last executing test programs: 1m12.879173308s ago: executing program 3 (id=661): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) capget(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r4}) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x3, r2, 0x5}) geteuid() ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x3, 0x2, 0x6b15, 0x0, "000080000a00d8000000890600", "0100", "fd0100", "7b8a3700", ["000000000001000d00", '\x00', "a59e953a4d92cdc700ff00", "0000000001ff0100001c00"]}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000040)) 1m11.434899013s ago: executing program 3 (id=664): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x7, 0x0, 0x2}]) 1m10.416115781s ago: executing program 3 (id=665): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) 1m9.059057858s ago: executing program 3 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x7b}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 50.3289577s ago: executing program 3 (id=671): syz_emit_vhci(0x0, 0x9) syz_open_dev$usbfs(0x0, 0x0, 0x2) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000300)=0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x14811}, 0x4008801) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vxcan1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xa, 0x3, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000740)={0x1, 0x0, [{0x1000, 0x0, 0x0}]}) 44.5261404s ago: executing program 3 (id=679): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r3 = dup(r2) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) read$FUSE(r3, &(0x7f0000001a80)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_getscheduler(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) 9.257145248s ago: executing program 1 (id=738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socket$unix(0x1, 0x2, 0x0) gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'team0\x00'}) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x1}, 0x10) close(r0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) listen(0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xc3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x30, 0xfffffffffffffc95, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x404e, 0x8, 0x38, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x10, 0x40, 0x6, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 7.604709577s ago: executing program 1 (id=743): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8010, &(0x7f0000000000)={[0x4]}, 0x8) 7.17296896s ago: executing program 4 (id=744): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) 6.275233828s ago: executing program 1 (id=746): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400000, {0x100, 0x5, 0x3, 0x8}}}, @NL80211_ATTR_BSS_SELECT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x44081) 6.134973139s ago: executing program 2 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01s\xd1\xe4RM\xc0x\a\x83\xe2eA\x81x\x00E\xe2\xb1\xaa\xed\xb58\xc6\xc7\xc0\x01\x04\xebbO\xbd<\x1f\x81\x94', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000010902200001000000000904000000ef0101000a"], 0x0) 5.140702247s ago: executing program 4 (id=749): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x9, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000fc, 0x8, 0x0, 0x0}}, 0x36) 4.609539379s ago: executing program 0 (id=750): r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x9, 0x8}) 4.36344632s ago: executing program 4 (id=751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socket$unix(0x1, 0x2, 0x0) gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'team0\x00'}) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x1}, 0x10) close(r0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) listen(0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xc3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x30, 0xfffffffffffffc95, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x404e, 0x8, 0x38, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x10, 0x40, 0x6, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 3.73254137s ago: executing program 0 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r1, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 3.6907331s ago: executing program 2 (id=753): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 3.290956079s ago: executing program 1 (id=754): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x3e3b193d28108aa6) 2.957097346s ago: executing program 2 (id=755): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8010, &(0x7f0000000000)={[0x4]}, 0x8) 2.911067858s ago: executing program 0 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2.602876092s ago: executing program 4 (id=757): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capget(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) geteuid() ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x3, 0x2, 0x6b15, 0x0, "000080000a00d8000000890600", "0100", "fd0100", "7b8a3700", ["000000000001000d00", '\x00', "a59e953a4d92cdc700ff00", "0000000001ff0100001c00"]}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000040)) 2.257322912s ago: executing program 1 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 2.21507991s ago: executing program 0 (id=759): syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) 2.080139921s ago: executing program 2 (id=760): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x9, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000fc, 0x8, 0x0, 0x0}}, 0x36) 1.48104447s ago: executing program 1 (id=761): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 1.435786786s ago: executing program 0 (id=762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x104}}, 0x0) 1.132418251s ago: executing program 2 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @private}, &(0x7f0000000080)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) fcntl$setownex(r4, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(r4, &(0x7f0000000100)='./file0\x00', 0x9000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400280, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x5, @local, 0x1}, @in6={0xa, 0x4c24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x9de}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xff, @empty, 0x7}]}, &(0x7f0000000240)=0x10) socket(0x10, 0x3, 0x0) 1.056391092s ago: executing program 4 (id=764): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 578.303941ms ago: executing program 0 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x2, 0xf, 0x9, 0x5}, 0x14) 354.709309ms ago: executing program 4 (id=766): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x19}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 0s ago: executing program 2 (id=767): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x3c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team0\x00'}) kernel console output (not intermixed with test programs): T7331] erofs: (device loop2): mounted with root inode @ nid 36. [ 567.372311][ T5951] bridge_slave_0: left allmulticast mode [ 567.378250][ T5951] bridge_slave_0: left promiscuous mode [ 567.385186][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.052863][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.124348][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.180517][ T5951] bond0 (unregistering): Released all slaves [ 569.002554][ T5951] hsr_slave_0: left promiscuous mode [ 569.043387][ T5951] hsr_slave_1: left promiscuous mode [ 569.097895][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.106987][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.155582][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.163545][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.216605][ T5951] veth1_macvtap: left promiscuous mode [ 569.222588][ T5951] veth0_macvtap: left promiscuous mode [ 569.228557][ T5951] veth1_vlan: left promiscuous mode [ 569.240143][ T5951] veth0_vlan: left promiscuous mode [ 569.691580][ T7344] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 570.218218][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 570.246851][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 571.106858][ T29] audit: type=1326 audit(1724325892.477:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7fc00000 [ 571.129395][ T29] audit: type=1326 audit(1724325892.507:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf743d579 code=0x7fc00000 [ 571.388941][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.523120][ T29] audit: type=1326 audit(1724325892.987:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7fc00000 [ 571.648882][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.769150][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.777067][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.954139][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.961991][ T4187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.499810][ T7358] loop3: detected capacity change from 0 to 16 [ 572.573620][ T7358] erofs: (device loop3): mounted with root inode @ nid 36. [ 572.830286][ T29] audit: type=1326 audit(1724325894.267:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.3.464" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 573.823217][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.834758][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.848489][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.863187][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.875248][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 573.884842][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.981367][ T3242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.989478][ T3242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.256801][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.367466][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.376015][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.972622][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 576.033777][ T53] Bluetooth: hci0: command tx timeout [ 576.102311][ T7378] chnl_net:caif_netlink_parms(): no params data found [ 576.295180][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.309445][ T25] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 576.320133][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.410684][ T25] usb 4-1: config 0 descriptor?? [ 576.458187][ T25] rndis_host 4-1:0.0: skipping garbage [ 576.464209][ T25] usb 4-1: bad CDC descriptors [ 576.823753][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.922477][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.437315][ T29] audit: type=1326 audit(1724325898.907:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 577.461057][ T29] audit: type=1326 audit(1724325898.947:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf747d579 code=0x7fc00000 [ 577.485621][ T29] audit: type=1326 audit(1724325898.997:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 577.693418][ T8] usb 4-1: USB disconnect, device number 7 [ 577.928760][ T3212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.117518][ T53] Bluetooth: hci0: command tx timeout [ 578.166297][ T3212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.476284][ T3212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.639695][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.647802][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.664982][ T7378] bridge_slave_0: entered allmulticast mode [ 578.674948][ T7378] bridge_slave_0: entered promiscuous mode [ 578.764368][ T7417] loop3: detected capacity change from 0 to 16 [ 578.779125][ T3212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.853001][ T7417] erofs: (device loop3): mounted with root inode @ nid 36. [ 578.869471][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.877584][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.885967][ T7378] bridge_slave_1: entered allmulticast mode [ 578.895839][ T7378] bridge_slave_1: entered promiscuous mode [ 579.111584][ T29] audit: type=1326 audit(1724325900.577:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.474" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 579.327481][ T7228] veth0_vlan: entered promiscuous mode [ 579.349694][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.526730][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.614826][ T7228] veth1_vlan: entered promiscuous mode [ 580.068452][ T7378] team0: Port device team_slave_0 added [ 580.129579][ T3212] bridge_slave_1: left allmulticast mode [ 580.135909][ T3212] bridge_slave_1: left promiscuous mode [ 580.142850][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.212417][ T53] Bluetooth: hci0: command tx timeout [ 580.228806][ T3212] bridge_slave_0: left allmulticast mode [ 580.235798][ T3212] bridge_slave_0: left promiscuous mode [ 580.243108][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.984935][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.068060][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.096243][ T3212] bond0 (unregistering): Released all slaves [ 581.166350][ T7378] team0: Port device team_slave_1 added [ 581.778035][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.786912][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.813993][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.998749][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.006374][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.038543][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.261730][ T3212] hsr_slave_0: left promiscuous mode [ 582.273116][ T53] Bluetooth: hci0: command tx timeout [ 582.301053][ T3212] hsr_slave_1: left promiscuous mode [ 582.326938][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.335446][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.372055][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.379956][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.462483][ T3212] veth1_macvtap: left promiscuous mode [ 582.468428][ T3212] veth0_macvtap: left promiscuous mode [ 582.475147][ T3212] veth1_vlan: left promiscuous mode [ 582.480765][ T3212] veth0_vlan: left promiscuous mode [ 583.090083][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.131679][ T29] audit: type=1326 audit(1724325904.597:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 583.158579][ T29] audit: type=1326 audit(1724325904.597:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf747d579 code=0x7fc00000 [ 583.184477][ T29] audit: type=1326 audit(1724325904.637:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 583.382668][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.622907][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 583.737681][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 584.496231][ T7228] veth0_macvtap: entered promiscuous mode [ 584.591475][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 584.712244][ T7228] veth1_macvtap: entered promiscuous mode [ 584.749654][ T7378] hsr_slave_0: entered promiscuous mode [ 584.825513][ T7378] hsr_slave_1: entered promiscuous mode [ 584.849613][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.860299][ T8] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 584.869925][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.921488][ T7378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.929332][ T7378] Cannot create hsr debugfs directory [ 584.960477][ T8] usb 3-1: config 0 descriptor?? [ 584.993467][ T8] rndis_host 3-1:0.0: skipping garbage [ 584.999239][ T8] usb 3-1: bad CDC descriptors [ 585.432342][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.443328][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.453549][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.464379][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.477102][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.491286][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.501480][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.512325][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.534233][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.881497][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.893016][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.903262][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.914097][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.929294][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.941492][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.951872][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.962687][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.978517][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.058746][ T5236] usb 3-1: USB disconnect, device number 3 [ 586.265729][ T7470] loop3: detected capacity change from 0 to 16 [ 586.339715][ T7470] erofs: (device loop3): mounted with root inode @ nid 36. [ 586.386781][ T7228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.397772][ T7228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.407065][ T7228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.416255][ T7228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.544336][ T29] audit: type=1326 audit(1724325907.997:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.3.485" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 588.173508][ T7378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.363209][ T7378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.463148][ T7378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.605194][ T7378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.903098][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.931504][ T29] audit: type=1326 audit(1724325910.367:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 588.940016][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.954768][ T29] audit: type=1326 audit(1724325910.407:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf747d579 code=0x7fc00000 [ 589.481370][ T29] audit: type=1326 audit(1724325910.927:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 590.142356][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.410389][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.503312][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.511374][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.652850][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.660644][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.434971][ T7524] binder: 7521:7524 ioctl 4018620d 0 returned -22 [ 593.447537][ T7545] loop1: detected capacity change from 0 to 16 [ 593.518299][ T7545] erofs: (device loop1): mounted with root inode @ nid 36. [ 593.703555][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.777889][ T29] audit: type=1326 audit(1724325915.277:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.1.497" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 594.568845][ T7378] veth0_vlan: entered promiscuous mode [ 594.796243][ T7378] veth1_vlan: entered promiscuous mode [ 595.796583][ T7378] veth0_macvtap: entered promiscuous mode [ 595.922188][ T7378] veth1_macvtap: entered promiscuous mode [ 596.215227][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.226849][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.237425][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.249985][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.260538][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.276513][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.288899][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.299895][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.310212][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.321270][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.339725][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.541714][ T29] audit: type=1326 audit(1724325918.047:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 596.565076][ T29] audit: type=1326 audit(1724325918.047:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf747d579 code=0x7fc00000 [ 596.664218][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.673285][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.698908][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.711443][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.722087][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.733065][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.743398][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.756967][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.767813][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.784393][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.796403][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.807350][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.824759][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.949198][ T7378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.956053][ T7572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.960548][ T7378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.977702][ T7378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.992657][ T7378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.052201][ T7485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.060519][ T7485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.077812][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.096813][ T29] audit: type=1326 audit(1724325918.547:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.119841][ T29] audit: type=1326 audit(1724325918.547:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.142246][ T29] audit: type=1326 audit(1724325918.547:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.164793][ T29] audit: type=1326 audit(1724325918.547:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.187597][ T29] audit: type=1326 audit(1724325918.547:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.214432][ T29] audit: type=1326 audit(1724325918.547:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.238558][ T29] audit: type=1326 audit(1724325918.547:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.261158][ T29] audit: type=1326 audit(1724325918.547:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 597.900748][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.913914][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.186053][ T7597] loop1: detected capacity change from 0 to 16 [ 600.289622][ T7597] erofs: (device loop1): mounted with root inode @ nid 36. [ 600.692957][ T2818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 601.009361][ T2818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.020328][ T2818] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 601.030034][ T2818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.138032][ T2818] usb 5-1: config 0 descriptor?? [ 601.269089][ T2818] rndis_host 5-1:0.0: skipping garbage [ 601.275215][ T2818] usb 5-1: bad CDC descriptors [ 602.293541][ T5236] usb 5-1: USB disconnect, device number 2 [ 602.592232][ T5188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 602.613072][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 602.629455][ T5188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 602.659246][ T5188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 602.700460][ T5188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 602.711396][ T5188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.883643][ T7626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.022560][ T7627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.156351][ T7623] chnl_net:caif_netlink_parms(): no params data found [ 604.834334][ T53] Bluetooth: hci3: command tx timeout [ 605.471876][ T7654] loop2: detected capacity change from 0 to 16 [ 605.521490][ T7654] erofs: (device loop2): mounted with root inode @ nid 36. [ 605.685769][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 605.685850][ T29] audit: type=1326 audit(1724325927.197:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.2.519" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 606.448051][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.456291][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.651793][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.659624][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.667768][ T7623] bridge_slave_0: entered allmulticast mode [ 606.677664][ T7623] bridge_slave_0: entered promiscuous mode [ 606.892942][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.900983][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.909137][ T7623] bridge_slave_1: entered allmulticast mode [ 606.934062][ T7623] bridge_slave_1: entered promiscuous mode [ 606.942648][ T53] Bluetooth: hci3: command tx timeout [ 607.485724][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.512830][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.520937][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.647439][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.848787][ T7673] binder: 7670:7673 ioctl 4018620d 0 returned -22 [ 608.105159][ T7623] team0: Port device team_slave_0 added [ 608.323991][ T7623] team0: Port device team_slave_1 added [ 608.502366][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 608.779156][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.789830][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.789916][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.790089][ T7623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.834609][ T25] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 608.844165][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.853047][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.866601][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.894780][ T7623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.949252][ T25] usb 5-1: config 0 descriptor?? [ 608.994331][ T53] Bluetooth: hci3: command tx timeout [ 609.005736][ T25] rndis_host 5-1:0.0: skipping garbage [ 609.011844][ T25] usb 5-1: bad CDC descriptors [ 609.249234][ T7683] syzkaller0: entered promiscuous mode [ 609.255252][ T7683] syzkaller0: entered allmulticast mode [ 609.421012][ T7686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.563486][ T7686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.053265][ T5279] usb 5-1: USB disconnect, device number 3 [ 610.163221][ T7623] hsr_slave_0: entered promiscuous mode [ 610.243846][ T7623] hsr_slave_1: entered promiscuous mode [ 610.272428][ T7623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.280621][ T7623] Cannot create hsr debugfs directory [ 611.071581][ T53] Bluetooth: hci3: command tx timeout [ 611.707103][ T7623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.875285][ T7693] loop4: detected capacity change from 0 to 256 [ 612.109252][ T7623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.434218][ T7623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.777857][ T7623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.757195][ T7623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 614.133151][ T7623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 614.276222][ T7485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.380127][ T7623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 614.608009][ T7485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.712067][ T7623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.957618][ T7485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.243820][ T7485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.662795][ T7485] bridge_slave_1: left allmulticast mode [ 615.668769][ T7485] bridge_slave_1: left promiscuous mode [ 615.676004][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.760825][ T7485] bridge_slave_0: left allmulticast mode [ 615.767200][ T7485] bridge_slave_0: left promiscuous mode [ 615.774197][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.574585][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.653625][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.720389][ T7485] bond0 (unregistering): Released all slaves [ 616.918271][ T7711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.124208][ T7714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.175557][ T7715] syzkaller0: entered promiscuous mode [ 617.181842][ T7715] syzkaller0: entered allmulticast mode [ 617.742073][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.757578][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 617.786973][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 617.816292][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 617.904638][ T5188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 617.919091][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.482228][ T7485] hsr_slave_0: left promiscuous mode [ 618.539970][ T7485] hsr_slave_1: left promiscuous mode [ 618.583439][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.599029][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.648517][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.656555][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.803837][ T7485] veth1_macvtap: left promiscuous mode [ 618.809674][ T7485] veth0_macvtap: left promiscuous mode [ 618.815837][ T7485] veth1_vlan: left promiscuous mode [ 618.821613][ T7485] veth0_vlan: left promiscuous mode [ 618.978698][ T7723] loop1: detected capacity change from 0 to 512 [ 619.474371][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.491378][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.504451][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.582471][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.593685][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.607045][ T7723] ext4 filesystem being mounted at /27 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.662475][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 619.687811][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.066082][ T53] Bluetooth: hci4: command tx timeout [ 620.217509][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 620.285520][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 621.882005][ T53] Bluetooth: hci5: command tx timeout [ 622.120226][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.134961][ T53] Bluetooth: hci4: command tx timeout [ 622.332165][ T7485] bridge_slave_1: left allmulticast mode [ 622.338470][ T7485] bridge_slave_1: left promiscuous mode [ 622.345654][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.414004][ T7485] bridge_slave_0: left allmulticast mode [ 622.420347][ T7485] bridge_slave_0: left promiscuous mode [ 622.427439][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.108754][ T7072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.170834][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.249456][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.334075][ T7485] bond0 (unregistering): Released all slaves [ 623.567682][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 623.629644][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.938742][ T7752] loop1: detected capacity change from 0 to 512 [ 623.963618][ T53] Bluetooth: hci5: command tx timeout [ 624.089113][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.097332][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.179796][ T7752] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 624.202929][ T53] Bluetooth: hci4: command tx timeout [ 624.483472][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.491418][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.614717][ T7485] hsr_slave_0: left promiscuous mode [ 624.674072][ T7485] hsr_slave_1: left promiscuous mode [ 624.732407][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.744403][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.794850][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.802915][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.951808][ T7485] veth0_macvtap: left promiscuous mode [ 624.957751][ T7485] veth1_vlan: left promiscuous mode [ 624.963856][ T7485] veth0_vlan: left promiscuous mode [ 625.899853][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 626.001985][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 626.042887][ T53] Bluetooth: hci5: command tx timeout [ 626.311508][ T53] Bluetooth: hci4: command tx timeout [ 626.525154][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 628.121327][ T53] Bluetooth: hci5: command tx timeout [ 628.243698][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.251746][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.259679][ T7717] bridge_slave_0: entered allmulticast mode [ 628.269513][ T7717] bridge_slave_0: entered promiscuous mode [ 628.478997][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.487007][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.495154][ T7717] bridge_slave_1: entered allmulticast mode [ 628.502540][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.505028][ T7717] bridge_slave_1: entered promiscuous mode [ 628.757221][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.289925][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.324742][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.332842][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.344105][ T7727] bridge_slave_0: entered allmulticast mode [ 629.354726][ T7727] bridge_slave_0: entered promiscuous mode [ 629.462206][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.494679][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.502645][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.510673][ T7727] bridge_slave_1: entered allmulticast mode [ 629.520468][ T7727] bridge_slave_1: entered promiscuous mode [ 630.005310][ T7717] team0: Port device team_slave_0 added [ 630.175620][ T7717] team0: Port device team_slave_1 added [ 630.216598][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.223295][ T7795] loop0: detected capacity change from 0 to 16 [ 630.383321][ T7795] erofs: (device loop0): mounted with root inode @ nid 36. [ 630.550387][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.586038][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.593404][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.619935][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.666421][ T7623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.774118][ T29] audit: type=1326 audit(1724325952.247:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7794 comm="syz.0.548" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 630.840158][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.847549][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.875347][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.056454][ T7727] team0: Port device team_slave_0 added [ 631.327829][ T7727] team0: Port device team_slave_1 added [ 631.708625][ T7717] hsr_slave_0: entered promiscuous mode [ 631.805600][ T7717] hsr_slave_1: entered promiscuous mode [ 632.070242][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.077649][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.104757][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.479432][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.486842][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.522747][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.845556][ T7623] veth0_vlan: entered promiscuous mode [ 632.897050][ T3964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.189310][ T3964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.316185][ T7623] veth1_vlan: entered promiscuous mode [ 633.571785][ T3964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.669510][ T7727] hsr_slave_0: entered promiscuous mode [ 633.694828][ T7822] binder: 7820:7822 ioctl 4018620d 0 returned -22 [ 633.751454][ T7727] hsr_slave_1: entered promiscuous mode [ 633.789894][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.798015][ T7727] Cannot create hsr debugfs directory [ 634.119756][ T3964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.299257][ T7623] veth0_macvtap: entered promiscuous mode [ 635.310209][ T3964] bridge_slave_1: left allmulticast mode [ 635.316620][ T3964] bridge_slave_1: left promiscuous mode [ 635.323688][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.377026][ T3964] bridge_slave_0: left allmulticast mode [ 635.389140][ T3964] bridge_slave_0: left promiscuous mode [ 635.399540][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.943249][ T3964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.971495][ T3964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.993913][ T3964] bond0 (unregistering): Released all slaves [ 636.605114][ T7623] veth1_macvtap: entered promiscuous mode [ 637.581518][ T3964] hsr_slave_0: left promiscuous mode [ 637.613759][ T3964] hsr_slave_1: left promiscuous mode [ 637.662103][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.670370][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.718946][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.727414][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.787819][ T3964] veth0_macvtap: left promiscuous mode [ 637.793865][ T3964] veth1_vlan: left promiscuous mode [ 637.799494][ T3964] veth0_vlan: left promiscuous mode [ 638.858682][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 638.909435][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 639.307778][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.319087][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.329648][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.340575][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.351426][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.362594][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.383508][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.700516][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.712423][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.722676][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.733484][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.744140][ T7623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.754998][ T7623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.770683][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.780716][ T7717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 639.914988][ T7717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 640.123008][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.192634][ T7717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 640.218239][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.255047][ T7623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.264750][ T7623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.274173][ T7623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.283797][ T7623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.360298][ T7717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 640.838157][ T7727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 640.924132][ T7727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 641.040209][ T7727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 641.144240][ T7727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 641.646151][ T7850] loop1: detected capacity change from 0 to 16 [ 641.744168][ T7850] erofs: (device loop1): mounted with root inode @ nid 36. [ 642.054147][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.105545][ T29] audit: type=1326 audit(1724325963.627:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.1.556" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 642.369963][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.559145][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.566950][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.739300][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.747204][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.592795][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.047686][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.178884][ T3212] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.186826][ T3212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.330143][ T3212] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.338279][ T3212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.251933][ T5188] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 645.277799][ T5188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 645.287967][ T5188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 645.306302][ T5188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 645.329671][ T5188] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 645.339264][ T5188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.697330][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.143236][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.474473][ T5188] Bluetooth: hci6: command tx timeout [ 647.648661][ T7727] veth0_vlan: entered promiscuous mode [ 647.827397][ T7880] chnl_net:caif_netlink_parms(): no params data found [ 647.864017][ T7727] veth1_vlan: entered promiscuous mode [ 648.470157][ T7727] veth0_macvtap: entered promiscuous mode [ 648.567172][ T7727] veth1_macvtap: entered promiscuous mode [ 648.968508][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.979419][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.989728][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.000825][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.015838][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.027946][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.038176][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.049168][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.065408][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.197731][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.211702][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.223064][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.234036][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.244901][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.255808][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.266137][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.277307][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.295257][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.509590][ T7727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.524099][ T7727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.534851][ T7727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.545243][ T7727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.554510][ T5188] Bluetooth: hci6: command tx timeout [ 650.240308][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.249770][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.257974][ T7880] bridge_slave_0: entered allmulticast mode [ 650.268413][ T7880] bridge_slave_0: entered promiscuous mode [ 650.316389][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.325524][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.628936][ T7923] syzkaller0: entered promiscuous mode [ 650.634893][ T7923] syzkaller0: entered allmulticast mode [ 650.671533][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.679375][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.687670][ T7880] bridge_slave_1: entered allmulticast mode [ 650.697505][ T7880] bridge_slave_1: entered promiscuous mode [ 651.141364][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.149473][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.293335][ T7880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.438321][ T7880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.636771][ T5188] Bluetooth: hci6: command tx timeout [ 651.649670][ T7880] team0: Port device team_slave_0 added [ 651.828462][ T7880] team0: Port device team_slave_1 added [ 651.853795][ T7717] veth0_vlan: entered promiscuous mode [ 652.216376][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.229830][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.256903][ T7880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.322935][ T7717] veth1_vlan: entered promiscuous mode [ 652.362288][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.369599][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.399613][ T7880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.711629][ T29] audit: type=1326 audit(1724325974.147:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 652.734383][ T29] audit: type=1326 audit(1724325974.157:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 653.056733][ T7717] veth0_macvtap: entered promiscuous mode [ 653.118674][ T7880] hsr_slave_0: entered promiscuous mode [ 653.178501][ T7880] hsr_slave_1: entered promiscuous mode [ 653.231904][ T7880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.239745][ T7880] Cannot create hsr debugfs directory [ 653.287621][ T29] audit: type=1326 audit(1724325974.717:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.3.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 653.327765][ T7717] veth1_macvtap: entered promiscuous mode [ 653.721253][ T53] Bluetooth: hci6: command tx timeout [ 653.965707][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.976781][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.987289][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.998127][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.008372][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.026077][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.038044][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.049057][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.059347][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.070273][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.086301][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.291685][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.302649][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.313214][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.324076][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.340138][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.353084][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.364563][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.375308][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.385581][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.396489][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.412707][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.687776][ T7717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.697108][ T7717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.706397][ T7717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.715765][ T7717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.109181][ T7880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.388270][ T7880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.653360][ T7880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.694792][ T7958] loop1: detected capacity change from 0 to 16 [ 655.756994][ T7958] erofs: (device loop1): mounted with root inode @ nid 36. [ 655.938703][ T7880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.062038][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.202521][ T29] audit: type=1326 audit(1724325977.627:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.564" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 656.253305][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.005249][ T7880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 657.213286][ T7880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 657.426218][ T7880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 657.585374][ T7880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 659.214277][ T4310] bridge_slave_1: left allmulticast mode [ 659.220235][ T4310] bridge_slave_1: left promiscuous mode [ 659.227318][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.337345][ T4310] bridge_slave_0: left allmulticast mode [ 659.343522][ T4310] bridge_slave_0: left promiscuous mode [ 659.354241][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.368466][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.375495][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.152861][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.236248][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.286567][ T4310] bond0 (unregistering): Released all slaves [ 661.340523][ T4310] hsr_slave_0: left promiscuous mode [ 661.376707][ T4310] hsr_slave_1: left promiscuous mode [ 661.391407][ T5188] Bluetooth: hci2: command 0x0406 tx timeout [ 661.448433][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.456710][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.549206][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.557337][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.686063][ T4310] veth1_macvtap: left promiscuous mode [ 661.693257][ T4310] veth0_macvtap: left promiscuous mode [ 661.703060][ T4310] veth1_vlan: left promiscuous mode [ 661.708713][ T4310] veth0_vlan: left promiscuous mode [ 662.785395][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 662.830665][ T29] audit: type=1326 audit(1724325984.287:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 662.853466][ T29] audit: type=1326 audit(1724325984.297:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 662.905000][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 662.970469][ T8026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 663.303665][ T7880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.568380][ T29] audit: type=1326 audit(1724325984.917:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.590906][ T29] audit: type=1326 audit(1724325984.917:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.614205][ T29] audit: type=1326 audit(1724325984.917:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.637615][ T29] audit: type=1326 audit(1724325984.917:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.662682][ T29] audit: type=1326 audit(1724325984.917:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.686203][ T29] audit: type=1326 audit(1724325984.917:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.708662][ T29] audit: type=1326 audit(1724325984.917:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.731824][ T29] audit: type=1326 audit(1724325984.917:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 663.824525][ T7880] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.902393][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.910512][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.043730][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.051606][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.193142][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.200963][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.439809][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.448310][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.865806][ T8039] loop1: detected capacity change from 0 to 16 [ 664.955662][ T8039] erofs: (device loop1): mounted with root inode @ nid 36. [ 666.507820][ T1588] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 666.793082][ T1588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.803947][ T1588] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 666.813464][ T1588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.894586][ T1588] usb 3-1: config 0 descriptor?? [ 666.929029][ T1588] rndis_host 3-1:0.0: skipping garbage [ 666.936697][ T1588] usb 3-1: bad CDC descriptors [ 667.097868][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.219922][ T8073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.373205][ T7880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.903759][ T7880] veth0_vlan: entered promiscuous mode [ 667.929028][ T8] usb 3-1: USB disconnect, device number 4 [ 668.164815][ T7880] veth1_vlan: entered promiscuous mode [ 668.295658][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.304047][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.620389][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.628876][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.786555][ T7880] veth0_macvtap: entered promiscuous mode [ 668.955413][ T7880] veth1_macvtap: entered promiscuous mode [ 669.219140][ T8085] syzkaller0: entered promiscuous mode [ 669.225075][ T8085] syzkaller0: entered allmulticast mode [ 669.422920][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.433889][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.444186][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.455343][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.465578][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.477138][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.496058][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.509239][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.519594][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.530437][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.546570][ T7880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.948262][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 669.948347][ T29] audit: type=1326 audit(1724325991.467:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 670.045566][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.056567][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.069415][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.080390][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.090632][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.109571][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.112843][ T29] audit: type=1326 audit(1724325991.537:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 670.122536][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.152976][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.163208][ T7880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.174024][ T7880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.189802][ T7880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.397663][ T7880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.410972][ T7880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.421381][ T7880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.430461][ T7880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.662239][ T29] audit: type=1326 audit(1724325992.087:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 672.057688][ T8112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.848951][ T8118] loop3: detected capacity change from 0 to 1024 [ 672.994089][ T8118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.444965][ T7623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.503319][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 673.741521][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.752349][ T8] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 673.761922][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.832828][ T8] usb 5-1: config 0 descriptor?? [ 673.905136][ T8] rndis_host 5-1:0.0: skipping garbage [ 673.910927][ T8] usb 5-1: bad CDC descriptors [ 674.547344][ T8140] syzkaller0: entered promiscuous mode [ 674.553318][ T8140] syzkaller0: entered allmulticast mode [ 675.014747][ T5236] usb 5-1: USB disconnect, device number 4 [ 675.753962][ T29] audit: type=1326 audit(1724325997.227:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 675.776895][ T29] audit: type=1326 audit(1724325997.237:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 676.407099][ T29] audit: type=1326 audit(1724325997.857:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 676.509081][ T8160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.543412][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.596'. [ 676.613924][ T8160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.188559][ T8171] loop2: detected capacity change from 0 to 16 [ 677.256880][ T5236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 677.294208][ T8171] erofs: (device loop2): mounted with root inode @ nid 36. [ 677.486395][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.499746][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.511177][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 677.524624][ T5236] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 677.534361][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.604191][ T5236] usb 4-1: config 0 descriptor?? [ 677.645468][ T29] audit: type=1326 audit(1724325999.077:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.2.598" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 678.086105][ T5236] usbhid 4-1:0.0: can't add hid device: -71 [ 678.092994][ T5236] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 678.176886][ T5236] usb 4-1: USB disconnect, device number 8 [ 678.773670][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.781933][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.186874][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.196152][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.823626][ T8197] syzkaller0: entered promiscuous mode [ 679.837857][ T8197] syzkaller0: entered allmulticast mode [ 680.523264][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 680.707207][ T29] audit: type=1326 audit(1724326002.187:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 680.729984][ T29] audit: type=1326 audit(1724326002.207:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 680.759086][ T29] audit: type=1326 audit(1724326002.217:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7fc00000 [ 680.832412][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.843051][ T8] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 680.858817][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.986489][ T8] usb 4-1: config 0 descriptor?? [ 681.030441][ T8] rndis_host 4-1:0.0: skipping garbage [ 681.036455][ T8] usb 4-1: bad CDC descriptors [ 681.232998][ T8212] capability: warning: `syz.2.607' uses deprecated v2 capabilities in a way that may be insecure [ 681.401495][ T8218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.546738][ T8218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.037317][ T5236] usb 4-1: USB disconnect, device number 9 [ 682.103849][ T8224] loop4: detected capacity change from 0 to 16 [ 682.149950][ T8224] erofs: (device loop4): mounted with root inode @ nid 36. [ 682.268211][ T29] audit: type=1326 audit(1724326003.757:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.611" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 683.767317][ T8244] loop0: detected capacity change from 0 to 256 [ 683.869711][ T8244] exfat: Bad value for 'uid' [ 683.878061][ T8244] exfat: Bad value for 'uid' [ 684.511915][ T5236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 684.807428][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.818974][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.829423][ T5236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.847373][ T5236] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.858994][ T5236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.994502][ T5236] usb 1-1: config 0 descriptor?? [ 685.058921][ T8250] syzkaller0: entered promiscuous mode [ 685.064847][ T8250] syzkaller0: entered allmulticast mode [ 685.748596][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 685.809516][ T5236] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 685.861552][ T5236] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 686.770966][ T8258] loop3: detected capacity change from 0 to 512 [ 686.798825][ T29] audit: type=1326 audit(1724326008.237:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7fc00000 [ 686.821589][ T29] audit: type=1326 audit(1724326008.247:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf742d579 code=0x7fc00000 [ 686.883282][ T5236] usb 1-1: USB disconnect, device number 3 [ 686.888254][ T8258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 686.943269][ T8244] usb 1-1: string descriptor 0 read error: -19 [ 687.027639][ T8258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 687.041765][ T8258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 687.325281][ T8258] EXT4-fs (loop3): 1 truncate cleaned up [ 687.333268][ T8258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.400736][ T29] audit: type=1326 audit(1724326008.817:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7fc00000 [ 687.591588][ T29] audit: type=1800 audit(1724326009.037:197): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="memory.events" dev="loop3" ino=18 res=0 errno=0 [ 687.619436][ T29] audit: type=1804 audit(1724326009.097:198): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.620" name="/newroot/18/file0/memory.events" dev="loop3" ino=18 res=1 errno=0 [ 687.852287][ T8266] loop1: detected capacity change from 0 to 736 [ 687.902232][ T8266] iso9660: Bad value for 'mode' [ 688.092837][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.125344][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.167120][ T7623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.811449][ T5236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 689.092098][ T5236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.102752][ T5236] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 689.112974][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.178050][ T5236] usb 5-1: config 0 descriptor?? [ 689.275951][ T5236] rndis_host 5-1:0.0: skipping garbage [ 689.282131][ T5236] usb 5-1: bad CDC descriptors [ 690.506621][ T8] usb 5-1: USB disconnect, device number 5 [ 690.707093][ T8289] syzkaller0: entered promiscuous mode [ 690.713540][ T8289] syzkaller0: entered allmulticast mode [ 691.915404][ T8297] loop4: detected capacity change from 0 to 128 [ 691.991892][ T8297] FAT-fs (loop4): invalid media value (0x00) [ 691.998199][ T8297] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 692.008363][ T8297] FAT-fs (loop4): Can't find a valid FAT filesystem [ 692.272934][ T29] audit: type=1326 audit(1724326013.697:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.295466][ T29] audit: type=1326 audit(1724326013.707:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.324633][ T29] audit: type=1326 audit(1724326013.737:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.348987][ T29] audit: type=1326 audit(1724326013.737:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.371585][ T29] audit: type=1326 audit(1724326013.747:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.393990][ T29] audit: type=1326 audit(1724326013.747:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.416389][ T29] audit: type=1326 audit(1724326013.747:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.446777][ T29] audit: type=1326 audit(1724326013.747:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.471681][ T29] audit: type=1326 audit(1724326013.747:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.494205][ T29] audit: type=1326 audit(1724326013.747:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.516660][ T29] audit: type=1326 audit(1724326013.747:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.545500][ T29] audit: type=1326 audit(1724326013.747:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.570113][ T29] audit: type=1326 audit(1724326013.747:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 692.594118][ T29] audit: type=1326 audit(1724326013.747:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 693.193284][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.332130][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.431453][ T1588] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 695.694773][ T1588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.710608][ T1588] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 695.721663][ T1588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.754827][ T8333] binder: 8326:8333 ioctl 4018620d 0 returned -22 [ 695.788630][ T1588] usb 3-1: config 0 descriptor?? [ 695.855607][ T1588] rndis_host 3-1:0.0: skipping garbage [ 695.861501][ T1588] usb 3-1: bad CDC descriptors [ 697.117003][ T5985] usb 3-1: USB disconnect, device number 5 [ 697.417235][ T29] audit: type=1326 audit(1724326018.867:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 697.446731][ T29] audit: type=1326 audit(1724326018.897:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 697.974368][ T29] audit: type=1326 audit(1724326019.427:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 697.997538][ T29] audit: type=1326 audit(1724326019.427:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 698.893170][ T5985] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 699.152821][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.164405][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.174875][ T5985] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 699.190762][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.229984][ T5985] usb 3-1: config 0 descriptor?? [ 699.355411][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.478711][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.873460][ T5985] hid (null): bogus close delimiter [ 700.354662][ T5985] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 700.364904][ T5985] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 700.373711][ T5985] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 700.401403][ T8353] loop0: detected capacity change from 0 to 512 [ 700.523722][ T5985] usb 3-1: USB disconnect, device number 6 [ 700.656812][ T8353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.670623][ T8353] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.903665][ T8353] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 700.915685][ T8353] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 700.931996][ T8353] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.653: Failed to acquire dquot type 0 [ 701.062392][ T8358] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 701.073861][ T8358] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 701.084273][ T8358] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.653: Failed to acquire dquot type 0 [ 701.451599][ T1588] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 701.683694][ T1588] usb 1-1: Using ep0 maxpacket: 32 [ 701.705367][ T1588] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 701.717216][ T1588] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18177, setting to 1024 [ 701.728962][ T1588] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 701.743154][ T1588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.803044][ T8353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 701.816871][ T8362] loop2: detected capacity change from 0 to 512 [ 701.822956][ T1588] hub 1-1:4.0: USB hub found [ 702.021596][ T8362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 702.035606][ T8362] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.323388][ T1588] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 703.436531][ T1588] usb 1-1: USB disconnect, device number 4 [ 704.220203][ T7880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.057064][ T8369] syzkaller0: entered promiscuous mode [ 705.063101][ T8369] syzkaller0: entered allmulticast mode [ 706.403824][ T7727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 706.569483][ T8380] loop4: detected capacity change from 0 to 512 [ 706.598111][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.622857][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.635217][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.695297][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.707829][ T29] audit: type=1326 audit(1724326028.137:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 706.709354][ T5188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 706.730891][ T29] audit: type=1326 audit(1724326028.157:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 706.813544][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.004795][ T8380] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.662: corrupted in-inode xattr: invalid ea_ino [ 707.070038][ T8380] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.662: couldn't read orphan inode 15 (err -117) [ 707.215961][ T8380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.237666][ T29] audit: type=1326 audit(1724326028.657:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 707.419896][ T8388] loop2: detected capacity change from 0 to 512 [ 707.496586][ T8390] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.662: Directory hole found for htree leaf block 0 [ 708.567886][ T8388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 708.661438][ T8388] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.663: invalid block [ 708.698649][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 708.709016][ T8388] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.663: couldn't read orphan inode 11 (err -117) [ 708.731724][ T8388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.917924][ T53] Bluetooth: hci0: command tx timeout [ 710.271918][ T7717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.992247][ T53] Bluetooth: hci0: command tx timeout [ 713.077815][ T53] Bluetooth: hci0: command tx timeout [ 713.892788][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.901588][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.906983][ T7727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.909635][ T8382] bridge_slave_0: entered allmulticast mode [ 713.938819][ T8382] bridge_slave_0: entered promiscuous mode [ 714.194421][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.202663][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.210664][ T8382] bridge_slave_1: entered allmulticast mode [ 714.220705][ T8382] bridge_slave_1: entered promiscuous mode [ 714.710747][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.822806][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.151536][ T53] Bluetooth: hci0: command tx timeout [ 715.166794][ T8382] team0: Port device team_slave_0 added [ 715.234489][ T8382] team0: Port device team_slave_1 added [ 715.375563][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.384669][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.411860][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.452927][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.465869][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.494507][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.945780][ T8382] hsr_slave_0: entered promiscuous mode [ 715.968376][ T8382] hsr_slave_1: entered promiscuous mode [ 715.989800][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.997884][ T8382] Cannot create hsr debugfs directory [ 716.727844][ T8382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.874768][ T8382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.080844][ T8382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.246512][ T8382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.742686][ T8382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 717.813342][ T8382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 717.864160][ T8382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 717.899356][ T8382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 718.956652][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.029032][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.098871][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.106835][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.222579][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.230368][ T4187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.774163][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.780924][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.852712][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.885199][ T7485] bridge_slave_1: left allmulticast mode [ 720.898208][ T7485] bridge_slave_1: left promiscuous mode [ 720.905027][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.937220][ T7485] bridge_slave_0: left allmulticast mode [ 720.943584][ T7485] bridge_slave_0: left promiscuous mode [ 720.950250][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.567594][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.632668][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.665465][ T7485] bond0 (unregistering): Released all slaves [ 722.304252][ T8382] veth0_vlan: entered promiscuous mode [ 722.415202][ T7485] hsr_slave_0: left promiscuous mode [ 722.452617][ T7485] hsr_slave_1: left promiscuous mode [ 722.475252][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.483227][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.496429][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.504706][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.570003][ T7485] veth1_macvtap: left promiscuous mode [ 722.576136][ T7485] veth0_macvtap: left promiscuous mode [ 722.582293][ T7485] veth1_vlan: left promiscuous mode [ 722.587892][ T7485] veth0_vlan: left promiscuous mode [ 723.430517][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 723.513830][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 724.037853][ T8382] veth1_vlan: entered promiscuous mode [ 724.262240][ T8382] veth0_macvtap: entered promiscuous mode [ 724.315566][ T8382] veth1_macvtap: entered promiscuous mode [ 724.449149][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.461376][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.478681][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.491641][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.501908][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.513929][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.524162][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.534965][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.545180][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.556106][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.571991][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.655133][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.666261][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.683725][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.696546][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.706894][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.717753][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.727999][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.738871][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.749052][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.759842][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.775801][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.840937][ T8382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.850458][ T8382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.861703][ T8382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.870791][ T8382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.971888][ T5188] Bluetooth: hci3: command 0x0406 tx timeout [ 728.081671][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.089777][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.186886][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.196381][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.837995][ T8441] syzkaller0: entered promiscuous mode [ 728.844049][ T8441] syzkaller0: entered allmulticast mode [ 729.192218][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 729.446860][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.457925][ T25] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 729.467443][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.531896][ T25] usb 2-1: config 0 descriptor?? [ 729.575417][ T25] rndis_host 2-1:0.0: skipping garbage [ 729.581500][ T25] usb 2-1: bad CDC descriptors [ 730.020902][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.031746][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 730.042315][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.057566][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.092239][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.113758][ T5188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 730.123934][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.265006][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 730.306533][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.323476][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.335398][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 730.344961][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.580230][ T25] hub 5-1:4.0: USB hub found [ 730.883175][ T1588] usb 2-1: USB disconnect, device number 3 [ 730.935155][ T25] hub 5-1:4.0: 2 ports detected [ 730.940363][ T25] usb 5-1: selecting invalid altsetting 1 [ 730.946653][ T25] hub 5-1:4.0: Using single TT (err -22) [ 731.378565][ T8449] loop4: detected capacity change from 0 to 512 [ 731.471778][ T8449] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 731.785610][ T25] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 731.792462][ T25] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 731.891637][ T25] usb 5-1: USB disconnect, device number 6 [ 732.276722][ T53] Bluetooth: hci2: command tx timeout [ 732.327601][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 733.057787][ T5951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.275725][ T5951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.527121][ T5951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.779082][ T5951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.282666][ T5951] bridge_slave_1: left allmulticast mode [ 734.289061][ T5951] bridge_slave_1: left promiscuous mode [ 734.298326][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.351335][ T53] Bluetooth: hci2: command tx timeout [ 734.444771][ T5951] bridge_slave_0: left allmulticast mode [ 734.450741][ T5951] bridge_slave_0: left promiscuous mode [ 734.457872][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.980085][ T8473] input: syz1 as /devices/virtual/input/input5 [ 735.393254][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.602308][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.654083][ T5951] bond0 (unregistering): Released all slaves [ 736.434876][ T53] Bluetooth: hci2: command tx timeout [ 737.103962][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.112294][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.120353][ T8451] bridge_slave_0: entered allmulticast mode [ 737.130235][ T8451] bridge_slave_0: entered promiscuous mode [ 737.336686][ T5951] hsr_slave_0: left promiscuous mode [ 737.367660][ T5951] hsr_slave_1: left promiscuous mode [ 737.433700][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.444324][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.509694][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.518089][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.645668][ T8496] loop4: detected capacity change from 0 to 512 [ 737.659040][ T5951] veth1_macvtap: left promiscuous mode [ 737.665076][ T5951] veth0_macvtap: left promiscuous mode [ 737.671652][ T5951] veth1_vlan: left promiscuous mode [ 737.677275][ T5951] veth0_vlan: left promiscuous mode [ 738.157185][ T8496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 738.174769][ T8496] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.544932][ T53] Bluetooth: hci2: command tx timeout [ 738.777300][ T8507] loop2: detected capacity change from 0 to 2048 [ 738.837034][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 738.893596][ T8507] loop2: p3 < > p4 < > [ 738.898203][ T8507] loop2: partition table partially beyond EOD, truncated [ 738.910122][ T8507] loop2: p3 start 4284289 is beyond EOD, truncated [ 738.916246][ T8509] binder: 8504:8509 ioctl 4018620d 0 returned -22 [ 738.959644][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 739.482106][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.490158][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.498407][ T8451] bridge_slave_1: entered allmulticast mode [ 739.508009][ T8451] bridge_slave_1: entered promiscuous mode [ 739.910651][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.089559][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.403223][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 740.498007][ T8451] team0: Port device team_slave_0 added [ 740.600039][ T8451] team0: Port device team_slave_1 added [ 741.040533][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.049670][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.077566][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.143496][ T8519] loop1: detected capacity change from 0 to 512 [ 741.209484][ T8519] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 741.347601][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.356069][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.386131][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.604578][ T7717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 742.001841][ T8451] hsr_slave_0: entered promiscuous mode [ 742.053209][ T8451] hsr_slave_1: entered promiscuous mode [ 742.172292][ T8451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.180140][ T8451] Cannot create hsr debugfs directory [ 743.321538][ T4555] Bluetooth: hci4: command 0x0406 tx timeout [ 743.327844][ T4555] Bluetooth: hci5: command 0x0406 tx timeout [ 744.687106][ T8451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 744.861261][ T8451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 745.029292][ T8451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 745.193242][ T8451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 745.913130][ T8547] syzkaller0: entered promiscuous mode [ 745.919118][ T8547] syzkaller0: entered allmulticast mode [ 746.316759][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 746.333852][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 746.349471][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 746.418085][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 746.447591][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 746.463177][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.184519][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.510150][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.591942][ T5188] Bluetooth: hci6: command tx timeout [ 748.762425][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.770329][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.902039][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 748.964919][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.972781][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.804119][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 750.677150][ T5188] Bluetooth: hci6: command tx timeout [ 751.202550][ T5236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 751.385681][ T8597] syzkaller0: entered promiscuous mode [ 751.393323][ T8597] syzkaller0: entered allmulticast mode [ 751.432283][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.440354][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.449477][ T8550] bridge_slave_0: entered allmulticast mode [ 751.460226][ T8550] bridge_slave_0: entered promiscuous mode [ 751.465972][ T5236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.481796][ T5236] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 751.491909][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.560755][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.568814][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.578050][ T8550] bridge_slave_1: entered allmulticast mode [ 751.588420][ T8550] bridge_slave_1: entered promiscuous mode [ 751.589436][ T5236] usb 2-1: config 0 descriptor?? [ 751.656882][ T5236] rndis_host 2-1:0.0: skipping garbage [ 751.663922][ T5236] usb 2-1: bad CDC descriptors [ 751.869637][ T5236] usb 2-1: USB disconnect, device number 4 [ 752.306417][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.404709][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.763969][ T5188] Bluetooth: hci6: command tx timeout [ 752.947754][ T8550] team0: Port device team_slave_0 added [ 753.007406][ T8550] team0: Port device team_slave_1 added [ 753.049864][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.407733][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.416535][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.443253][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.694858][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.702326][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.729052][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.116178][ T8451] veth0_vlan: entered promiscuous mode [ 754.555043][ T8550] hsr_slave_0: entered promiscuous mode [ 754.623450][ T8550] hsr_slave_1: entered promiscuous mode [ 754.667159][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.675468][ T8550] Cannot create hsr debugfs directory [ 754.728496][ T8451] veth1_vlan: entered promiscuous mode [ 754.804220][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.832531][ T5188] Bluetooth: hci6: command tx timeout [ 754.958129][ T8616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.743931][ T5236] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 755.971671][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 756.021722][ T5236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.033568][ T5236] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 756.046658][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 756.058044][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 756.068355][ T5236] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.132874][ T8451] veth0_macvtap: entered promiscuous mode [ 756.238242][ T5236] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 756.249182][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 756.258014][ T5236] usb 5-1: Product: syz [ 756.263454][ T8451] veth1_macvtap: entered promiscuous mode [ 756.263474][ T5236] usb 5-1: Manufacturer: syz [ 756.263595][ T5236] usb 5-1: SerialNumber: syz [ 756.385752][ T5236] usb 5-1: config 0 descriptor?? [ 756.861898][ T5236] radio-si470x 5-1:0.0: DeviceID=0x7275 ChipID=0x6e2f [ 756.940580][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.951825][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.962850][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.973868][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.984265][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.996154][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.006628][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.017735][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.028536][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.046485][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.065750][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.176098][ T5236] radio-si470x 5-1:0.0: software version 114, hardware version 117 [ 757.384756][ T8550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.387103][ T5236] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 757.473607][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.486188][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.497736][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.508588][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.518852][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.529706][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.539996][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.559090][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.574217][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.585558][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.601937][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.829651][ T8550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.071486][ T8451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.080625][ T8451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.089941][ T8451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.099219][ T8451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.344333][ T8550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.462106][ T5236] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 758.476319][ T5236] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 758.650673][ T5236] usb 5-1: USB disconnect, device number 7 [ 758.655850][ T8550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.858264][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 759.216713][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.227678][ T8] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 759.237388][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.324235][ T8] usb 3-1: config 0 descriptor?? [ 759.405195][ T8] rndis_host 3-1:0.0: skipping garbage [ 759.411636][ T8] usb 3-1: bad CDC descriptors [ 759.550693][ T8550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 759.586359][ T8] usb 3-1: USB disconnect, device number 7 [ 759.715589][ T8550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.893324][ T8550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 760.066510][ T8550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 760.930081][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 761.008572][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 761.019629][ T8662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 761.033208][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 761.043686][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 762.314548][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.437071][ T3212] bridge_slave_1: left allmulticast mode [ 762.443266][ T3212] bridge_slave_1: left promiscuous mode [ 762.450001][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.618005][ T3212] bridge_slave_0: left allmulticast mode [ 762.624122][ T3212] bridge_slave_0: left promiscuous mode [ 762.630848][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.433025][ T8681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.602173][ T8681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.664115][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.815686][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.941979][ T3212] bond0 (unregistering): Released all slaves [ 764.753476][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.949866][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.957865][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.168985][ T3212] hsr_slave_0: left promiscuous mode [ 765.243193][ T3212] hsr_slave_1: left promiscuous mode [ 765.280271][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.289035][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.392837][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.400675][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.508863][ T3212] veth1_macvtap: left promiscuous mode [ 765.516945][ T3212] veth0_macvtap: left promiscuous mode [ 765.523157][ T3212] veth1_vlan: left promiscuous mode [ 765.528753][ T3212] veth0_vlan: left promiscuous mode [ 766.862724][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 766.965373][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 767.662543][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.670432][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.562596][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 768.833293][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.844012][ T10] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 768.853590][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.930370][ T10] usb 5-1: config 0 descriptor?? [ 768.982417][ T10] rndis_host 5-1:0.0: skipping garbage [ 768.988302][ T10] usb 5-1: bad CDC descriptors [ 769.200826][ T10] usb 5-1: USB disconnect, device number 8 [ 769.982074][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.114765][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.115361][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.634329][ T8550] veth0_vlan: entered promiscuous mode [ 770.803022][ T8550] veth1_vlan: entered promiscuous mode [ 771.131629][ T8550] veth0_macvtap: entered promiscuous mode [ 771.228451][ T3212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.236602][ T3212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.385650][ T8550] veth1_macvtap: entered promiscuous mode [ 771.470139][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.481919][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.726325][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.738161][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.748447][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.759252][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.769757][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.787875][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.800140][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.811165][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.821399][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.832231][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.848120][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.043454][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.054428][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.064679][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.075457][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.085975][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.104628][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.114933][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.125740][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.135953][ T8550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.147242][ T8550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.163215][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.211230][ T8550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.220347][ T8550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.231555][ T8550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.240639][ T8550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.085329][ T29] audit: type=1326 audit(1724326094.537:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000 [ 773.107973][ T29] audit: type=1326 audit(1724326094.547:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fc3579 code=0x7fc00000 [ 773.136972][ T29] audit: type=1326 audit(1724326094.557:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000 [ 773.527110][ T5236] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 773.562838][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 773.791584][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 773.801616][ T5236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.813431][ T5236] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 773.823984][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.858123][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.869956][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.881400][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 773.892792][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.956572][ T10] hub 2-1:4.0: USB hub found [ 774.005752][ T5236] usb 3-1: config 0 descriptor?? [ 774.052260][ T5236] rndis_host 3-1:0.0: skipping garbage [ 774.058037][ T5236] usb 3-1: bad CDC descriptors [ 774.212309][ T10] hub 2-1:4.0: 2 ports detected [ 774.217605][ T10] usb 2-1: selecting invalid altsetting 1 [ 774.224170][ T10] hub 2-1:4.0: Using single TT (err -22) [ 774.306493][ T4809] usb 3-1: USB disconnect, device number 8 [ 774.488723][ T10] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 774.497126][ T10] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 774.618535][ T10] usb 2-1: USB disconnect, device number 5 [ 774.900268][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.981997][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.838323][ T29] audit: type=1326 audit(1724326098.307:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7fc00000 [ 776.861222][ T29] audit: type=1326 audit(1724326098.307:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf742d579 code=0x7fc00000 [ 777.433769][ T29] audit: type=1326 audit(1724326098.857:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7fc00000 [ 777.908031][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 778.102616][ T4809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 778.332095][ T4809] usb 2-1: Using ep0 maxpacket: 32 [ 778.394743][ T4809] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 778.404021][ T4809] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 778.416925][ T4809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 778.429367][ T4809] usb 2-1: config 1 has no interface number 0 [ 778.441360][ T4809] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.454425][ T4809] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 778.467967][ T4809] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 778.477613][ T4809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.629024][ T4809] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 779.144959][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.239655][ T4809] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 779.253298][ C0] ===================================================== [ 779.260690][ C0] BUG: KMSAN: uninit-value in line6_midibuf_read+0x40b/0x1050 [ 779.268409][ C0] line6_midibuf_read+0x40b/0x1050 [ 779.273765][ C0] line6_data_received+0x503/0xa80 [ 779.279119][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 779.282493][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.284672][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 779.299847][ C0] dummy_timer+0xd3f/0x6aa0 [ 779.304550][ C0] __hrtimer_run_queues+0x564/0xe40 [ 779.309997][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 779.315255][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 779.321399][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 779.327280][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 779.333552][ C0] stack_depot_save_flags+0xb0/0x6e0 [ 779.339104][ C0] stack_depot_save+0x12/0x20 [ 779.344023][ C0] __msan_poison_alloca+0x106/0x1b0 [ 779.349476][ C0] vsnprintf+0x4a/0x2a00 [ 779.353960][ C0] add_uevent_var+0x29d/0x4a0 [ 779.358857][ C0] kobject_uevent_env+0x80d/0x11e0 [ 779.364164][ C0] kobject_uevent+0x37/0x50 [ 779.368865][ C0] driver_bound+0x805/0x8c0 [ 779.373606][ C0] really_probe+0xd65/0xd90 [ 779.378367][ C0] __driver_probe_device+0x2ab/0x5d0 [ 779.383904][ C0] driver_probe_device+0x72/0x890 [ 779.389172][ C0] __device_attach_driver+0x568/0x9e0 [ 779.394797][ C0] bus_for_each_drv+0x403/0x620 [ 779.399944][ C0] __device_attach+0x3c1/0x650 [ 779.404956][ C0] device_initial_probe+0x32/0x40 [ 779.410242][ C0] bus_probe_device+0x3dc/0x5c0 [ 779.415316][ C0] device_add+0x13aa/0x1ba0 [ 779.420039][ C0] usb_set_configuration+0x31c9/0x38d0 [ 779.425703][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 779.431519][ C0] usb_probe_device+0x3a7/0x690 [ 779.436618][ C0] really_probe+0x4db/0xd90 [ 779.441380][ C0] __driver_probe_device+0x2ab/0x5d0 [ 779.446919][ C0] driver_probe_device+0x72/0x890 [ 779.452234][ C0] __device_attach_driver+0x568/0x9e0 [ 779.457860][ C0] bus_for_each_drv+0x403/0x620 [ 779.462916][ C0] __device_attach+0x3c1/0x650 [ 779.467914][ C0] device_initial_probe+0x32/0x40 [ 779.473175][ C0] bus_probe_device+0x3dc/0x5c0 [ 779.478240][ C0] device_add+0x13aa/0x1ba0 [ 779.482961][ C0] usb_new_device+0x15f4/0x2470 [ 779.488041][ C0] hub_event+0x4ffb/0x72d0 [ 779.492639][ C0] process_scheduled_works+0xae0/0x1c40 [ 779.498414][ C0] worker_thread+0xea5/0x1520 [ 779.503318][ C0] kthread+0x3dd/0x540 [ 779.507606][ C0] ret_from_fork+0x6d/0x90 [ 779.512231][ C0] ret_from_fork_asm+0x1a/0x30 [ 779.517223][ C0] [ 779.519648][ C0] Uninit was created at: [ 779.524135][ C0] __kmalloc_noprof+0x661/0xf30 [ 779.529156][ C0] line6_midibuf_init+0x43/0x180 [ 779.534288][ C0] line6_init_midi+0x3e7/0x670 [ 779.539228][ C0] line6_init_cap_control+0x54e/0x770 [ 779.544784][ C0] line6_probe+0xeae/0x1120 [ 779.549452][ C0] pod_probe+0x79/0x90 [ 779.553700][ C0] usb_probe_interface+0xd6f/0x1350 [ 779.559166][ C0] really_probe+0x4db/0xd90 [ 779.563875][ C0] __driver_probe_device+0x2ab/0x5d0 [ 779.569367][ C0] driver_probe_device+0x72/0x890 [ 779.574617][ C0] __device_attach_driver+0x568/0x9e0 [ 779.580238][ C0] bus_for_each_drv+0x403/0x620 [ 779.585284][ C0] __device_attach+0x3c1/0x650 [ 779.590344][ C0] device_initial_probe+0x32/0x40 [ 779.595574][ C0] bus_probe_device+0x3dc/0x5c0 [ 779.600601][ C0] device_add+0x13aa/0x1ba0 [ 779.605299][ C0] usb_set_configuration+0x31c9/0x38d0 [ 779.610945][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 779.616806][ C0] usb_probe_device+0x3a7/0x690 [ 779.621826][ C0] really_probe+0x4db/0xd90 [ 779.626536][ C0] __driver_probe_device+0x2ab/0x5d0 [ 779.632023][ C0] driver_probe_device+0x72/0x890 [ 779.637256][ C0] __device_attach_driver+0x568/0x9e0 [ 779.642843][ C0] bus_for_each_drv+0x403/0x620 [ 779.647864][ C0] __device_attach+0x3c1/0x650 [ 779.652829][ C0] device_initial_probe+0x32/0x40 [ 779.658062][ C0] bus_probe_device+0x3dc/0x5c0 [ 779.663173][ C0] device_add+0x13aa/0x1ba0 [ 779.667884][ C0] usb_new_device+0x15f4/0x2470 [ 779.672960][ C0] hub_event+0x4ffb/0x72d0 [ 779.677617][ C0] process_scheduled_works+0xae0/0x1c40 [ 779.683366][ C0] worker_thread+0xea5/0x1520 [ 779.688232][ C0] kthread+0x3dd/0x540 [ 779.692498][ C0] ret_from_fork+0x6d/0x90 [ 779.697077][ C0] ret_from_fork_asm+0x1a/0x30 [ 779.702049][ C0] [ 779.704486][ C0] CPU: 0 UID: 0 PID: 4809 Comm: kworker/0:3 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 779.715435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 779.725736][ C0] Workqueue: usb_hub_wq hub_event [ 779.730940][ C0] ===================================================== [ 779.737979][ C0] Disabling lock debugging due to kernel taint [ 779.744234][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 779.750781][ C0] CPU: 0 UID: 0 PID: 4809 Comm: kworker/0:3 Tainted: G B 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 779.763261][ C0] Tainted: [B]=BAD_PAGE [ 779.767574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 779.777817][ C0] Workqueue: usb_hub_wq hub_event [ 779.783136][ C0] Call Trace: [ 779.786547][ C0] [ 779.789512][ C0] dump_stack_lvl+0x216/0x2d0 [ 779.794393][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 779.800432][ C0] dump_stack+0x1e/0x30 [ 779.804782][ C0] panic+0x4e2/0xcd0 [ 779.808866][ C0] ? kmsan_get_metadata+0x81/0x1c0 [ 779.814200][ C0] kmsan_report+0x2c7/0x2d0 [ 779.818944][ C0] ? __msan_warning+0x95/0x120 [ 779.823946][ C0] ? line6_midibuf_read+0x40b/0x1050 [ 779.829440][ C0] ? line6_data_received+0x503/0xa80 [ 779.834925][ C0] ? __usb_hcd_giveback_urb+0x572/0x840 [ 779.840762][ C0] ? usb_hcd_giveback_urb+0x157/0x720 [ 779.846325][ C0] ? dummy_timer+0xd3f/0x6aa0 [ 779.851178][ C0] ? __hrtimer_run_queues+0x564/0xe40 [ 779.856759][ C0] ? hrtimer_interrupt+0x3ab/0x1490 [ 779.862162][ C0] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 779.868442][ C0] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 779.874452][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 779.880834][ C0] ? stack_depot_save_flags+0xb0/0x6e0 [ 779.886522][ C0] ? stack_depot_save+0x12/0x20 [ 779.891583][ C0] ? __msan_poison_alloca+0x106/0x1b0 [ 779.897158][ C0] ? vsnprintf+0x4a/0x2a00 [ 779.901782][ C0] ? add_uevent_var+0x29d/0x4a0 [ 779.906801][ C0] ? kobject_uevent_env+0x80d/0x11e0 [ 779.912255][ C0] ? kobject_uevent+0x37/0x50 [ 779.917094][ C0] ? driver_bound+0x805/0x8c0 [ 779.921984][ C0] ? really_probe+0xd65/0xd90 [ 779.926881][ C0] ? __driver_probe_device+0x2ab/0x5d0 [ 779.932547][ C0] ? driver_probe_device+0x72/0x890 [ 779.938042][ C0] ? __device_attach_driver+0x568/0x9e0 [ 779.943813][ C0] ? bus_for_each_drv+0x403/0x620 [ 779.949017][ C0] ? __device_attach+0x3c1/0x650 [ 779.954172][ C0] ? device_initial_probe+0x32/0x40 [ 779.959589][ C0] ? bus_probe_device+0x3dc/0x5c0 [ 779.964808][ C0] ? device_add+0x13aa/0x1ba0 [ 779.969686][ C0] ? usb_set_configuration+0x31c9/0x38d0 [ 779.975620][ C0] ? usb_generic_driver_probe+0x109/0x2a0 [ 779.981578][ C0] ? usb_probe_device+0x3a7/0x690 [ 779.986800][ C0] ? really_probe+0x4db/0xd90 [ 779.991788][ C0] ? __driver_probe_device+0x2ab/0x5d0 [ 779.997462][ C0] ? driver_probe_device+0x72/0x890 [ 780.002884][ C0] ? __device_attach_driver+0x568/0x9e0 [ 780.008651][ C0] ? bus_for_each_drv+0x403/0x620 [ 780.013871][ C0] ? __device_attach+0x3c1/0x650 [ 780.019027][ C0] ? device_initial_probe+0x32/0x40 [ 780.024440][ C0] ? bus_probe_device+0x3dc/0x5c0 [ 780.029766][ C0] ? device_add+0x13aa/0x1ba0 [ 780.034751][ C0] ? usb_new_device+0x15f4/0x2470 [ 780.039983][ C0] ? hub_event+0x4ffb/0x72d0 [ 780.044740][ C0] ? process_scheduled_works+0xae0/0x1c40 [ 780.050688][ C0] ? worker_thread+0xea5/0x1520 [ 780.055750][ C0] ? kthread+0x3dd/0x540 [ 780.060192][ C0] ? ret_from_fork+0x6d/0x90 [ 780.064965][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 780.070110][ C0] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 780.075684][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 780.080910][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.086420][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.092452][ C0] __msan_warning+0x95/0x120 [ 780.097342][ C0] line6_midibuf_read+0x40b/0x1050 [ 780.102708][ C0] line6_data_received+0x503/0xa80 [ 780.108047][ C0] ? __pfx_line6_data_received+0x10/0x10 [ 780.113882][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 780.119465][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.124889][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 780.130297][ C0] dummy_timer+0xd3f/0x6aa0 [ 780.138041][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 780.143156][ C0] __hrtimer_run_queues+0x564/0xe40 [ 780.148588][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 780.153846][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 780.159509][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 780.165285][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 780.171398][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 780.177237][ C0] [ 780.180287][ C0] [ 780.183341][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 780.189565][ C0] RIP: 0010:stack_depot_save_flags+0xb0/0x6e0 [ 780.195872][ C0] Code: fb c1 c3 06 31 f3 44 01 e7 89 d9 c1 c1 08 41 29 dc 44 31 e1 01 fb 29 cf 89 c8 c1 c0 10 31 f8 01 d9 89 c6 c1 c6 13 29 c3 31 de <01> c8 29 f1 41 89 f4 41 c1 c4 04 41 31 cc 01 c6 41 83 c0 fd 48 83 [ 780.215828][ C0] RSP: 0018:ffff8881203428f0 EFLAGS: 00000206 [ 780.222086][ C0] RAX: 0000000063bcf756 RBX: 00000000c8179dc0 RCX: 000000008a9bdc17 [ 780.230209][ C0] RDX: ffff88812034297c RSI: 0000000072a48027 RDI: 0000000024bda991 [ 780.238330][ C0] RBP: ffff888120342940 R08: 0000000000000005 R09: 0000000000000001 [ 780.246559][ C0] R10: ffff888120342970 R11: 0000000000000004 R12: 000000001163c3a9 [ 780.254811][ C0] R13: ffffffff91141190 R14: 0000000000000001 R15: 0000000000000246 [ 780.263065][ C0] stack_depot_save+0x12/0x20 [ 780.268055][ C0] __msan_poison_alloca+0x106/0x1b0 [ 780.273460][ C0] ? vsnprintf+0x4a/0x2a00 [ 780.278089][ C0] ? add_uevent_var+0x29d/0x4a0 [ 780.283122][ C0] vsnprintf+0x4a/0x2a00 [ 780.287577][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.292993][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 780.299550][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.304958][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.310991][ C0] add_uevent_var+0x29d/0x4a0 [ 780.315867][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.321933][ C0] ? kobject_uevent_env+0x768/0x11e0 [ 780.327427][ C0] kobject_uevent_env+0x80d/0x11e0 [ 780.332820][ C0] kobject_uevent+0x37/0x50 [ 780.337495][ C0] driver_bound+0x805/0x8c0 [ 780.342233][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.348284][ C0] really_probe+0xd65/0xd90 [ 780.353032][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.359067][ C0] __driver_probe_device+0x2ab/0x5d0 [ 780.364588][ C0] driver_probe_device+0x72/0x890 [ 780.369843][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.375255][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.381310][ C0] __device_attach_driver+0x568/0x9e0 [ 780.386971][ C0] bus_for_each_drv+0x403/0x620 [ 780.392025][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 780.398196][ C0] __device_attach+0x3c1/0x650 [ 780.403195][ C0] device_initial_probe+0x32/0x40 [ 780.408447][ C0] bus_probe_device+0x3dc/0x5c0 [ 780.413507][ C0] device_add+0x13aa/0x1ba0 [ 780.418240][ C0] usb_set_configuration+0x31c9/0x38d0 [ 780.423898][ C0] ? usb_set_configuration+0x971/0x38d0 [ 780.429683][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 780.435469][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.441517][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 780.447828][ C0] usb_probe_device+0x3a7/0x690 [ 780.452886][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 780.458454][ C0] really_probe+0x4db/0xd90 [ 780.463205][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.469235][ C0] __driver_probe_device+0x2ab/0x5d0 [ 780.474848][ C0] driver_probe_device+0x72/0x890 [ 780.480091][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 780.485520][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 780.491591][ C0] __device_attach_driver+0x568/0x9e0 [ 780.497239][ C0] bus_for_each_drv+0x403/0x620 [ 780.502274][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 780.508416][ C0] __device_attach+0x3c1/0x650 [ 780.513406][ C0] device_initial_probe+0x32/0x40 [ 780.518646][ C0] bus_probe_device+0x3dc/0x5c0 [ 780.523702][ C0] device_add+0x13aa/0x1ba0 [ 780.528485][ C0] usb_new_device+0x15f4/0x2470 [ 780.533571][ C0] hub_event+0x4ffb/0x72d0 [ 780.538215][ C0] ? __pfx_hub_event+0x10/0x10 [ 780.543144][ C0] process_scheduled_works+0xae0/0x1c40 [ 780.548936][ C0] worker_thread+0xea5/0x1520 [ 780.553837][ C0] kthread+0x3dd/0x540 [ 780.558110][ C0] ? __pfx_worker_thread+0x10/0x10 [ 780.563430][ C0] ? __pfx_kthread+0x10/0x10 [ 780.568226][ C0] ret_from_fork+0x6d/0x90 [ 780.572809][ C0] ? __pfx_kthread+0x10/0x10 [ 780.577598][ C0] ret_from_fork_asm+0x1a/0x30 [ 780.582586][ C0] [ 780.585999][ C0] Kernel Offset: disabled [ 780.590408][ C0] Rebooting in 86400 seconds..