last executing test programs: 3m20.046574047s ago: executing program 2 (id=1513): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x2}}, @TCA_TBF_RATE64={0xc, 0x4, 0x6af82ffe597967b6}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 3m19.436560075s ago: executing program 2 (id=1516): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x46, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) 3m18.48489357s ago: executing program 2 (id=1517): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902"], 0x0) r0 = epoll_create(0x6) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x80000000, 0x2, 0x1}) r2 = epoll_create(0x20) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000300)) 3m16.915738965s ago: executing program 2 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000030101040000000000001400020000000000000014000180080001007f000001080002007f000001000000000000000000000100"], 0x38}}, 0x0) r1 = syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000800), &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000080)=0x272) ioperm(0x81, 0xbf, 0xffffffffffff0000) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000300)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x130}, {&(0x7f0000000b80)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20d7f7f7343067fd40cdd4b16742e94b62f4eb1c5d9f56ae62b0e6fe7766a0842912179154a940e3e1a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac", 0x71}], 0x2}}], 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255", 0x26}], 0x2}, 0x0) 3m16.798183962s ago: executing program 2 (id=1519): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x61db}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3m15.112791595s ago: executing program 2 (id=1520): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 25.267977514s ago: executing program 0 (id=1850): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x11, 0x8, {0x8, 0x3, "79b21327b68f"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x40, 0x11, 0x68, "ef1cc678191ce5f47cb67eef22a17811d9dbd60d6e37cd0b41e9df5609a2f510f98c23706d37451338b3ae60a507b93437981de96183d3051fe6715466f42877ac390bb04105f7d22483492e4059d1d81621c92db3cd6cc52b5da46fb93ad04e199252f95234ff09"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000200)={0x20, 0x0, 0x2}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096231307f7940ef7070f00000016b8ef0a1a7083"], 0x0}, 0x0) 24.932125213s ago: executing program 0 (id=1853): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40a00, 0x0) r0 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') writev(r4, &(0x7f0000000000), 0x34) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000001240)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x3c, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x22, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 21.821566692s ago: executing program 1 (id=1864): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1, 0x8800000, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e21, @rand_addr=0x64010102}, {0x1, @remote}, 0x42, {0x2, 0x4e20, @local}, 'batadv_slave_1\x00'}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 21.457194924s ago: executing program 1 (id=1868): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r3) syz_usb_control_io(r0, 0x0, 0x0) gettid() ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x3d2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 18.948098968s ago: executing program 1 (id=1872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.062367925s ago: executing program 3 (id=1884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file\x00', 0x14a) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1005, 0x1}, @fd, @fda={0x66646185, 0xa, 0x1, 0x35}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.749770745s ago: executing program 3 (id=1885): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 7.46418071s ago: executing program 3 (id=1886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 7.257052065s ago: executing program 3 (id=1887): getpeername(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @local, @dev}}}], 0x20}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022200010000000009040000010103510009050313000000000007250113"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 5.980652227s ago: executing program 0 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 5.80298894s ago: executing program 3 (id=1888): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.54677322s ago: executing program 0 (id=1889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000494000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b2061864670f63882a000000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x56}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000780)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x400c, 0x5, 0x9bfa, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xba770000) 3.68707334s ago: executing program 0 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = userfaultfd(0x80001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) 3.176079275s ago: executing program 4 (id=1894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) dup(0xffffffffffffffff) r0 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000500)=""/255, 0xff}], 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 2.264710822s ago: executing program 1 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) getdents(r5, &(0x7f0000000fc0)=""/4096, 0x1000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfc}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4, 0x5}]}, 0x68}}, 0x0) 2.255419769s ago: executing program 4 (id=1895): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.022071304s ago: executing program 4 (id=1896): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$inet6(r1, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r5, 0x411, 0x0, 0xffffffff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) 1.636976292s ago: executing program 3 (id=1897): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000900)) socket$vsock_stream(0x28, 0x1, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$cec(&(0x7f00000006c0), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000f70000000003000000500001800400028038000400200001000a00000000007da8e2a90000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006574683a766c616e30"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) 1.634768371s ago: executing program 0 (id=1898): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, 0x0) 1.568086617s ago: executing program 4 (id=1899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x2000000000000145, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfe68, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x80001) userfaultfd(0x80001) socket$inet6_dccp(0xa, 0x6, 0x0) 1.199940728s ago: executing program 1 (id=1900): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.016124074s ago: executing program 4 (id=1901): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = epoll_create(0xbff0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r2) fcntl$setstatus(r0, 0x4, 0x2c00) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r5 = syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf98f8a32cb3000056080000000000008500000007000000b7000000000000009500577c8be40ba60691926b283bbb7817c8000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r7}, 0xc) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) close(r5) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) 741.508423ms ago: executing program 4 (id=1902): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe800000000000000000"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@loopback={0xff00000000000000}, 0x0, 0x0, 0x1}, 0x20) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa4, &(0x7f0000000100)={[{0xa0, 0x4e00, "e71e63fa17b9b52130dc3f1aeb5bcd2f24a5334bf2e09a2c5ca728bb3091401b1eec80c7899c7b270c2655a78aa5e2d9f924a3b59f48e8c8291e3bc476f3659c990e4e0c9bb6ff076a8853f564ba590ee85a8b8827f25b8ac401ee13c285805b6044ad2e99da76dfa7f68e6e7c00e4d0a9574e05a2c4026d4d730e4bca67f3271dac0312e4514478ec93508a4d3e6314702f38d0078417417590f22928f88454"}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 0s ago: executing program 1 (id=1903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) kernel console output (not intermixed with test programs): im4 netdevsim0: renamed from eth0 [ 959.928698][T10765] Bluetooth: hci0: command tx timeout [ 959.951614][T17160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 959.984394][T17240] team0: Port device team_slave_0 added [ 960.000285][T17240] team0: Port device team_slave_1 added [ 960.025835][T17160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 960.146774][T17160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 960.209380][T17240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.222446][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.253429][T17240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.311331][T17240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.326083][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.354788][T17240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.389131][ T2916] bridge_slave_1: left allmulticast mode [ 960.405325][ T2916] bridge_slave_1: left promiscuous mode [ 960.414516][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.428788][ T2916] bridge_slave_0: left allmulticast mode [ 960.436025][ T2916] bridge_slave_0: left promiscuous mode [ 960.441912][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.463750][ T2916] bridge_slave_1: left allmulticast mode [ 960.474796][ T2916] bridge_slave_1: left promiscuous mode [ 960.490382][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.510905][ T2916] bridge_slave_0: left allmulticast mode [ 960.524820][ T2916] bridge_slave_0: left promiscuous mode [ 960.533820][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.576612][T10765] Bluetooth: hci1: command tx timeout [ 961.224297][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 961.366527][T10765] Bluetooth: hci2: command tx timeout [ 961.480005][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.493512][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.505705][ T2916] bond0 (unregistering): Released all slaves [ 961.669519][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.684379][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.704745][ T2916] bond0 (unregistering): Released all slaves [ 962.068408][T17240] hsr_slave_0: entered promiscuous mode [ 962.074894][T17240] hsr_slave_1: entered promiscuous mode [ 962.081271][T17240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.090856][T17240] Cannot create hsr debugfs directory [ 962.570595][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.645531][T10765] Bluetooth: hci1: command tx timeout [ 962.660001][ T2916] hsr_slave_0: left promiscuous mode [ 962.676974][ T2916] hsr_slave_1: left promiscuous mode [ 962.685098][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.704700][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.713208][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.720990][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.756216][ T2916] hsr_slave_0: left promiscuous mode [ 962.762368][ T2916] hsr_slave_1: left promiscuous mode [ 962.776802][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.784322][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.804712][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.825567][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.902434][ T2916] veth1_macvtap: left promiscuous mode [ 962.921493][ T2916] veth0_macvtap: left promiscuous mode [ 962.934825][ T2916] veth1_vlan: left promiscuous mode [ 962.944289][ T2916] veth0_vlan: left promiscuous mode [ 962.958514][ T2916] veth1_macvtap: left promiscuous mode [ 962.964292][ T2916] veth0_macvtap: left promiscuous mode [ 962.983061][ T2916] veth1_vlan: left promiscuous mode [ 962.994636][ T2916] veth0_vlan: left promiscuous mode [ 963.445614][T10765] Bluetooth: hci2: command tx timeout [ 963.491141][ T5307] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 963.676665][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 963.711574][ T5307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 963.722758][ T5307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 963.741332][ T5307] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 963.750633][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.758898][ T5307] usb 2-1: Product: syz [ 963.763110][ T5307] usb 2-1: Manufacturer: syz [ 963.769801][ T5307] usb 2-1: SerialNumber: syz [ 963.787689][ T5307] usb 2-1: config 0 descriptor?? [ 963.799528][T17331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 963.807073][T17331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 963.926009][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 963.989445][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 965.093155][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 965.150480][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 965.527824][T10765] Bluetooth: hci2: command tx timeout [ 965.794830][T17329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 965.802674][T17329] IPv6: NLM_F_CREATE should be set when creating new route [ 965.824749][T17330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 965.832139][T17330] IPv6: NLM_F_CREATE should be set when creating new route [ 965.842877][T17204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 965.846383][ T5307] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 965.866534][T17204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 965.879629][ T5307] asix 2-1:0.0: probe with driver asix failed with error -71 [ 965.912586][ T5307] usb 2-1: USB disconnect, device number 33 [ 965.913438][T17204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 965.955065][T17204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 965.983127][T17160] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.060296][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.067512][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.117653][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.124833][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.309436][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.484318][T17160] veth0_vlan: entered promiscuous mode [ 966.539549][T17204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.603536][T17160] veth1_vlan: entered promiscuous mode [ 966.670228][T17204] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.701283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.708507][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.793694][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.800905][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.985092][T17160] veth0_macvtap: entered promiscuous mode [ 967.005328][T17160] veth1_macvtap: entered promiscuous mode [ 967.052454][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.065503][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.076192][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.104030][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.131295][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.155615][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.168112][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.193586][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.212364][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.233227][T17240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 967.254020][T17240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 967.282765][T17240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 967.314174][T17240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 967.365218][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.376431][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.387661][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.398953][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.409621][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.420268][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.430214][T17160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.441205][T17160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.462891][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.629951][T17160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.653202][T17160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.662782][T17160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.675182][T17160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.701228][T17204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.744868][T17358] pimreg3: entered allmulticast mode [ 967.874449][T17204] veth0_vlan: entered promiscuous mode [ 967.921794][T17204] veth1_vlan: entered promiscuous mode [ 968.019241][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.078847][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.092905][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.113274][T17204] veth0_macvtap: entered promiscuous mode [ 968.157524][T17204] veth1_macvtap: entered promiscuous mode [ 968.191831][T17240] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.228945][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.259181][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 968.259202][ T29] audit: type=1326 audit(1727711589.603:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.277744][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.318754][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.333736][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.344007][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.345933][ T29] audit: type=1326 audit(1727711589.633:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.355156][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.389605][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.425637][ T29] audit: type=1326 audit(1727711589.643:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.442904][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.470578][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.481325][ T29] audit: type=1326 audit(1727711589.643:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.484705][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.529306][ T29] audit: type=1326 audit(1727711589.643:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.536159][T17204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.570924][ T29] audit: type=1326 audit(1727711589.643:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.586446][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.603372][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.625664][ T29] audit: type=1326 audit(1727711589.643:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.654182][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.661402][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.678055][ T29] audit: type=1326 audit(1727711589.643:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.726588][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.741643][ T29] audit: type=1326 audit(1727711589.643:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.772115][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.793720][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.805742][ T29] audit: type=1326 audit(1727711589.643:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5485f7dff9 code=0x7ffc0000 [ 968.825538][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.854880][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.858376][T17384] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1699'. [ 968.892685][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.907420][T17384] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 968.922359][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.953558][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.963881][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.983875][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.018066][T17204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.060959][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.068203][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.134769][T17204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.156045][T17204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.164909][T17204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.183416][T17204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.235178][T17240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 969.327995][T17240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.479822][T17240] veth0_vlan: entered promiscuous mode [ 969.521181][T17240] veth1_vlan: entered promiscuous mode [ 969.558581][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.580575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.676525][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 969.678929][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.708214][T17240] veth0_macvtap: entered promiscuous mode [ 969.729545][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.737596][T17240] veth1_macvtap: entered promiscuous mode [ 969.816506][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.855696][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.857690][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.877885][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.899112][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.925394][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.929912][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.950897][ T8] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 969.985419][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.985643][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.015036][ T8] usb 2-1: config 0 descriptor?? [ 970.045488][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.062668][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.110657][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.135440][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.145319][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.185309][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.197639][T17240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.237317][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.285860][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.299632][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.320875][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.342658][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.362228][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.375706][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.390882][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.414671][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.442810][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.466240][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.474673][ T8] steelseries 0003:1038:12B6.0012: item fetching failed at offset 5/7 [ 970.477935][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.502987][T17240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.507036][ T8] steelseries 0003:1038:12B6.0012: probe with driver steelseries failed with error -22 [ 970.540342][T17240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.550482][T17240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.564664][T17240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.610594][T17240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.848411][T17432] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 970.883754][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.907001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.960536][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.976001][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.092411][T17441] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1717'. [ 971.130751][T17441] Κό: entered promiscuous mode [ 971.140645][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 972.409420][ T5285] usb 2-1: USB disconnect, device number 34 [ 972.602945][T17495] syz.1.1746: attempt to access beyond end of device [ 972.602945][T17495] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 973.024793][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 973.329421][ T135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.559573][ T135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.746819][ T135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.928006][ T135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.154730][T10374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 974.181613][T10374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 974.194541][T10374] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 974.194634][ T135] bridge_slave_1: left allmulticast mode [ 974.209339][T10374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 974.217456][T10374] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 974.224613][ T135] bridge_slave_1: left promiscuous mode [ 974.224810][T10374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.265770][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.350146][ T135] bridge_slave_0: left allmulticast mode [ 974.375572][ T135] bridge_slave_0: left promiscuous mode [ 974.397020][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.506190][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.531356][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.556597][ T135] bond0 (unregistering): Released all slaves [ 975.678090][ T135] Κό: left promiscuous mode [ 976.345572][T10765] Bluetooth: hci2: command tx timeout [ 976.481342][T10374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.545599][T10374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.568804][T10374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.609631][T10374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.625470][T10374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 976.638273][T17534] chnl_net:caif_netlink_parms(): no params data found [ 976.658198][T10374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.748351][T17581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 976.834178][ T135] hsr_slave_0: left promiscuous mode [ 976.853148][ T135] hsr_slave_1: left promiscuous mode [ 976.875886][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.883370][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.911784][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.923006][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.007018][ T135] veth1_macvtap: left promiscuous mode [ 977.012613][ T135] veth0_macvtap: left promiscuous mode [ 977.024285][ T135] veth1_vlan: left promiscuous mode [ 977.035978][ T135] veth0_vlan: left promiscuous mode [ 977.497192][ T5282] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 977.662269][ T5282] usb 2-1: Using ep0 maxpacket: 16 [ 977.672155][ T5282] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 977.684255][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.720819][ T5282] usb 2-1: Product: syz [ 977.725059][ T5282] usb 2-1: Manufacturer: syz [ 977.735540][ T5282] usb 2-1: SerialNumber: syz [ 977.756615][ T5282] usb 2-1: config 0 descriptor?? [ 977.781003][ T5282] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 978.003323][ T5282] usb 2-1: USB disconnect, device number 35 [ 978.072693][ T135] team0 (unregistering): Port device team_slave_1 removed [ 978.208068][ T135] team0 (unregistering): Port device team_slave_0 removed [ 978.294845][T17605] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 978.307501][T17605] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1769'. [ 978.415397][T10374] Bluetooth: hci2: command tx timeout [ 978.811975][T10374] Bluetooth: hci0: command tx timeout [ 979.051375][T17534] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.059134][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.075300][T17534] bridge_slave_0: entered allmulticast mode [ 979.093755][T17534] bridge_slave_0: entered promiscuous mode [ 979.107632][T17534] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.115230][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.123017][T17534] bridge_slave_1: entered allmulticast mode [ 979.133178][T17534] bridge_slave_1: entered promiscuous mode [ 979.218371][T17534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.232850][T17534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.283919][T17534] team0: Port device team_slave_0 added [ 979.320158][T17534] team0: Port device team_slave_1 added [ 979.439313][T17534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.447011][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.472941][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.481893][T17534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.496982][T17534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.504162][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.530837][T17534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.662597][ T135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.790109][ T135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.827969][T17590] chnl_net:caif_netlink_parms(): no params data found [ 979.870697][T17534] hsr_slave_0: entered promiscuous mode [ 979.879157][T17534] hsr_slave_1: entered promiscuous mode [ 979.910963][T17534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.936368][T17534] Cannot create hsr debugfs directory [ 980.081027][ T135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.374318][T10765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.390147][T10765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.403705][T10765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.475245][T10765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.493029][T10765] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 980.500565][ T5238] Bluetooth: hci2: command tx timeout [ 980.509855][T10765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.548858][ T135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.819751][T10374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 980.830675][T10374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 980.842102][T10374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 980.852354][T10374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 980.865982][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.873467][T10374] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 980.884343][T10374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.891644][T10374] Bluetooth: hci0: command tx timeout [ 980.897136][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.897671][T17590] bridge_slave_0: entered allmulticast mode [ 980.912341][T17590] bridge_slave_0: entered promiscuous mode [ 980.983579][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.991156][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.005672][T17590] bridge_slave_1: entered allmulticast mode [ 981.012508][T17590] bridge_slave_1: entered promiscuous mode [ 981.035528][ T5611] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 981.192782][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.225606][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 981.240184][ T5611] usb 4-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 981.274639][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.298940][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.312756][ T5611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 981.323463][ T5611] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.339036][ T5611] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 981.348859][ T5611] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 981.358941][ T5611] usb 4-1: Manufacturer: syz [ 981.379814][ T135] bridge_slave_1: left allmulticast mode [ 981.385621][ T135] bridge_slave_1: left promiscuous mode [ 981.397737][ T5611] usb 4-1: config 0 descriptor?? [ 981.416376][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.426489][ T135] bridge_slave_0: left allmulticast mode [ 981.432188][ T135] bridge_slave_0: left promiscuous mode [ 981.449581][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.030091][ T5611] rc_core: IR keymap rc-hauppauge not found [ 982.036291][ T5611] Registered IR keymap rc-empty [ 982.047287][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.083530][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.091065][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.103154][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.114925][ T135] bond0 (unregistering): Released all slaves [ 982.117110][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 982.146841][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 982.173484][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.182400][T17590] team0: Port device team_slave_0 added [ 982.208775][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.225056][T17590] team0: Port device team_slave_1 added [ 982.243521][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.244744][ T135] IPVS: stopping master sync thread 17432 ... [ 982.269933][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.306183][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.328487][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.346228][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.391177][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.416435][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.440096][ T5611] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 982.488857][ T5611] mceusb 4-1:0.0: Registered ࠁ with mce emulator interface version 1 [ 982.524140][ T5611] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 982.557429][ T5611] usb 4-1: USB disconnect, device number 28 [ 982.565819][T10765] Bluetooth: hci5: command tx timeout [ 982.573251][T10765] Bluetooth: hci2: command tx timeout [ 982.654819][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.691273][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.718879][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.745131][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.752372][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.779389][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.949150][T17642] chnl_net:caif_netlink_parms(): no params data found [ 982.967403][T10765] Bluetooth: hci3: command tx timeout [ 982.970315][T10374] Bluetooth: hci0: command tx timeout [ 982.989568][ T135] hsr_slave_0: left promiscuous mode [ 982.999809][ T135] hsr_slave_1: left promiscuous mode [ 983.008914][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.016780][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.024663][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.032399][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.056564][ T135] veth1_macvtap: left promiscuous mode [ 983.062127][ T135] veth0_macvtap: left promiscuous mode [ 983.067911][ T135] veth1_vlan: left promiscuous mode [ 983.073520][ T135] veth0_vlan: left promiscuous mode [ 983.943834][ T135] team0 (unregistering): Port device team_slave_1 removed [ 984.013406][ T135] team0 (unregistering): Port device team_slave_0 removed [ 984.652596][T10374] Bluetooth: hci5: command tx timeout [ 984.686992][T17590] hsr_slave_0: entered promiscuous mode [ 984.693839][T17590] hsr_slave_1: entered promiscuous mode [ 984.705491][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.716960][T17590] Cannot create hsr debugfs directory [ 985.014180][T10374] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 985.017919][T10374] Bluetooth: hci1: adv larger than maximum supported [ 985.026121][T10374] Bluetooth: hci1: Malformed LE Event: 0x0d [ 985.045544][T10374] Bluetooth: hci3: command tx timeout [ 985.055547][T10374] Bluetooth: hci0: command tx timeout [ 985.105028][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.112529][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.119989][T17642] bridge_slave_0: entered allmulticast mode [ 985.128605][T17642] bridge_slave_0: entered promiscuous mode [ 985.227283][T17534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 985.251386][T17651] chnl_net:caif_netlink_parms(): no params data found [ 985.281301][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.288980][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.296450][T17642] bridge_slave_1: entered allmulticast mode [ 985.303812][T17642] bridge_slave_1: entered promiscuous mode [ 985.325817][T17534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 985.339736][T17534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 985.372674][T17534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 985.424855][T17642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.470796][T17642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.563393][T17642] team0: Port device team_slave_0 added [ 985.579536][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.589618][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.597596][T17651] bridge_slave_0: entered allmulticast mode [ 985.604537][T17651] bridge_slave_0: entered promiscuous mode [ 985.640394][T17642] team0: Port device team_slave_1 added [ 985.663577][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.671131][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.678674][T17651] bridge_slave_1: entered allmulticast mode [ 985.686045][T17651] bridge_slave_1: entered promiscuous mode [ 985.759483][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.777364][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.788255][T17642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.796451][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.833032][T17642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.848600][T17642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.856071][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.882558][T17642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.959881][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.128630][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.181225][T17699] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed [ 986.181249][T17699] kvm: kvm [17698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xaf35000000eb [ 986.190813][T17651] team0: Port device team_slave_0 added [ 986.238479][T17699] kvm: kvm [17698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xaf350000082a [ 986.267353][T17699] kvm: kvm [17698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaf350000082a [ 986.282005][T17699] kvm: kvm [17698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf35000008a3 [ 986.283279][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.292075][T17699] kvm: kvm [17698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xaf3500000078 [ 986.328036][T17651] team0: Port device team_slave_1 added [ 986.378997][T17534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.440662][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.479081][T17642] hsr_slave_0: entered promiscuous mode [ 986.493658][T17642] hsr_slave_1: entered promiscuous mode [ 986.506635][T17642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.514281][T17642] Cannot create hsr debugfs directory [ 986.603470][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.613161][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.639658][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.742451][T10374] Bluetooth: hci5: command tx timeout [ 986.771186][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.781557][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.808722][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.829148][T17534] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.920877][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.928074][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.041017][T17651] hsr_slave_0: entered promiscuous mode [ 987.049429][T17651] hsr_slave_1: entered promiscuous mode [ 987.055783][T17651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.063496][T17651] Cannot create hsr debugfs directory [ 987.086645][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.093827][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.111164][T17590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 987.126049][T10374] Bluetooth: hci3: command tx timeout [ 987.148603][T17590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 987.202761][ T135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.238768][T17590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 987.250835][T17590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 987.362341][ T135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.415812][T17534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 987.426626][T17534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.455300][T17534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.583229][ T135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.710567][ T135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.761008][T17534] veth0_vlan: entered promiscuous mode [ 987.768063][ T51] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 987.849857][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.870695][T17534] veth1_vlan: entered promiscuous mode [ 987.966150][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.985713][ T51] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 988.007088][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.025785][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 988.096322][ T51] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 988.110773][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.137911][ T51] usb 4-1: Product: syz [ 988.155726][ T51] usb 4-1: Manufacturer: syz [ 988.163509][ T51] usb 4-1: SerialNumber: syz [ 988.167198][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.175547][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.201980][ T51] usb 4-1: config 0 descriptor?? [ 988.209495][ T135] bridge_slave_1: left allmulticast mode [ 988.215216][ T135] bridge_slave_1: left promiscuous mode [ 988.222834][ T51] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 988.233312][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.244577][ T51] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 988.262891][ T51] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 988.263523][ T135] bridge_slave_0: left allmulticast mode [ 988.288342][ T135] bridge_slave_0: left promiscuous mode [ 988.294107][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.323452][ T135] bridge_slave_1: left allmulticast mode [ 988.335214][ T135] bridge_slave_1: left promiscuous mode [ 988.346678][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.366712][ T135] bridge_slave_0: left allmulticast mode [ 988.372480][ T135] bridge_slave_0: left promiscuous mode [ 988.387529][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.460967][ T51] usb 4-1: USB disconnect, device number 29 [ 988.487115][ T51] garmin_gps 4-1:0.0: device disconnected [ 988.815778][T10374] Bluetooth: hci5: command tx timeout [ 989.216632][T10374] Bluetooth: hci3: command tx timeout [ 989.378586][ T51] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 989.576946][ T51] usb 4-1: config 0 has no interfaces? [ 989.582516][ T51] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 989.595490][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.629342][ T51] usb 4-1: config 0 descriptor?? [ 989.918247][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.942859][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.957758][ T135] bond0 (unregistering): Released all slaves [ 990.082176][ T5282] usb 4-1: USB disconnect, device number 30 [ 990.312974][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.325200][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.339392][ T135] bond0 (unregistering): Released all slaves [ 990.508895][ T135] bond1 (unregistering): Released all slaves [ 990.526177][T17642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 990.622949][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.630108][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.765505][T17642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 990.789125][T17642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 990.820523][T17642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 990.853549][T17534] veth0_macvtap: entered promiscuous mode [ 990.867484][T17534] veth1_macvtap: entered promiscuous mode [ 991.014458][T17774] netlink: 'syz.3.1788': attribute type 21 has an invalid length. [ 991.026051][T17774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1788'. [ 991.035204][T17774] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1788'. [ 991.355961][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.385408][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.395303][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.432200][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.455504][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.505413][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.515623][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.533933][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.555722][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1790'. [ 991.564913][T17799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1790'. [ 991.568342][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.605934][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1790'. [ 991.608289][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.637205][T17534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.646584][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1790'. [ 991.659396][T17590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.793861][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.811297][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.822214][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.833055][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.843473][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.854395][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.864341][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.875169][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.885622][T17534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.897210][T17534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.909228][T17534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.923155][T17534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.943767][T17534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.952589][T17534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.961496][T17534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.070897][ T135] hsr_slave_0: left promiscuous mode [ 992.080806][ T135] hsr_slave_1: left promiscuous mode [ 992.088701][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.097244][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.105166][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.112838][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.124644][ T135] hsr_slave_0: left promiscuous mode [ 992.130965][ T135] hsr_slave_1: left promiscuous mode [ 992.138337][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.145983][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.154493][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.162817][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.204519][ T135] veth1_macvtap: left promiscuous mode [ 992.211304][ T135] veth0_macvtap: left promiscuous mode [ 992.218046][ T135] veth1_vlan: left promiscuous mode [ 992.223432][ T135] veth0_vlan: left promiscuous mode [ 992.232510][ T135] veth1_macvtap: left promiscuous mode [ 992.238223][ T135] veth0_macvtap: left promiscuous mode [ 992.243889][ T135] veth1_vlan: left promiscuous mode [ 992.249532][ T135] veth0_vlan: left promiscuous mode [ 993.207633][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.213988][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.222962][ T135] team0 (unregistering): Port device team_slave_1 removed [ 993.284763][ T135] team0 (unregistering): Port device team_slave_0 removed [ 993.933475][ T135] pimreg3 (unregistering): left allmulticast mode [ 994.421932][ T135] team0 (unregistering): Port device team_slave_1 removed [ 994.488895][ T135] team0 (unregistering): Port device team_slave_0 removed [ 995.172819][T17651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 995.211276][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.232300][T17651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 995.263009][T17651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 995.317762][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.330980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.343480][T17651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 995.439506][T17642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.481408][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.505870][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.552426][T17642] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.610970][T17590] veth0_vlan: entered promiscuous mode [ 995.649704][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.656897][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.677823][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.684980][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.713532][T17590] veth1_vlan: entered promiscuous mode [ 996.018081][T17590] veth0_macvtap: entered promiscuous mode [ 996.056443][T17590] veth1_macvtap: entered promiscuous mode [ 996.084502][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.101669][T10765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 996.113510][T10765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 996.122031][T10765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 996.133501][T10765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 996.144279][T10765] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 996.153152][T10765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 996.188896][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.210822][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.221199][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.232088][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.242119][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.253394][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.264386][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.274890][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.287867][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.298914][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.310005][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.320606][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.332626][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.342719][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.353401][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.363458][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.376361][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.389248][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.410468][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.437184][T17590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.446819][T17590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.458720][T17590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.467991][T17590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.483683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.490891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.521210][T17642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.565199][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.573012][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.655291][T17651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 996.667889][T17651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 996.835553][ T5611] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 996.862501][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.960404][T17642] veth0_vlan: entered promiscuous mode [ 997.031202][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.039672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.042930][T17642] veth1_vlan: entered promiscuous mode [ 997.060387][T17818] chnl_net:caif_netlink_parms(): no params data found [ 997.094788][ T5611] usb 1-1: config 0 has no interfaces? [ 997.100579][ T5611] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 997.112025][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.128911][ T5611] usb 1-1: config 0 descriptor?? [ 997.214250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.224426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.274669][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.296100][T17818] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.303537][T17818] bridge_slave_0: entered allmulticast mode [ 997.314009][T17818] bridge_slave_0: entered promiscuous mode [ 997.323132][T17642] veth0_macvtap: entered promiscuous mode [ 997.335105][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.357590][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.364940][T17818] bridge_slave_1: entered allmulticast mode [ 997.388636][T17818] bridge_slave_1: entered promiscuous mode [ 997.399998][ T5611] usb 1-1: USB disconnect, device number 39 [ 997.463661][T17651] veth0_vlan: entered promiscuous mode [ 997.472252][T17642] veth1_macvtap: entered promiscuous mode [ 997.498415][T17818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.530973][T17818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.546496][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.559374][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.571574][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.583401][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.594014][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.607487][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.619346][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.630327][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.640846][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.653159][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.678665][T17642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.689586][T17651] veth1_vlan: entered promiscuous mode [ 997.755105][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.775652][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.792906][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.806128][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.826992][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.845130][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.865758][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.884789][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.894996][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.905850][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.917677][T17642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.933392][T17642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.942352][T17642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.953060][T17642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.961919][T17642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.997188][T17818] team0: Port device team_slave_0 added [ 998.067177][T17818] team0: Port device team_slave_1 added [ 998.151776][T17818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.165782][T10765] Bluetooth: hci1: command tx timeout [ 998.166844][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.235386][T17818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.248664][T17818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.255992][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.282389][T17818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.315138][T17651] veth0_macvtap: entered promiscuous mode [ 998.373574][T17818] hsr_slave_0: entered promiscuous mode [ 998.384924][T17818] hsr_slave_1: entered promiscuous mode [ 998.397347][T17651] veth1_macvtap: entered promiscuous mode [ 998.493291][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.505494][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.564155][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.576826][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.587358][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.598018][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.608491][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.635871][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.654041][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.671613][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.687422][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.701407][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.711405][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.722094][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.737524][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.820086][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.841089][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.860995][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.872492][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.883727][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.895298][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.921163][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.942176][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.963390][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.978195][ T5611] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 998.985485][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.997260][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.010955][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.023692][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.042481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.062886][T17651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.063214][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.079498][T17651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.098355][T17651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.113606][T17651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.157444][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.178924][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.209793][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 999.236598][ T5611] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 999.250184][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.283568][ T5611] usb 1-1: config 0 descriptor?? [ 999.362457][T17818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.494358][T17818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.522382][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.542535][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.610406][T17818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.669376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.681421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.721719][ T5611] hid-alps 0003:044E:120B.0013: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 999.741156][T17818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.947208][ T5611] usb 1-1: USB disconnect, device number 40 [ 1000.049164][T17818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.077470][T17818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.106931][T17818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.131945][T17818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.246838][T10765] Bluetooth: hci1: command tx timeout [ 1000.287468][T17818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.314080][T17818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.353834][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.361042][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.414659][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.421880][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.450026][T17852] vlan2: entered promiscuous mode [ 1000.455203][T17852] bridge0: entered promiscuous mode [ 1000.464097][T17852] bridge0: port 3(vlan2) entered blocking state [ 1000.488307][T17852] bridge0: port 3(vlan2) entered disabled state [ 1000.500626][T17852] vlan2: entered allmulticast mode [ 1000.506525][T17852] bridge0: entered allmulticast mode [ 1000.514397][T17852] vlan2: left allmulticast mode [ 1000.529221][T17852] bridge0: left allmulticast mode [ 1000.544172][T17852] bridge0: left promiscuous mode [ 1000.851396][T17818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.072694][T17818] veth0_vlan: entered promiscuous mode [ 1001.218273][T17818] veth1_vlan: entered promiscuous mode [ 1001.271485][T17818] veth0_macvtap: entered promiscuous mode [ 1001.342785][T17818] veth1_macvtap: entered promiscuous mode [ 1001.345476][ T5307] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1001.428173][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.452936][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.463664][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.474855][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.485233][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.495771][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.506222][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.517144][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.527875][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.538407][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.546451][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 1001.548424][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.557430][ T5307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1001.563859][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.581464][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.591978][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.603699][T17818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.622914][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.633903][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.637394][ T5307] usb 2-1: config 4 has an invalid interface number: 146 but max is 0 [ 1001.665847][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.676875][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.678819][ T5307] usb 2-1: config 4 has no interface number 0 [ 1001.696407][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.709821][ T5307] usb 2-1: config 4 interface 146 has no altsetting 0 [ 1001.715417][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.732122][ T5307] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 1001.735409][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.742934][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.766481][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.780419][ T5307] usb 2-1: Product: syz [ 1001.784810][ T5307] usb 2-1: Manufacturer: syz [ 1001.794763][ T5307] usb 2-1: SerialNumber: syz [ 1001.805571][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.837010][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.857028][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.868168][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.885795][T17818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.905410][T17818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.926801][T17818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.990183][T17818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.015544][T17818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.050371][T17818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.077388][T17818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.321380][ T5307] comedi comedi0: could not set alternate setting 3 in high speed [ 1002.331375][T10765] Bluetooth: hci1: command tx timeout [ 1002.346933][ T5307] usbduxsigma 2-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 1002.360282][ T5307] usbduxsigma 2-1:4.146: probe with driver usbduxsigma failed with error -71 [ 1002.374409][ T5307] usb 2-1: USB disconnect, device number 36 [ 1002.535287][T17886] syzkaller0: entered promiscuous mode [ 1002.551800][T17886] syzkaller0: entered allmulticast mode [ 1004.149675][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 1004.163822][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 1004.178869][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 1004.248154][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 1004.265271][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 1004.310179][T17897] kvm: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 1004.345225][T17897] kvm_intel: kvm [17896]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 1004.409682][T10765] Bluetooth: hci1: command tx timeout [ 1007.500606][T17911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1820'. [ 1007.599275][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.627467][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.768358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.776322][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.893716][T17917] syzkaller0: entered promiscuous mode [ 1007.910315][T17917] syzkaller0: entered allmulticast mode [ 1009.022556][T17941] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1009.102262][T17941] program syz.0.1827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.118771][T17949] fuse: Bad value for 'fd' [ 1012.174740][T17943] vlan2: entered allmulticast mode [ 1012.225780][ T5280] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1012.264671][T17944] vlan2: entered allmulticast mode [ 1012.418807][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 1012.439904][ T5280] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1012.451445][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.466247][ T5280] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1012.475742][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.487770][ T5280] usb 4-1: config 0 descriptor?? [ 1012.505057][ T5280] hub 4-1:0.0: bad descriptor, ignoring hub [ 1012.519464][ T5280] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1012.529129][ T5280] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1012.558060][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1012.605561][ T5297] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1012.725498][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1012.737476][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.748278][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.755556][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 1012.763321][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1012.764857][ T5297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1012.774639][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.793292][ T8] usb 1-1: SerialNumber: syz [ 1012.797995][ T5297] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1012.798029][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.829569][ T5297] usb 2-1: config 0 descriptor?? [ 1012.909884][ T51] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 1012.919217][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.927487][ T51] usb 5-1: Product: syz [ 1012.931760][ T51] usb 5-1: Manufacturer: syz [ 1012.936544][ T51] usb 5-1: SerialNumber: syz [ 1012.943951][ T51] usb 5-1: config 0 descriptor?? [ 1012.952052][ T51] cypress_m8 5-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 1012.962704][ T51] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1013.026253][ T8] usb 1-1: 0:2 : does not exist [ 1013.031341][ T8] usb 1-1: unit 255 not found! [ 1013.039856][ T8] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1013.065781][ T8] usb 1-1: USB disconnect, device number 41 [ 1013.120943][T17964] udevd[17964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.168572][ T51] usb 5-1: USB disconnect, device number 27 [ 1013.186032][ T51] cypress_m8 5-1:0.0: device disconnected [ 1013.256166][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.265926][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.280812][ T5297] hid (null): unknown global tag 0x83 [ 1013.289270][ T5297] hid (null): unknown global tag 0xc [ 1013.301863][ T5297] hid-sensor-hub 0003:0158:0100.0014: unknown main item tag 0x1 [ 1013.310601][ T5297] hid-sensor-hub 0003:0158:0100.0014: unexpected long global item [ 1013.319963][ T5297] hid-sensor-hub 0003:0158:0100.0014: parse failed [ 1013.326950][ T5297] hid-sensor-hub 0003:0158:0100.0014: probe with driver hid-sensor-hub failed with error -22 [ 1013.505875][ T51] usb 2-1: USB disconnect, device number 37 [ 1014.125723][ T51] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1014.310846][T17984] syzkaller0: entered promiscuous mode [ 1014.316571][T17984] syzkaller0: entered allmulticast mode [ 1014.320864][ T51] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1014.359916][ T51] usb 5-1: config 0 has no interface number 0 [ 1014.384678][ T51] usb 5-1: config 0 interface 128 has no altsetting 0 [ 1014.411055][ T51] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 1014.420498][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.443976][ T51] usb 5-1: Product: syz [ 1014.450735][ T51] usb 5-1: Manufacturer: syz [ 1014.463612][ T51] usb 5-1: SerialNumber: syz [ 1014.482582][ T51] usb 5-1: config 0 descriptor?? [ 1014.493837][ T51] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 1014.502200][ T51] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 1014.513968][ T51] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 1015.119264][T17987] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1842'. [ 1015.147145][ T51] usb 4-1: USB disconnect, device number 31 [ 1015.473029][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 1015.753419][ T5297] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1015.912942][ T5297] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1015.932249][ T5297] usb 4-1: config 0 has no interface number 1 [ 1015.952942][ T5297] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1015.972534][ T5297] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1015.994626][ T5297] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1016.003989][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1016.012350][ T5297] usb 4-1: SerialNumber: syz [ 1016.026175][ T5297] usb 4-1: config 0 descriptor?? [ 1016.116650][ T5280] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1016.256786][T17990] vivid-000: ================= START STATUS ================= [ 1016.277096][T17990] vivid-000: Generate PTS: true [ 1016.282328][T17990] vivid-000: Generate SCR: true [ 1016.287627][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 1016.294094][T17990] tpg source WxH: 320x180 (Y'CbCr) [ 1016.303510][T17990] tpg field: 1 [ 1016.306925][ T5280] usb 1-1: config 0 has an invalid interface number: 28 but max is 12 [ 1016.306959][ T5280] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1016.306985][ T5280] usb 1-1: config 0 has no interface number 0 [ 1016.307014][ T5280] usb 1-1: too many endpoints for config 0 interface 28 altsetting 194: 120, using maximum allowed: 30 [ 1016.307052][ T5280] usb 1-1: config 0 interface 28 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1016.307085][ T5280] usb 1-1: config 0 interface 28 has no altsetting 0 [ 1016.309364][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1016.332303][T17990] tpg crop: 320x180@0x0 [ 1016.343041][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.378767][T17990] tpg compose: 320x180@0x0 [ 1016.404224][T17990] tpg colorspace: 8 [ 1016.407904][ T5280] usb 1-1: Product: syz [ 1016.412010][T17990] tpg transfer function: 0/0 [ 1016.429540][T17990] tpg Y'CbCr encoding: 0/0 [ 1016.431388][ T5280] usb 1-1: Manufacturer: syz [ 1016.434823][T17990] tpg quantization: 0/0 [ 1016.459182][ T5280] usb 1-1: SerialNumber: syz [ 1016.463748][T17990] tpg RGB range: 0/2 [ 1016.485013][ T5280] usb 1-1: config 0 descriptor?? [ 1016.510148][T17990] vivid-000: ================== END STATUS ================== [ 1016.555531][ T5297] usb 4-1: Found UVC 0.00 device (0002:0000) [ 1016.573084][ T5297] usb 4-1: No valid video chain found. [ 1016.583646][ T5297] usb 4-1: USB disconnect, device number 32 [ 1016.734642][ T5280] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1016.815891][ T5285] usb 5-1: USB disconnect, device number 28 [ 1017.424292][ T5307] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1017.586366][ T5307] usb 4-1: Using ep0 maxpacket: 32 [ 1017.593323][ T5307] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.618194][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1017.629855][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1017.641228][ T5307] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1017.650470][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.691985][ T5307] usb 4-1: config 0 descriptor?? [ 1017.745887][T17999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1017.757123][ T5307] hub 4-1:0.0: USB hub found [ 1017.974250][ T5280] gspca_zc3xx: reg_w_i err -71 [ 1017.978169][ T5307] hub 4-1:0.0: 2 ports detected [ 1018.591333][ T5280] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1018.605421][ T5280] gspca_zc3xx 1-1:0.28: probe with driver gspca_zc3xx failed with error -71 [ 1018.638425][ T5280] usb 1-1: USB disconnect, device number 42 [ 1019.572251][T18015] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1019.579233][T18015] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1019.629756][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.684051][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 1019.723179][T18015] bridge_slave_1: left allmulticast mode [ 1019.747087][T18015] bridge_slave_1: left promiscuous mode [ 1019.778508][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.809561][T18015] bridge_slave_0: left allmulticast mode [ 1019.815273][T18015] bridge_slave_0: left promiscuous mode [ 1019.843193][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.058460][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.102022][ T5307] usb 4-1: USB disconnect, device number 33 [ 1020.231797][T18021] binder: 18020:18021 ioctl c0306201 20000080 returned -14 [ 1020.270456][T10374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1020.282735][T10374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1020.292531][T10374] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1020.312484][T10374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1020.322790][T10374] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1020.323493][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.352887][T10374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.409007][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1020.409026][ T29] audit: type=1326 audit(1727711641.743:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.440399][ T29] audit: type=1326 audit(1727711641.743:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.467118][ T29] audit: type=1326 audit(1727711641.753:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.491010][ T29] audit: type=1326 audit(1727711641.753:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.516243][ T29] audit: type=1326 audit(1727711641.753:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.555495][ T29] audit: type=1326 audit(1727711641.753:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.584676][ T29] audit: type=1326 audit(1727711641.753:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.608792][ T29] audit: type=1326 audit(1727711641.753:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.632100][ T29] audit: type=1326 audit(1727711641.753:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.664471][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.665106][ T29] audit: type=1326 audit(1727711641.753:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18023 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbffd7dff9 code=0x7ffc0000 [ 1020.699135][ T5285] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1020.862285][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.900225][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.955768][ T5285] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1020.981607][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1021.005425][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.028032][ T5285] usb 5-1: config 0 descriptor?? [ 1021.281798][ T11] bridge_slave_1: left allmulticast mode [ 1021.297152][ T11] bridge_slave_1: left promiscuous mode [ 1021.311180][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.343782][ T11] bridge_slave_0: left allmulticast mode [ 1021.361289][ T11] bridge_slave_0: left promiscuous mode [ 1021.370524][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.598441][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 1021.642137][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1021.654381][ T5285] usb 5-1: USB disconnect, device number 29 [ 1022.387462][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.406354][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.420478][ T11] bond0 (unregistering): Released all slaves [ 1022.433660][T18030] chnl_net:caif_netlink_parms(): no params data found [ 1022.485497][T10374] Bluetooth: hci2: command tx timeout [ 1023.011639][ T11] hsr_slave_0: left promiscuous mode [ 1023.019184][ T11] hsr_slave_1: left promiscuous mode [ 1023.043672][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.052725][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.096474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.119218][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.247158][ T11] veth1_macvtap: left promiscuous mode [ 1023.263178][ T11] veth0_macvtap: left promiscuous mode [ 1023.275200][ T11] veth1_vlan: left promiscuous mode [ 1023.289810][ T11] veth0_vlan: left promiscuous mode [ 1023.486537][T10765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.503297][T10765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1023.513458][T10765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1023.524816][T10765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1023.532570][T10765] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1023.542320][T10765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1024.365641][ T51] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1024.479423][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1024.527437][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.538526][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.550445][ T51] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1024.559998][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.571249][T10374] Bluetooth: hci2: command tx timeout [ 1024.579538][ T51] usb 4-1: config 0 descriptor?? [ 1024.588358][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1025.101977][ T51] smartjoyplus 0003:6666:8801.0015: unknown main item tag 0x0 [ 1025.114049][ T51] smartjoyplus 0003:6666:8801.0015: ignoring exceeding usage max [ 1025.128959][ T51] smartjoyplus 0003:6666:8801.0015: usage index exceeded [ 1025.136898][ T51] smartjoyplus 0003:6666:8801.0015: item 0 0 2 0 parsing failed [ 1025.145116][ T51] smartjoyplus 0003:6666:8801.0015: parse failed [ 1025.152123][ T51] smartjoyplus 0003:6666:8801.0015: probe with driver smartjoyplus failed with error -22 [ 1025.330415][ T5307] usb 4-1: USB disconnect, device number 34 [ 1025.384835][T18030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.402051][T18030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.409719][T18030] bridge_slave_0: entered allmulticast mode [ 1025.417782][T18030] bridge_slave_0: entered promiscuous mode [ 1025.455297][T18030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.478325][T18030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.485703][T18030] bridge_slave_1: entered allmulticast mode [ 1025.493015][T18030] bridge_slave_1: entered promiscuous mode [ 1025.549779][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.605530][T10374] Bluetooth: hci0: command tx timeout [ 1025.639227][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.782666][T18030] team0: Port device team_slave_0 added [ 1025.850789][T18030] team0: Port device team_slave_1 added [ 1025.929815][T18077] chnl_net:caif_netlink_parms(): no params data found [ 1026.017501][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.027295][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.095624][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.147014][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.154058][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.225449][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.353196][T10765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.364762][T10765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.374633][T10765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.398957][T10765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.408751][T10765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1026.420363][T10765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.483754][T18030] hsr_slave_0: entered promiscuous mode [ 1026.506852][T18030] hsr_slave_1: entered promiscuous mode [ 1026.518032][T18030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.533569][T18030] Cannot create hsr debugfs directory [ 1026.645847][T10765] Bluetooth: hci2: command tx timeout [ 1026.683138][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.817682][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.838256][T18077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.851470][T18077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.859249][T18077] bridge_slave_0: entered allmulticast mode [ 1026.866692][T18077] bridge_slave_0: entered promiscuous mode [ 1026.916300][T18077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.923454][T18077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.945684][T18077] bridge_slave_1: entered allmulticast mode [ 1026.952518][T18077] bridge_slave_1: entered promiscuous mode [ 1027.013804][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.081510][T18077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.164276][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.189587][T18077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.397916][T18077] team0: Port device team_slave_0 added [ 1027.417003][T18077] team0: Port device team_slave_1 added [ 1027.496888][T18077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.504199][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.533482][T18077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.630099][T18077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.637417][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.685560][T10765] Bluetooth: hci0: command tx timeout [ 1027.695494][T18077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.180670][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.320642][T18077] hsr_slave_0: entered promiscuous mode [ 1028.331871][T18077] hsr_slave_1: entered promiscuous mode [ 1028.349245][T18077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.357267][T18077] Cannot create hsr debugfs directory [ 1028.380369][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.447525][ T5281] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1028.485700][T10765] Bluetooth: hci3: command tx timeout [ 1028.544135][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.644208][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.660490][ T5281] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1028.683896][T18113] chnl_net:caif_netlink_parms(): no params data found [ 1028.691048][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.726383][T10765] Bluetooth: hci2: command tx timeout [ 1028.726550][ T5281] usb 4-1: config 0 descriptor?? [ 1028.873513][T18030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1028.893066][T18030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1028.971522][ T5281] usb 4-1: string descriptor 0 read error: -71 [ 1028.980438][ T5281] pwc: Samsung MPC-C10 USB webcam detected. [ 1028.986982][ T5281] pwc: send_video_command error -71 [ 1028.992337][ T5281] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1029.000103][ T5281] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1029.011346][ T5281] usb 4-1: USB disconnect, device number 35 [ 1029.050819][T18030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1029.086936][T18030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1029.236891][T18113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.250877][T18113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.261502][T18113] bridge_slave_0: entered allmulticast mode [ 1029.271396][T18113] bridge_slave_0: entered promiscuous mode [ 1029.280291][ T11] bridge_slave_1: left allmulticast mode [ 1029.286628][ T11] bridge_slave_1: left promiscuous mode [ 1029.292818][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.301781][ T11] bridge_slave_0: left allmulticast mode [ 1029.307914][ T11] bridge_slave_0: left promiscuous mode [ 1029.313728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.480172][ T5281] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1029.682193][ T5281] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1029.709044][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.740138][ T5281] usb 4-1: config 0 descriptor?? [ 1029.770004][T10765] Bluetooth: hci0: command tx timeout [ 1029.974732][ T5281] usb 4-1: string descriptor 0 read error: -32 [ 1029.996477][ T5281] pwc: Samsung MPC-C10 USB webcam detected. [ 1030.137033][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.149573][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.163377][ T11] bond0 (unregistering): Released all slaves [ 1030.230045][ T5281] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.261603][ T5281] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.368749][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.381350][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.395933][ T11] bond0 (unregistering): Released all slaves [ 1030.461106][T18113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.476069][T18113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.487938][ T5281] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1030.505200][T18113] bridge_slave_1: entered allmulticast mode [ 1030.511386][ T5281] pwc: recv_control_msg error -71 req 04 val 1000 [ 1030.520665][T18113] bridge_slave_1: entered promiscuous mode [ 1030.520793][ T5281] pwc: recv_control_msg error -71 req 04 val 1300 [ 1030.534222][ T5281] pwc: recv_control_msg error -71 req 04 val 1400 [ 1030.551432][ T5281] pwc: recv_control_msg error -71 req 02 val 2000 [ 1030.560645][ T5281] pwc: recv_control_msg error -71 req 02 val 2100 [ 1030.567869][ T5281] pwc: recv_control_msg error -71 req 02 val 2200 [ 1030.569691][T10765] Bluetooth: hci3: command tx timeout [ 1030.574931][ T5281] pwc: recv_control_msg error -71 req 06 val 0600 [ 1030.616406][ T5281] pwc: recv_control_msg error -71 req 04 val 1500 [ 1030.624461][ T5281] pwc: recv_control_msg error -71 req 02 val 2500 [ 1030.641005][ T5281] pwc: recv_control_msg error -71 req 02 val 2400 [ 1030.648238][ T5281] pwc: recv_control_msg error -71 req 02 val 2600 [ 1030.655096][ T5281] pwc: recv_control_msg error -71 req 02 val 2900 [ 1030.663000][ T5281] pwc: recv_control_msg error -71 req 02 val 2800 [ 1030.670533][ T5281] pwc: recv_control_msg error -71 req 04 val 1100 [ 1030.695398][ T5281] pwc: recv_control_msg error -71 req 04 val 1200 [ 1030.708460][ T5281] pwc: Registered as video71. [ 1030.714333][ T5281] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1030.758160][ T5281] usb 4-1: USB disconnect, device number 36 [ 1030.777978][T18113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.917178][T18113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.991164][T18113] team0: Port device team_slave_0 added [ 1031.009094][T18113] team0: Port device team_slave_1 added [ 1031.210565][T18113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.225142][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.267388][T18113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.364212][T18113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.373249][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.419907][T18113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.518670][T18030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.633956][T18113] hsr_slave_0: entered promiscuous mode [ 1031.641980][T18113] hsr_slave_1: entered promiscuous mode [ 1031.649130][T18113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.657742][T18113] Cannot create hsr debugfs directory [ 1031.733567][ T11] hsr_slave_0: left promiscuous mode [ 1031.745029][ T11] hsr_slave_1: left promiscuous mode [ 1031.762800][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.781667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.793673][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.810264][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.849306][T10765] Bluetooth: hci0: command tx timeout [ 1031.855229][ T11] hsr_slave_0: left promiscuous mode [ 1031.875035][ T11] hsr_slave_1: left promiscuous mode [ 1031.892455][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.904481][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.922921][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.931346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.974153][ T11] veth1_macvtap: left promiscuous mode [ 1031.980902][ T11] veth0_macvtap: left promiscuous mode [ 1031.988340][ T11] veth1_vlan: left promiscuous mode [ 1031.993620][ T11] veth0_vlan: left promiscuous mode [ 1032.000581][ T11] veth1_macvtap: left promiscuous mode [ 1032.006297][ T11] veth0_macvtap: left promiscuous mode [ 1032.012386][ T11] veth1_vlan: left promiscuous mode [ 1032.017820][ T11] veth0_vlan: left promiscuous mode [ 1032.456274][T18175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1881'. [ 1032.656633][T10765] Bluetooth: hci3: command tx timeout [ 1033.163535][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1033.272994][T18177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1882'. [ 1033.290980][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1034.444952][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1034.503798][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1034.745464][T10765] Bluetooth: hci3: command tx timeout [ 1035.192978][T18077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1035.230717][T18077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1035.295980][T18030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.317557][T18077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1035.347413][T18077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1035.423869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.431126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.578724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.585939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.662686][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 1035.703411][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 1035.746175][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 1035.779020][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 1035.798092][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 1035.829411][T18180] kvm: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 1035.856044][T18180] kvm_intel: kvm [18179]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 1036.409536][T18077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.453801][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.482679][T18077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.517016][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.524166][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.611614][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.618810][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.659170][T18200] binder_alloc: 18199: binder_alloc_buf, no vma [ 1036.668634][T18030] veth0_vlan: entered promiscuous mode [ 1036.691837][T18030] veth1_vlan: entered promiscuous mode [ 1036.802846][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1885'. [ 1036.835985][T18030] veth0_macvtap: entered promiscuous mode [ 1036.858893][T18113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1036.918534][T18113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1036.951249][T18030] veth1_macvtap: entered promiscuous mode [ 1036.964737][T18113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1037.020584][T18113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1037.049072][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.098651][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.124467][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.155420][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.196061][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.236017][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.265693][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.276606][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.290946][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.307973][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.320123][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.337143][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.386652][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.397716][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.410079][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.430105][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.440718][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.452766][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.463161][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.474068][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.484459][T18030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.494997][T18030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.508384][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.521735][T18030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.533093][T18030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.543357][T18030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.552619][T18030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.602314][T18077] veth0_vlan: entered promiscuous mode [ 1037.635891][ T5307] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1037.708761][T18077] veth1_vlan: entered promiscuous mode [ 1037.798848][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1037.815238][T18113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.822565][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1037.834286][ T5307] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1037.844850][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.860239][ T5307] usb 4-1: config 0 descriptor?? [ 1037.897695][ T5307] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1037.899407][T18077] veth0_macvtap: entered promiscuous mode [ 1037.934506][ T8675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.949095][ T8675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.958908][T18113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.987343][T18077] veth1_macvtap: entered promiscuous mode [ 1038.047049][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.054241][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.088944][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.096168][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.105025][ T5307] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 1038.119463][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.128492][ T5307] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1038.130418][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.146622][ T5307] usb 4-1: MIDIStreaming interface descriptor not found [ 1038.146884][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.171561][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.182267][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.202026][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.247116][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.263346][ T5307] usb 4-1: USB disconnect, device number 37 [ 1038.295948][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.355669][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.385394][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.395262][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.415413][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.425294][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.450744][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.462295][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.506701][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.525400][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.535283][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.556386][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.567066][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.577944][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.588042][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.598877][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.615381][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.626013][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.650414][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.661507][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.673753][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.715184][T18077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.725072][T18077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.738919][T18077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.748177][T18077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.973830][T18113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.996915][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.004883][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.012662][T15302] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1039.084809][ T8675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.102566][ T8675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.156967][T18113] veth0_vlan: entered promiscuous mode [ 1039.196496][T15302] usb 4-1: Using ep0 maxpacket: 16 [ 1039.211113][T15302] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1039.228168][T18113] veth1_vlan: entered promiscuous mode [ 1039.239369][T15302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.279922][T15302] usb 4-1: config 0 descriptor?? [ 1039.321741][T15302] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1039.340184][T18113] veth0_macvtap: entered promiscuous mode [ 1039.387905][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1039.387927][ T29] audit: type=1326 audit(1727711660.723:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.4.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088517dff9 code=0x0 [ 1039.427360][T18113] veth1_macvtap: entered promiscuous mode [ 1039.510846][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.554886][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.581575][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.605929][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.644758][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.665438][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.685460][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.709537][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.725267][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.746077][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.764880][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.800406][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.830526][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.847711][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.869148][T18113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.917269][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.938406][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.965573][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.985955][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.018967][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.054816][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.081082][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.134695][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.181292][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.235009][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.267229][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.295437][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.325889][T18113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.345455][T18113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.367947][T18113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.386359][T18286] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1040.445082][T18287] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1040.499691][T18113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.539779][T18113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.576648][T18113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.614859][T18113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.847312][T10374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1040.864030][T10374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1040.873540][T10374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1040.875121][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1040.917423][T10374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1040.925755][T10374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1040.936435][T10374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1041.111089][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.121044][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.462347][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.711910][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.792101][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.823258][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.906835][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.126533][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.175565][T15302] gspca_sonixj: reg_w1 err -71 [ 1042.208082][T15302] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1042.227770][T15302] usb 4-1: USB disconnect, device number 38 [ 1042.743045][T18323] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 1042.962041][T18295] chnl_net:caif_netlink_parms(): no params data found [ 1043.045787][T10765] Bluetooth: hci4: command tx timeout [ 1043.089361][T18343] tipc: Started in network mode [ 1043.094379][T18343] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1043.102146][T18343] tipc: Enabled bearer , priority 10 [ 1043.146058][ T35] bridge_slave_1: left allmulticast mode [ 1043.152261][ T35] bridge_slave_1: left promiscuous mode [ 1043.176744][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.234778][ T35] bridge_slave_0: left allmulticast mode [ 1043.250012][ T35] bridge_slave_0: left promiscuous mode [ 1043.266226][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.252018][T15302] tipc: Node number set to 10005162 [ 1044.539691][T18344] [ 1044.542090][T18344] ===================================================== [ 1044.549033][T18344] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 1044.557355][T18344] 6.12.0-rc1-syzkaller #0 Not tainted [ 1044.562727][T18344] ----------------------------------------------------- [ 1044.569775][T18344] syz.0.1898/18344 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 1044.577502][T18344] ffff88806799ce10 (&ppp->rlock){+...}-{2:2}, at: ppp_disconnect_channel+0x9a/0x2d0 [ 1044.586928][T18344] [ 1044.586928][T18344] and this task is already holding: [ 1044.594300][T18344] ffff88806799ce50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 1044.603737][T18344] which would create a new lock dependency: [ 1044.609633][T18344] (&ppp->wlock){+...}-{2:2} -> (&ppp->rlock){+...}-{2:2} [ 1044.616899][T18344] [ 1044.616899][T18344] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 1044.626884][T18344] (&pch->upl){++.-}-{2:2} [ 1044.626918][T18344] [ 1044.626918][T18344] ... which became SOFTIRQ-READ-irq-safe at: [ 1044.639478][T18344] lock_acquire+0x1ed/0x550 [ 1044.644110][T18344] _raw_read_lock_bh+0x3d/0x50 [ 1044.648979][T18344] ppp_input+0x3dc/0xa10 [ 1044.653321][T18344] ppp_async_process+0x7f/0x150 [ 1044.658261][T18344] tasklet_action_common+0x321/0x4d0 [ 1044.663645][T18344] handle_softirqs+0x2c5/0x980 [ 1044.668502][T18344] run_ksoftirqd+0xca/0x130 [ 1044.673273][T18344] smpboot_thread_fn+0x544/0xa30 [ 1044.678340][T18344] kthread+0x2f0/0x390 [ 1044.682511][T18344] ret_from_fork+0x4b/0x80 [ 1044.687034][T18344] ret_from_fork_asm+0x1a/0x30 [ 1044.691896][T18344] [ 1044.691896][T18344] to a SOFTIRQ-READ-irq-unsafe lock: [ 1044.699371][T18344] (&pch->downl){+.+.}-{2:2} [ 1044.699404][T18344] [ 1044.699404][T18344] ... which became SOFTIRQ-READ-irq-unsafe at: [ 1044.712304][T18344] ... [ 1044.712314][T18344] lock_acquire+0x1ed/0x550 [ 1044.719494][T18344] _raw_spin_lock+0x2e/0x40 [ 1044.724096][T18344] ppp_input+0x18b/0xa10 [ 1044.728438][T18344] pppoe_rcv_core+0x117/0x310 [ 1044.733211][T18344] __release_sock+0x243/0x350 [ 1044.737987][T18344] release_sock+0x61/0x1f0 [ 1044.742650][T18344] pppoe_sendmsg+0xd5/0x750 [ 1044.747249][T18344] __sock_sendmsg+0x221/0x270 [ 1044.752113][T18344] ____sys_sendmsg+0x52a/0x7e0 [ 1044.756973][T18344] __sys_sendmmsg+0x3ab/0x730 [ 1044.761756][T18344] __x64_sys_sendmmsg+0xa0/0xb0 [ 1044.766692][T18344] do_syscall_64+0xf3/0x230 [ 1044.771285][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.777280][T18344] [ 1044.777280][T18344] other info that might help us debug this: [ 1044.777280][T18344] [ 1044.787506][T18344] Chain exists of: [ 1044.787506][T18344] &pch->upl --> &ppp->wlock --> &pch->downl [ 1044.787506][T18344] [ 1044.799343][T18344] Possible interrupt unsafe locking scenario: [ 1044.799343][T18344] [ 1044.807660][T18344] CPU0 CPU1 [ 1044.813026][T18344] ---- ---- [ 1044.818390][T18344] lock(&pch->downl); [ 1044.822472][T18344] local_irq_disable(); [ 1044.829227][T18344] lock(&pch->upl); [ 1044.835653][T18344] lock(&ppp->wlock); [ 1044.842248][T18344] [ 1044.845704][T18344] lock(&pch->upl); [ 1044.849779][T18344] [ 1044.849779][T18344] *** DEADLOCK *** [ 1044.849779][T18344] [ 1044.857920][T18344] 3 locks held by syz.0.1898/18344: [ 1044.863116][T18344] #0: ffff8880294080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb7/0x200 [ 1044.872882][T18344] #1: ffff88802940e0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdb/0x200 [ 1044.882824][T18344] #2: ffff88806799ce50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 1044.892690][T18344] [ 1044.892690][T18344] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 1044.903534][T18344] -> (&pch->upl){++.-}-{2:2} { [ 1044.908503][T18344] HARDIRQ-ON-W at: [ 1044.912575][T18344] lock_acquire+0x1ed/0x550 [ 1044.918918][T18344] _raw_write_lock_bh+0x35/0x50 [ 1044.925643][T18344] ppp_disconnect_channel+0x2f/0x2d0 [ 1044.932977][T18344] ppp_unregister_channel+0xb9/0x300 [ 1044.940099][T18344] ppp_asynctty_close+0xf8/0x190 [ 1044.946865][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1044.953285][T18344] tty_ldisc_release+0x1a1/0x200 [ 1044.960052][T18344] tty_release_struct+0x2b/0xe0 [ 1044.966736][T18344] tty_release+0xd06/0x12c0 [ 1044.973069][T18344] __fput+0x23f/0x880 [ 1044.978891][T18344] task_work_run+0x24f/0x310 [ 1044.985331][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1044.992800][T18344] do_syscall_64+0x100/0x230 [ 1044.999218][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.006953][T18344] HARDIRQ-ON-R at: [ 1045.011046][T18344] lock_acquire+0x1ed/0x550 [ 1045.017385][T18344] _raw_read_lock_bh+0x3d/0x50 [ 1045.023980][T18344] ppp_input+0x3dc/0xa10 [ 1045.030055][T18344] pppoe_rcv_core+0x117/0x310 [ 1045.036566][T18344] __release_sock+0x243/0x350 [ 1045.043074][T18344] release_sock+0x61/0x1f0 [ 1045.049505][T18344] pppoe_sendmsg+0xd5/0x750 [ 1045.055845][T18344] __sock_sendmsg+0x221/0x270 [ 1045.062355][T18344] ____sys_sendmsg+0x52a/0x7e0 [ 1045.068947][T18344] __sys_sendmmsg+0x3ab/0x730 [ 1045.075452][T18344] __x64_sys_sendmmsg+0xa0/0xb0 [ 1045.082151][T18344] do_syscall_64+0xf3/0x230 [ 1045.088496][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.096498][T18344] IN-SOFTIRQ-R at: [ 1045.100584][T18344] lock_acquire+0x1ed/0x550 [ 1045.106942][T18344] _raw_read_lock_bh+0x3d/0x50 [ 1045.113557][T18344] ppp_input+0x3dc/0xa10 [ 1045.119637][T18344] ppp_async_process+0x7f/0x150 [ 1045.126313][T18344] tasklet_action_common+0x321/0x4d0 [ 1045.133449][T18344] handle_softirqs+0x2c5/0x980 [ 1045.140161][T18344] run_ksoftirqd+0xca/0x130 [ 1045.146766][T18344] smpboot_thread_fn+0x544/0xa30 [ 1045.153714][T18344] kthread+0x2f0/0x390 [ 1045.159631][T18344] ret_from_fork+0x4b/0x80 [ 1045.165893][T18344] ret_from_fork_asm+0x1a/0x30 [ 1045.172584][T18344] INITIAL USE at: [ 1045.176571][T18344] lock_acquire+0x1ed/0x550 [ 1045.183014][T18344] _raw_write_lock_bh+0x35/0x50 [ 1045.189638][T18344] ppp_disconnect_channel+0x2f/0x2d0 [ 1045.196672][T18344] ppp_unregister_channel+0xb9/0x300 [ 1045.203709][T18344] ppp_asynctty_close+0xf8/0x190 [ 1045.210392][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1045.216754][T18344] tty_ldisc_release+0x1a1/0x200 [ 1045.223439][T18344] tty_release_struct+0x2b/0xe0 [ 1045.230045][T18344] tty_release+0xd06/0x12c0 [ 1045.236297][T18344] __fput+0x23f/0x880 [ 1045.242033][T18344] task_work_run+0x24f/0x310 [ 1045.248369][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1045.255783][T18344] do_syscall_64+0x100/0x230 [ 1045.262138][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.269783][T18344] INITIAL READ USE at: [ 1045.274205][T18344] lock_acquire+0x1ed/0x550 [ 1045.280899][T18344] _raw_read_lock_bh+0x3d/0x50 [ 1045.287880][T18344] ppp_input+0x3dc/0xa10 [ 1045.294303][T18344] pppoe_rcv_core+0x117/0x310 [ 1045.301162][T18344] __release_sock+0x243/0x350 [ 1045.308023][T18344] release_sock+0x61/0x1f0 [ 1045.314622][T18344] pppoe_sendmsg+0xd5/0x750 [ 1045.321307][T18344] __sock_sendmsg+0x221/0x270 [ 1045.328253][T18344] ____sys_sendmsg+0x52a/0x7e0 [ 1045.335379][T18344] __sys_sendmmsg+0x3ab/0x730 [ 1045.342246][T18344] __x64_sys_sendmmsg+0xa0/0xb0 [ 1045.349278][T18344] do_syscall_64+0xf3/0x230 [ 1045.355959][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.364040][T18344] } [ 1045.366656][T18344] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 1045.376038][T18344] -> (&ppp->wlock){+...}-{2:2} { [ 1045.381009][T18344] HARDIRQ-ON-W at: [ 1045.384995][T18344] lock_acquire+0x1ed/0x550 [ 1045.391164][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.397615][T18344] ppp_get_stats64+0xc3/0x290 [ 1045.403982][T18344] dev_get_stats+0xad/0xa00 [ 1045.410141][T18344] rtnl_fill_stats+0x47/0x880 [ 1045.416478][T18344] rtnl_fill_ifinfo+0x18da/0x2270 [ 1045.423156][T18344] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1045.430185][T18344] rtmsg_ifinfo+0x91/0x1b0 [ 1045.436263][T18344] register_netdevice+0x1774/0x1b00 [ 1045.443137][T18344] ppp_dev_configure+0x883/0xb10 [ 1045.449761][T18344] ppp_ioctl+0x797/0x1cd0 [ 1045.455762][T18344] __se_sys_ioctl+0xf9/0x170 [ 1045.462018][T18344] do_syscall_64+0xf3/0x230 [ 1045.468176][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.475746][T18344] INITIAL USE at: [ 1045.479649][T18344] lock_acquire+0x1ed/0x550 [ 1045.485822][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.492168][T18344] ppp_get_stats64+0xc3/0x290 [ 1045.498427][T18344] dev_get_stats+0xad/0xa00 [ 1045.504505][T18344] rtnl_fill_stats+0x47/0x880 [ 1045.510850][T18344] rtnl_fill_ifinfo+0x18da/0x2270 [ 1045.517452][T18344] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1045.524398][T18344] rtmsg_ifinfo+0x91/0x1b0 [ 1045.530389][T18344] register_netdevice+0x1774/0x1b00 [ 1045.537421][T18344] ppp_dev_configure+0x883/0xb10 [ 1045.543941][T18344] ppp_ioctl+0x797/0x1cd0 [ 1045.549850][T18344] __se_sys_ioctl+0xf9/0x170 [ 1045.556039][T18344] do_syscall_64+0xf3/0x230 [ 1045.562111][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.569580][T18344] } [ 1045.572078][T18344] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 1045.580845][T18344] ... acquired at: [ 1045.584643][T18344] lock_acquire+0x1ed/0x550 [ 1045.589332][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.594321][T18344] ppp_connect_channel+0x174/0x650 [ 1045.599619][T18344] ppp_ioctl+0xdd4/0x1cd0 [ 1045.604132][T18344] __se_sys_ioctl+0xf9/0x170 [ 1045.608913][T18344] do_syscall_64+0xf3/0x230 [ 1045.613593][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.619673][T18344] [ 1045.621995][T18344] [ 1045.621995][T18344] the dependencies between the lock to be acquired [ 1045.622006][T18344] and SOFTIRQ-READ-irq-unsafe lock: [ 1045.636175][T18344] -> (&pch->downl){+.+.}-{2:2} { [ 1045.641276][T18344] HARDIRQ-ON-W at: [ 1045.645359][T18344] lock_acquire+0x1ed/0x550 [ 1045.651723][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.658361][T18344] ppp_unregister_channel+0x7c/0x300 [ 1045.665488][T18344] ppp_asynctty_close+0xf8/0x190 [ 1045.672276][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1045.678789][T18344] tty_ldisc_release+0x1a1/0x200 [ 1045.685566][T18344] tty_release_struct+0x2b/0xe0 [ 1045.692276][T18344] tty_release+0xd06/0x12c0 [ 1045.698618][T18344] __fput+0x23f/0x880 [ 1045.704463][T18344] task_work_run+0x24f/0x310 [ 1045.710886][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1045.718363][T18344] do_syscall_64+0x100/0x230 [ 1045.724783][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.732537][T18344] SOFTIRQ-ON-W at: [ 1045.736610][T18344] lock_acquire+0x1ed/0x550 [ 1045.742954][T18344] _raw_spin_lock+0x2e/0x40 [ 1045.749309][T18344] ppp_input+0x18b/0xa10 [ 1045.755425][T18344] pppoe_rcv_core+0x117/0x310 [ 1045.761939][T18344] __release_sock+0x243/0x350 [ 1045.768464][T18344] release_sock+0x61/0x1f0 [ 1045.775085][T18344] pppoe_sendmsg+0xd5/0x750 [ 1045.781440][T18344] __sock_sendmsg+0x221/0x270 [ 1045.788095][T18344] ____sys_sendmsg+0x52a/0x7e0 [ 1045.794782][T18344] __sys_sendmmsg+0x3ab/0x730 [ 1045.801336][T18344] __x64_sys_sendmmsg+0xa0/0xb0 [ 1045.808058][T18344] do_syscall_64+0xf3/0x230 [ 1045.814403][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.822142][T18344] INITIAL USE at: [ 1045.826161][T18344] lock_acquire+0x1ed/0x550 [ 1045.832419][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.838955][T18344] ppp_unregister_channel+0x7c/0x300 [ 1045.846094][T18344] ppp_asynctty_close+0xf8/0x190 [ 1045.852786][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1045.859131][T18344] tty_ldisc_release+0x1a1/0x200 [ 1045.865818][T18344] tty_release_struct+0x2b/0xe0 [ 1045.872432][T18344] tty_release+0xd06/0x12c0 [ 1045.878707][T18344] __fput+0x23f/0x880 [ 1045.884447][T18344] task_work_run+0x24f/0x310 [ 1045.890787][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1045.898178][T18344] do_syscall_64+0x100/0x230 [ 1045.905133][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.912809][T18344] } [ 1045.915399][T18344] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 1045.924777][T18344] ... acquired at: [ 1045.928687][T18344] lock_acquire+0x1ed/0x550 [ 1045.933398][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.938364][T18344] ppp_connect_channel+0x194/0x650 [ 1045.943726][T18344] ppp_ioctl+0xdd4/0x1cd0 [ 1045.948297][T18344] __se_sys_ioctl+0xf9/0x170 [ 1045.953110][T18344] do_syscall_64+0xf3/0x230 [ 1045.958669][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.964756][T18344] [ 1045.967123][T18344] -> (&ppp->rlock){+...}-{2:2} { [ 1045.972125][T18344] HARDIRQ-ON-W at: [ 1045.976120][T18344] lock_acquire+0x1ed/0x550 [ 1045.982290][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1045.988717][T18344] ppp_get_stats64+0x33/0x290 [ 1045.995254][T18344] dev_get_stats+0xad/0xa00 [ 1046.001420][T18344] rtnl_fill_stats+0x47/0x880 [ 1046.007763][T18344] rtnl_fill_ifinfo+0x18da/0x2270 [ 1046.014450][T18344] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1046.021483][T18344] rtmsg_ifinfo+0x91/0x1b0 [ 1046.027601][T18344] register_netdevice+0x1774/0x1b00 [ 1046.034473][T18344] ppp_dev_configure+0x883/0xb10 [ 1046.041088][T18344] ppp_ioctl+0x797/0x1cd0 [ 1046.047090][T18344] __se_sys_ioctl+0xf9/0x170 [ 1046.053357][T18344] do_syscall_64+0xf3/0x230 [ 1046.059552][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.067122][T18344] INITIAL USE at: [ 1046.071021][T18344] lock_acquire+0x1ed/0x550 [ 1046.077105][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1046.083469][T18344] ppp_get_stats64+0x33/0x290 [ 1046.089725][T18344] dev_get_stats+0xad/0xa00 [ 1046.095800][T18344] rtnl_fill_stats+0x47/0x880 [ 1046.102049][T18344] rtnl_fill_ifinfo+0x18da/0x2270 [ 1046.108647][T18344] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1046.115589][T18344] rtmsg_ifinfo+0x91/0x1b0 [ 1046.121671][T18344] register_netdevice+0x1774/0x1b00 [ 1046.128461][T18344] ppp_dev_configure+0x883/0xb10 [ 1046.135063][T18344] ppp_ioctl+0x797/0x1cd0 [ 1046.140974][T18344] __se_sys_ioctl+0xf9/0x170 [ 1046.147158][T18344] do_syscall_64+0xf3/0x230 [ 1046.153242][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.160732][T18344] } [ 1046.163248][T18344] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 1046.171793][T18344] ... acquired at: [ 1046.175614][T18344] lock_acquire+0x1ed/0x550 [ 1046.180335][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1046.185370][T18344] ppp_disconnect_channel+0x9a/0x2d0 [ 1046.190846][T18344] ppp_unregister_channel+0xb9/0x300 [ 1046.196315][T18344] ppp_asynctty_close+0xf8/0x190 [ 1046.201447][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1046.206218][T18344] tty_ldisc_release+0x1a1/0x200 [ 1046.211353][T18344] tty_release_struct+0x2b/0xe0 [ 1046.216396][T18344] tty_release+0xd06/0x12c0 [ 1046.221091][T18344] __fput+0x23f/0x880 [ 1046.225352][T18344] task_work_run+0x24f/0x310 [ 1046.230132][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1046.235958][T18344] do_syscall_64+0x100/0x230 [ 1046.240729][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.246838][T18344] [ 1046.249184][T18344] [ 1046.249184][T18344] stack backtrace: [ 1046.255085][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.0.1898 Not tainted 6.12.0-rc1-syzkaller #0 [ 1046.264138][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1046.274205][T18344] Call Trace: [ 1046.277489][T18344] [ 1046.280426][T18344] dump_stack_lvl+0x241/0x360 [ 1046.285111][T18344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.290360][T18344] ? __pfx__printk+0x10/0x10 [ 1046.294967][T18344] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1046.301310][T18344] validate_chain+0x4ebd/0x5920 [ 1046.306180][T18344] ? __pfx_validate_chain+0x10/0x10 [ 1046.311389][T18344] ? validate_chain+0x11e/0x5920 [ 1046.316333][T18344] ? __pfx_validate_chain+0x10/0x10 [ 1046.321539][T18344] ? look_up_lock_class+0x77/0x170 [ 1046.326668][T18344] ? look_up_lock_class+0x77/0x170 [ 1046.331803][T18344] ? __pfx_register_lock_class+0x10/0x10 [ 1046.337467][T18344] ? mark_lock+0x9a/0x360 [ 1046.344060][T18344] __lock_acquire+0x1384/0x2050 [ 1046.349901][T18344] lock_acquire+0x1ed/0x550 [ 1046.354420][T18344] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1046.359897][T18344] ? __pfx_lock_acquire+0x10/0x10 [ 1046.364941][T18344] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1046.370414][T18344] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1046.376235][T18344] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1046.381618][T18344] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1046.387095][T18344] _raw_spin_lock_bh+0x35/0x50 [ 1046.391874][T18344] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1046.397341][T18344] ppp_disconnect_channel+0x9a/0x2d0 [ 1046.402642][T18344] ppp_unregister_channel+0xb9/0x300 [ 1046.407968][T18344] ppp_asynctty_close+0xf8/0x190 [ 1046.412917][T18344] tty_ldisc_kill+0xa3/0x1a0 [ 1046.417522][T18344] tty_ldisc_release+0x1a1/0x200 [ 1046.422469][T18344] tty_release_struct+0x2b/0xe0 [ 1046.427330][T18344] tty_release+0xd06/0x12c0 [ 1046.431847][T18344] ? __pfx_tty_release+0x10/0x10 [ 1046.436812][T18344] __fput+0x23f/0x880 [ 1046.440815][T18344] task_work_run+0x24f/0x310 [ 1046.445418][T18344] ? __pfx_task_work_run+0x10/0x10 [ 1046.450536][T18344] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1046.456289][T18344] syscall_exit_to_user_mode+0x168/0x370 [ 1046.461943][T18344] do_syscall_64+0x100/0x230 [ 1046.466553][T18344] ? clear_bhb_loop+0x35/0x90 [ 1046.471259][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.477191][T18344] RIP: 0033:0x7fd5f017dff9 [ 1046.481621][T18344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.501238][T18344] RSP: 002b:00007fd5f045fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1046.509667][T18344] RAX: 0000000000000000 RBX: 00007fd5f0337a80 RCX: 00007fd5f017dff9 [ 1046.517733][T18344] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1046.525708][T18344] RBP: 00007fd5f0337a80 R08: 0000000000000006 R09: 00007fd5f045fe7f [ 1046.533680][T18344] R10: 00000000005ef510 R11: 0000000000000246 R12: 00000000000feddf [ 1046.541654][T18344] R13: 00007fd5f045fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 1046.549637][T18344] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1046.574174][T10765] Bluetooth: hci4: command tx timeout [ 1047.077099][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.089518][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.100094][ T35] bond0 (unregistering): Released all slaves [ 1047.113076][T18349] tipc: Resetting bearer [ 1047.124604][T18349] tipc: Disabling bearer [ 1047.632652][ T35] hsr_slave_0: left promiscuous mode [ 1047.670892][ T35] hsr_slave_1: left promiscuous mode [ 1047.677513][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.684985][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.705542][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.713012][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.728583][ T35] veth1_macvtap: left promiscuous mode [ 1047.734151][ T35] veth0_macvtap: left promiscuous mode [ 1047.740077][ T35] veth1_vlan: left promiscuous mode [ 1047.746584][ T35] veth0_vlan: left promiscuous mode [ 1047.925057][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1047.962654][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1048.420206][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.470459][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.514217][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.581681][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.702843][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.763970][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.824330][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.862987][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.950101][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.992088][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.078504][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.153247][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.269686][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.307963][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.383196][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.451063][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.522913][ T35] bridge_slave_1: left allmulticast mode [ 1049.534024][ T35] bridge_slave_1: left promiscuous mode [ 1049.542618][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.554162][ T35] bridge_slave_0: left allmulticast mode [ 1049.561079][ T35] bridge_slave_0: left promiscuous mode [ 1049.575584][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.584356][ T35] bridge_slave_1: left allmulticast mode [ 1049.591684][ T35] bridge_slave_1: left promiscuous mode [ 1049.600263][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.610395][ T35] bridge_slave_0: left allmulticast mode [ 1049.617018][ T35] bridge_slave_0: left promiscuous mode [ 1049.622809][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.632882][ T35] bridge_slave_1: left allmulticast mode [ 1049.639568][ T35] bridge_slave_1: left promiscuous mode [ 1049.645283][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.658824][ T35] bridge_slave_0: left allmulticast mode [ 1049.664562][ T35] bridge_slave_0: left promiscuous mode [ 1049.671833][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.684321][ T35] bridge_slave_1: left allmulticast mode [ 1049.694132][ T35] bridge_slave_1: left promiscuous mode [ 1049.704502][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.715230][ T35] bridge_slave_0: left allmulticast mode [ 1049.723508][ T35] bridge_slave_0: left promiscuous mode [ 1049.730502][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.241116][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.252375][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.263174][ T35] bond0 (unregistering): Released all slaves [ 1050.278473][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.291788][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.302396][ T35] bond0 (unregistering): Released all slaves [ 1050.313023][ T35] bond0 (unregistering): Released all slaves [ 1050.328326][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.340658][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.352014][ T35] bond0 (unregistering): Released all slaves [ 1050.368484][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.379480][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.391842][ T35] bond0 (unregistering): Released all slaves [ 1050.465004][ T35] tipc: Left network mode [ 1051.024473][ T35] hsr_slave_0: left promiscuous mode [ 1051.030928][ T35] hsr_slave_1: left promiscuous mode [ 1051.037721][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.045204][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.053042][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.061305][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.071318][ T35] hsr_slave_0: left promiscuous mode [ 1051.077329][ T35] hsr_slave_1: left promiscuous mode [ 1051.083072][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.090622][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.098298][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.105947][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.117137][ T35] hsr_slave_0: left promiscuous mode [ 1051.122866][ T35] hsr_slave_1: left promiscuous mode [ 1051.128914][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.136502][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.144161][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.151702][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.162055][ T35] hsr_slave_0: left promiscuous mode [ 1051.168262][ T35] hsr_slave_1: left promiscuous mode [ 1051.174550][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.182190][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.189940][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.197848][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.212165][ T35] veth1_macvtap: left promiscuous mode [ 1051.217904][ T35] veth0_macvtap: left promiscuous mode [ 1051.223463][ T35] veth1_vlan: left promiscuous mode [ 1051.228836][ T35] veth0_vlan: left promiscuous mode [ 1051.234777][ T35] veth1_macvtap: left promiscuous mode [ 1051.240521][ T35] veth0_macvtap: left promiscuous mode [ 1051.246186][ T35] veth1_vlan: left promiscuous mode [ 1051.251407][ T35] veth0_vlan: left promiscuous mode [ 1051.258895][ T35] veth1_macvtap: left promiscuous mode [ 1051.264396][ T35] veth0_macvtap: left promiscuous mode [ 1051.270851][ T35] veth1_vlan: left promiscuous mode [ 1051.277450][ T35] veth0_vlan: left promiscuous mode [ 1051.283362][ T35] veth1_macvtap: left promiscuous mode [ 1051.289011][ T35] veth0_macvtap: left promiscuous mode [ 1051.294560][ T35] veth1_vlan: left promiscuous mode [ 1051.299882][ T35] veth0_vlan: left promiscuous mode [ 1051.599701][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1051.634799][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1051.860281][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1051.890857][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1052.184124][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1052.219878][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1052.405634][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1052.420171][ T35] team0 (unregistering): Port device team_slave_0 removed