values+0x84d/0x1200 [ 1064.736973][T18778] input_event_dispose+0x36c/0x650 [ 1064.744024][T18778] input_handle_event+0xa71/0xbe0 [ 1064.750972][T18778] input_inject_event+0x22f/0x340 [ 1064.757938][T18778] evdev_write+0x672/0x7c0 [ 1064.764277][T18778] vfs_write+0x2a2/0xc90 [ 1064.770445][T18778] ksys_write+0x1a0/0x2c0 [ 1064.776700][T18778] do_syscall_64+0xf3/0x230 [ 1064.783145][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.790978][T18778] } [ 1064.793668][T18778] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 1064.802015][T18778] -> (&new->fa_lock){....}-{2:2} { [ 1064.807256][T18778] INITIAL USE at: [ 1064.811256][T18778] lock_acquire+0x1ed/0x550 [ 1064.817514][T18778] _raw_write_lock_irq+0xd3/0x120 [ 1064.824312][T18778] fasync_remove_entry+0xff/0x1d0 [ 1064.831083][T18778] sock_fasync+0x8a/0x100 [ 1064.837172][T18778] __fput+0x745/0x8b0 [ 1064.842913][T18778] task_work_run+0x24f/0x310 [ 1064.849369][T18778] do_exit+0xa27/0x27e0 [ 1064.855285][T18778] do_group_exit+0x207/0x2c0 [ 1064.861630][T18778] get_signal+0x16a1/0x1740 [ 1064.867895][T18778] arch_do_signal_or_restart+0x96/0x860 [ 1064.875186][T18778] syscall_exit_to_user_mode+0xc9/0x360 [ 1064.882484][T18778] do_syscall_64+0x100/0x230 [ 1064.888823][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.896469][T18778] INITIAL READ USE at: [ 1064.900979][T18778] lock_acquire+0x1ed/0x550 [ 1064.907709][T18778] _raw_read_lock_irqsave+0xdd/0x130 [ 1064.915199][T18778] kill_fasync+0x19e/0x4d0 [ 1064.921827][T18778] lease_break_callback+0x26/0x30 [ 1064.929039][T18778] __break_lease+0x6d5/0x1820 [ 1064.935898][T18778] do_dentry_open+0x89e/0x1720 [ 1064.942851][T18778] path_openat+0x289f/0x3280 [ 1064.949621][T18778] do_filp_open+0x235/0x490 [ 1064.956307][T18778] do_sys_openat2+0x13e/0x1d0 [ 1064.963344][T18778] __x64_sys_creat+0x123/0x170 [ 1064.970462][T18778] do_syscall_64+0xf3/0x230 [ 1064.977151][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.985227][T18778] } [ 1064.987812][T18778] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1064.996589][T18778] ... acquired at: [ 1065.000476][T18778] lock_acquire+0x1ed/0x550 [ 1065.005158][T18778] _raw_read_lock_irqsave+0xdd/0x130 [ 1065.010626][T18778] kill_fasync+0x19e/0x4d0 [ 1065.015243][T18778] evdev_pass_values+0x58a/0xad0 [ 1065.020366][T18778] evdev_events+0x1c2/0x300 [ 1065.025049][T18778] input_pass_values+0x84d/0x1200 [ 1065.030248][T18778] input_event_dispose+0x36c/0x650 [ 1065.035541][T18778] input_handle_event+0xa71/0xbe0 [ 1065.040748][T18778] input_inject_event+0x22f/0x340 [ 1065.045956][T18778] evdev_write+0x672/0x7c0 [ 1065.050546][T18778] vfs_write+0x2a2/0xc90 [ 1065.054967][T18778] ksys_write+0x1a0/0x2c0 [ 1065.059472][T18778] do_syscall_64+0xf3/0x230 [ 1065.064159][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.070233][T18778] [ 1065.072554][T18778] -> (&f->f_owner.lock){...-}-{2:2} { [ 1065.077955][T18778] IN-SOFTIRQ-R at: [ 1065.081936][T18778] lock_acquire+0x1ed/0x550 [ 1065.088087][T18778] _raw_read_lock_irqsave+0xdd/0x130 [ 1065.095032][T18778] send_sigurg+0x29/0x3c0 [ 1065.101022][T18778] sk_send_sigurg+0x75/0x2f0 [ 1065.107282][T18778] tcp_check_urg+0x207/0x740 [ 1065.113539][T18778] tcp_urg+0x15c/0x450 [ 1065.119275][T18778] tcp_rcv_established+0xfac/0x2020 [ 1065.126129][T18778] tcp_v4_do_rcv+0x965/0xc60 [ 1065.132384][T18778] tcp_v4_rcv+0x2d90/0x37b0 [ 1065.138549][T18778] ip_protocol_deliver_rcu+0x225/0x430 [ 1065.145754][T18778] ip_local_deliver_finish+0x33f/0x5f0 [ 1065.152877][T18778] NF_HOOK+0x3a4/0x450 [ 1065.158602][T18778] NF_HOOK+0x3a4/0x450 [ 1065.164327][T18778] __netif_receive_skb+0x2bf/0x650 [ 1065.171106][T18778] process_backlog+0x391/0x7d0 [ 1065.177540][T18778] __napi_poll+0xcb/0x490 [ 1065.183536][T18778] net_rx_action+0x7bb/0x10a0 [ 1065.189874][T18778] handle_softirqs+0x2c4/0x970 [ 1065.196295][T18778] __irq_exit_rcu+0xf4/0x1c0 [ 1065.202564][T18778] irq_exit_rcu+0x9/0x30 [ 1065.208480][T18778] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1065.215789][T18778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1065.223462][T18778] INITIAL USE at: [ 1065.227363][T18778] lock_acquire+0x1ed/0x550 [ 1065.233528][T18778] _raw_write_lock_irq+0xd3/0x120 [ 1065.240130][T18778] f_modown+0x38/0x340 [ 1065.245851][T18778] fcntl_dirnotify+0x57d/0x740 [ 1065.252181][T18778] do_fcntl+0x492/0x1730 [ 1065.257988][T18778] __se_sys_fcntl+0xd2/0x1c0 [ 1065.264146][T18778] do_syscall_64+0xf3/0x230 [ 1065.270228][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.277699][T18778] INITIAL READ USE at: [ 1065.282028][T18778] lock_acquire+0x1ed/0x550 [ 1065.288529][T18778] _raw_read_lock_irqsave+0xdd/0x130 [ 1065.295820][T18778] send_sigio+0x33/0x360 [ 1065.302070][T18778] dnotify_handle_event+0x13c/0x440 [ 1065.309279][T18778] fsnotify+0x18ab/0x1f70 [ 1065.315684][T18778] fsnotify_move+0x134/0x5c0 [ 1065.322296][T18778] vfs_rename+0x8d3/0xf00 [ 1065.328637][T18778] do_renameat2+0xd94/0x13f0 [ 1065.335237][T18778] __x64_sys_rename+0x86/0xa0 [ 1065.341923][T18778] do_syscall_64+0xf3/0x230 [ 1065.348434][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.356338][T18778] } [ 1065.358836][T18778] ... key at: [] init_file.__key+0x0/0x20 [ 1065.366650][T18778] ... acquired at: [ 1065.370448][T18778] lock_acquire+0x1ed/0x550 [ 1065.375133][T18778] _raw_read_lock_irqsave+0xdd/0x130 [ 1065.380604][T18778] send_sigio+0x33/0x360 [ 1065.385032][T18778] kill_fasync+0x23a/0x4d0 [ 1065.389625][T18778] lease_break_callback+0x26/0x30 [ 1065.394832][T18778] __break_lease+0x6d5/0x1820 [ 1065.399687][T18778] do_dentry_open+0x89e/0x1720 [ 1065.404634][T18778] path_openat+0x289f/0x3280 [ 1065.409425][T18778] do_filp_open+0x235/0x490 [ 1065.414111][T18778] do_sys_openat2+0x13e/0x1d0 [ 1065.418976][T18778] __x64_sys_creat+0x123/0x170 [ 1065.423929][T18778] do_syscall_64+0xf3/0x230 [ 1065.428624][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.434701][T18778] [ 1065.437021][T18778] [ 1065.437021][T18778] the dependencies between the lock to be acquired [ 1065.437031][T18778] and HARDIRQ-irq-unsafe lock: [ 1065.450543][T18778] -> (tasklist_lock){.+.+}-{2:2} { [ 1065.455689][T18778] HARDIRQ-ON-R at: [ 1065.459674][T18778] lock_acquire+0x1ed/0x550 [ 1065.465831][T18778] _raw_read_lock+0x36/0x50 [ 1065.472074][T18778] __do_wait+0x12d/0x850 [ 1065.477975][T18778] do_wait+0x1e9/0x560 [ 1065.483703][T18778] kernel_wait+0xe9/0x240 [ 1065.489779][T18778] call_usermodehelper_exec_work+0xbd/0x230 [ 1065.497331][T18778] process_scheduled_works+0xa2c/0x1830 [ 1065.504531][T18778] worker_thread+0x86d/0xd50 [ 1065.510784][T18778] kthread+0x2f0/0x390 [ 1065.516516][T18778] ret_from_fork+0x4b/0x80 [ 1065.522603][T18778] ret_from_fork_asm+0x1a/0x30 [ 1065.529057][T18778] SOFTIRQ-ON-R at: [ 1065.533069][T18778] lock_acquire+0x1ed/0x550 [ 1065.539230][T18778] _raw_read_lock+0x36/0x50 [ 1065.545385][T18778] __do_wait+0x12d/0x850 [ 1065.551296][T18778] do_wait+0x1e9/0x560 [ 1065.557028][T18778] kernel_wait+0xe9/0x240 [ 1065.563025][T18778] call_usermodehelper_exec_work+0xbd/0x230 [ 1065.570570][T18778] process_scheduled_works+0xa2c/0x1830 [ 1065.577777][T18778] worker_thread+0x86d/0xd50 [ 1065.584029][T18778] kthread+0x2f0/0x390 [ 1065.589757][T18778] ret_from_fork+0x4b/0x80 [ 1065.595843][T18778] ret_from_fork_asm+0x1a/0x30 [ 1065.602287][T18778] INITIAL USE at: [ 1065.606193][T18778] lock_acquire+0x1ed/0x550 [ 1065.612354][T18778] _raw_write_lock_irq+0xd3/0x120 [ 1065.618949][T18778] copy_process+0x228b/0x3dc0 [ 1065.625207][T18778] kernel_clone+0x226/0x8f0 [ 1065.631293][T18778] user_mode_thread+0x132/0x1a0 [ 1065.637728][T18778] rest_init+0x23/0x300 [ 1065.643537][T18778] start_kernel+0x47a/0x500 [ 1065.649629][T18778] x86_64_start_reservations+0x2a/0x30 [ 1065.656662][T18778] x86_64_start_kernel+0x99/0xa0 [ 1065.663175][T18778] common_startup_64+0x13e/0x147 [ 1065.669679][T18778] INITIAL READ USE at: [ 1065.674099][T18778] lock_acquire+0x1ed/0x550 [ 1065.680606][T18778] _raw_read_lock+0x36/0x50 [ 1065.687110][T18778] __do_wait+0x12d/0x850 [ 1065.693359][T18778] do_wait+0x1e9/0x560 [ 1065.699440][T18778] kernel_wait+0xe9/0x240 [ 1065.705788][T18778] call_usermodehelper_exec_work+0xbd/0x230 [ 1065.713704][T18778] process_scheduled_works+0xa2c/0x1830 [ 1065.721295][T18778] worker_thread+0x86d/0xd50 [ 1065.727997][T18778] kthread+0x2f0/0x390 [ 1065.734094][T18778] ret_from_fork+0x4b/0x80 [ 1065.740531][T18778] ret_from_fork_asm+0x1a/0x30 [ 1065.747308][T18778] } [ 1065.749842][T18778] ... key at: [] tasklist_lock+0x18/0x40 [ 1065.757598][T18778] ... acquired at: [ 1065.761416][T18778] lock_acquire+0x1ed/0x550 [ 1065.766101][T18778] _raw_read_lock+0x36/0x50 [ 1065.770786][T18778] send_sigio+0xfc/0x360 [ 1065.775215][T18778] dnotify_handle_event+0x13c/0x440 [ 1065.780593][T18778] fsnotify+0x1738/0x1f70 [ 1065.785110][T18778] __fsnotify_parent+0x4f5/0x5e0 [ 1065.790257][T18778] vfs_readv+0x8f8/0xa90 [ 1065.794688][T18778] __x64_sys_preadv+0x1c7/0x2d0 [ 1065.799736][T18778] do_syscall_64+0xf3/0x230 [ 1065.804468][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.810585][T18778] [ 1065.812914][T18778] [ 1065.812914][T18778] stack backtrace: [ 1065.818833][T18778] CPU: 0 PID: 18778 Comm: syz.2.2655 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 1065.829088][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1065.839179][T18778] Call Trace: [ 1065.842485][T18778] [ 1065.845426][T18778] dump_stack_lvl+0x241/0x360 [ 1065.850120][T18778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1065.855332][T18778] ? __pfx__printk+0x10/0x10 [ 1065.859969][T18778] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1065.866394][T18778] validate_chain+0x4de0/0x5900 [ 1065.871271][T18778] ? __pfx_validate_chain+0x10/0x10 [ 1065.876498][T18778] ? __lock_acquire+0x1346/0x1fd0 [ 1065.881531][T18778] ? mark_lock+0x9a/0x350 [ 1065.885877][T18778] __lock_acquire+0x1346/0x1fd0 [ 1065.890746][T18778] lock_acquire+0x1ed/0x550 [ 1065.895258][T18778] ? send_sigio+0xfc/0x360 [ 1065.899689][T18778] ? __pfx_lock_acquire+0x10/0x10 [ 1065.904721][T18778] ? do_raw_read_lock+0x3c/0x90 [ 1065.909589][T18778] ? _raw_read_lock_irqsave+0xe9/0x130 [ 1065.915071][T18778] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1065.920982][T18778] _raw_read_lock+0x36/0x50 [ 1065.925494][T18778] ? send_sigio+0xfc/0x360 [ 1065.929946][T18778] send_sigio+0xfc/0x360 [ 1065.934214][T18778] dnotify_handle_event+0x13c/0x440 [ 1065.939464][T18778] fsnotify+0x1738/0x1f70 [ 1065.943817][T18778] ? fsnotify+0x53d/0x1f70 [ 1065.948244][T18778] ? __pfx_fsnotify+0x10/0x10 [ 1065.952937][T18778] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1065.958151][T18778] ? __asan_memcpy+0x40/0x70 [ 1065.962761][T18778] __fsnotify_parent+0x4f5/0x5e0 [ 1065.967739][T18778] ? __pfx___fsnotify_parent+0x10/0x10 [ 1065.973237][T18778] vfs_readv+0x8f8/0xa90 [ 1065.977510][T18778] ? __pfx_lock_acquire+0x10/0x10 [ 1065.982547][T18778] ? __pfx_vfs_readv+0x10/0x10 [ 1065.987342][T18778] ? __fget_files+0x29/0x470 [ 1065.991949][T18778] __x64_sys_preadv+0x1c7/0x2d0 [ 1065.996830][T18778] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1066.002233][T18778] ? do_syscall_64+0x100/0x230 [ 1066.007020][T18778] ? do_syscall_64+0xb6/0x230 [ 1066.011741][T18778] do_syscall_64+0xf3/0x230 [ 1066.016417][T18778] ? clear_bhb_loop+0x35/0x90 [ 1066.021117][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.027031][T18778] RIP: 0033:0x7f3142d75b99 [ 1066.031466][T18778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.051093][T18778] RSP: 002b:00007f3143a7f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1066.059523][T18778] RAX: ffffffffffffffda RBX: 00007f3142f03fa0 RCX: 00007f3142d75b99 [ 1066.067861][T18778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1066.075924][T18778] RBP: 00007f3142df677e R08: 0000000000000000 R09: 0000000000000000 [ 1066.083910][T18778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.091883][T18778] R13: 000000000000000b R14: 00007f3142f03fa0 R15: 00007f314302fa68 [ 1066.099873][T18778] [ 1066.141406][ T5103] Bluetooth: hci0: command tx timeout [ 1066.245352][T16079] vhci_hcd: stop threads [ 1066.249649][T16079] vhci_hcd: release socket [ 1066.301708][ T786] usb 5-1: USB disconnect, device number 5 [ 1066.326362][T16079] vhci_hcd: disconnect device [ 1066.457747][ T25] usb 2-1: 0:2 : does not exist [ 1066.494419][ T25] usb 2-1: USB disconnect, device number 124 [ 1066.519548][ T5093] usb 1-1: USB disconnect, device number 126 [ 1066.723316][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.767104][T18063] udevd[18063]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1068.211433][ T5092] Bluetooth: hci0: command tx timeout [ 1070.292144][ T5092] Bluetooth: hci0: command tx timeout [ 1072.371660][ T5092] Bluetooth: hci0: command tx timeout