last executing test programs: 6m9.518240574s ago: executing program 32 (id=179): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 5m41.113227969s ago: executing program 33 (id=463): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, 0x8) 4m32.760021961s ago: executing program 1 (id=1318): setresgid(0xee00, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0xfffffffffffffd94, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}}], 0x2, 0x0) 4m32.724902379s ago: executing program 1 (id=1319): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4m30.712004234s ago: executing program 1 (id=1350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10) 4m30.665947052s ago: executing program 1 (id=1352): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1204000000000000000047", 0xb, 0x4000015, &(0x7f0000000980)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4m30.433583608s ago: executing program 1 (id=1355): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)="01", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x1, r1, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m30.208915817s ago: executing program 34 (id=1356): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000640)={r2, 0x9, 0x0, 0x3}, 0x10) 4m29.872535819s ago: executing program 35 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) mlock2(&(0x7f00000ae000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m29.86692652s ago: executing program 1 (id=1359): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/27) 4m29.866446991s ago: executing program 36 (id=1359): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/27) 3m29.42397239s ago: executing program 9 (id=1945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in=@multicast1, 0xffffffde, 0x4, 0x3}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 3m29.191253411s ago: executing program 9 (id=1951): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e03e8aa121206001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m28.944686696s ago: executing program 9 (id=1957): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r2 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000080)='A', 0x1) 3m28.744922802s ago: executing program 9 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 3m28.436074471s ago: executing program 9 (id=1965): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 3m28.144140406s ago: executing program 9 (id=1970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e1f, 0xfffffffd, @private2, 0xffffffff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r2, 0x4}, &(0x7f00000000c0)=0xc) 3m27.792378009s ago: executing program 37 (id=1970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e1f, 0xfffffffd, @private2, 0xffffffff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r2, 0x4}, &(0x7f00000000c0)=0xc) 2m33.01732061s ago: executing program 4 (id=2499): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) 2m32.7879986s ago: executing program 4 (id=2501): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/43, 0x2b}}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m32.658937576s ago: executing program 4 (id=2505): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) 2m32.486145074s ago: executing program 4 (id=2507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 2m32.34000151s ago: executing program 4 (id=2511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]}) 2m31.784087989s ago: executing program 4 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x82) close_range(r2, 0xffffffffffffffff, 0x0) 2m31.486235368s ago: executing program 38 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x82) close_range(r2, 0xffffffffffffffff, 0x0) 2m15.141273461s ago: executing program 6 (id=2603): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x178, 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfffffdf4, 0x0}, 0x40002000) 2m14.965125568s ago: executing program 6 (id=2605): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f00000000c0)='1', 0x1, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) 2m14.887063456s ago: executing program 6 (id=2607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000000580)=""/149, 0x95}], 0x2}, 0x12022) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) 2m14.703630179s ago: executing program 6 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m14.297999971s ago: executing program 6 (id=2609): r0 = io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0xd1a8, 0x40, 0x0, 0x32e}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.533827976s ago: executing program 6 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.097731217s ago: executing program 39 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.428796568s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1m19.813642693s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 1m7.439876537s ago: executing program 7 (id=2904): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 1m7.28199714s ago: executing program 7 (id=2905): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b480005000001008005090516cec22000000009040100000a0d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m4.718088579s ago: executing program 7 (id=2916): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x200004}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044100}, 0x0) 1m4.374458335s ago: executing program 7 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='\x00', 0x160) 1m4.207979849s ago: executing program 7 (id=2920): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m3.540961658s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1m2.701448031s ago: executing program 7 (id=2923): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m2.469891312s ago: executing program 40 (id=2923): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m0.472814275s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 49.881767275s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 47.423541004s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 28.787856159s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 27.849159821s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 14.86297492s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 13.719865649s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 6.934598612s ago: executing program 8 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 6.590963189s ago: executing program 41 (id=2258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 6.548100123s ago: executing program 3 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 6.488046613s ago: executing program 42 (id=2532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 5.531408025s ago: executing program 2 (id=3191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063011000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.434980942s ago: executing program 2 (id=3193): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20200) r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4.181775389s ago: executing program 0 (id=3197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="3a10bd003aba0c70", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018000000000000001701000003000000010000"], 0x60}], 0x1, 0x8001) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) 4.102102771s ago: executing program 2 (id=3198): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/181, 0xb5, 0x126) 3.739747102s ago: executing program 5 (id=3201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 3.656226488s ago: executing program 5 (id=3202): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.285739709s ago: executing program 0 (id=3203): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x6}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.162671954s ago: executing program 2 (id=3204): mkdir(&(0x7f00000003c0)='./file0\x00', 0x1c) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3.028617735s ago: executing program 2 (id=3205): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xfffffffb) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 2.309829726s ago: executing program 5 (id=3206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) 2.012039745s ago: executing program 2 (id=3207): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff9, 0x0, 0x2f}) 1.682426958s ago: executing program 43 (id=3207): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff9, 0x0, 0x2f}) 1.26803068s ago: executing program 5 (id=3209): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5b, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xd8b3, 0x8000, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7f, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xe, 0x2}}}}}]}}]}}, 0x0) io_uring_setup(0x354a, &(0x7f0000000140)={0x0, 0x400004, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 808.895682ms ago: executing program 0 (id=3210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x420, 0x3f4, 0x800, 0x0, 0x25dfdbfd, {0x2, 0x2, 0x1b, [0x4, 0x5, 0x5e76, 0x59f1, 0x1, 0x2, 0x7, 0x4, 0x8, 0x8001, 0x3ff, 0x1, 0x5, 0x9, 0x10, 0x80, 0xc, 0xffff0000, 0x2, 0x80000000, 0x3, 0x1, 0x40, 0x85, 0x4, 0xe8, 0x2, 0x101, 0x10000, 0x6, 0x8, 0xe0000000, 0x3, 0x1, 0x7ff, 0x8, 0x7fff, 0xff, 0xc, 0x3, 0x7, 0x100, 0x7, 0xc9, 0xb4, 0x8, 0x6, 0xa, 0x34b, 0x8, 0xbc08, 0x1, 0x8, 0x3, 0x10000, 0x2, 0x0, 0x8, 0x9, 0xf9, 0x3, 0x6a, 0x1, 0x8], [0x1, 0x3, 0x7, 0x3, 0x4, 0x4, 0x8, 0x8, 0x2, 0x7, 0xaa, 0x6, 0x8, 0xffffffff, 0x3, 0x3ff, 0x40000000, 0x7fff, 0x7, 0xe7, 0x8, 0x1, 0x7, 0xed4957, 0x6, 0x100, 0x2, 0x800, 0x2, 0x7, 0x80, 0x9, 0x80, 0x9, 0x5, 0x0, 0x0, 0x8f8, 0x8, 0x6, 0x9, 0xf, 0x10000, 0x4a, 0x2, 0x2, 0x8, 0x100, 0x0, 0x9f, 0x9, 0x2, 0xff, 0x9, 0x3, 0x15, 0xffffffff, 0xfffffb1f, 0x0, 0x1, 0x3, 0x401, 0x0, 0x7], [0x9, 0x4, 0x5, 0x4, 0xb, 0x9, 0x40, 0x6, 0x9, 0x3, 0xfffffffd, 0x1, 0x7ff, 0x4, 0x0, 0xfffffff7, 0xfffffe7d, 0x9, 0x35, 0x88, 0x7ff, 0x1487, 0x32, 0x9, 0xa72, 0x10001, 0x3, 0x7, 0xfbf9, 0x8, 0x800, 0x1000, 0x3, 0x5, 0x100, 0x5, 0x5b4, 0x1, 0x3, 0x0, 0x6, 0x14, 0x73bcf806, 0x8, 0x8, 0x9, 0x6, 0x0, 0x8000, 0x1, 0x97, 0x5, 0x0, 0xbd, 0x6, 0xbc2, 0x2063, 0x6, 0xbd4, 0x5, 0x7ff, 0x100, 0x62f, 0x2], [0xc61, 0x4, 0x4, 0x9, 0x6, 0x7, 0xfff, 0x2, 0xc, 0x2, 0x9, 0x5, 0x0, 0x106, 0xff, 0x6, 0x7ff, 0x3ff, 0x9, 0x3, 0x100, 0x62, 0x5, 0x3, 0x27e, 0x1, 0x7, 0x0, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x1, 0x9, 0x7, 0x0, 0x879, 0x5, 0x401, 0x1, 0x3ff, 0x8, 0x5, 0x0, 0x0, 0x95, 0x9, 0x0, 0x5, 0xd09c, 0x5, 0x2, 0x3, 0x7ff, 0xa4, 0x7f, 0x7, 0xfff, 0x3, 0x19, 0x4, 0x2, 0xffffff1f]}}, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) recvmsg$can_j1939(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) 378.631832ms ago: executing program 0 (id=3211): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x4, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x0, 0xe7, 0x9}}) 235.458734ms ago: executing program 5 (id=3212): setreuid(0xee01, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)={0x10, 0x2c, 0x8, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20}, 0x4854) 153.423692ms ago: executing program 5 (id=3213): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4, 0x67, 0x9b, 0x40, 0x733, 0x401, 0xad7d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1f, 0x50, 0x4}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 66.402422ms ago: executing program 0 (id=3214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 0s ago: executing program 0 (id=3215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x80000580, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface, different from the descriptor's value: 3 [ 381.595982][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.605175][ T5872] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.622809][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.626936][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.666644][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.680691][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.688148][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.718961][ T5872] usb 8-1: Product: syz [ 381.723176][ T5872] usb 8-1: Manufacturer: syz [ 381.772111][ T5872] usb 8-1: SerialNumber: syz [ 381.778449][ T5837] Bluetooth: hci1: command tx timeout [ 381.826009][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.995562][ T8481] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.037881][ T5872] usb 8-1: 0:2 : does not exist [ 382.056908][ T5872] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 382.079396][T14977] chnl_net:caif_netlink_parms(): no params data found [ 382.112657][ T5872] usb 8-1: USB disconnect, device number 17 [ 382.328083][ T8481] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.390522][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.430944][T14906] hsr_slave_0: entered promiscuous mode [ 382.453523][T14906] hsr_slave_1: entered promiscuous mode [ 382.470580][T14906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.493733][T14906] Cannot create hsr debugfs directory [ 382.597859][ T8481] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.751981][ T8481] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.856933][ T5872] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 383.025315][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 383.042912][ T5872] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 383.042940][ T5872] usb 3-1: config 179 has no interface number 0 [ 383.042972][ T5872] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 383.042996][ T5872] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 383.043019][ T5872] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.043039][ T5872] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 383.043062][ T5872] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 383.043094][ T5872] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 383.043115][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.046683][T15030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.145375][T15066] syz.5.2866: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 383.145866][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.5.2866 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 383.145888][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 383.145899][T15066] Call Trace: [ 383.145909][T15066] [ 383.145917][T15066] dump_stack_lvl+0x241/0x360 [ 383.145943][T15066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.145963][T15066] ? __pfx__printk+0x10/0x10 [ 383.145992][T15066] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 383.146014][T15066] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 383.146037][T15066] warn_alloc+0x278/0x410 [ 383.146060][T15066] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 383.146081][T15066] ? __pfx_warn_alloc+0x10/0x10 [ 383.146102][T15066] ? kasan_save_track+0x3f/0x80 [ 383.146122][T15066] ? __kasan_kmalloc+0x98/0xb0 [ 383.146145][T15066] ? xsk_setsockopt+0x4aa/0x810 [ 383.146167][T15066] ? do_sock_setsockopt+0x3af/0x720 [ 383.146196][T15066] ? __x64_sys_setsockopt+0x1ee/0x280 [ 383.146217][T15066] ? do_syscall_64+0xf3/0x230 [ 383.146237][T15066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.146269][T15066] __vmalloc_node_range_noprof+0x126/0x1380 [ 383.146319][T15066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 383.146344][T15066] ? __kasan_kmalloc+0x98/0xb0 [ 383.146370][T15066] vmalloc_user_noprof+0x74/0x80 [ 383.146390][T15066] ? xskq_create+0xb6/0x170 [ 383.146406][T15066] xskq_create+0xb6/0x170 [ 383.146424][T15066] xsk_init_queue+0xa1/0x100 [ 383.146451][T15066] xsk_setsockopt+0x4aa/0x810 [ 383.146477][T15066] ? __pfx_xsk_setsockopt+0x10/0x10 [ 383.146510][T15066] ? __fget_files+0x2a/0x410 [ 383.146530][T15066] ? __pfx_xsk_setsockopt+0x10/0x10 [ 383.146552][T15066] do_sock_setsockopt+0x3af/0x720 [ 383.146580][T15066] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 383.146608][T15066] ? __fget_files+0x395/0x410 [ 383.146624][T15066] ? __fget_files+0x2a/0x410 [ 383.146650][T15066] __x64_sys_setsockopt+0x1ee/0x280 [ 383.146680][T15066] do_syscall_64+0xf3/0x230 [ 383.146699][T15066] ? clear_bhb_loop+0x35/0x90 [ 383.146724][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.146744][T15066] RIP: 0033:0x7fba4418cde9 [ 383.146766][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.146781][T15066] RSP: 002b:00007fba44f04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.146798][T15066] RAX: ffffffffffffffda RBX: 00007fba443a6080 RCX: 00007fba4418cde9 [ 383.146811][T15066] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 383.146823][T15066] RBP: 00007fba4420e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 383.146834][T15066] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.146845][T15066] R13: 0000000000000000 R14: 00007fba443a6080 R15: 00007ffe7489a748 [ 383.146873][T15066] [ 383.146881][T15066] Mem-Info: [ 383.146896][T15066] active_anon:387 inactive_anon:27136 isolated_anon:0 [ 383.146896][T15066] active_file:17139 inactive_file:40047 isolated_file:0 [ 383.146896][T15066] unevictable:768 dirty:200 writeback:0 [ 383.146896][T15066] slab_reclaimable:11290 slab_unreclaimable:104348 [ 383.146896][T15066] mapped:32446 shmem:21188 pagetables:1406 [ 383.146896][T15066] sec_pagetables:0 bounce:0 [ 383.146896][T15066] kernel_misc_reclaimable:0 [ 383.146896][T15066] free:1291615 free_pcp:700 free_cma:0 [ 383.146943][T15066] Node 0 active_anon:1548kB inactive_anon:108544kB active_file:68480kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129784kB dirty:796kB writeback:0kB shmem:83216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12208kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no [ 383.146989][T15066] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 383.147031][T15066] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 383.147079][T15066] lowmem_reserve[]: 0 2490 2490 0 0 [ 383.147126][T15066] Node 0 DMA32 free:1248428kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1544kB inactive_anon:108512kB active_file:68208kB inactive_file:160136kB unevictable:1536kB writepending:792kB present:3129332kB managed:2550368kB mlocked:0kB bounce:0kB free_pcp:2788kB local_pcp:920kB free_cma:0kB [ 383.147183][T15066] lowmem_reserve[]: 0 0 0 0 0 [ 383.147229][T15066] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:272kB inactive_file:52kB unevictable:0kB writepending:4kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 383.147278][T15066] lowmem_reserve[]: 0 0 0 0 0 [ 383.147323][T15066] Node 1 Normal free:3902672kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 383.147375][T15066] lowmem_reserve[]: 0 0 0 0 0 [ 383.147421][T15066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 383.147608][T15066] Node 0 DMA32: 2*4kB (E) 98*8kB (UME) 93*16kB (UME) 175*32kB (UE) 302*64kB (UME) 150*128kB (UE) 81*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 1*2048kB (U) 286*4096kB (UM) = 1248328kB [ 383.147804][T15066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 383.147903][T15066] Node 1 Normal: 230*4kB (UM) 61*8kB (UME) 43*16kB (UME) 213*32kB (UME) 102*64kB (UME) 35*128kB (UME) 17*256kB (UM) 7*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (UM) = 3902672kB [ 383.148093][T15066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 383.148110][T15066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.148126][T15066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 383.148141][T15066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.148156][T15066] 78377 total pagecache pages [ 383.148165][T15066] 3 pages in swap cache [ 383.148181][T15066] Free swap = 124536kB [ 383.148190][T15066] Total swap = 124996kB [ 383.148200][T15066] 2097051 pages RAM [ 383.148208][T15066] 0 pages HighMem/MovableOnly [ 383.148216][T15066] 427735 pages reserved [ 383.148224][T15066] 0 pages cma reserved [ 383.191329][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.191465][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.191851][T14977] bridge_slave_0: entered allmulticast mode [ 383.195211][T14977] bridge_slave_0: entered promiscuous mode [ 383.207842][T14977] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.207995][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.208350][T14977] bridge_slave_1: entered allmulticast mode [ 383.210080][T14977] bridge_slave_1: entered promiscuous mode [ 383.399745][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.403435][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.442210][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 383.475017][ T8] usb 3-1: USB disconnect, device number 21 [ 383.475148][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 383.475190][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 383.656278][ T8481] bridge_slave_1: left allmulticast mode [ 383.656304][ T8481] bridge_slave_1: left promiscuous mode [ 383.656460][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.670607][ T8481] bridge_slave_0: left allmulticast mode [ 383.868956][ T5837] Bluetooth: hci1: command tx timeout [ 383.878723][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 383.905531][ T8481] bridge_slave_0: left promiscuous mode [ 383.936966][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.217352][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 384.218881][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.236968][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.265745][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.771091][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.796382][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.882152][ T9] usb 8-1: config 0 descriptor?? [ 384.889809][ T9] hub 8-1:0.0: USB hub found [ 385.093721][ T9] hub 8-1:0.0: 1 port detected [ 385.295009][ T9] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 385.305158][ T9] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 385.332740][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 385.345707][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 385.413501][ T9] usb 8-1: USB disconnect, device number 18 [ 385.506985][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 385.837968][ T8481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.855053][ T8481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.877383][ T8481] bond0 (unregistering): Released all slaves [ 385.903393][T14977] team0: Port device team_slave_0 added [ 385.927220][T14977] team0: Port device team_slave_1 added [ 386.368045][T15141] syz_tun: entered allmulticast mode [ 386.395012][T15137] syz_tun: left allmulticast mode [ 386.424191][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.444971][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.471127][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.485290][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.626903][ T5837] Bluetooth: hci0: link tx timeout [ 386.632859][ T5837] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 386.699206][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.737930][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.860359][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.029006][ T8481] hsr_slave_0: left promiscuous mode [ 387.050166][ T8481] hsr_slave_1: left promiscuous mode [ 387.073732][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.100153][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.150551][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.166710][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.219699][ T8481] veth1_macvtap: left promiscuous mode [ 387.232440][ T8481] veth0_macvtap: left promiscuous mode [ 387.243956][ T8481] veth1_vlan: left promiscuous mode [ 387.250794][ T8481] veth0_vlan: left promiscuous mode [ 387.572132][ T5836] Bluetooth: hci2: command 0x041b tx timeout [ 387.614001][ T29] audit: type=1326 audit(1739825150.464:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.649863][ T29] audit: type=1326 audit(1739825150.464:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.673743][ T29] audit: type=1326 audit(1739825150.464:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.695201][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.703081][ T29] audit: type=1326 audit(1739825150.464:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.725802][ T29] audit: type=1326 audit(1739825150.464:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.747259][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.753810][ T29] audit: type=1326 audit(1739825150.464:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.804751][ T29] audit: type=1326 audit(1739825150.464:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.827862][ T29] audit: type=1326 audit(1739825150.464:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.853965][ T29] audit: type=1326 audit(1739825150.464:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.888119][ T29] audit: type=1326 audit(1739825150.464:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.7.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6618cde9 code=0x7ffc0000 [ 387.909744][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.061463][T15188] Bluetooth: MGMT ver 1.23 [ 388.567507][ T8481] team0 (unregistering): Port device team_slave_1 removed [ 388.622807][ T8481] team0 (unregistering): Port device team_slave_0 removed [ 388.684722][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 389.283716][T14977] hsr_slave_0: entered promiscuous mode [ 389.300468][T14977] hsr_slave_1: entered promiscuous mode [ 389.509900][T14906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.570787][T14906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.629326][T14906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.637119][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 389.690365][T14906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.706414][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 389.865579][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 389.873376][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.917562][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.956883][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 390.007475][ T8] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 390.024717][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.053935][ T8] usb 6-1: config 0 descriptor?? [ 390.288982][T14906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.303053][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 390.350772][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.413635][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.420861][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.441918][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.449086][ T8481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.459362][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 390.485801][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 8386, setting to 1024 [ 390.520713][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 390.554286][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0024/input/input40 [ 390.570656][ T9] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.588275][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.598902][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.615492][ T9] usb 8-1: Product: syz [ 390.629922][ T9] usb 8-1: Manufacturer: syz [ 390.635563][ T9] usb 8-1: SerialNumber: syz [ 390.653799][T15221] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 390.679191][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0024/input/input41 [ 390.698682][T14977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 390.733290][T14977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 390.744013][ T8] kye 0003:0458:5011.0024: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 390.787206][T14977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 390.830495][T14977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 390.894608][T15221] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 391.174364][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.238030][T14977] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.264444][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.271630][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.288000][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.295178][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.439223][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.525299][T15221] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 391.604738][T14906] veth0_vlan: entered promiscuous mode [ 391.625507][T14906] veth1_vlan: entered promiscuous mode [ 391.664166][ C0] kye 0003:0458:5011.0024: usb_submit_urb(ctrl) failed: -1 [ 391.677924][T14906] veth0_macvtap: entered promiscuous mode [ 391.710010][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 391.721783][T14906] veth1_macvtap: entered promiscuous mode [ 391.734555][ T9] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 391.760246][ T9] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 391.767867][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.783515][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.793451][ T9] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 391.815102][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.828782][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.846568][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.869636][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.889486][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.904864][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.926875][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.938292][ T9] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 391.967250][ T9] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 391.971823][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.986284][ T9] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 391.995565][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.999067][ T9] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 392.013891][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.018013][ T9] usb 8-1: USB disconnect, device number 19 [ 392.034223][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.049629][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.070621][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.087939][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.099125][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.110451][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.140636][T14906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.150032][T14906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.158749][T14906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.169612][T14906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.182840][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.326946][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.342241][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.401735][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.430533][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.451089][ T5904] usb 6-1: USB disconnect, device number 9 [ 392.943972][T14977] veth0_vlan: entered promiscuous mode [ 392.966549][T14977] veth1_vlan: entered promiscuous mode [ 393.030710][ T5904] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 393.056184][T14977] veth0_macvtap: entered promiscuous mode [ 393.100914][T14977] veth1_macvtap: entered promiscuous mode [ 393.127915][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.152342][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.163064][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.176023][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.186251][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.197181][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.211805][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 393.217656][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.230167][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.248555][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.250472][ T5904] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 393.263116][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.281441][ T5904] usb 6-1: config 0 has no interface number 0 [ 393.296525][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.298864][ T5904] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 393.347186][ T5904] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 393.348492][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.356944][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.398788][ T5904] usb 6-1: Product: syz [ 393.405222][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.413220][ T5904] usb 6-1: Manufacturer: syz [ 393.427500][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.433738][ T5904] usb 6-1: SerialNumber: syz [ 393.469094][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.479721][ T5904] usb 6-1: config 0 descriptor?? [ 393.485521][T15284] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 393.516618][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.517150][ T5904] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 393.558228][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.580932][ T5904] em28xx 6-1:0.132: Video interface 132 found: bulk [ 393.585630][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.618603][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.630949][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2922'. [ 393.638603][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.668558][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.694356][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.902150][ T3643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.918619][ T5904] em28xx 6-1:0.132: chip ID is em28174 [ 393.969369][T14977] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.978109][T14977] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.007310][T14977] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.039591][T14977] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.099935][ T3643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.153408][T12704] tipc: Resetting bearer [ 394.184116][T12704] tipc: Disabling bearer [ 394.254197][ T3643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.367247][ T8481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.397531][ T8481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.436615][ T3643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.517907][ T5904] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 394.532522][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.557014][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.586456][ T5904] em28xx 6-1:0.132: board has no eeprom [ 394.675323][ T5904] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 394.740057][ T5904] em28xx 6-1:0.132: analog set to bulk mode. [ 394.770352][ T5874] em28xx 6-1:0.132: Registering V4L2 extension [ 394.782440][ T3643] bridge_slave_1: left allmulticast mode [ 394.807858][ T5904] usb 6-1: USB disconnect, device number 10 [ 394.820693][ T3643] bridge_slave_1: left promiscuous mode [ 394.844654][ T5904] em28xx 6-1:0.132: Disconnecting em28xx [ 394.859700][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.926534][ T3643] bridge_slave_0: left allmulticast mode [ 394.948083][ T3643] bridge_slave_0: left promiscuous mode [ 394.969569][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.165375][ T5874] usb 6-1: Decoder not found [ 395.194150][ T5874] em28xx 6-1:0.132: failed to create media graph [ 395.214333][ T5874] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 395.253968][ T5874] em28xx 6-1:0.132: Remote control support is not available for this card. [ 395.302629][ T5904] em28xx 6-1:0.132: Closing input extension [ 395.390741][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.412246][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.423166][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.431515][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.440542][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 395.448197][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.554577][ T5904] em28xx 6-1:0.132: Freeing device [ 395.720751][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.732324][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.740929][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.750380][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.759370][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 395.768848][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.877595][ T5904] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 396.094210][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.108006][ T5904] usb 6-1: config 0 has no interface number 0 [ 396.114123][ T5904] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.156905][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.168597][ T5904] usb 6-1: config 0 descriptor?? [ 396.194001][ T5904] cp210x 6-1:0.1: cp210x converter detected [ 396.301662][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.322568][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.339195][ T3643] bond0 (unregistering): Released all slaves [ 396.590643][ T5904] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 396.844120][ T5904] usb 6-1: cp210x converter now attached to ttyUSB0 [ 396.935963][ T3643] hsr_slave_0: left promiscuous mode [ 396.956613][ T3643] hsr_slave_1: left promiscuous mode [ 396.967660][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.975089][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.019381][ T5872] usb 6-1: USB disconnect, device number 11 [ 397.048311][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.057030][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.065260][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.104263][ T3643] veth1_macvtap: left promiscuous mode [ 397.111239][ T3643] veth0_macvtap: left promiscuous mode [ 397.117684][ T3643] veth1_vlan: left promiscuous mode [ 397.122998][ T3643] veth0_vlan: left promiscuous mode [ 397.131980][ T5872] cp210x 6-1:0.1: device disconnected [ 397.550786][ T5837] Bluetooth: hci1: command tx timeout [ 397.662921][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 397.712532][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 397.867193][ T5837] Bluetooth: hci2: command tx timeout [ 398.192063][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.202917][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.222511][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.232937][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.247918][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 398.264859][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.683649][T15335] chnl_net:caif_netlink_parms(): no params data found [ 398.798838][T15340] chnl_net:caif_netlink_parms(): no params data found [ 399.028401][T15366] chnl_net:caif_netlink_parms(): no params data found [ 399.092396][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.114645][T15335] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.126051][T15335] bridge_slave_0: entered allmulticast mode [ 399.132675][T15335] bridge_slave_0: entered promiscuous mode [ 399.140429][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.148232][T15335] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.156167][T15335] bridge_slave_1: entered allmulticast mode [ 399.163098][T15335] bridge_slave_1: entered promiscuous mode [ 399.360136][T15335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.383674][T15335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.537565][T15340] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.544901][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.558123][T15340] bridge_slave_0: entered allmulticast mode [ 399.565984][T15340] bridge_slave_0: entered promiscuous mode [ 399.635837][ T5837] Bluetooth: hci1: command tx timeout [ 399.726758][T15335] team0: Port device team_slave_0 added [ 399.835369][ T3643] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.877626][T15340] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.885722][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.892941][T15340] bridge_slave_1: entered allmulticast mode [ 399.900499][T15340] bridge_slave_1: entered promiscuous mode [ 399.950842][ T5837] Bluetooth: hci2: command tx timeout [ 399.968155][T15335] team0: Port device team_slave_1 added [ 400.069625][T15340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.113293][ T3643] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.180648][T15415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.199106][T15366] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.220652][T15366] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.236243][T15366] bridge_slave_0: entered allmulticast mode [ 400.254921][T15366] bridge_slave_0: entered promiscuous mode [ 400.272107][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2949'. [ 400.295958][T15340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.306266][T15335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.313356][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.339700][T15335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.355791][ T5837] Bluetooth: hci3: command tx timeout [ 400.387654][ T3643] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.400064][T15422] loop2: detected capacity change from 0 to 7 [ 400.409493][T15366] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.417431][T15422] Dev loop2: unable to read RDB block 7 [ 400.423046][T15422] loop2: unable to read partition table [ 400.429188][T15366] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.437830][T15366] bridge_slave_1: entered allmulticast mode [ 400.444386][T15366] bridge_slave_1: entered promiscuous mode [ 400.457659][T15422] loop2: partition table beyond EOD, truncated [ 400.467626][T15422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 400.552206][T15335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.575431][T15335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.608002][T15335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.687761][ T3643] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.749779][T15340] team0: Port device team_slave_0 added [ 400.816711][T15366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.909552][T15340] team0: Port device team_slave_1 added [ 400.977011][T15366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.042179][T15335] hsr_slave_0: entered promiscuous mode [ 401.056033][T15335] hsr_slave_1: entered promiscuous mode [ 401.072653][T15335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.085307][T15335] Cannot create hsr debugfs directory [ 401.100737][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2956'. [ 401.118550][T15340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.135042][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.203907][T15340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.288667][T15366] team0: Port device team_slave_0 added [ 401.298141][T15340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.306982][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.333461][T15340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.377597][T15366] team0: Port device team_slave_1 added [ 401.491987][T15366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.502863][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.544877][T15366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.587021][T15366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.593998][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.632885][T15366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.715541][ T5837] Bluetooth: hci1: command tx timeout [ 401.748334][T15340] hsr_slave_0: entered promiscuous mode [ 401.755900][T15340] hsr_slave_1: entered promiscuous mode [ 401.762035][T15340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.783161][T15340] Cannot create hsr debugfs directory [ 401.791630][ T3643] bridge_slave_1: left allmulticast mode [ 401.797772][ T3643] bridge_slave_1: left promiscuous mode [ 401.803524][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.813205][ T3643] bridge_slave_0: left allmulticast mode [ 401.819994][ T3643] bridge_slave_0: left promiscuous mode [ 401.826121][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.034626][ T5837] Bluetooth: hci2: command tx timeout [ 402.245326][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.255991][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.266649][ T3643] bond0 (unregistering): Released all slaves [ 402.366524][T15366] hsr_slave_0: entered promiscuous mode [ 402.372835][T15366] hsr_slave_1: entered promiscuous mode [ 402.379099][T15366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.386820][T15366] Cannot create hsr debugfs directory [ 402.434494][ T5837] Bluetooth: hci3: command tx timeout [ 402.653911][ T3643] hsr_slave_0: left promiscuous mode [ 402.669336][ T3643] hsr_slave_1: left promiscuous mode [ 402.676407][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.683829][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.692168][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.699856][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.722198][ T3643] veth1_macvtap: left promiscuous mode [ 402.727893][ T3643] veth0_macvtap: left promiscuous mode [ 402.733420][ T3643] veth1_vlan: left promiscuous mode [ 402.739523][ T3643] veth0_vlan: left promiscuous mode [ 403.183358][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 403.230520][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 403.784051][ T5837] Bluetooth: hci1: command tx timeout [ 404.103881][ T5837] Bluetooth: hci2: command tx timeout [ 404.141340][T15335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.151392][T15335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.161676][T15335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.171401][T15335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.370878][T15335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.389245][T15335] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.412224][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.419361][ T7390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.491844][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.498999][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.514967][ T5837] Bluetooth: hci3: command tx timeout [ 404.699574][T15340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.766982][T15340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.790149][T15340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.837941][T15340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.853501][T15335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.950240][T15335] veth0_vlan: entered promiscuous mode [ 404.976683][T15335] veth1_vlan: entered promiscuous mode [ 405.030259][T15340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.063571][T15335] veth0_macvtap: entered promiscuous mode [ 405.086353][T15335] veth1_macvtap: entered promiscuous mode [ 405.095829][T15340] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.142681][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.149828][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.168059][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.178719][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.188819][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.201084][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.211144][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.222227][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.233149][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.244289][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.256112][T15335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.277257][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.284393][ T8477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.308250][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.319673][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.330227][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.340922][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.350927][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.361610][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.371633][T15335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.382226][T15335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.399794][T15335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.409314][T15366] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.422787][T15366] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.440686][T15335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.449982][T15335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.459017][T15335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.468216][T15335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.478959][T15366] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.491117][T15366] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.660216][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.694415][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.747264][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.772748][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.812909][T15366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.839227][T15366] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.877092][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.884270][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.926092][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.933259][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.965983][T15340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.166032][T15340] veth0_vlan: entered promiscuous mode [ 406.181430][T15340] veth1_vlan: entered promiscuous mode [ 406.246779][T15340] veth0_macvtap: entered promiscuous mode [ 406.277274][T15340] veth1_macvtap: entered promiscuous mode [ 406.310178][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.326045][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.338189][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.352202][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.362038][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.385453][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.399074][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.409696][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.429194][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.451883][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.471571][T15340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.501509][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.527756][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.545960][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.572201][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.582783][ T5837] Bluetooth: hci3: command tx timeout [ 406.592194][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.608777][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.619153][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.642174][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.663118][T15340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.680938][T15340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.692603][T15340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.723538][T15340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.741632][T15340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.760475][T15340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.769955][T15340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.887133][T15366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.947930][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.968687][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.036633][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.054723][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.284478][T15366] veth0_vlan: entered promiscuous mode [ 407.307352][T15366] veth1_vlan: entered promiscuous mode [ 407.366516][T15366] veth0_macvtap: entered promiscuous mode [ 407.702489][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.757202][T15366] veth1_macvtap: entered promiscuous mode [ 407.793905][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.812228][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.824500][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.840088][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.858810][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.882095][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.900384][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.917587][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.928025][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.947472][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.969319][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.980178][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.003273][T15366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.037087][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.055953][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.069869][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.086276][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.099096][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.118062][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.132731][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.151011][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.161329][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.182241][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.201385][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.220214][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.232261][T15366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.248498][T15366] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.257603][T15366] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.285642][T15366] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.302915][T15366] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.575005][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.672602][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.689366][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.858814][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.964246][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.011472][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.073239][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.121060][ T1211] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 409.217520][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.229274][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.241294][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.250598][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.262471][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.272029][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.281481][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 409.360968][ T1211] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 409.388044][ T1211] usb 1-1: config 0 has no interface number 0 [ 409.400893][ T1211] usb 1-1: config 0 interface 12 has no altsetting 0 [ 409.419990][ T1211] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 409.430718][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.438745][ T1211] usb 1-1: Product: syz [ 409.444135][ T1211] usb 1-1: Manufacturer: syz [ 409.458482][ T1211] usb 1-1: SerialNumber: syz [ 409.476141][ T1211] usb 1-1: config 0 descriptor?? [ 409.552404][ T79] bridge_slave_1: left allmulticast mode [ 409.558107][ T79] bridge_slave_1: left promiscuous mode [ 409.570294][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.593394][ T79] bridge_slave_0: left allmulticast mode [ 409.600496][ T79] bridge_slave_0: left promiscuous mode [ 409.615403][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.095538][ T1211] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 410.108528][ T1211] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 410.116160][ T1211] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 410.124407][ T1211] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 410.151380][ T1211] usb 1-1: USB disconnect, device number 16 [ 410.243070][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.254335][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.264711][ T79] bond0 (unregistering): Released all slaves [ 410.546199][T15567] chnl_net:caif_netlink_parms(): no params data found [ 410.658718][ T79] hsr_slave_0: left promiscuous mode [ 410.676420][ T79] hsr_slave_1: left promiscuous mode [ 410.682381][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.689827][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.721869][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.729622][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.769744][ T79] veth1_macvtap: left promiscuous mode [ 410.790115][ T79] veth0_macvtap: left promiscuous mode [ 410.795750][ T79] veth1_vlan: left promiscuous mode [ 410.802353][ T79] veth0_vlan: left promiscuous mode [ 411.388969][ T5837] Bluetooth: hci1: command tx timeout [ 411.670566][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.685790][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.701256][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.726414][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.741275][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.749318][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.948114][T15641] netlink: 'syz.2.2978': attribute type 10 has an invalid length. [ 412.437050][ T79] team0 (unregistering): Port device team_slave_1 removed [ 412.497370][ T79] team0 (unregistering): Port device team_slave_0 removed [ 413.004347][T15641] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.011919][T15641] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.047347][T15641] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.055843][T15641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.064248][T15641] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.071402][T15641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.093795][T15641] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 413.267760][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.287334][T15567] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.308967][T15567] bridge_slave_0: entered allmulticast mode [ 413.316021][T15567] bridge_slave_0: entered promiscuous mode [ 413.375175][T15567] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.398802][T15567] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.438398][T15567] bridge_slave_1: entered allmulticast mode [ 413.450365][T15567] bridge_slave_1: entered promiscuous mode [ 413.459463][ T5837] Bluetooth: hci1: command tx timeout [ 413.672534][T15567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.709007][T15567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.825909][ T79] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.872090][ T5837] Bluetooth: hci3: command tx timeout [ 413.927375][T15567] team0: Port device team_slave_0 added [ 413.983053][ T79] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.017639][T15567] team0: Port device team_slave_1 added [ 414.126988][ T79] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.180481][T15567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.187460][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.258954][T15567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.339899][ T79] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.361920][T15567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.395554][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.501713][T15567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.905944][T15567] hsr_slave_0: entered promiscuous mode [ 414.942322][T15567] hsr_slave_1: entered promiscuous mode [ 414.986279][T15629] chnl_net:caif_netlink_parms(): no params data found [ 415.323990][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'. [ 415.368161][ T79] bridge_slave_1: left allmulticast mode [ 415.373854][ T79] bridge_slave_1: left promiscuous mode [ 415.434772][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.446451][ T79] bridge_slave_0: left allmulticast mode [ 415.462047][ T79] bridge_slave_0: left promiscuous mode [ 415.476493][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.539074][ T5837] Bluetooth: hci1: command tx timeout [ 415.937798][ T5837] Bluetooth: hci3: command tx timeout [ 416.264723][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.296811][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.309586][ T79] bond0 (unregistering): Released all slaves [ 416.660925][T15629] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.697296][T15629] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.704568][T15629] bridge_slave_0: entered allmulticast mode [ 416.729889][T15629] bridge_slave_0: entered promiscuous mode [ 416.766661][T15629] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.807110][T15629] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.814380][T15629] bridge_slave_1: entered allmulticast mode [ 416.852329][T15629] bridge_slave_1: entered promiscuous mode [ 417.021281][T15766] kvm: user requested TSC rate below hardware speed [ 417.042600][T15766] kvm: user requested TSC rate below hardware speed [ 417.207887][T15629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.339758][T15629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.443406][ T79] hsr_slave_0: left promiscuous mode [ 417.461615][ T79] hsr_slave_1: left promiscuous mode [ 417.490459][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.512447][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.538090][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.556872][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.603290][ T79] veth1_macvtap: left promiscuous mode [ 417.610341][ T79] veth0_macvtap: left promiscuous mode [ 417.616759][ T5837] Bluetooth: hci1: command tx timeout [ 417.617436][ T79] veth1_vlan: left promiscuous mode [ 417.642966][ T79] veth0_vlan: left promiscuous mode [ 418.026827][ T5837] Bluetooth: hci3: command tx timeout [ 418.118074][ T5914] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 418.279537][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.299076][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.316884][ T5914] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.340390][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.359242][ T5914] usb 6-1: SerialNumber: syz [ 418.588741][ T5914] usb 6-1: 0:2 : does not exist [ 418.639064][ T5914] usb 6-1: USB disconnect, device number 12 [ 418.898788][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.054982][T15819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.138675][ T79] team0 (unregistering): Port device team_slave_1 removed [ 419.257494][ T79] team0 (unregistering): Port device team_slave_0 removed [ 419.367792][ T9] IPVS: starting estimator thread 0... [ 419.496292][T15827] IPVS: using max 21 ests per chain, 50400 per kthread [ 420.103099][ T5837] Bluetooth: hci3: command tx timeout [ 420.470708][T15831] team0: Port device team_slave_1 removed [ 420.538968][T15629] team0: Port device team_slave_0 added [ 420.563521][T15629] team0: Port device team_slave_1 added [ 420.685239][T15851] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 420.703045][ T5914] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 420.870291][T15629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.897805][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 420.908765][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.934687][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.941641][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 420.954585][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 420.973317][T15629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.004415][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 421.016294][T15629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.023259][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.049176][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.066585][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.085269][T15629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.097509][ T5914] usb 3-1: config 0 descriptor?? [ 421.103977][T15844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.113533][ T5914] hub 3-1:0.0: USB hub found [ 421.211789][T15629] hsr_slave_0: entered promiscuous mode [ 421.228200][T15629] hsr_slave_1: entered promiscuous mode [ 421.234526][T15629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.262774][T15629] Cannot create hsr debugfs directory [ 421.330071][ T5914] hub 3-1:0.0: 1 port detected [ 421.598422][T15567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.681542][ T79] bridge_slave_1: left allmulticast mode [ 421.698002][ T79] bridge_slave_1: left promiscuous mode [ 421.712028][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.729046][ T79] bridge_slave_0: left allmulticast mode [ 421.752560][ T79] bridge_slave_0: left promiscuous mode [ 421.776577][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.946458][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3031'. [ 422.368584][ T5903] usb 3-1: USB disconnect, device number 22 [ 422.510680][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.528112][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.538957][ T79] bond0 (unregistering): Released all slaves [ 422.549591][T15567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.584773][T15567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.608797][T15567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.041287][T15913] smc: net device bond0 applied user defined pnetid SYZ0 [ 423.049533][T15919] smc: net device bond0 erased user defined pnetid SYZ0 [ 423.189713][ T79] hsr_slave_0: left promiscuous mode [ 423.210994][ T79] hsr_slave_1: left promiscuous mode [ 423.227951][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.250145][T15926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.252194][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.275976][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.291806][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.374680][ T79] veth1_macvtap: left promiscuous mode [ 423.380320][ T79] veth0_macvtap: left promiscuous mode [ 423.698180][T15941] netlink: 'syz.0.3038': attribute type 11 has an invalid length. [ 424.277963][ T79] team0 (unregistering): Port device team_slave_1 removed [ 424.371048][ T79] team0 (unregistering): Port device team_slave_0 removed [ 425.075454][ T5903] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 425.153743][T15567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.242938][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 425.268849][T15567] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.277085][ T5903] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 425.317025][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.324195][ T7390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.331836][ T5903] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 425.357299][ T5903] usb 6-1: config 0 has no interface number 0 [ 425.363732][ T5903] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.397160][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.402787][ T5903] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.404286][ T7390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.415436][ T5903] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.463973][ T5903] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 425.503663][ T5903] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 425.511792][ T5903] usb 6-1: Product: syz [ 425.540893][ T5903] usb 6-1: Manufacturer: syz [ 425.548354][ T5903] usb 6-1: config 0 descriptor?? [ 425.600171][T15969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.640751][T15629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 425.688204][T15629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 425.718548][T15629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 425.746093][T15629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 425.846661][ T79] IPVS: stop unused estimator thread 0... [ 425.960586][T15629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.006237][T15629] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.030453][T15567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.045666][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.052848][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.070914][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.078067][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.233588][T15567] veth0_vlan: entered promiscuous mode [ 426.264414][ T5903] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input42 [ 426.276547][T15567] veth1_vlan: entered promiscuous mode [ 426.348443][T15567] veth0_macvtap: entered promiscuous mode [ 426.378090][T15567] veth1_macvtap: entered promiscuous mode [ 426.402245][ T5873] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 426.442333][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.493006][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.522271][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.535393][ T5903] usb 6-1: USB disconnect, device number 13 [ 426.535489][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 426.541423][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.577075][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.577099][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.577116][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.577130][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.593488][T15567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.630428][ T5873] usb 3-1: config index 0 descriptor too short (expected 1298, got 18) [ 426.630458][ T5873] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 426.630484][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 426.632977][ T5873] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 426.707389][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.707413][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.707425][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.707438][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.707450][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.707463][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.707474][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.707487][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.710102][T15567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.720891][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.808815][ T5873] usb 3-1: Product: syz [ 426.808837][ T5873] usb 3-1: Manufacturer: syz [ 426.808852][ T5873] usb 3-1: SerialNumber: syz [ 426.831839][T15567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.831874][T15567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.831900][T15567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.882858][ T5873] usb 3-1: config 0 descriptor?? [ 426.902050][T15567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.020218][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.061313][T15629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.072366][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.190974][ T8477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.226983][ T8477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.298505][ T5873] usb 3-1: Firmware: major: 216, minor: 47, hardware type: UNKNOWN (195) [ 427.513641][ T5873] usb 3-1: no permanent extended address found, random address set [ 427.525093][ T5873] usb 3-1: atusb_probe: initialization failed, error = -524 [ 427.550899][ T5873] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 427.684468][T15629] veth0_vlan: entered promiscuous mode [ 427.717527][T15629] veth1_vlan: entered promiscuous mode [ 427.809900][T15629] veth0_macvtap: entered promiscuous mode [ 427.839251][ T5872] usb 3-1: USB disconnect, device number 23 [ 427.856841][T15629] veth1_macvtap: entered promiscuous mode [ 427.891759][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 427.922720][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.951519][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.970989][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.999254][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.022568][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.037095][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.047180][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.060450][T16025] overlayfs: statfs failed on './file0' [ 428.068197][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.078115][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.088801][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.100830][T15629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.218277][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.249311][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.271500][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.291590][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.308210][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.335182][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.345375][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.371799][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.383868][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.397842][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.409574][T15629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.420958][T15629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.431065][T15629] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.439968][T15629] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.442203][T16055] input: syz1 as /devices/virtual/input/input43 [ 428.488155][T15629] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.686579][ T8481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.789583][ T8481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.833371][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.833389][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.890371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.899190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.051910][ T8481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.342640][ T8481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.539031][ T8481] bridge_slave_1: left allmulticast mode [ 429.566493][ T8481] bridge_slave_1: left promiscuous mode [ 429.578858][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.596372][ T8481] bridge_slave_0: left allmulticast mode [ 429.605664][ T8481] bridge_slave_0: left promiscuous mode [ 429.615108][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.848403][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.874791][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.884805][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.915012][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.945676][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 429.961484][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.209481][ T8481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.224993][ T8481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.235006][ T8481] bond0 (unregistering): Released all slaves [ 430.510838][T16092] chnl_net:caif_netlink_parms(): no params data found [ 430.619924][T16107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.647381][T16110] loop2: detected capacity change from 0 to 7 [ 430.675780][T16110] Dev loop2: unable to read RDB block 7 [ 430.692471][T16110] loop2: unable to read partition table [ 430.698304][T16110] loop2: partition table beyond EOD, truncated [ 430.736949][T16110] loop_reread_partitions: partition scan of loop2 (颣xü—ŸÑà–) failed (rc=-5) [ 430.790124][ T8481] hsr_slave_0: left promiscuous mode [ 430.820675][ T8481] hsr_slave_1: left promiscuous mode [ 430.850639][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.880104][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.913418][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.938588][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.057307][ T8481] veth1_macvtap: left promiscuous mode [ 431.109953][ T8481] veth0_macvtap: left promiscuous mode [ 431.116495][ T8481] veth1_vlan: left promiscuous mode [ 431.129889][ T8481] veth0_vlan: left promiscuous mode [ 431.239224][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.252311][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.265335][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.278574][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.279806][T16132] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3064'. [ 431.297889][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 431.308078][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.455842][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3066'. [ 431.485367][T16136] netlink: 'syz.5.3066': attribute type 7 has an invalid length. [ 431.500636][T16136] netlink: 'syz.5.3066': attribute type 8 has an invalid length. [ 431.515600][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'. [ 431.716396][T16142] xt_hashlimit: size too large, truncated to 1048576 [ 432.014858][ T5837] Bluetooth: hci1: command tx timeout [ 432.068029][ T8481] team0 (unregistering): Port device team_slave_1 removed [ 432.118316][ T8481] team0 (unregistering): Port device team_slave_0 removed [ 432.668739][T16136] erspan0: entered promiscuous mode [ 432.686574][T16136] batadv_slave_1: entered promiscuous mode [ 432.699656][T16136] gretap0: entered promiscuous mode [ 432.733695][T16143] vxcan3: entered promiscuous mode [ 432.854373][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.862453][T16092] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.869969][T16092] bridge_slave_0: entered allmulticast mode [ 432.876972][T16092] bridge_slave_0: entered promiscuous mode [ 432.930942][T16092] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.938070][T16092] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.019035][T16092] bridge_slave_1: entered allmulticast mode [ 433.026068][T16092] bridge_slave_1: entered promiscuous mode [ 433.159715][T16092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.188046][T16092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.370003][ T5837] Bluetooth: hci3: command tx timeout [ 433.395017][T16092] team0: Port device team_slave_0 added [ 433.460042][T16092] team0: Port device team_slave_1 added [ 433.581435][T16092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.588410][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.659073][T16092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.684425][T16092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.692062][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 433.713839][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.746370][T16092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.853632][ T8481] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.866036][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.877174][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 433.889372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.904126][ T9] usb 6-1: config 0 descriptor?? [ 433.913855][T16193] netlink: 'syz.2.3083': attribute type 12 has an invalid length. [ 433.936080][T16193] netlink: 'syz.2.3083': attribute type 29 has an invalid length. [ 433.945985][T16193] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3083'. [ 433.959579][T16193] netlink: 'syz.2.3083': attribute type 1 has an invalid length. [ 433.967366][T16193] netlink: 'syz.2.3083': attribute type 2 has an invalid length. [ 433.976021][T16193] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3083'. [ 434.092767][ T5837] Bluetooth: hci1: command tx timeout [ 434.136873][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 434.159864][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 434.168217][ T8481] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.204405][ T9] usb 6-1: USB disconnect, device number 14 [ 434.251660][T16092] hsr_slave_0: entered promiscuous mode [ 434.270255][T16092] hsr_slave_1: entered promiscuous mode [ 434.352231][ T8481] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.625103][ T8481] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.648419][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 434.752333][T16130] chnl_net:caif_netlink_parms(): no params data found [ 434.811433][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 434.829228][ T9] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.858122][ T9] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 434.904803][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 434.928071][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 434.956593][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.984653][ T9] usb 6-1: config 0 descriptor?? [ 435.121745][ T8481] bridge_slave_1: left allmulticast mode [ 435.144267][ T8481] bridge_slave_1: left promiscuous mode [ 435.169621][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.189749][ T8481] bridge_slave_0: left allmulticast mode [ 435.195481][ T8481] bridge_slave_0: left promiscuous mode [ 435.213129][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.423741][ T9] wacom 0003:056A:0331.0025: hidraw0: USB HID v4.13 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 435.473377][ T5837] Bluetooth: hci3: command tx timeout [ 435.750376][ T8481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.761498][ T8481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.773873][ T8481] bond0 (unregistering): Released all slaves [ 435.876542][T15370] usb 6-1: USB disconnect, device number 15 [ 435.953767][T16130] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.979928][T16130] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.003263][T16130] bridge_slave_0: entered allmulticast mode [ 436.024712][T16130] bridge_slave_0: entered promiscuous mode [ 436.038493][T16246] block nbd0: NBD_DISCONNECT [ 436.048242][T16246] block nbd0: Send disconnect failed -89 [ 436.056392][T16130] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.066009][T16130] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.070344][T16246] block nbd0: Disconnected due to user request. [ 436.079574][T16246] block nbd0: shutting down sockets [ 436.082842][T16130] bridge_slave_1: entered allmulticast mode [ 436.094479][T16130] bridge_slave_1: entered promiscuous mode [ 436.167366][ T5837] Bluetooth: hci1: command tx timeout [ 436.283865][T16130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.399075][T16130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.676807][T16275] misc userio: Invalid payload size [ 436.679443][T16130] team0: Port device team_slave_0 added [ 436.720781][T16130] team0: Port device team_slave_1 added [ 436.765491][ T8481] hsr_slave_0: left promiscuous mode [ 436.778701][ T8481] hsr_slave_1: left promiscuous mode [ 436.784541][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.793365][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.801613][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.810662][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.844428][ T8481] veth1_macvtap: left promiscuous mode [ 436.851356][ T8481] veth0_macvtap: left promiscuous mode [ 436.862788][ T8481] veth1_vlan: left promiscuous mode [ 436.869866][ T8481] veth0_vlan: left promiscuous mode [ 437.167355][ T5825] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 437.328370][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.339918][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 437.347784][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.362024][ T5825] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 437.371295][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.381458][ T5825] usb 6-1: config 0 descriptor?? [ 437.509668][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 437.521681][ T8481] team0 (unregistering): Port device team_slave_1 removed [ 437.530693][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.538129][ T5837] Bluetooth: hci3: command tx timeout [ 437.559949][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.569856][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.579231][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.595935][ T8] usb 1-1: config 0 descriptor?? [ 437.604299][ T8] hub 1-1:0.0: USB hub found [ 437.634977][ T8481] team0 (unregistering): Port device team_slave_0 removed [ 437.801972][ T5825] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 437.834398][ T8] hub 1-1:0.0: 1 port detected [ 438.188775][T16130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.195839][T16130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.225365][T16130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.238736][T16130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.245741][T16130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.273490][T16130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.276737][ T5837] Bluetooth: hci1: command tx timeout [ 438.286317][ T8] usb 1-1: USB disconnect, device number 17 [ 438.311136][T16292] batadv_slave_1: entered promiscuous mode [ 438.319492][T16295] batadv_slave_1: left promiscuous mode [ 438.433742][T16130] hsr_slave_0: entered promiscuous mode [ 438.448814][T16130] hsr_slave_1: entered promiscuous mode [ 438.454937][T16130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.473784][T16130] Cannot create hsr debugfs directory [ 438.624044][T16092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.642216][ T5825] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 438.649911][ T5825] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 438.652274][T16092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.657830][ T5825] pyra 0003:1E7D:2CF6.0026: probe with driver pyra failed with error -71 [ 438.659740][ T5825] usb 6-1: USB disconnect, device number 16 [ 438.726162][T16092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.774392][T16092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.147649][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 439.150355][T16092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.204036][T16092] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.287661][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.294785][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.316504][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.323628][ T8481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.434245][T16092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.479308][T16130] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 439.502398][T16130] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 439.533426][T16130] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 439.605971][T16130] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 439.607699][ T5837] Bluetooth: hci3: command tx timeout [ 439.840606][T16130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.880449][T16092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.922275][T16130] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.969089][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.976246][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.987887][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.995027][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.079931][T16092] veth0_vlan: entered promiscuous mode [ 440.090349][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.097015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.129167][T16092] veth1_vlan: entered promiscuous mode [ 440.186147][ T5873] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 440.216814][T16092] veth0_macvtap: entered promiscuous mode [ 440.237015][T16092] veth1_macvtap: entered promiscuous mode [ 440.286541][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.300555][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.321020][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.339346][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.354229][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.366967][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.378598][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.378709][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.400059][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.409913][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.413555][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.423346][T16092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.461653][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.487336][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.503126][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.513269][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.526296][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.535122][ T5873] usb 3-1: Product: syz [ 440.536428][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.540246][ T5873] usb 3-1: Manufacturer: syz [ 440.565919][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.566123][ T5873] usb 3-1: SerialNumber: syz [ 440.589140][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.609472][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.622059][T16092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.635729][T16092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.644982][T16092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.656509][T16092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.676259][T16092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.737586][T16130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.825698][ T5873] usb 3-1: 0:2 : does not exist [ 440.841972][ T5873] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 440.874958][ T5873] usb 3-1: USB disconnect, device number 24 [ 440.891565][T16342] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3124'. [ 440.911851][ T8481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.965644][ T8481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.041768][ T8477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.075624][ T8477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.404355][T16130] veth0_vlan: entered promiscuous mode [ 441.415751][T16130] veth1_vlan: entered promiscuous mode [ 441.556544][T16130] veth0_macvtap: entered promiscuous mode [ 441.567781][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'. [ 441.598493][T16130] veth1_macvtap: entered promiscuous mode [ 441.658797][T16365] bond1: entered promiscuous mode [ 441.664160][T16365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.709032][T16365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.742421][T16365] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 441.755777][T16365] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 441.825358][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.838783][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.849579][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.860858][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.870864][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.881606][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.892223][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.902845][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.921127][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.932563][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.962778][T16130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.017043][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.038431][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.094410][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.112241][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.128696][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.172689][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.189196][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.201392][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.230954][T16130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.262199][T16130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.284709][T16130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.304975][T16130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.313841][T16130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.327809][T16130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.337265][T16130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.468040][T16398] input: syz1 as /devices/virtual/input/input48 [ 442.542047][ T8477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.668212][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.687053][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.719275][ T8481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.734296][ T8481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.081439][ T8477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.208622][ T8477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.293399][ T8477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.504467][ T8477] bridge_slave_1: left allmulticast mode [ 443.510162][ T8477] bridge_slave_1: left promiscuous mode [ 443.537298][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.549072][ T8477] bridge_slave_0: left allmulticast mode [ 443.555210][ T8477] bridge_slave_0: left promiscuous mode [ 443.560932][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.821064][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.843715][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.853014][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.875850][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.899472][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 443.908809][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.103576][ T8477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.115197][ T8477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.125067][ T8477] bond0 (unregistering): Released all slaves [ 444.484698][ T8477] hsr_slave_0: left promiscuous mode [ 444.490844][ T8477] hsr_slave_1: left promiscuous mode [ 444.497390][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.505582][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.513625][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.521066][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.546022][ T8477] veth1_macvtap: left promiscuous mode [ 444.551592][ T8477] veth0_macvtap: left promiscuous mode [ 444.557322][ T8477] veth1_vlan: left promiscuous mode [ 444.562679][ T8477] veth0_vlan: left promiscuous mode [ 444.841157][T16448] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3149'. [ 444.944818][T16453] input: syz0 as /devices/virtual/input/input49 [ 445.106600][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 445.106613][ T29] audit: type=1326 audit(1874042935.996:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.5.3151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba4418cde9 code=0x0 [ 445.240635][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.251729][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.276758][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.289746][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.308756][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 445.316597][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.592346][ T8477] team0 (unregistering): Port device team_slave_1 removed [ 445.650268][ T8477] team0 (unregistering): Port device team_slave_0 removed [ 446.018371][ T5837] Bluetooth: hci1: command tx timeout [ 446.299496][T16424] chnl_net:caif_netlink_parms(): no params data found [ 446.710526][T16424] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.725490][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.742501][T16424] bridge_slave_0: entered allmulticast mode [ 446.750015][T16424] bridge_slave_0: entered promiscuous mode [ 446.758134][T16424] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.776680][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.791883][T16424] bridge_slave_1: entered allmulticast mode [ 446.801159][T16424] bridge_slave_1: entered promiscuous mode [ 446.936954][T16424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.952315][ T5873] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 446.989459][T16424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.074696][T16424] team0: Port device team_slave_0 added [ 447.103023][T16424] team0: Port device team_slave_1 added [ 447.116686][ T5873] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 447.131613][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.151219][ T5873] usb 1-1: Product: syz [ 447.155848][ T5873] usb 1-1: Manufacturer: syz [ 447.160641][ T5873] usb 1-1: SerialNumber: syz [ 447.167793][ T5873] usb 1-1: config 0 descriptor?? [ 447.208161][T16424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.227710][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.270996][T16424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.295546][T16424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.311612][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.358939][T16424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.424641][ T5873] hso 1-1:0.0: Failed to find BULK IN ep [ 447.443714][ T5873] usb-storage 1-1:0.0: USB Mass Storage device detected [ 447.454694][ T5837] Bluetooth: hci3: command tx timeout [ 447.538893][T16456] chnl_net:caif_netlink_parms(): no params data found [ 447.664441][ T5874] usb 1-1: USB disconnect, device number 18 [ 447.689347][ T8477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.817295][ T8477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.008070][ T8477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.081549][ T5837] Bluetooth: hci1: command tx timeout [ 448.403290][ T8477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.731556][ T8477] bridge_slave_1: left allmulticast mode [ 448.737250][ T8477] bridge_slave_1: left promiscuous mode [ 448.791089][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.828060][ T8477] bridge_slave_0: left allmulticast mode [ 448.851280][ T8477] bridge_slave_0: left promiscuous mode [ 448.857198][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.013171][ T5874] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 450.128158][ T8477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.165973][ T8477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.176752][ T8477] bond0 (unregistering): Released all slaves [ 450.192943][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 231, setting to 64 [ 450.208405][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 450.225692][ T5874] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 450.242575][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.275529][ T5874] usb 6-1: config 0 descriptor?? [ 450.285931][T16537] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 450.297830][ T5874] appletouch 6-1:0.0: Could not find int-in endpoint [ 450.304861][ T5874] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 450.323037][ T5874] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 450.512590][ T5874] usb 6-1: USB disconnect, device number 17 [ 450.751785][ T8477] hsr_slave_0: left promiscuous mode [ 450.759997][ T8477] hsr_slave_1: left promiscuous mode [ 450.768541][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.790310][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.811609][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.819056][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.912029][ T8477] veth1_macvtap: left promiscuous mode [ 450.917605][ T8477] veth0_macvtap: left promiscuous mode [ 450.959655][ T8477] veth1_vlan: left promiscuous mode [ 450.979904][ T8477] veth0_vlan: left promiscuous mode [ 451.072411][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 451.267908][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.277638][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.288941][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.312816][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.321868][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 451.329140][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.394343][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.404395][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.427385][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.438924][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.460730][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 451.469496][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.087626][ T8477] team0 (unregistering): Port device team_slave_1 removed [ 452.099431][ T1211] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 452.145290][ T8477] team0 (unregistering): Port device team_slave_0 removed [ 452.265715][ T1211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.276480][ T1211] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.286831][ T1211] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.304492][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.321644][ T1211] usb 3-1: SerialNumber: syz [ 452.547120][ T1211] usb 3-1: 0:2 : does not exist [ 452.578736][ T1211] usb 3-1: USB disconnect, device number 25 [ 453.052352][T16570] chnl_net:caif_netlink_parms(): no params data found [ 453.194000][T16565] chnl_net:caif_netlink_parms(): no params data found [ 453.303323][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.312311][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.319997][T16570] bridge_slave_0: entered allmulticast mode [ 453.326690][T16570] bridge_slave_0: entered promiscuous mode [ 453.341489][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.349286][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.356504][T16570] bridge_slave_1: entered allmulticast mode [ 453.363557][T16570] bridge_slave_1: entered promiscuous mode [ 453.439620][ T5837] Bluetooth: hci1: command tx timeout [ 453.487012][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.506524][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.514283][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.521853][ T5837] Bluetooth: hci3: command tx timeout [ 453.530093][T16565] bridge_slave_0: entered allmulticast mode [ 453.538806][T16565] bridge_slave_0: entered promiscuous mode [ 453.554007][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.565970][T16614] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 453.574074][T16565] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.587164][T16565] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.598617][T16565] bridge_slave_1: entered allmulticast mode [ 453.605993][T16565] bridge_slave_1: entered promiscuous mode [ 453.613304][ T8477] bridge_slave_1: left allmulticast mode [ 453.619292][ T8477] bridge_slave_1: left promiscuous mode [ 453.625034][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.643237][ T8477] bridge_slave_0: left allmulticast mode [ 453.649115][ T8477] bridge_slave_0: left promiscuous mode [ 453.654932][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.910467][ T8477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.930827][ T8477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.960059][ T8477] bond0 (unregistering): Released all slaves [ 453.981159][ T8477] bond0 (unregistering): Released all slaves [ 454.186705][T16570] team0: Port device team_slave_0 added [ 454.211801][T16565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.246590][T16565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.266056][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.273336][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 454.292321][ T8477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.423248][ T8477] team0 (unregistering): Port device team_slave_1 removed [ 454.468328][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 454.509095][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.520316][ T5871] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 454.533644][ T8477] team0 (unregistering): Port device team_slave_0 removed [ 454.540083][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.558105][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.566154][ T5871] usb 1-1: Product: syz [ 454.578240][ T5871] usb 1-1: Manufacturer: syz [ 454.582869][ T5871] usb 1-1: SerialNumber: syz [ 454.818468][T16618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.924391][T16570] team0: Port device team_slave_1 added [ 455.021976][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.029302][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.060406][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.103622][T16565] team0: Port device team_slave_0 added [ 455.131144][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.167140][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.378362][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.431191][T16618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 455.460142][T16565] team0: Port device team_slave_1 added [ 455.522459][ T5837] Bluetooth: hci1: command tx timeout [ 455.578869][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.607726][ T5837] Bluetooth: hci3: command tx timeout [ 455.617013][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.668877][ T5871] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 455.675356][ T5871] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 455.706626][ T5871] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 455.712500][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.804733][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.827517][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.854166][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.885168][T16570] hsr_slave_0: entered promiscuous mode [ 455.898226][T16570] hsr_slave_1: entered promiscuous mode [ 455.944057][ T5871] cdc_ncm 1-1:1.0 eth25: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 455.991172][ T5871] usb 1-1: USB disconnect, device number 19 [ 456.009894][ T5871] cdc_ncm 1-1:1.0 eth25: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 456.085929][T16565] hsr_slave_0: entered promiscuous mode [ 456.092538][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.104177][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.112865][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.118256][T16565] hsr_slave_1: entered promiscuous mode [ 456.129988][T16565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.142912][T16565] Cannot create hsr debugfs directory [ 456.152566][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.167400][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 456.175774][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.292071][ T974] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 456.448148][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 456.455970][ T8477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.477886][ T974] usb 6-1: unable to get BOS descriptor or descriptor too short [ 456.497805][ T974] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 456.525233][ T974] usb 6-1: can't read configurations, error -71 [ 456.662614][ T8477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.789878][ T8477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.922809][ T8477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.273157][ T8477] bridge_slave_1: left allmulticast mode [ 457.279252][ T8477] bridge_slave_1: left promiscuous mode [ 457.287926][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.299434][ T8477] bridge_slave_0: left allmulticast mode [ 457.305097][ T8477] bridge_slave_0: left promiscuous mode [ 457.311451][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.327020][ T12] [ 457.327172][ T8477] ================================================================== [ 457.329681][ T12] ============================= [ 457.337688][ T8477] BUG: KASAN: slab-out-of-bounds in dev_deactivate_queue+0xb4/0x1b0 [ 457.337714][ T8477] Read of size 8 at addr ffff8880306bd590 by task kworker/u8:10/8477 [ 457.337727][ T8477] [ 457.337735][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: kworker/u8:10 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 457.337753][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 457.337764][ T8477] Workqueue: netns cleanup_net [ 457.337794][ T8477] Call Trace: [ 457.337805][ T8477] [ 457.337812][ T8477] dump_stack_lvl+0x241/0x360 [ 457.337832][ T8477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.337847][ T8477] ? __pfx__printk+0x10/0x10 [ 457.337876][ T8477] ? _printk+0xd5/0x120 [ 457.337897][ T8477] ? __virt_addr_valid+0x183/0x530 [ 457.337919][ T8477] ? __virt_addr_valid+0x183/0x530 [ 457.337941][ T8477] print_report+0x169/0x550 [ 457.337963][ T8477] ? __virt_addr_valid+0x183/0x530 [ 457.337984][ T8477] ? __virt_addr_valid+0x183/0x530 [ 457.338003][ T8477] ? __virt_addr_valid+0x45f/0x530 [ 457.338024][ T8477] ? __phys_addr+0xba/0x170 [ 457.338045][ T8477] ? dev_deactivate_queue+0xb4/0x1b0 [ 457.338060][ T8477] kasan_report+0x143/0x180 [ 457.338091][ T8477] ? dev_deactivate_queue+0xb4/0x1b0 [ 457.338109][ T8477] dev_deactivate_queue+0xb4/0x1b0 [ 457.338126][ T8477] dev_deactivate_many+0x14a/0xc90 [ 457.338142][ T8477] ? dev_deactivate_many+0x2e3/0xc90 [ 457.338158][ T8477] ? __pfx_dev_deactivate_many+0x10/0x10 [ 457.338175][ T8477] ? notifier_call_chain+0x3cc/0x3f0 [ 457.338198][ T8477] __dev_close_many+0x1a4/0x350 [ 457.338217][ T8477] ? __pfx___dev_close_many+0x10/0x10 [ 457.338237][ T8477] ? mark_lock+0x9a/0x360 [ 457.338259][ T8477] dev_close_many+0x24e/0x4c0 [ 457.338279][ T8477] ? __pfx_dev_close_many+0x10/0x10 [ 457.338301][ T8477] unregister_netdevice_many_notify+0x52d/0x1f10 [ 457.338324][ T8477] ? net_generic+0x1f/0x240 [ 457.338342][ T8477] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 457.338361][ T8477] ? unregister_netdevice_queue+0x26b/0x370 [ 457.338384][ T8477] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 457.338412][ T8477] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 457.338430][ T8477] cleanup_net+0x76d/0xd60 [ 457.338450][ T8477] ? __pfx_cleanup_net+0x10/0x10 [ 457.338474][ T8477] ? process_scheduled_works+0x9c6/0x18e0 [ 457.338493][ T8477] process_scheduled_works+0xabe/0x18e0 [ 457.338521][ T8477] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.338543][ T8477] ? assign_work+0x364/0x3d0 [ 457.338563][ T8477] worker_thread+0x870/0xd30 [ 457.338586][ T8477] ? __kthread_parkme+0x169/0x1d0 [ 457.338606][ T8477] ? __pfx_worker_thread+0x10/0x10 [ 457.338625][ T8477] kthread+0x7a9/0x920 [ 457.338644][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338665][ T8477] ? __pfx_worker_thread+0x10/0x10 [ 457.338684][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338703][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338725][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338744][ T8477] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.338760][ T8477] ? lockdep_hardirqs_on+0x99/0x150 [ 457.338778][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338798][ T8477] ret_from_fork+0x4b/0x80 [ 457.338816][ T8477] ? __pfx_kthread+0x10/0x10 [ 457.338836][ T8477] ret_from_fork_asm+0x1a/0x30 [ 457.338882][ T8477] [ 457.338889][ T8477] [ 457.342572][ T12] WARNING: suspicious RCU usage [ 457.350520][ T8477] Allocated by task 14044: [ 457.350535][ T8477] kasan_save_track+0x3f/0x80 [ 457.350559][ T8477] __kasan_kmalloc+0x98/0xb0 [ 457.358629][ T12] 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 Not tainted [ 457.360909][ T8477] __kmalloc_node_noprof+0x290/0x4d0 [ 457.372253][ T12] ----------------------------- [ 457.381838][ T8477] __kvmalloc_node_noprof+0x72/0x190 [ 457.381863][ T8477] alloc_netdev_mqs+0x92d/0x1210 [ 457.381885][ T8477] rtnl_create_link+0x2f9/0xc90 [ 457.381905][ T8477] rtnl_newlink_create+0x210/0xa40 [ 457.381922][ T8477] rtnl_newlink+0x17cc/0x1d30 [ 457.381935][ T8477] rtnetlink_rcv_msg+0x791/0xcf0 [ 457.381950][ T8477] netlink_rcv_skb+0x206/0x480 [ 457.381970][ T8477] netlink_unicast+0x7f6/0x990 [ 457.381988][ T8477] netlink_sendmsg+0x8de/0xcb0 [ 457.382003][ T8477] __sock_sendmsg+0x221/0x270 [ 457.382018][ T8477] __sys_sendto+0x363/0x4c0 [ 457.387361][ T12] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 457.390020][ T8477] __x64_sys_sendto+0xde/0x100 [ 457.393062][ T12] [ 457.393062][ T12] other info that might help us debug this: [ 457.393062][ T12] [ 457.397587][ T8477] do_syscall_64+0xf3/0x230 [ 457.397609][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.397630][ T8477] [ 457.397637][ T8477] The buggy address belongs to the object at ffff8880306bd400 [ 457.397637][ T8477] which belongs to the cache kmalloc-cg-512 of size 512 [ 457.402800][ T12] [ 457.402800][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 457.407358][ T8477] The buggy address is located 16 bytes to the right of [ 457.407358][ T8477] allocated 384-byte region [ffff8880306bd400, ffff8880306bd580) [ 457.407377][ T8477] [ 457.407383][ T8477] The buggy address belongs to the physical page: [ 457.407403][ T8477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880306bf400 pfn:0x306bc [ 457.411515][ T12] 3 locks held by kworker/u8:1/12: [ 457.416599][ T8477] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 457.416615][ T8477] memcg:ffff88807e0abe01 [ 457.416624][ T8477] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 457.421710][ T12] #0: [ 457.426181][ T8477] page_type: f5(slab) [ 457.431293][ T12] ffff88802810e148 [ 457.436350][ T8477] raw: 00fff00000000240 ffff88801b04f140 ffffea0000d29b10 ffffea00009bfa10 [ 457.441540][ T12] ( [ 457.445904][ T8477] raw: ffff8880306bf400 000000000010000a 00000000f5000000 ffff88807e0abe01 [ 457.451187][ T12] (wq_completion)bond0 [ 457.455631][ T8477] head: 00fff00000000240 ffff88801b04f140 ffffea0000d29b10 ffffea00009bfa10 [ 457.460912][ T12] #17 [ 457.465975][ T8477] head: ffff8880306bf400 000000000010000a 00000000f5000000 ffff88807e0abe01 [ 457.471078][ T12] ){+.+.}-{0:0} [ 457.476318][ T8477] head: 00fff00000000002 ffffea0000c1af01 ffffffffffffffff 0000000000000000 [ 457.481938][ T12] , at: process_scheduled_works+0x98b/0x18e0 [ 457.487175][ T8477] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 457.487185][ T8477] page dumped because: kasan: bad access detected [ 457.487206][ T8477] page_owner tracks the page as allocated [ 457.487213][ T8477] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevd), ts 33037130615, free_ts 29896345530 [ 457.492052][ T12] #1: [ 457.497396][ T8477] post_alloc_hook+0x1f4/0x240 [ 457.497418][ T8477] get_page_from_freelist+0x3651/0x37a0 [ 457.497435][ T8477] __alloc_frozen_pages_noprof+0x292/0x710 [ 457.497453][ T8477] alloc_pages_mpol+0x311/0x660 [ 457.497472][ T8477] allocate_slab+0x8f/0x3a0 [ 457.497490][ T8477] ___slab_alloc+0xc27/0x14a0 [ 457.497506][ T8477] __slab_alloc+0x58/0xa0 [ 457.501823][ T12] ffffc90000117c60 [ 457.506473][ T8477] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 457.511701][ T12] ( [ 457.517941][ T8477] kmalloc_reserve+0x111/0x2a0 [ 457.517969][ T8477] __alloc_skb+0x1f3/0x440 [ 457.522448][ T12] (work_completion)(&(&bond->mii_work)->work) [ 457.529176][ T8477] alloc_skb_with_frags+0xc3/0x820 [ 457.529203][ T8477] sock_alloc_send_pskb+0x91a/0xa60 [ 457.529217][ T8477] unix_dgram_sendmsg+0x5e8/0x1df0 [ 457.535078][ T12] ){+.+.}-{0:0} [ 457.541286][ T8477] __sock_sendmsg+0x221/0x270 [ 457.541306][ T8477] sock_write_iter+0x2d7/0x3f0 [ 457.541320][ T8477] vfs_write+0xacf/0xd10 [ 457.541338][ T8477] page last free pid 5201 tgid 5201 stack trace: [ 457.541348][ T8477] free_frozen_pages+0xe04/0x10e0 [ 457.541363][ T8477] __slab_free+0x2c2/0x380 [ 457.541380][ T8477] qlist_free_all+0x9a/0x140 [ 457.541398][ T8477] kasan_quarantine_reduce+0x14f/0x170 [ 457.547370][ T12] , at: process_scheduled_works+0x9c6/0x18e0 [ 457.551733][ T8477] __kasan_slab_alloc+0x23/0x80 [ 457.556666][ T12] #2: [ 457.562327][ T8477] kmem_cache_alloc_noprof+0x1d9/0x380 [ 457.567874][ T12] ffffffff8eb38f60 [ 457.573792][ T8477] vm_area_dup+0x27/0x290 [ 457.578376][ T12] ( [ 457.582913][ T8477] copy_mm+0xcd6/0x2160 [ 457.587997][ T12] rcu_read_lock [ 457.592994][ T8477] copy_process+0x17d1/0x3cf0 [ 457.597178][ T12] ){....}-{1:3} [ 457.601602][ T8477] kernel_clone+0x223/0x870 [ 457.606711][ T12] , at: bond_mii_monitor+0x174/0x3170 [ 457.611245][ T8477] __x64_sys_clone+0x267/0x2e0 [ 457.615806][ T12] [ 457.615806][ T12] stack backtrace: [ 457.620361][ T8477] do_syscall_64+0xf3/0x230 [ 457.620381][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.625563][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 457.625583][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 457.625594][ T12] Workqueue: bond0 bond_mii_monitor [ 457.625619][ T12] Call Trace: [ 457.625626][ T12] [ 457.625635][ T12] dump_stack_lvl+0x241/0x360 [ 457.625656][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.625674][ T12] ? __pfx__printk+0x10/0x10 [ 457.625710][ T12] lockdep_rcu_suspicious+0x226/0x340 [ 457.625736][ T12] dev_deactivate_queue+0x8f/0x1b0 [ 457.625757][ T12] dev_deactivate_many+0x14a/0xc90 [ 457.625780][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 457.625802][ T12] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 457.625824][ T12] dev_deactivate+0x184/0x280 [ 457.625843][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 457.625858][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 457.625876][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.625897][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 457.625927][ T12] linkwatch_do_dev+0x10a/0x170 [ 457.625949][ T12] ethtool_op_get_link+0x15/0x60 [ 457.625965][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 457.625982][ T12] bond_check_dev_link+0x1eb/0x4a0 [ 457.626008][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 457.626046][ T12] bond_mii_monitor+0x49a/0x3170 [ 457.626078][ T12] ? __lock_acquire+0x1397/0x2100 [ 457.626099][ T12] ? bond_mii_monitor+0x174/0x3170 [ 457.626125][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 457.626150][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 457.626186][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 457.626208][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.626232][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 457.626266][ T12] ? process_scheduled_works+0x9c6/0x18e0 [ 457.626285][ T12] process_scheduled_works+0xabe/0x18e0 [ 457.626331][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.626359][ T12] ? assign_work+0x364/0x3d0 [ 457.626383][ T12] worker_thread+0x870/0xd30 [ 457.626415][ T12] ? __kthread_parkme+0x169/0x1d0 [ 457.626439][ T12] ? __pfx_worker_thread+0x10/0x10 [ 457.626459][ T12] kthread+0x7a9/0x920 [ 457.626478][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626506][ T12] ? __pfx_worker_thread+0x10/0x10 [ 457.626526][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626545][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626570][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626589][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.626605][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 457.626622][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626645][ T12] ret_from_fork+0x4b/0x80 [ 457.626663][ T12] ? __pfx_kthread+0x10/0x10 [ 457.626684][ T12] ret_from_fork_asm+0x1a/0x30 [ 457.626717][ T12] [ 458.437100][ T8477] [ 458.439411][ T8477] Memory state around the buggy address: [ 458.445020][ T8477] ffff8880306bd480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.453067][ T8477] ffff8880306bd500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.461109][ T8477] >ffff8880306bd580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 458.469151][ T8477] ^ [ 458.473720][ T8477] ffff8880306bd600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 458.481766][ T8477] ffff8880306bd680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 458.489811][ T8477] ================================================================== [ 458.545344][ T5834] Bluetooth: hci1: command tx timeout [ 458.550846][ T5834] Bluetooth: hci3: command tx timeout [ 458.556547][ T5834] Bluetooth: hci4: command tx timeout [ 458.570536][ T12] [ 458.572902][ T12] ============================= [ 458.577912][ T12] WARNING: suspicious RCU usage [ 458.582776][ T12] 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 Not tainted [ 458.590059][ T12] ----------------------------- [ 458.594922][ T12] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 458.603990][ T12] [ 458.603990][ T12] other info that might help us debug this: [ 458.603990][ T12] [ 458.614415][ T12] [ 458.614415][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 458.622717][ T12] 3 locks held by kworker/u8:1/12: [ 458.627986][ T12] #0: ffff88802810e148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 458.639292][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 458.644522][ T8477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 458.644537][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: kworker/u8:10 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 458.644557][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 458.644570][ T8477] Workqueue: netns cleanup_net [ 458.644595][ T8477] Call Trace: [ 458.644602][ T8477] [ 458.644610][ T8477] dump_stack_lvl+0x241/0x360 [ 458.644630][ T8477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.644647][ T8477] ? __pfx__printk+0x10/0x10 [ 458.644671][ T8477] ? preempt_schedule+0xe1/0xf0 [ 458.644691][ T8477] ? vscnprintf+0x5d/0x90 [ 458.644708][ T8477] panic+0x349/0x880 [ 458.644730][ T8477] ? check_panic_on_warn+0x21/0xb0 [ 458.644752][ T8477] ? __pfx_panic+0x10/0x10 [ 458.644775][ T8477] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 458.644794][ T8477] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.644811][ T8477] ? print_report+0x502/0x550 [ 458.644836][ T8477] check_panic_on_warn+0x86/0xb0 [ 458.644858][ T8477] ? dev_deactivate_queue+0xb4/0x1b0 [ 458.644875][ T8477] end_report+0x77/0x160 [ 458.644896][ T8477] kasan_report+0x154/0x180 [ 458.644919][ T8477] ? dev_deactivate_queue+0xb4/0x1b0 [ 458.644939][ T8477] dev_deactivate_queue+0xb4/0x1b0 [ 458.644958][ T8477] dev_deactivate_many+0x14a/0xc90 [ 458.644975][ T8477] ? dev_deactivate_many+0x2e3/0xc90 [ 458.644992][ T8477] ? __pfx_dev_deactivate_many+0x10/0x10 [ 458.645010][ T8477] ? notifier_call_chain+0x3cc/0x3f0 [ 458.645040][ T8477] __dev_close_many+0x1a4/0x350 [ 458.645061][ T8477] ? __pfx___dev_close_many+0x10/0x10 [ 458.645082][ T8477] ? mark_lock+0x9a/0x360 [ 458.645105][ T8477] dev_close_many+0x24e/0x4c0 [ 458.645126][ T8477] ? __pfx_dev_close_many+0x10/0x10 [ 458.645149][ T8477] unregister_netdevice_many_notify+0x52d/0x1f10 [ 458.645173][ T8477] ? net_generic+0x1f/0x240 [ 458.645192][ T8477] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 458.645212][ T8477] ? unregister_netdevice_queue+0x26b/0x370 [ 458.645237][ T8477] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 458.645265][ T8477] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 458.645283][ T8477] cleanup_net+0x76d/0xd60 [ 458.645306][ T8477] ? __pfx_cleanup_net+0x10/0x10 [ 458.645331][ T8477] ? process_scheduled_works+0x9c6/0x18e0 [ 458.645350][ T8477] process_scheduled_works+0xabe/0x18e0 [ 458.645380][ T8477] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.645403][ T8477] ? assign_work+0x364/0x3d0 [ 458.645423][ T8477] worker_thread+0x870/0xd30 [ 458.645448][ T8477] ? __kthread_parkme+0x169/0x1d0 [ 458.645470][ T8477] ? __pfx_worker_thread+0x10/0x10 [ 458.645490][ T8477] kthread+0x7a9/0x920 [ 458.645511][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645533][ T8477] ? __pfx_worker_thread+0x10/0x10 [ 458.645553][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645573][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645596][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645616][ T8477] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.645633][ T8477] ? lockdep_hardirqs_on+0x99/0x150 [ 458.645651][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645672][ T8477] ret_from_fork+0x4b/0x80 [ 458.645692][ T8477] ? __pfx_kthread+0x10/0x10 [ 458.645714][ T8477] ret_from_fork_asm+0x1a/0x30 [ 458.645738][ T8477] [ 458.652409][ T8477] Kernel Offset: disabled