last executing test programs: 1m5.020372589s ago: executing program 1 (id=551): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r3, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 1m3.858594124s ago: executing program 1 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m2.516910021s ago: executing program 1 (id=556): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c}, 0x38) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000070100dd217cbfff43790f000138", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100004"], 0x30}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 1m0.039744547s ago: executing program 1 (id=559): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000080045000024000000000015"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x310) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000000)={0x7ff, 0x1, 0x6, 0x10001, 0x1, [{0x1000, 0x101, 0x0, '\x00', 0x801}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100001a0001000000000000000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="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"], 0x180}}, 0x0) syz_usb_connect(0x0, 0x10e, 0x0, 0x0) 56.400881771s ago: executing program 1 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) lchown(0x0, 0x0, 0x0) mkdir(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x20000000}) 53.680518086s ago: executing program 2 (id=577): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) semget(0x0, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r3 = getuid() setresuid(r3, 0xee01, 0xffffffffffffffff) r4 = semget(0x3, 0x4, 0x600) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000002200)=""/254) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000002380)=""/249) shmctl$IPC_SET(r1, 0x1, &(0x7f0000002180)={{0x3, r2, 0xee01, r3, r5, 0x1, 0x4a6}, 0x5dc, 0xb088, 0x1b, 0xe6, 0xffffffffffffffff, 0x0, 0x6}) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000002300)=""/122) 52.141719422s ago: executing program 2 (id=591): creat(0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x40000006) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="02010009080000000000000000000000030005000000000002000000ac141400"], 0x40}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) 52.042096113s ago: executing program 1 (id=582): prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff596}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x1, 0x0, r4, 0x3}) 50.594342193s ago: executing program 2 (id=585): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x810) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002ec0)=""/4096, 0x1000) 44.159840316s ago: executing program 4 (id=593): socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x40}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffff76, 0x80000, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffff262], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x38, 0x1) 43.65548368s ago: executing program 2 (id=597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd600101000008fc020000000000000000000000000000ff02000000000000000000000000000100000000000890780000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x2000015f, &(0x7f0000000180)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000001008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x86}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file1'}, 0xb) close(r3) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r3, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0xfff, 0x8c1c0) 40.729556837s ago: executing program 4 (id=599): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305829, &(0x7f0000000240)) 40.206468911s ago: executing program 2 (id=600): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 37.667575845s ago: executing program 4 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/96}], 0x1e, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r3, &(0x7f0000001b00)=""/194, 0xc2) 37.512872453s ago: executing program 2 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0xfffffffffffdffcd) r1 = socket(0x1f, 0x800, 0x0) r2 = syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0xcf6, 0x0, 0x0, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 33.864614255s ago: executing program 4 (id=610): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$join(0x1, 0xfffffffffffffffd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 32.828930301s ago: executing program 4 (id=611): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffda2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x3f, 0x1, @thr={0x0, &(0x7f0000000500)}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 24.55512624s ago: executing program 4 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x5}, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050200000000ffdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0400280014006e"], 0x9c}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) fchdir(r4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, 0xfffffffffffffffd, 0x58) r8 = syz_open_pts(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10, 0x10, r8, 0x8cbe0000) 13.654846139s ago: executing program 0 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000080)=""/255) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r3, 0x333, 0x0, 0x4, {0x1c}}, 0x14}, 0x1, 0xa60d000000000000, 0x0, 0x4c080}, 0x4) 10.915174171s ago: executing program 0 (id=633): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$revoke(0x6, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 8.773324052s ago: executing program 3 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) set_robust_list(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x9b, {"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", 0x1000}}, 0x1006) 7.614436903s ago: executing program 3 (id=636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) 6.55449466s ago: executing program 3 (id=637): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4, 0x0, 0x0, 0x3b03}, {0x6, 0x1}]}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}, 0x1c) shutdown(r0, 0x0) socket(0x0, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @nop, @exp_fastopen={0xfe, 0xa, 0xf989, "0521fb083cf6"}, @timestamp={0x8, 0xa}, @sack={0x5, 0x6, [0x0]}, @md5sig={0x13, 0x12, "9b113ff4c4385514c5bc5149cf7f48c8"}]}}}}}}}}, 0x0) socket$inet(0x2, 0x80001, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/9, 0x2c}], 0x1, 0x5e, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r3, 0x2}}, 0x18) 6.113275234s ago: executing program 0 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 4.935415629s ago: executing program 3 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 4.821542305s ago: executing program 0 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfed8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.052464492s ago: executing program 0 (id=641): socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) rename(&(0x7f0000000f40)='./file0\x00', 0x0) 1.764013836s ago: executing program 3 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@u}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r6, 0x205}, 0x14}}, 0x0) 940.22233ms ago: executing program 0 (id=643): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r3, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=644): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x20, 0x0, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_vhci(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) kernel console output (not intermixed with test programs): aw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.779780][ T1119] infiniband syz0: set down [ 103.077669][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.090299][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.149596][ T25] usb 1-1: USB disconnect, device number 2 [ 103.465765][ T5282] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.667275][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 103.676562][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 103.696329][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 103.721608][ T5282] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 103.731624][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.924514][ T5282] usb 3-1: config 0 descriptor?? [ 103.936568][ T5515] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.936836][ T5535] xt_CT: No such helper "snmp_trap" [ 106.210104][ T5282] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 106.306406][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 106.381691][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 106.391774][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.597218][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.623969][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 106.669246][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.693664][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.705776][ T25] usb 5-1: Product: syz [ 106.710959][ T25] usb 5-1: Manufacturer: syz [ 106.735723][ T25] usb 5-1: SerialNumber: syz [ 107.050946][ T5539] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.232139][ T52] smc: removing ib device syz0 [ 107.585942][ T941] lo speed is unknown, defaulting to 1000 [ 107.671222][ T944] usb 3-1: USB disconnect, device number 2 [ 107.884176][ T25] cdc_ncm 5-1:1.0: bind() failure [ 107.922145][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 107.940081][ T25] cdc_ncm 5-1:1.1: bind() failure [ 108.250492][ T944] usb 5-1: USB disconnect, device number 2 [ 108.531476][ T5551] ip6gretap0: entered promiscuous mode [ 108.551748][ T5551] ip6gretap0: left promiscuous mode [ 108.635791][ T5562] hfs: can't find a HFS filesystem on dev nullb0 [ 109.624491][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.670479][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.670735][ T5391] bridge_slave_0: entered allmulticast mode [ 109.776143][ T5391] bridge_slave_0: entered promiscuous mode [ 109.848851][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.879800][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.895297][ T5391] bridge_slave_1: entered allmulticast mode [ 109.960545][ T5391] bridge_slave_1: entered promiscuous mode [ 110.226890][ T5585] hub 9-0:1.0: USB hub found [ 110.269886][ T5585] hub 9-0:1.0: 8 ports detected [ 110.394888][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.488632][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.014230][ T5391] team0: Port device team_slave_0 added [ 111.044877][ T5592] Bluetooth: MGMT ver 1.23 [ 111.052678][ T5391] team0: Port device team_slave_1 added [ 111.386990][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.430515][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.523215][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.609820][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.643841][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.705997][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.958387][ T5598] kvm: kvm [5597]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 111.965124][ T5391] hsr_slave_0: entered promiscuous mode [ 112.023042][ T5391] hsr_slave_1: entered promiscuous mode [ 112.067047][ T5391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.083513][ T5391] Cannot create hsr debugfs directory [ 112.554161][ T5611] vivid-000: ================= START STATUS ================= [ 112.563080][ T5611] vivid-000: Generate PTS: true [ 112.569001][ T5611] vivid-000: Generate SCR: true [ 112.574494][ T5611] tpg source WxH: 640x360 (Y'CbCr) [ 112.579996][ T5611] tpg field: 1 [ 112.583455][ T5611] tpg crop: 640x360@0x0 [ 112.587769][ T5611] tpg compose: 640x360@0x0 [ 112.592284][ T5611] tpg colorspace: 8 [ 112.596217][ T5611] tpg transfer function: 0/0 [ 112.601084][ T5611] tpg Y'CbCr encoding: 0/0 [ 112.608204][ T5611] tpg quantization: 0/0 [ 112.613130][ T5611] tpg RGB range: 0/2 [ 112.617375][ T5611] vivid-000: ================== END STATUS ================== [ 115.179528][ T5640] xt_hashlimit: size too large, truncated to 1048576 [ 117.157888][ T5391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.216926][ T5391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.288458][ T5391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.371222][ T5391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.532315][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 117.950411][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.173416][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.258150][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.265359][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.369524][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.376933][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.679162][ T5391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.862838][ T5692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.010096][ T5700] Cannot find add_set index 0 as target [ 119.191396][ T5701] netlink: 200 bytes leftover after parsing attributes in process `syz.0.80'. [ 119.419782][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.725426][ T5710] kvm_intel: kvm [5709]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 119.749276][ T5391] veth0_vlan: entered promiscuous mode [ 119.794010][ T5391] veth1_vlan: entered promiscuous mode [ 119.923349][ T5391] veth0_macvtap: entered promiscuous mode [ 119.973648][ T5391] veth1_macvtap: entered promiscuous mode [ 120.178699][ T5321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.880425][ T5321] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 120.902473][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.948017][ T5321] usb 5-1: Product: syz [ 120.952250][ T5321] usb 5-1: Manufacturer: syz [ 121.014684][ T5321] usb 5-1: SerialNumber: syz [ 121.025134][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.065746][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.102362][ T5321] usb 5-1: config 0 descriptor?? [ 121.123399][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.162136][ T5321] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 121.180642][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.193338][ T5723] kvm: kvm [5713]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 121.228462][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.282965][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.351308][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.364163][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.417607][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.463365][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.525681][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.586218][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.645415][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.683917][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.721274][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.756794][ T5321] usb 5-1: USB disconnect, device number 3 [ 121.773247][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.785579][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.799674][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.657286][ T5391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.715791][ T5391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.742659][ T5391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.775714][ T5391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.206281][ T2543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.438089][ T2543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.770560][ T2548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.815770][ T2548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.945463][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.952455][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.953611][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.955331][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.956779][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.957796][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.065790][ T5282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.287888][ T5282] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 127.355768][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.363826][ T5282] usb 1-1: Product: syz [ 127.433592][ T5282] usb 1-1: Manufacturer: syz [ 127.465831][ T5282] usb 1-1: SerialNumber: syz [ 127.509718][ T5282] usb 1-1: config 0 descriptor?? [ 127.617725][ T5282] as10x_usb: device has been detected [ 127.643011][ T5282] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 127.682135][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 127.801054][ T5282] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 128.134511][ T5282] as10x_usb: error during firmware upload part1 [ 128.906448][ T5282] Registered device Elgato EyeTV DTT Deluxe [ 128.926615][ T5282] usb 1-1: USB disconnect, device number 3 [ 129.008798][ T54] Bluetooth: hci5: command tx timeout [ 129.314817][ T5282] Unregistered device Elgato EyeTV DTT Deluxe [ 129.443275][ T5282] as10x_usb: device has been disconnected [ 129.628158][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.659837][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.681166][ T5780] bridge_slave_0: entered allmulticast mode [ 130.790844][ T5780] bridge_slave_0: entered promiscuous mode [ 130.853666][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.967953][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.006276][ T5780] bridge_slave_1: entered allmulticast mode [ 131.046625][ T5780] bridge_slave_1: entered promiscuous mode [ 131.085864][ T54] Bluetooth: hci5: command tx timeout [ 131.222376][ T5830] warning: `syz.4.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.323417][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.484680][ T5839] Illegal XDP return value 65536 on prog (id 29) dev N/A, expect packet loss! [ 132.561312][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.612829][ T5837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.904066][ T5780] team0: Port device team_slave_0 added [ 132.987806][ T5780] team0: Port device team_slave_1 added [ 133.092647][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100165][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165793][ T54] Bluetooth: hci5: command tx timeout [ 133.986971][ T5846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.149371][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.184655][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.425766][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.219007][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.245738][ T54] Bluetooth: hci5: command tx timeout [ 135.285801][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.436492][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.498973][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.665711][ T5312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.734883][ T5780] hsr_slave_0: entered promiscuous mode [ 135.768952][ T5780] hsr_slave_1: entered promiscuous mode [ 135.784340][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.793630][ T5780] Cannot create hsr debugfs directory [ 135.886191][ T5312] usb 5-1: Using ep0 maxpacket: 16 [ 137.067719][ T5312] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 137.084194][ T5312] usb 5-1: config 0 has no interface number 0 [ 137.115767][ T5312] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 137.155830][ T5312] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.222786][ T5312] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 137.454433][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 137.503628][ T5312] usb 5-1: Product: syz [ 137.511185][ T5312] usb 5-1: SerialNumber: syz [ 138.349125][ T5312] usb 5-1: config 0 descriptor?? [ 138.371550][ T5312] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 138.501444][ T5312] usb 5-1: USB disconnect, device number 4 [ 141.987285][ T5922] loop4: detected capacity change from 0 to 7 [ 142.094813][ T5925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.121'. [ 142.747996][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.783684][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.807772][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.840883][ T5780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.869423][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.888527][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.913411][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.921937][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.930259][ T5922] ldm_validate_partition_table(): Disk read failed. [ 142.937222][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.945448][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.953555][ T5922] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.961752][ T5922] Dev loop4: unable to read RDB block 0 [ 142.983771][ T5922] loop4: unable to read partition table [ 142.991428][ T5922] loop4: partition table beyond EOD, truncated [ 142.998360][ T5922] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 142.998360][ T5922] ) failed (rc=-5) [ 143.250875][ T5780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.314876][ T5934] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 143.412502][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 143.695361][ T5780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.874246][ T5944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.828507][ T5780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.183290][ T5957] Zero length message leads to an empty skb [ 146.442870][ T1110] bridge_slave_1: left allmulticast mode [ 146.477202][ T1110] bridge_slave_1: left promiscuous mode [ 147.105936][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.475051][ T29] audit: type=1326 audit(1725680893.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.0.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fd77cef9 code=0x0 [ 147.674022][ T1110] bridge_slave_0: left allmulticast mode [ 147.703519][ T1110] bridge_slave_0: left promiscuous mode [ 147.770285][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.952937][ T5975] kvm: kvm [5974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8e3 [ 148.031616][ T5975] kvm: kvm [5974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x927 [ 148.098404][ T5975] kvm: kvm [5974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9af [ 148.164062][ T5975] kvm: kvm [5974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa19 [ 148.248753][ T5975] kvm: kvm [5974]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa55 [ 148.957176][ T5992] sg_write: data in/out 721008/1 bytes for SCSI command 0xcb-- guessing data in; [ 148.957176][ T5992] program syz.1.136 not setting count and/or reply_len properly [ 150.186132][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.200611][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.137728][ T1110] bond0 (unregistering): Released all slaves [ 151.210592][ T5986] netlink: 136 bytes leftover after parsing attributes in process `syz.0.135'. [ 151.225966][ T5986] netlink: 136 bytes leftover after parsing attributes in process `syz.0.135'. [ 151.757446][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.962572][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.006103][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.053888][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.038418][ T1110] hsr_slave_0: left promiscuous mode [ 153.053291][ T1110] hsr_slave_1: left promiscuous mode [ 153.062739][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.073443][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.086957][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.094668][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.212331][ T1110] veth1_macvtap: left promiscuous mode [ 154.258444][ T1110] veth0_macvtap: left promiscuous mode [ 154.264187][ T1110] veth1_vlan: left promiscuous mode [ 154.325779][ T1110] veth0_vlan: left promiscuous mode [ 154.657356][ T6027] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 154.902288][ T6023] nvme_fabrics: missing parameter 'transport=%s' [ 154.933461][ T6025] kvm: kvm [6024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 154.934669][ T6023] nvme_fabrics: missing parameter 'nqn=%s' [ 154.979807][ T6025] kvm: kvm [6024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 159.168255][ T941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.212585][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 159.438680][ T941] usb 2-1: string descriptor 0 read error: -22 [ 159.456780][ T941] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 159.499296][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.543094][ T941] usb 2-1: config 0 descriptor?? [ 159.587288][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 159.656814][ T941] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 159.678100][ T941] usb 2-1: No valid video chain found. [ 161.134262][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 161.579421][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.768824][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.835218][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.842448][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.674800][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.682018][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.824194][ T941] usb 2-1: USB disconnect, device number 3 [ 162.866292][ T6076] netlink: 'syz.4.160': attribute type 16 has an invalid length. [ 162.915947][ T6076] netlink: 'syz.4.160': attribute type 3 has an invalid length. [ 162.956046][ T6076] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.160'. [ 163.055826][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.188790][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.235772][ T5282] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.265411][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.326452][ T5282] usb 4-1: config 0 descriptor?? [ 164.371959][ T5282] usb 4-1: can't set config #0, error -71 [ 164.386081][ T5282] usb 4-1: USB disconnect, device number 2 [ 166.475440][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.552172][ T6096] fuse: Unknown parameter '0000000000000000000005600000000000000000000' [ 166.730706][ T5780] veth0_vlan: entered promiscuous mode [ 166.832745][ T5780] veth1_vlan: entered promiscuous mode [ 167.034658][ T5780] veth0_macvtap: entered promiscuous mode [ 168.816658][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.828943][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.837445][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.093523][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.102700][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.110864][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.172282][ T5780] veth1_macvtap: entered promiscuous mode [ 169.306911][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 169.346038][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 169.451653][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.472493][ T6119] team0: Port device batadv1 added [ 169.779652][ T6127] Cannot find add_set index 0 as target [ 170.363336][ T6120] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 170.445500][ T6118] netlink: 236 bytes leftover after parsing attributes in process `syz.3.172'. [ 170.657180][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.681090][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.717751][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.784736][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.844419][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.955832][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.038761][ T6140] nbd: illegal input index 15335424 [ 171.069525][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.080309][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.092926][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.166337][ T54] Bluetooth: hci1: command tx timeout [ 171.299932][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.324940][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.405815][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.666225][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.443445][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.464318][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.511887][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.575062][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.608820][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.718133][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.766436][ T6148] 9pnet: p9_errstr2errno: server reported unknown error [ 172.785102][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.804719][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.822829][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.257146][ T54] Bluetooth: hci1: command tx timeout [ 173.665216][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.696196][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.757409][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 173.839501][ T6157] trusted_key: syz.4.179 sent an empty control message without MSG_MORE. [ 174.000826][ T6163] overlayfs: overlapping lowerdir path [ 174.692096][ T2543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.705651][ T2543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.356768][ T54] Bluetooth: hci1: command tx timeout [ 176.136118][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.184137][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.237093][ T6112] bridge_slave_0: entered allmulticast mode [ 176.261786][ T6112] bridge_slave_0: entered promiscuous mode [ 176.368177][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.395916][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.409805][ T6112] bridge_slave_1: entered allmulticast mode [ 176.427364][ T6112] bridge_slave_1: entered promiscuous mode [ 176.579326][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.596400][ T5282] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.669383][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.833752][ T6193] netlink: zone id is out of range [ 176.852977][ T5282] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.871001][ T6193] netlink: zone id is out of range [ 176.912205][ T5282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.054259][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.081854][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.107327][ T6193] netlink: set zone limit has 4 unknown bytes [ 177.139364][ T5282] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.193282][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.223609][ T5282] usb 3-1: Product: syz [ 177.232411][ T6112] team0: Port device team_slave_0 added [ 177.255429][ T5282] usb 3-1: Manufacturer: syz [ 177.339054][ T5282] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 177.405808][ T54] Bluetooth: hci1: command tx timeout [ 177.443577][ T6196] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 177.740553][ T6196] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.785925][ T5282] usb 3-1: USB disconnect, device number 3 [ 177.849385][ T6112] team0: Port device team_slave_1 added [ 178.240259][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.299632][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 178.311495][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 179.155727][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.216749][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.248622][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.265402][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.406250][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.657825][ T6112] hsr_slave_0: entered promiscuous mode [ 183.430009][ T6112] hsr_slave_1: entered promiscuous mode [ 183.575731][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.583544][ T6112] Cannot create hsr debugfs directory [ 184.909312][ T6260] vlan2: entered promiscuous mode [ 184.922818][ T6260] dummy0: entered promiscuous mode [ 184.987131][ T6260] team0: Port device vlan2 added [ 185.285327][ T6112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.644045][ T6267] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.651746][ T6267] vhci_hcd: invalid port number 9 [ 185.656893][ T6267] vhci_hcd: invalid port number 9 [ 186.663781][ T6112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.701580][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 186.746401][ T6269] vlan3: entered promiscuous mode [ 186.760301][ T6269] team0: entered promiscuous mode [ 186.768697][ T6269] team_slave_0: entered promiscuous mode [ 186.775316][ T6269] team_slave_1: entered promiscuous mode [ 186.801473][ T6269] team0: left promiscuous mode [ 186.811780][ T6269] team_slave_0: left promiscuous mode [ 186.846465][ T6269] team_slave_1: left promiscuous mode [ 187.032648][ T6112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.225968][ T6112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.125396][ T6294] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 189.194213][ T6294] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.203849][ T6294] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.373398][ T6223] bridge_slave_1: left allmulticast mode [ 189.389533][ T6223] bridge_slave_1: left promiscuous mode [ 189.426601][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.726849][ T6223] bridge_slave_0: left allmulticast mode [ 190.298618][ T6223] bridge_slave_0: left promiscuous mode [ 192.781718][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.541942][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567064][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.117832][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 196.353929][ T29] audit: type=1326 audit(1725680942.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6314 comm="syz.3.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e317cef9 code=0x0 [ 196.611467][ T4616] Bluetooth: hci2: command 0x0406 tx timeout [ 196.618574][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 197.130652][ T6316] xt_CT: No such helper "pptp" [ 198.337715][ T6320] dccp_close: ABORT with 104 bytes unread [ 201.673716][ T6353] tty tty25: ldisc open failed (-12), clearing slot 24 [ 201.893136][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.913346][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.923791][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.141448][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.149787][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.161050][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.292853][ T6223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.074809][ T6223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.211332][ T6223] bond0 (unregistering): Released all slaves [ 203.549743][ T6313] tipc: Started in network mode [ 203.652846][ T6313] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 203.793135][ T6313] tipc: Enabled bearer , priority 0 [ 204.206245][ T5232] Bluetooth: hci0: command tx timeout [ 204.581808][ T6383] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 204.687488][ T6386] qnx6: unable to read the first superblock [ 204.961284][ T5321] tipc: Node number set to 10398378 [ 205.344426][ T6112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.431836][ T6112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.717979][ T6112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.747389][ T6112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.011354][ T6392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.047298][ T6223] hsr_slave_0: left promiscuous mode [ 206.068930][ T6223] hsr_slave_1: left promiscuous mode [ 206.088482][ T6392] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.106347][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.113836][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.131309][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.150562][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.227835][ T6223] veth1_macvtap: left promiscuous mode [ 206.233494][ T6223] veth0_macvtap: left promiscuous mode [ 206.249887][ T6223] veth1_vlan: left promiscuous mode [ 206.255344][ T6223] veth0_vlan: left promiscuous mode [ 206.285861][ T5232] Bluetooth: hci0: command tx timeout [ 208.365738][ T5232] Bluetooth: hci0: command tx timeout [ 208.753385][ T6223] team0 (unregistering): Port device team_slave_1 removed [ 208.803739][ T6223] team0 (unregistering): Port device team_slave_0 removed [ 209.583429][ T6392] siw: device registration error -19 [ 210.475758][ T5232] Bluetooth: hci0: command tx timeout [ 210.617344][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 210.718445][ T5283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.948637][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.209663][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.323200][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.448529][ T5283] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 211.603192][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.667311][ T5283] usb 5-1: config 0 descriptor?? [ 211.881968][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.918642][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.941826][ T6362] bridge_slave_0: entered allmulticast mode [ 211.994257][ T6362] bridge_slave_0: entered promiscuous mode [ 212.005861][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.013047][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.023506][ T6362] bridge_slave_1: entered allmulticast mode [ 212.031817][ T6362] bridge_slave_1: entered promiscuous mode [ 212.117655][ T6223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.768108][ T5283] isku 0003:1E7D:319C.0002: unknown main item tag 0x1 [ 212.775015][ T5283] isku 0003:1E7D:319C.0002: unbalanced collection at end of report description [ 212.819662][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.888915][ T5283] isku 0003:1E7D:319C.0002: parse failed [ 212.894713][ T5283] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -22 [ 212.910756][ T6223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.925946][ T5283] usb 5-1: USB disconnect, device number 5 [ 213.026995][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.101692][ T6223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.905680][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.912931][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.959999][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.047339][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.054599][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.119713][ T6223] bond0: (slave netdevsim0): Releasing backup interface [ 214.223831][ T6223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.594313][ T6362] team0: Port device team_slave_0 added [ 215.712596][ T6362] team0: Port device team_slave_1 added [ 217.547380][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 217.571703][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.609970][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.723800][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.581429][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.615713][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.656303][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.534167][ T6112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.604169][ T6112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.708357][ T6362] hsr_slave_0: entered promiscuous mode [ 220.721636][ T6362] hsr_slave_1: entered promiscuous mode [ 220.724589][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.724654][ T6362] Cannot create hsr debugfs directory [ 220.771635][ T6223] bridge_slave_1: left allmulticast mode [ 220.771712][ T6223] bridge_slave_1: left promiscuous mode [ 220.771926][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.977101][ T6223] bridge_slave_0: left allmulticast mode [ 221.016489][ T6223] bridge_slave_0: left promiscuous mode [ 221.066097][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.604638][ T6517] syz.2.265 uses obsolete (PF_INET,SOCK_PACKET) [ 224.499856][ T6223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.546393][ T6223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.565446][ T6223] bond0 (unregistering): Released all slaves [ 224.763392][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 224.780556][ T6531] vlan2: entered promiscuous mode [ 224.790890][ T6531] bridge0: entered promiscuous mode [ 224.841437][ T6531] bridge0: left promiscuous mode [ 224.875776][ T6223] tipc: Disabling bearer [ 224.896004][ T6223] tipc: Left network mode [ 225.082630][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.258518][ T6223] hsr_slave_0: left promiscuous mode [ 226.317093][ T6223] hsr_slave_1: left promiscuous mode [ 226.392801][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.437577][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.281139][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.305907][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.386091][ T6223] veth1_macvtap: left promiscuous mode [ 227.401198][ T6223] veth0_macvtap: left promiscuous mode [ 227.426437][ T6223] veth1_vlan: left promiscuous mode [ 227.431893][ T6223] veth0_vlan: left promiscuous mode [ 228.172432][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.184865][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.194449][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.204317][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.213705][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.222023][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.276112][ T6223] team0 (unregistering): Port device team_slave_1 removed [ 229.460814][ T6223] team0 (unregistering): Port device team_slave_0 removed [ 230.286680][ T5232] Bluetooth: hci3: command tx timeout [ 231.955219][ T6585] overlayfs: failed to set uuid (57/file1, err=-1); falling back to uuid=null. [ 232.026639][ T6585] overlayfs: failed to verify upper root origin [ 232.365884][ T5232] Bluetooth: hci3: command tx timeout [ 232.487048][ T6602] netlink: 148 bytes leftover after parsing attributes in process `syz.2.280'. [ 232.511193][ T6602] netlink: 'syz.2.280': attribute type 2 has an invalid length. [ 232.525790][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.280'. [ 232.747844][ T6605] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 233.158436][ T5312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 233.396151][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 233.417510][ T5312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 233.452654][ T5312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 233.483219][ T5312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.508479][ T5312] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.529275][ T5312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.550320][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.603426][ T6619] kvm: kvm [6618]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 233.618533][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 233.755444][ T6362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.797759][ T6362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.836874][ T5312] usb 3-1: GET_CAPABILITIES returned 0 [ 233.855111][ T5312] usbtmc 3-1:16.0: can't read capabilities [ 233.958952][ T6362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.980185][ T6362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.250828][ T944] usb 3-1: USB disconnect, device number 4 [ 234.472476][ T5232] Bluetooth: hci3: command tx timeout [ 234.635957][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.954613][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.997842][ T6574] bridge_slave_0: entered allmulticast mode [ 235.035841][ T6574] bridge_slave_0: entered promiscuous mode [ 235.086743][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.119520][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.155746][ T6574] bridge_slave_1: entered allmulticast mode [ 235.197760][ T6574] bridge_slave_1: entered promiscuous mode [ 236.330134][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.547456][ T5232] Bluetooth: hci3: command tx timeout [ 238.549773][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.944082][ T1119] bridge_slave_1: left allmulticast mode [ 238.945575][ C0] sched: RT throttling activated [ 238.976570][ T1119] bridge_slave_1: left promiscuous mode [ 238.982617][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.059367][ T1119] bridge_slave_0: left allmulticast mode [ 239.083247][ T1119] bridge_slave_0: left promiscuous mode [ 239.130119][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.226429][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.259106][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.283658][ T1119] bond0 (unregistering): Released all slaves [ 240.445221][ T6702] netlink: 'syz.3.296': attribute type 1 has an invalid length. [ 240.558920][ T1119] hsr_slave_0: left promiscuous mode [ 240.785498][ T1119] hsr_slave_1: left promiscuous mode [ 240.817610][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.842405][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.489156][ T6740] hub 9-0:1.0: USB hub found [ 243.499692][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 243.516871][ T6740] hub 9-0:1.0: 8 ports detected [ 243.644609][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 243.822942][ T54] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 243.848129][ T54] Bluetooth: hci5: unexpected event 0x06 length: 17 > 3 [ 243.918932][ T54] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 243.933378][ T54] Bluetooth: Wrong link type (-22) [ 243.941185][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 243.949024][ T54] Bluetooth: Wrong link type (-22) [ 243.954674][ T54] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 243.962413][ T54] Bluetooth: Wrong link type (-22) [ 243.972452][ T54] Bluetooth: hci5: link tx timeout [ 243.985400][ T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.589262][ T6574] team0: Port device team_slave_0 added [ 244.613055][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 244.632863][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 244.657128][ T6753] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 244.672426][ T6574] team0: Port device team_slave_1 added [ 244.754650][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.953583][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.985414][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.067968][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.128603][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.155798][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.297140][ T944] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 245.312432][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.502886][ T6574] hsr_slave_0: entered promiscuous mode [ 245.510567][ T6574] hsr_slave_1: entered promiscuous mode [ 245.525312][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.546257][ T944] usb 4-1: Using ep0 maxpacket: 32 [ 245.556427][ T944] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.575204][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.582459][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.591951][ T944] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.616101][ T944] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.625233][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.647138][ T944] hub 4-1:4.0: USB hub found [ 245.866914][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.874208][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.922376][ T944] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 246.048296][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 246.277242][ T5320] usb 4-1: USB disconnect, device number 3 [ 247.175330][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.587650][ T6362] veth0_vlan: entered promiscuous mode [ 247.626338][ T6574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.655512][ T6574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.745211][ T6362] veth1_vlan: entered promiscuous mode [ 247.780979][ T6574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.827384][ T6574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.094302][ T6362] veth0_macvtap: entered promiscuous mode [ 249.319699][ T6362] veth1_macvtap: entered promiscuous mode [ 250.353767][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.415597][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.445968][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.475978][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.508108][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.541700][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.582405][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.638507][ T6830] geneve2: entered promiscuous mode [ 250.664097][ T6830] geneve2: entered allmulticast mode [ 250.883112][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.910988][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.935432][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.962744][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.975705][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.996730][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.027541][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.094892][ T6362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.119150][ T6362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.148316][ T6362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.165774][ T6362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.261543][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.339023][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.430475][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.889231][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.896490][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.930183][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 253.104071][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.111404][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.491475][ T6856] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 254.287119][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.629071][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.692863][ T6867] hfs: can't find a HFS filesystem on dev nullb0 [ 255.484165][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.485433][ T6574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.557054][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.206032][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.212433][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.920280][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 256.929803][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 257.715131][ T6894] netlink: 'syz.1.223': attribute type 7 has an invalid length. [ 257.722943][ T6894] netlink: 'syz.1.223': attribute type 8 has an invalid length. [ 257.731015][ T6894] netlink: 224 bytes leftover after parsing attributes in process `syz.1.223'. [ 260.063648][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.204609][ T6574] veth0_vlan: entered promiscuous mode [ 260.238897][ T6574] veth1_vlan: entered promiscuous mode [ 260.354533][ T6574] veth0_macvtap: entered promiscuous mode [ 260.379390][ T6574] veth1_macvtap: entered promiscuous mode [ 260.441458][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.456215][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.471603][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.482359][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.492331][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.565399][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.592872][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.620134][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.502293][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.583842][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.617317][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.649588][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.683729][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.782362][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.800053][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.835688][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.995320][ T6943] --map-set only usable from mangle table [ 262.863056][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.169012][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.208433][ T6574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.298678][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 263.309488][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 264.051314][ T6574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.061058][ T6574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.070742][ T6574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.516303][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.550405][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.619985][ T6220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.652273][ T6220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.675723][ T941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 264.911783][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 264.931613][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.960836][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.183404][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.046356][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 266.055493][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.077076][ T941] usb 4-1: config 0 descriptor?? [ 266.108840][ T941] usbhid 4-1:0.0: can't add hid device: -22 [ 266.114911][ T941] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 267.184495][ T6959] netlink: 'syz.3.345': attribute type 29 has an invalid length. [ 267.230221][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 267.345708][ T941] usb 4-1: USB disconnect, device number 4 [ 270.137609][ T7011] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 270.698827][ T7023] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 270.707761][ T7023] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 271.484281][ T7022] xt_NFQUEUE: number of total queues is 0 [ 273.305142][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.315155][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.323956][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.333302][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.359819][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.379007][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.607015][ T5232] Bluetooth: hci1: command tx timeout [ 276.555093][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 277.003655][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.021162][ T941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 277.066544][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.073954][ T7036] bridge_slave_0: entered allmulticast mode [ 277.082267][ T7036] bridge_slave_0: entered promiscuous mode [ 277.119686][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.141559][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.201344][ T7036] bridge_slave_1: entered allmulticast mode [ 277.229987][ T7036] bridge_slave_1: entered promiscuous mode [ 277.282809][ T941] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 277.309985][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.322379][ T941] usb 4-1: config 0 descriptor?? [ 277.408883][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.439735][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.645723][ T5232] Bluetooth: hci1: command tx timeout [ 277.689516][ T7036] team0: Port device team_slave_0 added [ 277.742014][ T7036] team0: Port device team_slave_1 added [ 277.868017][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.878152][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.906859][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.927993][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.935651][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.990184][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.147765][ T7036] hsr_slave_0: entered promiscuous mode [ 278.167401][ T7036] hsr_slave_1: entered promiscuous mode [ 278.174148][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.182783][ T7036] Cannot create hsr debugfs directory [ 278.393009][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.418165][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.435918][ T7068] Cannot find set identified by id 0 to match [ 278.480419][ T941] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 278.516265][ T941] asix 4-1:0.0: probe with driver asix failed with error -71 [ 278.547252][ T941] usb 4-1: USB disconnect, device number 5 [ 278.849335][ T7036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.042847][ T7036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.180103][ T7036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.351914][ T7036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.589054][ T7036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.616646][ T7036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.637825][ T7036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.655690][ T7036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.726041][ T5232] Bluetooth: hci1: command tx timeout [ 280.036744][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.083166][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.129184][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.136402][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.159858][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.167156][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.289338][ T7036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.687847][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.894180][ T7036] veth0_vlan: entered promiscuous mode [ 280.953408][ T7036] veth1_vlan: entered promiscuous mode [ 281.038951][ T7036] veth0_macvtap: entered promiscuous mode [ 281.093658][ T7036] veth1_macvtap: entered promiscuous mode [ 281.217221][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.237151][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.265725][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.295785][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.306442][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.324734][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.355947][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.406131][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.429758][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.446106][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.467013][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.502082][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.515769][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.525794][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.563952][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.597404][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.607993][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.617926][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.628508][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.665671][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.685784][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.697408][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.754660][ T7036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.785710][ T7036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.794521][ T7036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.803909][ T7036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.812941][ T5232] Bluetooth: hci1: command tx timeout [ 282.108553][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.175979][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.241160][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.282339][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.667176][ T7082] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 283.378862][ T7082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.383'. [ 283.562571][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 287.578648][ T5232] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 287.578805][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: kworker/u9:3 Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 287.578840][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.578856][ T5232] Workqueue: hci4 hci_rx_work [ 287.578909][ T5232] Call Trace: [ 287.578920][ T5232] [ 287.578931][ T5232] dump_stack_lvl+0x241/0x360 [ 287.578966][ T5232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.578995][ T5232] ? __pfx__printk+0x10/0x10 [ 287.579026][ T5232] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 287.579055][ T5232] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 287.579095][ T5232] sysfs_create_dir_ns+0x2ce/0x3a0 [ 287.579128][ T5232] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 287.579170][ T5232] kobject_add_internal+0x435/0x8d0 [ 287.579210][ T5232] kobject_add+0x152/0x220 [ 287.579237][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.579274][ T5232] ? device_add+0x3e7/0xbf0 [ 287.579312][ T5232] ? __pfx_kobject_add+0x10/0x10 [ 287.579340][ T5232] ? _raw_spin_unlock+0x28/0x50 [ 287.579387][ T5232] ? get_device_parent+0x165/0x410 [ 287.579429][ T5232] device_add+0x4e5/0xbf0 [ 287.579480][ T5232] hci_conn_add_sysfs+0xe8/0x200 [ 287.579513][ T5232] le_conn_complete_evt+0xc9f/0x12e0 [ 287.579567][ T5232] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 287.579607][ T5232] ? __mutex_unlock_slowpath+0x21d/0x750 [ 287.579635][ T5232] ? __copy_skb_header+0x437/0x5b0 [ 287.579671][ T5232] ? skb_pull_data+0x112/0x230 [ 287.579713][ T5232] hci_le_enh_conn_complete_evt+0x185/0x420 [ 287.579761][ T5232] hci_event_packet+0xa55/0x1540 [ 287.579798][ T5232] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 287.579840][ T5232] ? __pfx_hci_event_packet+0x10/0x10 [ 287.579868][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.579906][ T5232] ? hci_send_to_monitor+0xd8/0x7f0 [ 287.579944][ T5232] ? kcov_remote_start+0x97/0x7d0 [ 287.579982][ T5232] hci_rx_work+0x3e8/0xca0 [ 287.580025][ T5232] ? process_scheduled_works+0x945/0x1830 [ 287.580056][ T5232] process_scheduled_works+0xa2c/0x1830 [ 287.580126][ T5232] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.580175][ T5232] ? assign_work+0x364/0x3d0 [ 287.580213][ T5232] worker_thread+0x86d/0xd10 [ 287.580266][ T5232] ? __kthread_parkme+0x169/0x1d0 [ 287.580305][ T5232] ? __pfx_worker_thread+0x10/0x10 [ 287.580337][ T5232] kthread+0x2f0/0x390 [ 287.580378][ T5232] ? __pfx_worker_thread+0x10/0x10 [ 287.580410][ T5232] ? __pfx_kthread+0x10/0x10 [ 287.580448][ T5232] ret_from_fork+0x4b/0x80 [ 287.580480][ T5232] ? __pfx_kthread+0x10/0x10 [ 287.580516][ T5232] ret_from_fork_asm+0x1a/0x30 [ 287.580571][ T5232] [ 287.580660][ T5232] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 287.580706][ T5232] Bluetooth: hci4: failed to register connection device [ 288.087380][ T5320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 288.279393][ T5320] usb 1-1: Using ep0 maxpacket: 16 [ 288.288220][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.288297][ T5320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.288350][ T5320] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.288381][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.320539][ T5320] usb 1-1: config 0 descriptor?? [ 289.209614][ T7150] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 289.308156][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.417884][ T5320] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 289.425795][ T5320] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 289.425837][ T5320] microsoft 0003:045E:07DA.0003: no inputs found [ 289.425855][ T5320] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 289.456245][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.906190][ T5282] usb 1-1: USB disconnect, device number 4 [ 290.986974][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 292.512016][ T7159] syz.3.393 (7159) used greatest stack depth: 19360 bytes left [ 293.449168][ T7176] vlan1: entered promiscuous mode [ 293.972805][ T7176] vlan1: entered allmulticast mode [ 294.391112][ T7194] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 295.585675][ T5312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.683369][ T29] audit: type=1800 audit(1725681042.130:4): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.408" name="/" dev="fuse" ino=1 res=0 errno=0 [ 296.699329][ T5312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.720059][ T5312] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 296.740424][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.763612][ T5312] usb 2-1: config 0 descriptor?? [ 296.804515][ T5312] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.844035][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 297.088023][ T7225] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 297.203698][ T5312] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 297.382916][ T7225] team0: Device hsr_slave_0 failed to register rx_handler [ 298.285190][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'. [ 298.298423][ T5283] usb 2-1: USB disconnect, device number 4 [ 298.337251][ T7237] netlink: 72 bytes leftover after parsing attributes in process `syz.0.416'. [ 299.334006][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.373660][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 299.455198][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 299.465258][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 301.257210][ T5282] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 302.058230][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.105693][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.155927][ T5282] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 302.225820][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.439485][ T5282] usb 5-1: config 0 descriptor?? [ 303.175044][ T7285] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 303.495917][ T5282] wacom 0003:056A:0331.0004: item fetching failed at offset 5/7 [ 303.504549][ T5282] wacom 0003:056A:0331.0004: parse failed [ 303.674479][ T7285] nvme_fabrics: missing parameter 'transport=%s' [ 303.684235][ T7285] nvme_fabrics: missing parameter 'nqn=%s' [ 303.724701][ T5282] wacom 0003:056A:0331.0004: probe with driver wacom failed with error -22 [ 303.798970][ T7296] Bluetooth: MGMT ver 1.23 [ 304.627981][ T5282] usb 5-1: USB disconnect, device number 6 [ 305.396817][ T7305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.926551][ T29] audit: type=1326 audit(1725681056.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 310.084806][ T29] audit: type=1326 audit(1725681056.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 310.176309][ T29] audit: type=1326 audit(1725681056.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 310.250823][ T29] audit: type=1326 audit(1725681056.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 310.395234][ T5312] kernel write not supported for file /uinput (pid: 5312 comm: kworker/1:3) [ 311.068019][ T29] audit: type=1326 audit(1725681056.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 311.246305][ T29] audit: type=1326 audit(1725681056.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 311.315723][ T29] audit: type=1326 audit(1725681056.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 311.390536][ T29] audit: type=1326 audit(1725681056.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 311.502591][ T29] audit: type=1326 audit(1725681056.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 311.603959][ T29] audit: type=1326 audit(1725681056.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbf6497cef9 code=0x7ffc0000 [ 312.407749][ T7342] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 313.564132][ T7342] nvme_fabrics: missing parameter 'transport=%s' [ 313.590149][ T7342] nvme_fabrics: missing parameter 'nqn=%s' [ 313.706978][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.721603][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.744815][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.754488][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.764039][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 313.771734][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.125590][ T7356] Bluetooth: MGMT ver 1.23 [ 314.142334][ T7356] Bluetooth: hci3: unsupported parameter 65535 [ 314.149073][ T7356] Bluetooth: hci3: unsupported parameter 208 [ 314.155398][ T7356] Bluetooth: hci3: unsupported parameter 65535 [ 314.162042][ T7356] Bluetooth: hci3: unsupported parameter 208 [ 315.279079][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 315.886969][ T5232] Bluetooth: hci6: command tx timeout [ 318.535487][ T5232] Bluetooth: hci6: command tx timeout [ 318.544692][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.559362][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.651437][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.690149][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.697865][ T7352] bridge_slave_0: entered allmulticast mode [ 319.705895][ T7352] bridge_slave_0: entered promiscuous mode [ 319.717637][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.741867][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.764647][ T7352] bridge_slave_1: entered allmulticast mode [ 319.801386][ T7352] bridge_slave_1: entered promiscuous mode [ 320.038473][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.084341][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.302392][ T7352] team0: Port device team_slave_0 added [ 320.429680][ T7352] team0: Port device team_slave_1 added [ 320.623454][ T5232] Bluetooth: hci6: command tx timeout [ 321.524226][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.535656][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.605602][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.649043][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.670786][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.733495][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.933179][ T7352] hsr_slave_0: entered promiscuous mode [ 321.956541][ T7352] hsr_slave_1: entered promiscuous mode [ 321.979815][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.000333][ T7352] Cannot create hsr debugfs directory [ 322.011410][ T7457] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 322.096116][ T7457] kvm: pic: level sensitive irq not supported [ 322.099335][ T7457] kvm: pic: non byte read [ 322.143237][ T7457] kvm: pic: level sensitive irq not supported [ 322.143594][ T7457] kvm: pic: non byte read [ 322.686082][ T5232] Bluetooth: hci6: command tx timeout [ 323.824289][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.835715][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.845224][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.853613][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.862907][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 323.875814][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.971897][ T7352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.105454][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 325.183750][ T7352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.381886][ T7352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.965690][ T54] Bluetooth: hci7: command tx timeout [ 327.518648][ T7352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.185715][ T54] Bluetooth: hci7: command tx timeout [ 330.206509][ T54] Bluetooth: hci7: command tx timeout [ 332.290045][ T54] Bluetooth: hci7: command tx timeout [ 335.220924][ T7352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.308193][ T7352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.353226][ T7352] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.489724][ T7352] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.947858][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 336.618238][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 336.630365][ T7544] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 336.653459][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.685255][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.723359][ T7470] bridge_slave_0: entered allmulticast mode [ 336.774063][ T7470] bridge_slave_0: entered promiscuous mode [ 337.034011][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.053783][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.803539][ T7470] bridge_slave_1: entered allmulticast mode [ 337.811681][ T7470] bridge_slave_1: entered promiscuous mode [ 338.120555][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.331973][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.362093][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.402706][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.620821][ T7470] team0: Port device team_slave_0 added [ 339.771920][ T7470] team0: Port device team_slave_1 added [ 339.902382][ T7570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 339.909446][ T7570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.004441][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.011712][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.054686][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.064472][ T7570] vhci_hcd vhci_hcd.0: Device attached [ 340.072890][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.098810][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.162324][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.191776][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.209330][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.275657][ T5283] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 340.283517][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.318218][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.325421][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.631631][ T7573] vhci_hcd: connection reset by peer [ 340.702435][ T11] vhci_hcd: stop threads [ 340.707829][ T11] vhci_hcd: release socket [ 340.713520][ T11] vhci_hcd: disconnect device [ 340.758007][ T7470] hsr_slave_0: entered promiscuous mode [ 340.796241][ T7470] hsr_slave_1: entered promiscuous mode [ 340.826135][ T7470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.848147][ T7470] Cannot create hsr debugfs directory [ 343.946707][ T7470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.159822][ T7614] netlink: 'syz.0.499': attribute type 2 has an invalid length. [ 345.472974][ T7470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.525299][ T5283] vhci_hcd: vhci_device speed not set [ 346.471157][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.570092][ T7470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.760006][ T7470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.848502][ T7352] veth0_vlan: entered promiscuous mode [ 347.950080][ T7352] veth1_vlan: entered promiscuous mode [ 348.145379][ T7352] veth0_macvtap: entered promiscuous mode [ 348.225976][ T7352] veth1_macvtap: entered promiscuous mode [ 348.297636][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.506863][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 348.515820][ T7470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.541918][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.557915][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.578225][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.591566][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.614148][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.633320][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.651763][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.663853][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.674438][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.685941][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.715694][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 348.722045][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.738126][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.769524][ T46] usb 5-1: config 0 has no interface number 0 [ 348.776817][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.798164][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.814665][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.822505][ T46] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.832592][ T7470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.840490][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.870530][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.888158][ T46] usb 5-1: config 0 descriptor?? [ 348.904745][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.941362][ T46] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 348.961296][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.003098][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.038438][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.058453][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.072581][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.085820][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.123365][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.142202][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.155987][ T46] usb 5-1: USB disconnect, device number 7 [ 349.161872][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 349.188118][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.210805][ T46] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 349.219865][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.248137][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.309212][ T7470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.382724][ T7352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.411261][ T7352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.425740][ T7352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.435445][ T7352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.464033][ T7470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.994484][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.482280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.891363][ T2557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.917267][ T2557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.038951][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.128750][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.187633][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.195007][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.250028][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.257404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.474734][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 353.494149][ T7682] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 355.823744][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.886910][ T7470] veth0_vlan: entered promiscuous mode [ 356.982496][ T7470] veth1_vlan: entered promiscuous mode [ 358.019661][ T7470] veth0_macvtap: entered promiscuous mode [ 358.045097][ T7470] veth1_macvtap: entered promiscuous mode [ 358.170822][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.217882][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.255823][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.277009][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.090365][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.132420][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.150179][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.163669][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.214095][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.248615][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.281435][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.292700][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.311815][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.324235][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.355811][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.561662][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.623407][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.652745][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.703104][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.751919][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.831392][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.841945][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.982705][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.992803][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.010478][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.525803][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 360.791696][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.802324][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.832660][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.852573][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 360.852596][ T29] audit: type=1326 audit(1725681107.290:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7723 comm="syz.3.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x0 [ 360.874348][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.921372][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.042040][ T7470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.067031][ T7470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.118133][ T7470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.145608][ T7470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.671573][ T7403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.727461][ T7403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.452769][ T7420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.466707][ T7420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.669141][ T7761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.677094][ T7761] IPv6: NLM_F_CREATE should be set when creating new route [ 363.684483][ T7761] IPv6: NLM_F_CREATE should be set when creating new route [ 363.758884][ T7761] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 365.310636][ T7779] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.245664][ T5320] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 366.468234][ T5320] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 366.485671][ T5320] usb 5-1: config 0 has no interface number 0 [ 366.501263][ T5320] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 366.534922][ T5320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.550217][ T5320] usb 5-1: Product: syz [ 366.556431][ T5320] usb 5-1: Manufacturer: syz [ 366.561111][ T5320] usb 5-1: SerialNumber: syz [ 366.608979][ T5320] usb 5-1: config 0 descriptor?? [ 366.631040][ T5320] esd_usb 5-1:0.120: sending version message failed [ 366.663419][ T5320] esd_usb 5-1:0.120: probe with driver esd_usb failed with error -8 [ 367.930831][ T5321] usb 5-1: USB disconnect, device number 8 [ 368.981511][ T5321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 369.287830][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.323818][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.373216][ T5321] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 369.421562][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.493764][ T5321] usb 1-1: config 0 descriptor?? [ 370.746014][ T5321] usbhid 1-1:0.0: can't add hid device: -71 [ 370.772423][ T5321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 370.867307][ T5321] usb 1-1: USB disconnect, device number 5 [ 371.269735][ T7822] UBIFS error (pid: 7822): cannot open "./file0", error -22 [ 372.354187][ T5280] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 373.145634][ T7825] capability: warning: `syz.4.553' uses deprecated v2 capabilities in a way that may be insecure [ 373.164271][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.170204][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.212995][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.240141][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.271173][ T5280] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.301579][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.496754][ T5280] usb 3-1: config 0 descriptor?? [ 375.154073][ T7854] netlink: 'syz.3.560': attribute type 3 has an invalid length. [ 376.706366][ T7848] netlink: 144 bytes leftover after parsing attributes in process `syz.1.559'. [ 376.811285][ T5280] usbhid 3-1:0.0: can't add hid device: -71 [ 376.828441][ T5280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.880710][ T5280] usb 3-1: USB disconnect, device number 5 [ 378.861021][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.867551][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.190225][ T7875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 379.238687][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 379.289667][ T7882] bridge1: entered promiscuous mode [ 379.300028][ T7882] bridge1: entered allmulticast mode [ 379.328401][ T7885] bridge1: port 1(syz_tun) entered blocking state [ 379.369668][ T7885] bridge1: port 1(syz_tun) entered disabled state [ 379.450034][ T7885] syz_tun: entered allmulticast mode [ 379.484676][ T54] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 379.659911][ T7882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.567'. [ 379.718218][ T7885] syz_tun: entered promiscuous mode [ 379.778096][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 379.801541][ T7885] bridge1: port 1(syz_tun) entered blocking state [ 379.808251][ T7885] bridge1: port 1(syz_tun) entered forwarding state [ 379.870881][ T7888] Bluetooth: MGMT ver 1.23 [ 379.962550][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.006651][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.055685][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.087976][ T7895] netlink: 256 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.250716][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.276247][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 380.591042][ T7901] dummy0: entered promiscuous mode [ 380.614816][ T7901] macsec1: entered promiscuous mode [ 380.639315][ T7901] macsec1: entered allmulticast mode [ 380.660760][ T7901] dummy0: entered allmulticast mode [ 382.135446][ T7909] dvmrp0: entered allmulticast mode [ 382.253042][ T7909] dvmrp0: left allmulticast mode [ 382.367813][ T29] audit: type=1326 audit(1725681128.810:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 382.389171][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.458433][ T29] audit: type=1326 audit(1725681128.810:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 382.500978][ T7917] bond_slave_0: entered promiscuous mode [ 382.507151][ T7917] bond_slave_1: entered promiscuous mode [ 382.513046][ T7917] macsec2: entered promiscuous mode [ 382.518383][ T7917] bond0: entered promiscuous mode [ 382.523933][ T7917] macsec2: entered allmulticast mode [ 382.529331][ T7917] bond0: entered allmulticast mode [ 382.534488][ T7917] bond_slave_0: entered allmulticast mode [ 382.540390][ T7917] bond_slave_1: entered allmulticast mode [ 382.583265][ T29] audit: type=1326 audit(1725681128.810:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 382.619204][ T29] audit: type=1326 audit(1725681128.810:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 382.925781][ T29] audit: type=1326 audit(1725681128.810:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 383.177159][ T29] audit: type=1326 audit(1725681128.810:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 383.640314][ T29] audit: type=1326 audit(1725681128.810:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 383.695909][ T29] audit: type=1326 audit(1725681128.810:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 383.852932][ T29] audit: type=1326 audit(1725681130.300:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 383.985751][ T29] audit: type=1326 audit(1725681130.340:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f095277cef9 code=0x7ffc0000 [ 392.848954][ T7980] __nla_validate_parse: 6 callbacks suppressed [ 392.849667][ T7980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.596'. [ 395.040267][ T5244] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 395.054029][ T5244] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 395.880238][ T5244] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 395.891369][ T5244] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 395.900659][ T5244] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 395.910650][ T5244] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.547634][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 397.255714][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 398.458150][ T8] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 398.532229][ T8018] smb3: Unknown parameter '*z' [ 398.687619][ T54] Bluetooth: hci8: command tx timeout [ 399.287152][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 399.315688][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.322065][ T7403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.570781][ T8] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 400.556809][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 400.701682][ T8] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 400.767660][ T54] Bluetooth: hci8: command tx timeout [ 400.779974][ T8] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 400.796075][ T8] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 400.807353][ T8] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 400.924321][ T8] usb 1-1: USB disconnect, device number 6 [ 401.768884][ T7403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.867447][ T8027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.874751][ T8027] IPv6: NLM_F_CREATE should be set when creating new route [ 401.925122][ T8028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.932459][ T8028] IPv6: NLM_F_CREATE should be set when creating new route [ 402.865740][ T54] Bluetooth: hci8: command tx timeout [ 402.989303][ T7403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.082115][ T7403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.426490][ T8057] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 404.945563][ T54] Bluetooth: hci8: command tx timeout [ 410.581325][ T7993] chnl_net:caif_netlink_parms(): no params data found [ 411.769095][ T8069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.834550][ T8069] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 415.232560][ T8069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.547547][ T8069] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 416.233311][ T7403] bridge_slave_1: left allmulticast mode [ 416.247727][ T7403] bridge_slave_1: left promiscuous mode [ 416.275909][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.328126][ T7403] bridge_slave_0: left allmulticast mode [ 416.333881][ T7403] bridge_slave_0: left promiscuous mode [ 416.370173][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.875398][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.934381][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.986678][ T7403] bond0 (unregistering): Released all slaves [ 419.056713][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.063922][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.116059][ T7993] bridge_slave_0: entered allmulticast mode [ 419.163092][ T7993] bridge_slave_0: entered promiscuous mode [ 419.187806][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.215557][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.235959][ T7993] bridge_slave_1: entered allmulticast mode [ 419.243725][ T7993] bridge_slave_1: entered promiscuous mode [ 419.373039][ T8069] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 419.425644][ T8069] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 419.947813][ T8069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.985576][ T8069] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 420.027351][ T5312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 420.060416][ T7993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.244153][ T7993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.305736][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 420.326874][ T5312] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 420.342275][ T5312] usb 4-1: config 0 has no interface number 0 [ 420.369750][ T5312] usb 4-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=e0.05 [ 420.429665][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.469976][ T5312] usb 4-1: Product: syz [ 420.505749][ T5312] usb 4-1: Manufacturer: syz [ 420.510429][ T5312] usb 4-1: SerialNumber: syz [ 420.560122][ T5312] usb 4-1: config 0 descriptor?? [ 420.716416][ T8069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.771860][ T8069] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 422.186299][ T7993] team0: Port device team_slave_0 added [ 423.209199][ T5320] usb 4-1: USB disconnect, device number 6 [ 423.392842][ T8069] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 423.417827][ T7993] team0: Port device team_slave_1 added [ 423.445625][ T8069] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 423.821191][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.890646][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.078291][ T7993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.260857][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.305595][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.415890][ T7993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.803210][ T8069] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 424.815703][ T8069] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 424.974271][ T7993] hsr_slave_0: entered promiscuous mode [ 425.069533][ T7993] hsr_slave_1: entered promiscuous mode [ 425.086139][ T7993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.104460][ T7993] Cannot create hsr debugfs directory [ 425.106716][ T4616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 425.138787][ T4616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 425.149501][ T4616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.160161][ T4616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 425.171317][ T8181] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.182427][ T4616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 425.182693][ T8181] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.199378][ T4616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 425.203154][ T8181] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.214070][ T4616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 425.214741][ T8181] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 425.236429][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.272765][ T5244] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.287156][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 425.296106][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.305857][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.317715][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.329824][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 425.329998][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 425.337425][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.354695][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 425.366521][ T4616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 425.377194][ T4616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 425.384730][ T4616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 427.897057][ T4616] Bluetooth: hci9: command tx timeout [ 427.897093][ T5244] Bluetooth: hci7: command tx timeout [ 428.132636][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 428.132657][ T29] audit: type=1326 audit(1725681174.590:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095277cef9 code=0x0 [ 428.159869][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.185357][ T8069] bridge1: port 1(syz_tun) entered disabled state [ 428.320236][ T8069] syz_tun (unregistering): left allmulticast mode [ 428.346906][ T8069] syz_tun (unregistering): left promiscuous mode [ 428.381828][ T8069] bridge1: port 1(syz_tun) entered disabled state [ 428.535694][ T7403] hsr_slave_0: left promiscuous mode [ 429.485890][ T7403] hsr_slave_1: left promiscuous mode [ 429.616410][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.630884][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.715895][ T8216] random: crng reseeded on system resumption [ 430.527613][ T4616] Bluetooth: hci9: command tx timeout [ 430.533191][ T5244] Bluetooth: hci7: command tx timeout [ 430.611319][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.619374][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.715691][ T7403] veth1_macvtap: left promiscuous mode [ 430.721437][ T7403] veth0_macvtap: left promiscuous mode [ 430.727480][ T7403] veth1_vlan: left promiscuous mode [ 430.733498][ T7403] veth0_vlan: left promiscuous mode [ 432.645416][ T5244] Bluetooth: hci7: command tx timeout [ 432.652598][ T4616] Bluetooth: hci9: command tx timeout [ 434.696431][ T5244] Bluetooth: hci7: command tx timeout [ 434.701893][ T4616] Bluetooth: hci9: command tx timeout [ 435.845037][ T7403] team0 (unregistering): Port device team_slave_1 removed [ 435.985628][ T7403] team0 (unregistering): Port device team_slave_0 removed [ 439.212649][ T8087] chnl_net:caif_netlink_parms(): no params data found [ 439.493882][ T7403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.708282][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 439.770218][ T7403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.009237][ T7403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.298937][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305893][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.445844][ T7403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.521273][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.567233][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.574623][ T8087] bridge_slave_0: entered allmulticast mode [ 440.608590][ T8087] bridge_slave_0: entered promiscuous mode [ 440.746109][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.776512][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.783775][ T8087] bridge_slave_1: entered allmulticast mode [ 440.818154][ T8087] bridge_slave_1: entered promiscuous mode [ 440.870323][ T7993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.889478][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.907153][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.914587][ T8154] bridge_slave_0: entered allmulticast mode [ 440.922904][ T8154] bridge_slave_0: entered promiscuous mode [ 440.946825][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.954128][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.966114][ T8154] bridge_slave_1: entered allmulticast mode [ 440.973833][ T8154] bridge_slave_1: entered promiscuous mode [ 441.037122][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.056045][ T7993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.078872][ T7993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.263044][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.376853][ T7993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.462259][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.567165][ T8087] team0: Port device team_slave_0 added [ 441.718354][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.802648][ T8087] team0: Port device team_slave_1 added [ 441.994263][ T8154] team0: Port device team_slave_0 added [ 442.028561][ T8154] team0: Port device team_slave_1 added [ 442.262485][ T7403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.449589][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.457414][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.518613][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.589278][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.605530][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.675734][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.724944][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.755674][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.836231][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.862739][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.875711][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.915688][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.989860][ T7403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.186453][ T7403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.457391][ T7403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.572750][ T8154] hsr_slave_0: entered promiscuous mode [ 443.616261][ T8154] hsr_slave_1: entered promiscuous mode [ 443.655882][ T8154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.663518][ T8154] Cannot create hsr debugfs directory [ 443.717018][ T8087] hsr_slave_0: entered promiscuous mode [ 443.736133][ T8087] hsr_slave_1: entered promiscuous mode [ 443.774117][ T8087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.783491][ T8087] Cannot create hsr debugfs directory [ 444.873141][ T7403] bridge_slave_1: left allmulticast mode [ 444.895665][ T7403] bridge_slave_1: left promiscuous mode [ 444.901840][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.976525][ T7403] bridge_slave_0: left allmulticast mode [ 444.982344][ T7403] bridge_slave_0: left promiscuous mode [ 445.015986][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.094753][ T7403] bridge_slave_1: left allmulticast mode [ 445.123224][ T7403] bridge_slave_1: left promiscuous mode [ 445.137593][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.186358][ T7403] bridge_slave_0: left allmulticast mode [ 445.192048][ T7403] bridge_slave_0: left promiscuous mode [ 445.233773][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.906131][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.946285][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.005428][ T7403] bond0 (unregistering): Released all slaves [ 448.486836][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.546182][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.635932][ T7403] bond0 (unregistering): Released all slaves [ 448.968679][ T7993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.335437][ T7993] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.489635][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.496841][ T7406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.523870][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.531184][ T7406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.273488][ T7403] hsr_slave_0: left promiscuous mode [ 450.328455][ T7403] hsr_slave_1: left promiscuous mode [ 450.366009][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.373626][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.456611][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.464114][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.597449][ T7403] hsr_slave_0: left promiscuous mode [ 450.647167][ T7403] hsr_slave_1: left promiscuous mode [ 450.686472][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.693945][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.786320][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.793787][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.963735][ T7403] veth1_macvtap: left promiscuous mode [ 450.995685][ T7403] veth0_macvtap: left promiscuous mode [ 451.001444][ T7403] veth1_vlan: left promiscuous mode [ 451.019958][ T7403] veth0_vlan: left promiscuous mode [ 451.066967][ T7403] veth1_macvtap: left promiscuous mode [ 451.072588][ T7403] veth0_macvtap: left promiscuous mode [ 451.115783][ T7403] veth1_vlan: left promiscuous mode [ 451.121203][ T7403] veth0_vlan: left promiscuous mode [ 454.135661][ T7403] team0 (unregistering): Port device team_slave_1 removed [ 454.400861][ T7403] team0 (unregistering): Port device team_slave_0 removed [ 454.659967][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.671969][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.681490][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.690559][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.699037][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 454.706592][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.776404][ T4616] Bluetooth: hci1: command tx timeout [ 457.872251][ T7403] team0 (unregistering): Port device team_slave_1 removed [ 458.029257][ T7403] team0 (unregistering): Port device team_slave_0 removed [ 458.206317][ T30] INFO: task syz.3.430:7286 blocked for more than 143 seconds. [ 458.213962][ T30] Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 458.247062][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.265890][ T30] task:syz.3.430 state:D stack:25400 pid:7286 tgid:7277 ppid:5391 flags:0x00004004 [ 458.305907][ T30] Call Trace: [ 458.309273][ T30] [ 458.312242][ T30] __schedule+0x17ae/0x4a10 [ 458.338387][ T30] ? __pfx___schedule+0x10/0x10 [ 458.343342][ T30] ? __pfx_lock_release+0x10/0x10 [ 458.435528][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.441704][ T30] ? schedule+0x90/0x320 [ 458.475921][ T30] schedule+0x14b/0x320 [ 458.480188][ T30] io_schedule+0x8d/0x110 [ 458.484569][ T30] folio_wait_bit_common+0x882/0x12b0 [ 458.537371][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 458.543260][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 458.575548][ T30] ? __filemap_get_folio+0x984/0xc10 [ 458.586227][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 458.592024][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 458.607536][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 458.613063][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 458.618809][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 458.624332][ T30] set_blocksize+0x2f4/0x360 [ 458.629618][ T30] sb_min_blocksize+0xa9/0x180 [ 458.643435][ T30] xfs_fs_fill_super+0x1c2/0x1420 [ 458.648905][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 458.653974][ T30] get_tree_bdev+0x3f7/0x570 [ 458.666176][ T30] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 458.671781][ T30] ? __pfx_get_tree_bdev+0x10/0x10 [ 458.705641][ T30] ? xfs_init_fs_context+0x2da/0x480 [ 458.717685][ T30] ? cap_capable+0x1b4/0x250 [ 458.722370][ T30] ? bpf_lsm_capable+0x9/0x10 [ 458.735621][ T30] vfs_get_tree+0x90/0x2b0 [ 458.746264][ T30] do_new_mount+0x2be/0xb40 [ 458.751019][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 458.785604][ T30] __se_sys_mount+0x2d6/0x3c0 [ 458.796044][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.802097][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 458.835596][ T30] ? do_syscall_64+0x100/0x230 [ 458.840538][ T30] ? __x64_sys_mount+0x20/0xc0 [ 458.845317][ T30] do_syscall_64+0xf3/0x230 [ 458.846756][ T4616] Bluetooth: hci1: command tx timeout [ 458.875765][ T30] ? clear_bhb_loop+0x35/0x90 [ 458.880539][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.905907][ T30] RIP: 0033:0x7f93e317cef9 [ 458.910406][ T30] RSP: 002b:00007f93e3f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.945519][ T30] RAX: ffffffffffffffda RBX: 00007f93e3336130 RCX: 00007f93e317cef9 [ 458.953576][ T30] RDX: 0000000020000080 RSI: 0000000020000100 RDI: 0000000020000000 [ 458.962528][ T30] RBP: 00007f93e31ef046 R08: 0000000000000000 R09: 0000000000000000 [ 458.971160][ T30] R10: 0000000000000390 R11: 0000000000000246 R12: 0000000000000000 [ 458.979697][ T30] R13: 0000000000000000 R14: 00007f93e3336130 R15: 00007fff7bf944b8 [ 458.988072][ T30] [ 459.010936][ T30] [ 459.010936][ T30] Showing all locks held in the system: [ 459.035771][ T30] 3 locks held by kworker/u8:0/11: [ 459.041073][ T30] #0: ffff888030193148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 459.072787][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 459.086524][ T30] #2: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 459.096737][ T30] 1 lock held by khungtaskd/30: [ 459.101608][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 459.116116][ T30] 3 locks held by kworker/u8:3/52: [ 459.121333][ T30] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 459.139399][ T30] #1: ffffc90000bc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 459.151125][ T30] #2: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 459.161643][ T30] 2 locks held by dhcpcd/4892: [ 459.168438][ T30] #0: ffff888030833678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 459.179399][ T30] #1: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 459.215923][ T30] 2 locks held by getty/4979: [ 459.220670][ T30] #0: ffff8880309c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 459.255603][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 459.282444][ T30] 2 locks held by kworker/1:3/5312: [ 459.305509][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 459.345513][ T30] #1: ffffc9000418fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 459.373845][ T30] 1 lock held by syz-executor/6574: [ 459.379315][ T30] 2 locks held by syz.2.336/6920: [ 459.384373][ T30] 1 lock held by syz.3.430/7286: [ 459.396779][ T30] #0: ffff8880768b20e0 (&type->s_umount_key#66/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 459.412003][ T30] 1 lock held by syz-executor/7352: [ 459.417420][ T30] #0: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 459.445690][ T30] 5 locks held by kworker/u8:17/7403: [ 459.451140][ T30] #0: ffff88801b6e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 459.525522][ T30] #1: ffffc90003f2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 459.575142][ T30] #2: ffffffff8fa6d2d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 459.597482][ T30] #3: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 459.626313][ T30] #4: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 459.655559][ T30] 1 lock held by syz-executor/7993: [ 459.660839][ T30] #0: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 459.704286][ T30] 4 locks held by syz-executor/8087: [ 459.723575][ T30] #0: ffff888023474420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 459.756341][ T30] #1: ffff88807dd4dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 459.785639][ T30] #2: ffff88802879bc38 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 459.805844][ T30] #3: ffffffff8f3140c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 459.843225][ T30] 7 locks held by syz-executor/8154: [ 459.855918][ T30] #0: ffff888023474420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 459.865202][ T30] #1: ffff88807a0f7888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 459.876816][ T30] #2: ffff88802879bb48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 459.887300][ T30] #3: ffffffff8f3140c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 459.906122][ T30] #4: ffff88805cdff0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 459.925641][ T30] #5: ffff88805cdfc250 (&devlink->lock_key#15){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 459.936222][ T30] #6: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 459.945323][ T30] 1 lock held by syz-executor/8361: [ 459.956292][ T30] #0: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 459.966233][ T30] [ 459.968602][ T30] ============================================= [ 459.968602][ T30] [ 459.977858][ T30] NMI backtrace for cpu 0 [ 459.982280][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 459.992967][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.003041][ T30] Call Trace: [ 460.006329][ T30] [ 460.009261][ T30] dump_stack_lvl+0x241/0x360 [ 460.013947][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.019149][ T30] ? __pfx__printk+0x10/0x10 [ 460.023757][ T30] ? vprintk_emit+0x667/0x7c0 [ 460.028449][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 460.033490][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 460.038454][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 460.043927][ T30] ? _printk+0xd5/0x120 [ 460.048180][ T30] ? __pfx__printk+0x10/0x10 [ 460.052779][ T30] ? __wake_up_klogd+0xcc/0x110 [ 460.057648][ T30] ? __pfx__printk+0x10/0x10 [ 460.062246][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 460.067282][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.073282][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 460.079290][ T30] watchdog+0xff4/0x1040 [ 460.083554][ T30] ? watchdog+0x1ea/0x1040 [ 460.087993][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.092685][ T30] kthread+0x2f0/0x390 [ 460.096773][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.101463][ T30] ? __pfx_kthread+0x10/0x10 [ 460.106074][ T30] ret_from_fork+0x4b/0x80 [ 460.110536][ T30] ? __pfx_kthread+0x10/0x10 [ 460.115143][ T30] ret_from_fork_asm+0x1a/0x30 [ 460.119939][ T30] [ 460.123262][ T30] Sending NMI from CPU 0 to CPUs 1: [ 460.128932][ C1] NMI backtrace for cpu 1 [ 460.128946][ C1] CPU: 1 UID: 0 PID: 7406 Comm: kworker/u8:18 Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 460.128967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.128979][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 460.129008][ C1] RIP: 0010:ip_route_output_key_hash_rcu+0x1231/0x2390 [ 460.129040][ C1] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 77 cb ec f7 48 03 2b 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 ef e8 55 cb ec f7 4c 8b 75 00 e8 fc 2c a6 01 89 c3 31 [ 460.129056][ C1] RSP: 0018:ffffc90003917678 EFLAGS: 00000246 [ 460.129071][ C1] RAX: 1ffffd1ffffa47f1 RBX: ffff888033497cb8 RCX: dffffc0000000000 [ 460.129085][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.129097][ C1] RBP: ffffe8ffffd23f88 R08: ffffffff8a0ae2da R09: ffffffff8a0ae079 [ 460.129111][ C1] R10: 0000000000000003 R11: ffff88802ababc00 R12: 0000000000000001 [ 460.129122][ C1] R13: ffff888033497c00 R14: ffffc90003917760 R15: ffff888027f2ac00 [ 460.129136][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 460.129151][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.129164][ C1] CR2: 00000000201ff000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 460.129180][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.129191][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.129203][ C1] Call Trace: [ 460.129210][ C1] [ 460.129218][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 460.129242][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 460.129269][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 460.129292][ C1] ? nmi_handle+0x2a/0x5a0 [ 460.129320][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 460.129342][ C1] ? nmi_handle+0x14f/0x5a0 [ 460.129359][ C1] ? nmi_handle+0x2a/0x5a0 [ 460.129377][ C1] ? ip_route_output_key_hash_rcu+0x1231/0x2390 [ 460.129405][ C1] ? default_do_nmi+0x63/0x160 [ 460.129429][ C1] ? exc_nmi+0x123/0x1f0 [ 460.129452][ C1] ? end_repeat_nmi+0xf/0x53 [ 460.129478][ C1] ? ip_route_output_key_hash_rcu+0xef9/0x2390 [ 460.129504][ C1] ? ip_route_output_key_hash_rcu+0x115a/0x2390 [ 460.129534][ C1] ? ip_route_output_key_hash_rcu+0x1231/0x2390 [ 460.129568][ C1] ? ip_route_output_key_hash_rcu+0x1231/0x2390 [ 460.129597][ C1] ? ip_route_output_key_hash_rcu+0x1231/0x2390 [ 460.129626][ C1] [ 460.129631][ C1] [ 460.129647][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 460.129674][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 460.129701][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 460.129733][ C1] ? confirm_addr_indev+0x5c3/0x700 [ 460.129760][ C1] ip_route_output_flow+0x29/0x140 [ 460.129784][ C1] ? send4+0x2c3/0xfb0 [ 460.129806][ C1] send4+0x55b/0xfb0 [ 460.129838][ C1] ? __pfx_send4+0x10/0x10 [ 460.129864][ C1] ? mod_peer_timer+0x21/0x260 [ 460.129886][ C1] wg_socket_send_skb_to_peer+0xd5/0x1d0 [ 460.129912][ C1] wg_packet_handshake_send_worker+0x1dd/0x330 [ 460.129938][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 460.129978][ C1] ? process_scheduled_works+0x945/0x1830 [ 460.130001][ C1] process_scheduled_works+0xa2c/0x1830 [ 460.130042][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.130070][ C1] ? assign_work+0x364/0x3d0 [ 460.130096][ C1] worker_thread+0x86d/0xd10 [ 460.130129][ C1] ? __kthread_parkme+0x169/0x1d0 [ 460.130156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 460.130179][ C1] kthread+0x2f0/0x390 [ 460.130205][ C1] ? __pfx_worker_thread+0x10/0x10 [ 460.130228][ C1] ? __pfx_kthread+0x10/0x10 [ 460.130255][ C1] ret_from_fork+0x4b/0x80 [ 460.130279][ C1] ? __pfx_kthread+0x10/0x10 [ 460.130306][ C1] ret_from_fork_asm+0x1a/0x30 [ 460.130341][ C1] [ 460.516481][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 460.523474][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 460.534007][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.544114][ T30] Call Trace: [ 460.547416][ T30] [ 460.550401][ T30] dump_stack_lvl+0x241/0x360 [ 460.555116][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.560367][ T30] ? __pfx__printk+0x10/0x10 [ 460.564983][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.571015][ T30] ? vscnprintf+0x5d/0x90 [ 460.575376][ T30] panic+0x349/0x860 [ 460.579392][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 460.585581][ T30] ? __pfx_panic+0x10/0x10 [ 460.590018][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 460.595416][ T30] ? __irq_work_queue_local+0x137/0x410 [ 460.601021][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 460.606425][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 460.612611][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 460.618801][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 460.624992][ T30] watchdog+0x1033/0x1040 [ 460.629361][ T30] ? watchdog+0x1ea/0x1040 [ 460.633822][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.638531][ T30] kthread+0x2f0/0x390 [ 460.642645][ T30] ? __pfx_watchdog+0x10/0x10 [ 460.647359][ T30] ? __pfx_kthread+0x10/0x10 [ 460.651985][ T30] ret_from_fork+0x4b/0x80 [ 460.656441][ T30] ? __pfx_kthread+0x10/0x10 [ 460.661069][ T30] ret_from_fork_asm+0x1a/0x30 [ 460.665883][ T30] [ 460.669217][ T30] Kernel Offset: disabled [ 460.673553][ T30] Rebooting in 86400 seconds..