last executing test programs: 2m41.025375818s ago: executing program 32 (id=79): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x2, 0x1}, 0xc) 2m40.124166392s ago: executing program 33 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000005a9b00000008000300", @ANYRES32=r2, @ANYBLOB='\n\x004'], 0x28}}, 0x0) 2m27.245014258s ago: executing program 34 (id=177): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) 2m18.043879204s ago: executing program 35 (id=250): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x4, 0xa}, {0xfffa, 0x8, 0x5, 0xe, 0xffff}}}}, 0x17) r0 = io_uring_setup(0x1de0, &(0x7f0000001040)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000048, r1) 2m12.792233492s ago: executing program 36 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0xfffffffe, 0x1, 0x5, 0x9}]}) 1m49.75508319s ago: executing program 37 (id=528): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1, {0x3, 0x0, 0x172c85b7db954cad}, 0xfd}, 0x18) 1m29.102182874s ago: executing program 38 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x4400000, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0xfffe}}}]}, 0x24}}, 0x4000000) 1m24.114068738s ago: executing program 39 (id=782): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10) 1m23.113656426s ago: executing program 40 (id=790): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80045b10, &(0x7f0000000040)) 1m8.402704762s ago: executing program 41 (id=906): unshare(0x2a020480) unshare(0x2a020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m6.712531248s ago: executing program 6 (id=923): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) 1m6.525060834s ago: executing program 6 (id=926): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 1m6.217197367s ago: executing program 6 (id=930): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 1m5.74025195s ago: executing program 42 (id=930): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 1m2.808424285s ago: executing program 0 (id=951): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x234002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_clone(0x28082200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1m2.409383123s ago: executing program 0 (id=953): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m2.042453656s ago: executing program 0 (id=957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.821211455s ago: executing program 0 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffffffff00000200"], 0x2a) 58.765921574s ago: executing program 0 (id=968): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000b000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b0800014000000012080002400000001808"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x30048050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 58.328870486s ago: executing program 0 (id=970): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x7ffc}) 57.993789584s ago: executing program 43 (id=970): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x7ffc}) 46.765001839s ago: executing program 3 (id=1008): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r1], 0x0, 0x0, 0x0}) 46.571133846s ago: executing program 3 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgid(0x0) 46.241233548s ago: executing program 3 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x33}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f00000020c0)=ANY=[], 0x0) 45.7366066s ago: executing program 3 (id=1015): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x7fffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) 44.475811964s ago: executing program 3 (id=1030): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 44.177142869s ago: executing program 3 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008402"]) 43.923665549s ago: executing program 44 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008402"]) 37.684651755s ago: executing program 1 (id=1083): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 37.590936627s ago: executing program 1 (id=1084): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_usbip_server_init(0x5) 36.854008065s ago: executing program 1 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x494, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4db9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) 36.506297686s ago: executing program 1 (id=1091): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0x4a) 35.586853243s ago: executing program 7 (id=1095): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 35.507184583s ago: executing program 1 (id=1096): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000003"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 35.326123021s ago: executing program 7 (id=1097): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x201, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}}, 0x0) 35.117213269s ago: executing program 1 (id=1099): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) 35.116987436s ago: executing program 7 (id=1100): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x0, &(0x7f0000000e80)) 34.702082328s ago: executing program 45 (id=1099): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) 33.295310417s ago: executing program 7 (id=1113): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x1800, &(0x7f0000001dc0)={0x0, 0x1}, 0x20) 32.264410081s ago: executing program 7 (id=1120): openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000a400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 31.3571801s ago: executing program 7 (id=1124): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4b, 0x0, 0x0, 0x0, r1}) 30.864187502s ago: executing program 46 (id=1124): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4b, 0x0, 0x0, 0x0, r1}) 24.54384796s ago: executing program 8 (id=1163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) 24.193077348s ago: executing program 8 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r1, 0x101, 0x70bd29, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) 23.811644227s ago: executing program 8 (id=1171): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x4c000) 23.573257732s ago: executing program 8 (id=1174): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000000)='./file0\x00') 23.485234795s ago: executing program 8 (id=1175): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x40085500, 0x80000000100) 21.561166832s ago: executing program 8 (id=1179): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 21.215619984s ago: executing program 47 (id=1179): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18.311384477s ago: executing program 9 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008095}, 0x4) 17.434701575s ago: executing program 9 (id=1194): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) 17.292786135s ago: executing program 9 (id=1195): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xed}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0) 16.861582452s ago: executing program 9 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10.005582796s ago: executing program 4 (id=1211): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x1902) 9.883674543s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000048100000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000001c00330008010000080211000000080211000001ffffffffffff000006006600"], 0x4c}}, 0x0) 9.197442536s ago: executing program 4 (id=1213): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0)=0x103, 0x4) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x4040000) 9.099631137s ago: executing program 4 (id=1214): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.977254867s ago: executing program 4 (id=1215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') 8.909232008s ago: executing program 4 (id=1216): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x40, 0x101, 0x6a1, 0x0, 0x106]}, &(0x7f0000000000)=0x54) 4.069205237s ago: executing program 2 (id=1225): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 3.369163015s ago: executing program 6 (id=1180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x169802, 0x0) r1 = dup(r0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3.049779536s ago: executing program 2 (id=1231): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESDEC], 0x31) 2.846807214s ago: executing program 2 (id=1232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "08e17f", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0x4, 0x3, '_'}]}}}}}}}}, 0x0) 2.626898667s ago: executing program 2 (id=1233): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x5, 0x4}, {0x6}}}}, 0x11) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x959c20e7b8f01757, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 2.229194022s ago: executing program 5 (id=1234): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xfffffcae, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.150017017s ago: executing program 9 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.062139836s ago: executing program 5 (id=1235): memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/rtc0\x00', 0x3a, '/dev/rtc0\x00', 0x3a, './file0'}, 0x3b) 1.812880867s ago: executing program 5 (id=1236): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 1.73224207s ago: executing program 9 (id=1237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) userfaultfd(0x801) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) 559.301771ms ago: executing program 6 (id=1238): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x43d6b990c9433eb3, {0x41}}, 0x10) 440.239271ms ago: executing program 5 (id=1239): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) keyctl$link(0x8, r0, r0) 378.653628ms ago: executing program 2 (id=1240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000940)='\x84\xf3\xe5\xdd\x90\x04!\x05\xb3\xd2\xfe\xaa\xde\b1\xce\x1bL\x1b\xb3E\x9e^E\xb7a\x15\xc3\xfb\x1f\x94\x9d\xfa\x03\xbc\xdc\x91.fb\xccF\x81\xbfK\xf9\xe5\r\x92\xb7\xca\x90Q\xdd4\x85\x89\xf9M\xb5\x1b\a\xbb\x97\xfb\tG\xe0\x1f4Y1\b\xb2Bw\xb0Dd\x98S\x06\x1b\x10\xc1/YJ:\xdd\xd5]\xfe\xce\xe4<\x9f\x14&\vI\xa0\x1a<\xa2j,y\xd9\xfd\x83D.\xa6[\x88\xb5\xf0\xafN\x1b\x90\xf8\x16\x14\xbe\x94~s\\\xa6H\xdb\x0fF4X\x85\f\xab\xf6\x17\xc8\x1b\xb0\xe98q<\xb0$}\x15\x1c\xa4\xcc\x91M\x8d7Q\xc1\x1b\xda\x93\xa4\x1d\xcfyJiy\'\xaa.\n\xf5\t0\xdc\x99%\xf8_\xb5\xb0z\x1e\xff\xe4\x14\xa1\x15s\xf1\xa78W\xbe\xfdC\xd5\xf5S\x88\xc9\xa1\x9f7\xd6Q9\vj/D3\xfd\xed\xc7\xe5\xe5W\n\xf7\x86\f\xb3o\x85K4\xa2\xed\x7f\x84\x87LD\xf9>\xa0\xebR\xf2\xbc~\xdd\xa9\x8bN\xf9\xcb\xc1N\x9db7\x14 c$\xe0fb9+~_\xce\xdcp\xebY\xcc#\xcbW\x83\x1d\xa1\xcb8\x88\xe7*\x18Z\xe4p\x1e\xd9J\x92\xcdw\x7f\x1d \xec\'\xc3\xe0\xf8\xc7\x9fF\xd9N\x016\x03\x8b\xa9\x05\x81\xe6/\xf5\xa9\xd4r\"\x9c\x13Z O@}\x87L\xef\xea\xe9\x92.&\xde\x8f\xd6X\xc5\xe8r\xf4\x8a\xf2s:') 372.789638ms ago: executing program 6 (id=1241): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 252.95566ms ago: executing program 5 (id=1242): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1}, &(0x7f00000001c0)=0x8) 216.783744ms ago: executing program 2 (id=1243): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 0s ago: executing program 5 (id=1244): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) kernel console output (not intermixed with test programs): ings: Mfr=0, Product=0, SerialNumber=0 [ 144.311449][ T5883] usb 6-1: config 0 descriptor?? [ 144.733838][ T5883] lenovo 0003:17EF:6047.0003: item fetching failed at offset 0/2 [ 144.743593][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.757785][ T5883] lenovo 0003:17EF:6047.0003: hid_parse failed [ 144.769878][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.775266][ T5883] lenovo 0003:17EF:6047.0003: probe with driver lenovo failed with error -22 [ 144.800999][ T78] bond0 (unregistering): Released all slaves [ 145.014712][ T5882] usb 6-1: USB disconnect, device number 6 [ 145.283058][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 145.433551][ T78] hsr_slave_0: left promiscuous mode [ 145.448253][ T78] hsr_slave_1: left promiscuous mode [ 145.463781][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.474052][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.490819][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.503579][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.548359][ T78] veth1_macvtap: left promiscuous mode [ 145.553951][ T78] veth0_macvtap: left promiscuous mode [ 145.559871][ T78] veth1_vlan: left promiscuous mode [ 145.565300][ T78] veth0_vlan: left promiscuous mode [ 145.795309][ T54] Bluetooth: hci1: command tx timeout [ 146.329929][ T5886] usb 7-1: USB disconnect, device number 9 [ 146.782818][ T78] team0 (unregistering): Port device team_slave_1 removed [ 146.873404][ T78] team0 (unregistering): Port device team_slave_0 removed [ 147.755689][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.768397][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.791820][ T8311] bridge_slave_0: entered allmulticast mode [ 147.809847][ T8311] bridge_slave_0: entered promiscuous mode [ 147.871561][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.879526][ T54] Bluetooth: hci1: command tx timeout [ 147.910787][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.933770][ T8311] bridge_slave_1: entered allmulticast mode [ 147.941646][ T8311] bridge_slave_1: entered promiscuous mode [ 148.117222][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.150129][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.369624][ T8311] team0: Port device team_slave_0 added [ 148.417524][ T8311] team0: Port device team_slave_1 added [ 148.514412][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.546524][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.587194][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.654799][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.674199][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.710460][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.723685][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.734634][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.744150][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.761058][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.769525][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.778287][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.961999][ T78] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.159142][ T78] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.204401][ T8311] hsr_slave_0: entered promiscuous mode [ 149.222325][ T8311] hsr_slave_1: entered promiscuous mode [ 149.232462][ T8311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.240838][ T8311] Cannot create hsr debugfs directory [ 149.316721][ T78] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.434766][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.448479][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.458531][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.485391][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.493486][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.501017][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.512741][ T78] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.729225][ T8483] MPI: mpi too large (187712 bits) [ 149.939913][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 149.956677][ T54] Bluetooth: hci1: command tx timeout [ 150.163598][ T78] bridge_slave_1: left allmulticast mode [ 150.169727][ T78] bridge_slave_1: left promiscuous mode [ 150.177053][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.191005][ T78] bridge_slave_0: left allmulticast mode [ 150.198941][ T78] bridge_slave_0: left promiscuous mode [ 150.206598][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.727128][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.739674][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.752724][ T78] bond0 (unregistering): Released all slaves [ 150.782459][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.790517][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.811695][ T8459] bridge_slave_0: entered allmulticast mode [ 150.830690][ T8459] bridge_slave_0: entered promiscuous mode [ 150.845902][ T54] Bluetooth: hci0: command tx timeout [ 150.924840][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.934962][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.949571][ T8459] bridge_slave_1: entered allmulticast mode [ 150.958289][ T8459] bridge_slave_1: entered promiscuous mode [ 151.127690][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.139623][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.173238][ T8459] team0: Port device team_slave_0 added [ 151.208430][ T8476] chnl_net:caif_netlink_parms(): no params data found [ 151.227516][ T8459] team0: Port device team_slave_1 added [ 151.338912][ T78] hsr_slave_0: left promiscuous mode [ 151.344813][ T78] hsr_slave_1: left promiscuous mode [ 151.352099][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.360170][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.368991][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.376833][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.394467][ T78] veth1_macvtap: left promiscuous mode [ 151.400338][ T78] veth0_macvtap: left promiscuous mode [ 151.407762][ T78] veth1_vlan: left promiscuous mode [ 151.413083][ T78] veth0_vlan: left promiscuous mode [ 151.568433][ T54] Bluetooth: hci2: command tx timeout [ 152.045699][ T54] Bluetooth: hci1: command tx timeout [ 152.089610][ T78] team0 (unregistering): Port device team_slave_1 removed [ 152.137267][ T78] team0 (unregistering): Port device team_slave_0 removed [ 152.631170][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.638526][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.665986][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.679888][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.689417][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.716590][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.733221][ T8311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.757796][ T8311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.879943][ T8311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.916366][ T54] Bluetooth: hci0: command tx timeout [ 152.927246][ T8311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.945372][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.952715][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.966092][ T8476] bridge_slave_0: entered allmulticast mode [ 152.973173][ T8476] bridge_slave_0: entered promiscuous mode [ 153.034403][ T8459] hsr_slave_0: entered promiscuous mode [ 153.042700][ T8459] hsr_slave_1: entered promiscuous mode [ 153.053945][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.061916][ T8459] Cannot create hsr debugfs directory [ 153.076239][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.085329][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.092527][ T8476] bridge_slave_1: entered allmulticast mode [ 153.111244][ T8476] bridge_slave_1: entered promiscuous mode [ 153.306020][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.317666][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.458066][ T8476] team0: Port device team_slave_0 added [ 153.516830][ T8476] team0: Port device team_slave_1 added [ 153.590633][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.605921][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.637693][ T54] Bluetooth: hci2: command tx timeout [ 153.685236][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.707332][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.714391][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.741788][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.889288][ T8476] hsr_slave_0: entered promiscuous mode [ 153.906171][ T8476] hsr_slave_1: entered promiscuous mode [ 153.922825][ T8476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.932205][ T8476] Cannot create hsr debugfs directory [ 154.329735][ T8560] netlink: 44 bytes leftover after parsing attributes in process `syz.6.821'. [ 154.508129][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.701322][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.828'. [ 154.741284][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.781162][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.788292][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.817156][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.824316][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.006407][ T54] Bluetooth: hci0: command tx timeout [ 155.073145][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.191007][ T29] audit: type=1326 audit(1733178323.877:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.228967][ T29] audit: type=1326 audit(1733178323.897:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.252324][ T29] audit: type=1326 audit(1733178323.907:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.277570][ T29] audit: type=1326 audit(1733178323.907:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.329324][ T29] audit: type=1326 audit(1733178323.907:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.358913][ T29] audit: type=1326 audit(1733178323.917:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.359612][ T8459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.406794][ T29] audit: type=1326 audit(1733178323.917:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.429944][ T29] audit: type=1326 audit(1733178323.917:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.454035][ T29] audit: type=1326 audit(1733178323.917:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.6.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560f77ff19 code=0x7ffc0000 [ 155.527813][ T8459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.550323][ T8459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.585067][ T8311] veth0_vlan: entered promiscuous mode [ 155.608208][ T8600] fuse: Invalid uid '00000000000000000003' [ 155.670444][ T8459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.715507][ T54] Bluetooth: hci2: command tx timeout [ 155.768712][ T8311] veth1_vlan: entered promiscuous mode [ 155.854306][ T8311] veth0_macvtap: entered promiscuous mode [ 155.905936][ T8311] veth1_macvtap: entered promiscuous mode [ 155.922938][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.945674][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.965520][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.982584][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.993095][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.004608][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.016565][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.059221][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.071945][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.082846][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.098197][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.108721][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.120186][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.136378][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.157966][ T8311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.176507][ T8311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.185695][ T8311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.215490][ T8311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.369722][ T8476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.407655][ T8476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.455136][ T8476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.472417][ T8476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.516356][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.582804][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.593774][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.610507][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.668998][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.676221][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.727852][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.735023][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.838302][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.853879][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.959417][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.075625][ T54] Bluetooth: hci0: command tx timeout [ 157.151418][ T8476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.243786][ T8476] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.267592][ T8459] veth0_vlan: entered promiscuous mode [ 157.300173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.307457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.349897][ T8459] veth1_vlan: entered promiscuous mode [ 157.374751][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.381994][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.570439][ T8459] veth0_macvtap: entered promiscuous mode [ 157.609435][ T8459] veth1_macvtap: entered promiscuous mode [ 157.670795][ T8476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.699147][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.725440][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.748477][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.796996][ T54] Bluetooth: hci2: command tx timeout [ 157.855560][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.985668][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.055584][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.111297][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.127463][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.139621][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.221150][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.236086][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.265223][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.302135][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.322328][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.356721][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.375293][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.386487][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.403019][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.434696][ T8459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.465371][ T8459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.484435][ T8459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.502889][ T8459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.653358][ T8476] veth0_vlan: entered promiscuous mode [ 158.711495][ T8476] veth1_vlan: entered promiscuous mode [ 158.721202][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.743945][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.865390][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.866616][ T8476] veth0_macvtap: entered promiscuous mode [ 158.873270][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.926687][ T8476] veth1_macvtap: entered promiscuous mode [ 158.997451][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.039781][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.066710][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.095438][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.115769][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.135511][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.165238][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.195528][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.213557][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.234477][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.272303][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.327918][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.363537][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.410693][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.440267][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.472950][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.487688][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.497787][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.508599][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.529011][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.560044][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.581419][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.661410][ T8476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.695312][ T8476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.725290][ T8476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.734045][ T8476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.980052][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.004435][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.078674][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.088222][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.670015][ T8813] sctp: [Deprecated]: syz.6.873 (pid 8813) Use of int in max_burst socket option. [ 161.670015][ T8813] Use struct sctp_assoc_value instead [ 162.150839][ T8855] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 162.455349][ T5881] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.629043][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.893'. [ 162.648757][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 162.680234][ T5881] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.699736][ T5881] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.721417][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.748749][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.785566][ T5881] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.833779][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.858858][ T5881] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.906904][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.948146][ T5881] usb 4-1: config 0 descriptor?? [ 162.956011][ T8893] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 163.175595][ T5881] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.414910][ T46] usb 4-1: USB disconnect, device number 5 [ 163.436357][ T46] usblp0: removed [ 163.495125][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.634257][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.748838][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.932168][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.174316][ T35] bridge_slave_1: left allmulticast mode [ 164.209173][ T35] bridge_slave_1: left promiscuous mode [ 164.214940][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.280123][ T35] bridge_slave_0: left allmulticast mode [ 164.310299][ T35] bridge_slave_0: left promiscuous mode [ 164.335510][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.508937][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.521076][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.531419][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.539586][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.549708][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.557333][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.070206][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.089729][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.100571][ T35] bond0 (unregistering): Released all slaves [ 165.121861][ T8945] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 166.262351][ T35] hsr_slave_0: left promiscuous mode [ 166.289251][ T35] hsr_slave_1: left promiscuous mode [ 166.355613][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.363104][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.386006][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.393645][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.474488][ T35] veth1_macvtap: left promiscuous mode [ 166.483650][ T35] veth0_macvtap: left promiscuous mode [ 166.493253][ T35] veth1_vlan: left promiscuous mode [ 166.501955][ T35] veth0_vlan: left promiscuous mode [ 166.604504][ T5833] Bluetooth: hci1: command tx timeout [ 166.716089][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.736243][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.748144][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.760607][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.771963][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.780617][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.412231][ T35] team0 (unregistering): Port device team_slave_1 removed [ 167.453973][ T35] team0 (unregistering): Port device team_slave_0 removed [ 167.882843][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 167.915418][ T9032] netlink: 'syz.0.936': attribute type 29 has an invalid length. [ 168.066552][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 168.079336][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 168.090075][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.100166][ T54] Workqueue: hci2 hci_rx_work [ 168.104933][ T54] Call Trace: [ 168.108238][ T54] [ 168.111191][ T54] dump_stack_lvl+0x241/0x360 [ 168.115908][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.121147][ T54] ? __pfx__printk+0x10/0x10 [ 168.125782][ T54] ? __kmalloc_cache_noprof+0x243/0x390 [ 168.131371][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 168.136712][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 168.141869][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 168.147549][ T54] kobject_add_internal+0x435/0x8d0 [ 168.152799][ T54] kobject_add+0x152/0x220 [ 168.157273][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 168.162512][ T54] ? device_add+0x3e7/0xbf0 [ 168.167055][ T54] ? __pfx_kobject_add+0x10/0x10 [ 168.172034][ T54] ? _raw_spin_unlock+0x28/0x50 [ 168.176927][ T54] ? get_device_parent+0x165/0x410 [ 168.182086][ T54] device_add+0x4e5/0xbf0 [ 168.186459][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 168.191446][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 168.196774][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 168.202560][ T54] ? __mutex_unlock_slowpath+0x21e/0x790 [ 168.208238][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 168.213295][ T54] ? skb_pull_data+0x112/0x230 [ 168.218076][ T54] hci_le_conn_complete_evt+0x18c/0x420 [ 168.223646][ T54] hci_event_packet+0xa55/0x1540 [ 168.228595][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 168.233894][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 168.239279][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 168.244485][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 168.249687][ T54] ? kcov_remote_start+0x97/0x7d0 [ 168.254719][ T54] hci_rx_work+0x3f3/0xdb0 [ 168.259147][ T54] ? process_scheduled_works+0x976/0x1840 [ 168.264869][ T54] process_scheduled_works+0xa66/0x1840 [ 168.270438][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.276429][ T54] ? assign_work+0x364/0x3d0 [ 168.281023][ T54] worker_thread+0x870/0xd30 [ 168.285637][ T54] ? __kthread_parkme+0x169/0x1d0 [ 168.290679][ T54] ? __pfx_worker_thread+0x10/0x10 [ 168.295793][ T54] kthread+0x2f0/0x390 [ 168.299868][ T54] ? __pfx_worker_thread+0x10/0x10 [ 168.304979][ T54] ? __pfx_kthread+0x10/0x10 [ 168.309576][ T54] ret_from_fork+0x4b/0x80 [ 168.313992][ T54] ? __pfx_kthread+0x10/0x10 [ 168.318587][ T54] ret_from_fork_asm+0x1a/0x30 [ 168.323361][ T54] [ 168.330368][ T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.344543][ T54] Bluetooth: hci2: failed to register connection device [ 168.445803][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.473071][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.484370][ T8956] bridge_slave_0: entered allmulticast mode [ 168.504580][ T8956] bridge_slave_0: entered promiscuous mode [ 168.527480][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.534618][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.570222][ T8956] bridge_slave_1: entered allmulticast mode [ 168.608778][ T8956] bridge_slave_1: entered promiscuous mode [ 168.674872][ T29] audit: type=1326 audit(1733178337.357:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd119f7ff19 code=0x7ffc0000 [ 168.675404][ T5833] Bluetooth: hci1: command tx timeout [ 168.775709][ T29] audit: type=1326 audit(1733178337.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd119f7ff19 code=0x7ffc0000 [ 168.802143][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.885613][ T29] audit: type=1326 audit(1733178337.397:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd119f7ff19 code=0x7ffc0000 [ 168.918409][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.941892][ T29] audit: type=1326 audit(1733178337.397:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd119f7ff19 code=0x7ffc0000 [ 169.076387][ T54] Bluetooth: hci3: command tx timeout [ 169.278696][ T8956] team0: Port device team_slave_0 added [ 169.301702][ T8956] team0: Port device team_slave_1 added [ 169.424841][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.445817][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.534482][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.592327][ T9033] chnl_net:caif_netlink_parms(): no params data found [ 169.651261][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.675298][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.713379][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.102491][ T8956] hsr_slave_0: entered promiscuous mode [ 170.184416][ T8956] hsr_slave_1: entered promiscuous mode [ 170.235282][ T8956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.242909][ T8956] Cannot create hsr debugfs directory [ 170.286872][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.298723][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.307514][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.316600][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.328373][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.335792][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.458809][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.687243][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.765226][ T54] Bluetooth: hci1: command tx timeout [ 170.912968][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.272184][ T54] Bluetooth: hci3: command tx timeout [ 171.352533][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.360379][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.368197][ T9033] bridge_slave_0: entered allmulticast mode [ 171.407177][ T9033] bridge_slave_0: entered promiscuous mode [ 171.685142][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.723894][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.741467][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.755420][ T9033] bridge_slave_1: entered allmulticast mode [ 171.798569][ T9033] bridge_slave_1: entered promiscuous mode [ 171.864490][ T9117] chnl_net:caif_netlink_parms(): no params data found [ 172.004550][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.171916][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.327982][ T9033] team0: Port device team_slave_0 added [ 172.397846][ T9033] team0: Port device team_slave_1 added [ 172.435378][ T5833] Bluetooth: hci0: command tx timeout [ 172.758109][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.836211][ T5833] Bluetooth: hci1: command tx timeout [ 172.908465][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.917679][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.924981][ T9117] bridge_slave_0: entered allmulticast mode [ 172.932240][ T9117] bridge_slave_0: entered promiscuous mode [ 172.940019][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.947215][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.954466][ T9117] bridge_slave_1: entered allmulticast mode [ 172.961622][ T9117] bridge_slave_1: entered promiscuous mode [ 172.993950][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.001154][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.027196][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.039753][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.046797][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.072831][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.152833][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.188626][ T9117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.315967][ T5833] Bluetooth: hci3: command tx timeout [ 173.340580][ T9033] hsr_slave_0: entered promiscuous mode [ 173.357846][ T9033] hsr_slave_1: entered promiscuous mode [ 173.365130][ T9033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.376270][ T9033] Cannot create hsr debugfs directory [ 173.383813][ T9117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.427339][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.642626][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.717159][ T9117] team0: Port device team_slave_0 added [ 173.744938][ T9117] team0: Port device team_slave_1 added [ 173.976818][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.983911][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.015229][ T9117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.047573][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.054562][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.096625][ T9117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.382293][ T9117] hsr_slave_0: entered promiscuous mode [ 174.413679][ T9117] hsr_slave_1: entered promiscuous mode [ 174.422217][ T9117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.430592][ T9117] Cannot create hsr debugfs directory [ 174.469910][ T8956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.496090][ T8956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.515680][ T5833] Bluetooth: hci0: command tx timeout [ 174.565891][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.590828][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.606654][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.645305][ T35] bridge_slave_1: left allmulticast mode [ 174.651022][ T35] bridge_slave_1: left promiscuous mode [ 174.660320][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.668549][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.681899][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.692567][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.701811][ T35] bridge_slave_0: left allmulticast mode [ 174.709256][ T35] bridge_slave_0: left promiscuous mode [ 174.715030][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.760291][ T35] bridge_slave_1: left allmulticast mode [ 174.780719][ T35] bridge_slave_1: left promiscuous mode [ 174.792179][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.813843][ T35] bridge_slave_0: left allmulticast mode [ 174.820176][ T35] bridge_slave_0: left promiscuous mode [ 174.826353][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.405674][ T54] Bluetooth: hci3: command tx timeout [ 175.438517][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.453207][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.463435][ T35] bond0 (unregistering): Released all slaves [ 175.600872][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.611787][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.622575][ T35] bond0 (unregistering): Released all slaves [ 175.632082][ T8956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.845413][ T8956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 176.355537][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.490006][ T9033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.518044][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 176.526886][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.536854][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.547153][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.557379][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.557559][ T35] hsr_slave_0: left promiscuous mode [ 176.571113][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.585438][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.595137][ T35] hsr_slave_1: left promiscuous mode [ 176.599589][ T54] Bluetooth: hci0: command tx timeout [ 176.612393][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.620199][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.628185][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.636149][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.647376][ T35] hsr_slave_0: left promiscuous mode [ 176.653367][ T35] hsr_slave_1: left promiscuous mode [ 176.659723][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.667319][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.678129][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.686492][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.727225][ T35] veth1_macvtap: left promiscuous mode [ 176.732785][ T35] veth0_macvtap: left promiscuous mode [ 176.738807][ T35] veth1_vlan: left promiscuous mode [ 176.745609][ T35] veth0_vlan: left promiscuous mode [ 176.755839][ T54] Bluetooth: hci4: command tx timeout [ 176.766698][ T35] veth1_macvtap: left promiscuous mode [ 176.772422][ T35] veth0_macvtap: left promiscuous mode [ 176.784721][ T35] veth1_vlan: left promiscuous mode [ 176.794313][ T35] veth0_vlan: left promiscuous mode [ 176.804055][ T5828] usb 4-1: GET_CAPABILITIES returned 0 [ 176.812158][ T5828] usbtmc 4-1:16.0: can't read capabilities [ 177.019851][ T5828] usb 4-1: USB disconnect, device number 6 [ 177.382691][ T35] team0 (unregistering): Port device team_slave_1 removed [ 177.431090][ T35] team0 (unregistering): Port device team_slave_0 removed [ 178.344322][ T35] team0 (unregistering): Port device team_slave_1 removed [ 178.392478][ T35] team0 (unregistering): Port device team_slave_0 removed [ 178.678221][ T54] Bluetooth: hci0: command tx timeout [ 178.751011][ T9033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 178.790058][ T9033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 178.814414][ T9033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 178.837562][ T54] Bluetooth: hci4: command tx timeout [ 178.862896][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 178.975873][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.015044][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.135324][ T5884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.157057][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.164214][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.172469][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.184640][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.192215][ T9189] bridge_slave_0: entered allmulticast mode [ 179.204037][ T9189] bridge_slave_0: entered promiscuous mode [ 179.211644][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.223599][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.231360][ T9189] bridge_slave_1: entered allmulticast mode [ 179.246618][ T9189] bridge_slave_1: entered promiscuous mode [ 179.266571][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.273716][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.300389][ T5884] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.321677][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.332214][ T5884] usb 4-1: Product: syz [ 179.345839][ T5884] usb 4-1: Manufacturer: syz [ 179.350504][ T5884] usb 4-1: SerialNumber: syz [ 179.370236][ T5884] usb 4-1: config 0 descriptor?? [ 179.418409][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.442550][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.551903][ T9189] team0: Port device team_slave_0 added [ 179.573818][ T9189] team0: Port device team_slave_1 added [ 179.633798][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.662557][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.669717][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.696554][ T9189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.711035][ T9117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.726864][ T8956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.748680][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.764675][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.789740][ T5884] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 179.798979][ T5884] usb 4-1: Firmware version (0.0) predates our first public release. [ 179.807270][ T5884] usb 4-1: Please update to version 0.2 or newer [ 179.813885][ T9189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.833958][ T9117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.844910][ T9117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.877257][ T9117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.944731][ T9189] hsr_slave_0: entered promiscuous mode [ 179.951858][ T9189] hsr_slave_1: entered promiscuous mode [ 179.972370][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.078124][ T5884] usb 4-1: USB disconnect, device number 7 [ 180.092538][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.099695][ T6670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.121338][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.163796][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.213016][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.220140][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.263298][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.359414][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.433335][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.695085][ T8956] veth0_vlan: entered promiscuous mode [ 180.721001][ T8956] veth1_vlan: entered promiscuous mode [ 180.753805][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.878577][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.905665][ T35] bridge_slave_1: left allmulticast mode [ 180.911375][ T35] bridge_slave_1: left promiscuous mode [ 180.919509][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.926178][ T54] Bluetooth: hci4: command tx timeout [ 180.934328][ T35] bridge_slave_0: left allmulticast mode [ 180.945065][ T35] bridge_slave_0: left promiscuous mode [ 180.959349][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.384783][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.400610][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.411163][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 181.423127][ T35] bond0 (unregistering): Released all slaves [ 181.441170][ T8956] veth0_macvtap: entered promiscuous mode [ 181.450944][ T8956] veth1_macvtap: entered promiscuous mode [ 181.517162][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.531929][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.543124][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.553385][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.571906][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.582814][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.594529][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.616367][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.639243][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.650158][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.660396][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.671911][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.691391][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.704644][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.749081][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.843504][ T8956] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.852388][ T8956] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.861246][ T8956] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.870280][ T8956] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.891891][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.899029][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.955222][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.962400][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.031685][ T9033] veth0_vlan: entered promiscuous mode [ 182.120017][ T9033] veth1_vlan: entered promiscuous mode [ 182.232346][ T35] hsr_slave_0: left promiscuous mode [ 182.240994][ T35] hsr_slave_1: left promiscuous mode [ 182.250115][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.259139][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.267518][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.289442][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.323929][ T35] veth1_macvtap: left promiscuous mode [ 182.330021][ T35] veth0_macvtap: left promiscuous mode [ 182.335833][ T35] veth1_vlan: left promiscuous mode [ 182.341147][ T35] veth0_vlan: left promiscuous mode [ 182.817127][ T35] team0 (unregistering): Port device team_slave_1 removed [ 182.859875][ T35] team0 (unregistering): Port device team_slave_0 removed [ 182.995623][ T54] Bluetooth: hci4: command tx timeout [ 183.317443][ T9189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.331684][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.344576][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.397793][ T9189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.418718][ T9189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.470276][ T9189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.508292][ T9033] veth0_macvtap: entered promiscuous mode [ 183.517284][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.538611][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.554350][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.641146][ T9033] veth1_macvtap: entered promiscuous mode [ 183.691231][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.724910][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.747931][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.775475][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.785541][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.796400][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.818376][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.888368][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.911324][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.926909][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.940264][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.967453][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.978477][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.989534][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.000115][ T9033] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.008945][ T9033] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.017740][ T9033] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.026779][ T9033] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.307079][ T8702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.314956][ T8702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.325248][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.333114][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.373288][ T9117] veth0_vlan: entered promiscuous mode [ 184.385356][ T9117] veth1_vlan: entered promiscuous mode [ 184.409016][ T9117] veth0_macvtap: entered promiscuous mode [ 184.417897][ T9117] veth1_macvtap: entered promiscuous mode [ 184.432547][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.443261][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.453219][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.464098][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.474382][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.485010][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.494921][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.505495][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.516965][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.568866][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.583503][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.593808][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.611765][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.631221][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.643364][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.669363][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.694581][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.696812][ T9259] input: syz0 as /devices/virtual/input/input12 [ 184.714853][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.770877][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.804090][ T9117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.822415][ T9117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.834260][ T9117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.856292][ T9117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.889906][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.904829][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.912106][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.953434][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.960632][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.148037][ T9189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.205430][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.238188][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.307768][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.345521][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.353647][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.502201][ T9189] veth0_vlan: entered promiscuous mode [ 185.560769][ T9189] veth1_vlan: entered promiscuous mode [ 185.650975][ T9189] veth0_macvtap: entered promiscuous mode [ 185.680110][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1009'. [ 185.702077][ T9189] veth1_macvtap: entered promiscuous mode [ 185.759149][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.777812][ T29] audit: type=1326 audit(1733178354.467:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06de97ff19 code=0x7ffc0000 [ 185.805461][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.841601][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.865490][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.885256][ T29] audit: type=1326 audit(1733178354.467:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06de97ff19 code=0x7ffc0000 [ 185.929699][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.960303][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.975319][ T29] audit: type=1326 audit(1733178354.467:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f06de97ff19 code=0x7ffc0000 [ 186.032366][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.059470][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.074336][ T29] audit: type=1326 audit(1733178354.467:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06de97ff19 code=0x7ffc0000 [ 186.111621][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.132664][ T29] audit: type=1326 audit(1733178354.467:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06de97ff19 code=0x7ffc0000 [ 186.194995][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.241110][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.260079][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.270685][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.281938][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.292839][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.303276][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.314291][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.324256][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.334778][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.344810][ T9189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.355712][ T9189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.366709][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.378844][ T9189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.387669][ T9189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.396478][ T9189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.405794][ T9189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.892860][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.898597][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.900815][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.957833][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.196377][ T9327] wg2: entered promiscuous mode [ 187.223298][ T9327] wg2: entered allmulticast mode [ 187.445555][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1025'. [ 187.591104][ T29] audit: type=1326 audit(1733178356.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1597ff19 code=0x0 [ 188.359652][ T8702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.730186][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.741636][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.787646][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.806789][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.817671][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.827551][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.910158][ T8702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.981959][ T9388] vlan2: entered promiscuous mode [ 188.991557][ T9388] vlan2: entered allmulticast mode [ 188.999514][ T9388] vlan0: entered allmulticast mode [ 189.005075][ T9388] veth0_vlan: entered allmulticast mode [ 189.011629][ T9388] vlan0: entered promiscuous mode [ 189.032921][ T9388] team0: Port device vlan2 added [ 189.276078][ T8702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.498096][ T8702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.806990][ T9386] chnl_net:caif_netlink_parms(): no params data found [ 190.448667][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.456866][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.484544][ T9386] bridge_slave_0: entered allmulticast mode [ 190.517709][ T9386] bridge_slave_0: entered promiscuous mode [ 190.533220][ T8702] bridge_slave_1: left allmulticast mode [ 190.545964][ T8702] bridge_slave_1: left promiscuous mode [ 190.575473][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.663923][ T8702] bridge_slave_0: left allmulticast mode [ 190.669848][ T8702] bridge_slave_0: left promiscuous mode [ 190.701817][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.917224][ T54] Bluetooth: hci2: command tx timeout [ 191.868447][ T8702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.882621][ T8702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.897030][ T8702] bond0 (unregistering): Released all slaves [ 191.909993][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.918056][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.933335][ T9386] bridge_slave_1: entered allmulticast mode [ 191.959363][ T9386] bridge_slave_1: entered promiscuous mode [ 192.318824][ T9386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.374493][ T9386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.707973][ T9386] team0: Port device team_slave_0 added [ 192.728299][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1076'. [ 192.741785][ T9386] team0: Port device team_slave_1 added [ 192.824959][ T8702] hsr_slave_0: left promiscuous mode [ 192.876608][ T8702] hsr_slave_1: left promiscuous mode [ 192.905912][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.913397][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.966066][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.973553][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.995653][ T54] Bluetooth: hci2: command tx timeout [ 192.998316][ T9534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.037941][ T8702] veth1_macvtap: left promiscuous mode [ 193.043576][ T8702] veth0_macvtap: left promiscuous mode [ 193.059647][ T8702] veth1_vlan: left promiscuous mode [ 193.065467][ T8702] veth0_vlan: left promiscuous mode [ 194.037218][ T29] audit: type=1326 audit(1733178362.727:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.8.1081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90c257ff19 code=0x0 [ 194.398852][ T8702] team0 (unregistering): Port device team_slave_1 removed [ 194.463681][ T8702] team0 (unregistering): Port device team_slave_0 removed [ 194.600289][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606734][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.691712][ T9566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 194.698277][ T9566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 194.715122][ T9566] vhci_hcd vhci_hcd.0: Device attached [ 194.731369][ T9568] vhci_hcd: connection closed [ 194.733140][ T35] vhci_hcd: stop threads [ 194.745345][ T35] vhci_hcd: release socket [ 194.761947][ T35] vhci_hcd: disconnect device [ 195.075526][ T54] Bluetooth: hci2: command tx timeout [ 195.256490][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.272372][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.298759][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 195.366791][ T9386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.405037][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.451791][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.494282][ T9386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.505140][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 195.532712][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.554140][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.573258][ T5886] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 195.597031][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.622322][ T5886] usb 9-1: config 0 descriptor?? [ 195.832943][ T9386] hsr_slave_0: entered promiscuous mode [ 195.848454][ T9386] hsr_slave_1: entered promiscuous mode [ 195.875070][ T9386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.910653][ T9386] Cannot create hsr debugfs directory [ 196.071799][ T5886] hid_mf 0003:0079:1801.0004: unknown main item tag 0x0 [ 196.080793][ T5886] hid_mf 0003:0079:1801.0004: unknown main item tag 0x0 [ 196.104665][ T5886] hid_mf 0003:0079:1801.0004: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.8-1/input0 [ 196.116438][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.159090][ T5886] hid_mf 0003:0079:1801.0004: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 196.282981][ T5886] usb 9-1: USB disconnect, device number 2 [ 196.289393][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 196.308400][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.340389][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.373779][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.410793][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.422915][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.463793][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.481544][ T5884] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.489848][ T5884] usb 5-1: Manufacturer: syz [ 196.500791][ T5884] usb 5-1: config 0 descriptor?? [ 196.532988][ T9612] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.789636][ T9386] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 196.806812][ T9386] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 196.817038][ T5884] rc_core: IR keymap rc-hauppauge not found [ 196.822989][ T5884] Registered IR keymap rc-empty [ 196.851935][ T9386] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 196.873831][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 196.899914][ T9386] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 196.908519][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 196.956631][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 196.990963][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 197.056358][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.095594][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.157282][ T54] Bluetooth: hci2: command tx timeout [ 197.161489][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.235721][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.273702][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.313846][ T6670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.329460][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.375447][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.400846][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.436721][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.505386][ T5884] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.533708][ T5884] mceusb 5-1:0.0: Registered р with mce emulator interface version 1 [ 197.542071][ T5884] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.588981][ T5884] usb 5-1: USB disconnect, device number 4 [ 197.707785][ T6670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.832285][ T6670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.952804][ T9386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.099271][ T6670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.165644][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.232809][ T9386] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.232908][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.252770][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.267061][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.274847][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.283730][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.324092][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.331274][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.395639][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.402859][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.481049][ T9386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.521932][ T9386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.550686][ T9386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.582562][ T9386] veth0_vlan: entered promiscuous mode [ 198.714281][ T9386] veth1_vlan: entered promiscuous mode [ 198.823674][ T6670] bridge_slave_1: left allmulticast mode [ 198.839233][ T6670] bridge_slave_1: left promiscuous mode [ 198.845048][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.887268][ T6670] bridge_slave_0: left allmulticast mode [ 198.951131][ T6670] bridge_slave_0: left promiscuous mode [ 198.976070][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.123174][ T29] audit: type=1326 audit(1733178367.807:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.146161][ T29] audit: type=1326 audit(1733178367.807:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.168917][ T29] audit: type=1326 audit(1733178367.807:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.191417][ T29] audit: type=1326 audit(1733178367.807:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.216691][ T29] audit: type=1326 audit(1733178367.807:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.265450][ T29] audit: type=1326 audit(1733178367.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.301967][ T29] audit: type=1326 audit(1733178367.807:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c257ff19 code=0x7ffc0000 [ 199.549409][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.562548][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.573400][ T6670] bond0 (unregistering): Released all slaves [ 199.662485][ T9386] veth0_macvtap: entered promiscuous mode [ 199.711451][ T9386] veth1_macvtap: entered promiscuous mode [ 200.006518][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.040848][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.105256][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.115131][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.195307][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.205447][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 200.235697][ T5886] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.259409][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.285357][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.292034][ T5886] usb 5-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 200.315935][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.335503][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.341452][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.364649][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.401325][ T5886] usb 5-1: config 0 descriptor?? [ 200.415591][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.435407][ T54] Bluetooth: hci0: command tx timeout [ 200.445268][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.486551][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.878474][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.897403][ T5886] nzxt-smart2 0003:1E71:2010.0005: unexpected long global item [ 200.911563][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.945944][ T5886] nzxt-smart2 0003:1E71:2010.0005: probe with driver nzxt-smart2 failed with error -22 [ 200.954776][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.983191][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.014223][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.065323][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.083137][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.085273][ T5886] usb 5-1: USB disconnect, device number 5 [ 201.093818][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.118987][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.131790][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.164213][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.210982][ T9667] chnl_net:caif_netlink_parms(): no params data found [ 201.232676][ T9386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.249702][ T9386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.260782][ T9386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.274350][ T9386] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.301799][ T6670] hsr_slave_0: left promiscuous mode [ 201.346125][ T6670] hsr_slave_1: left promiscuous mode [ 201.373579][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.388912][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.399673][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1126'. [ 201.399781][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.427151][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.445465][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1126'. [ 201.552097][ T6670] vlan0: left allmulticast mode [ 201.571727][ T6670] veth0_vlan: left allmulticast mode [ 201.585064][ T6670] vlan0: left promiscuous mode [ 201.603403][ T6670] veth1_macvtap: left promiscuous mode [ 201.622587][ T6670] veth0_macvtap: left promiscuous mode [ 201.638492][ T6670] veth1_vlan: left promiscuous mode [ 201.660947][ T6670] veth0_vlan: left promiscuous mode [ 201.844347][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.857228][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.868547][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.906674][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.914379][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.927163][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.995868][ T6670] team0 (unregistering): Port device vlan2 removed [ 202.516370][ T54] Bluetooth: hci0: command tx timeout [ 202.721976][ T6670] team0 (unregistering): Port device team_slave_1 removed [ 202.794679][ T6670] team0 (unregistering): Port device team_slave_0 removed [ 203.386875][ T9777] netlink: 'syz.4.1129': attribute type 29 has an invalid length. [ 203.772912][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.806918][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.831257][ T9667] bridge_slave_0: entered allmulticast mode [ 203.852605][ T9667] bridge_slave_0: entered promiscuous mode [ 203.867611][ T8694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.901191][ T8694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.915734][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.922928][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.939593][ T9667] bridge_slave_1: entered allmulticast mode [ 203.949340][ T9667] bridge_slave_1: entered promiscuous mode [ 204.035384][ T54] Bluetooth: hci1: command tx timeout [ 204.077087][ T9667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.189704][ T9667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.254187][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.299355][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.596180][ T54] Bluetooth: hci0: command tx timeout [ 204.647978][ T9667] team0: Port device team_slave_0 added [ 204.732838][ T8692] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.882587][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 204.944813][ T9667] team0: Port device team_slave_1 added [ 205.083931][ T8692] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.199502][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.212585][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.249690][ T9888] program syz.9.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.269748][ T9667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.333488][ T9893] sg_write: data in/out 1506/4 bytes for SCSI command 0x0-- guessing data in; [ 205.333488][ T9893] program syz.9.1143 not setting count and/or reply_len properly [ 205.368397][ T8692] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.406176][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.413182][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.452839][ T9667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.515898][ C1] sd 0:0:1:0: [sda] tag#5041 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 205.526424][ C1] sd 0:0:1:0: [sda] tag#5041 CDB: Read(6) 08 05 00 00 00 00 [ 205.717390][ T8692] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.792262][ T9667] hsr_slave_0: entered promiscuous mode [ 205.823495][ T9667] hsr_slave_1: entered promiscuous mode [ 205.830240][ T9667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.838058][ T9667] Cannot create hsr debugfs directory [ 206.005316][ T8579] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 206.095369][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.102517][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.109849][ T9768] bridge_slave_0: entered allmulticast mode [ 206.117189][ T9768] bridge_slave_0: entered promiscuous mode [ 206.126265][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.133386][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.140698][ T9768] bridge_slave_1: entered allmulticast mode [ 206.147670][ T9768] bridge_slave_1: entered promiscuous mode [ 206.158928][ T54] Bluetooth: hci1: command tx timeout [ 206.185376][ T8579] usb 10-1: Using ep0 maxpacket: 16 [ 206.192239][ T8579] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.201437][ T8579] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.212544][ T8579] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.228364][ T8579] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.237719][ T8579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.246118][ T8579] usb 10-1: Product: syz [ 206.250405][ T8579] usb 10-1: Manufacturer: syz [ 206.255112][ T8579] usb 10-1: SerialNumber: syz [ 206.390532][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.417727][ T8692] bridge_slave_1: left allmulticast mode [ 206.433777][ T8692] bridge_slave_1: left promiscuous mode [ 206.454213][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.482200][ T8692] bridge_slave_0: left allmulticast mode [ 206.505417][ T8692] bridge_slave_0: left promiscuous mode [ 206.528366][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.676246][ T54] Bluetooth: hci0: command tx timeout [ 206.738294][ T8579] usb 10-1: 0:2 : does not exist [ 206.985511][ T8692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.997023][ T8692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.013893][ T8692] bond0 (unregistering): Released all slaves [ 207.035105][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.054445][ T9948] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 207.080300][ T9948] macsec1: entered allmulticast mode [ 207.097740][ T9948] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 207.129188][ T9948] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 207.146792][ T9948] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 207.161965][ T8579] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 207.188840][ T8579] usb 10-1: USB disconnect, device number 5 [ 207.425096][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.680239][ T9768] team0: Port device team_slave_0 added [ 207.716680][ T9768] team0: Port device team_slave_1 added [ 207.871011][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.895351][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.974198][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.988918][ T9984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.137467][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.158922][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.197687][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.205341][ T54] Bluetooth: hci1: command tx timeout [ 208.385017][ T8692] hsr_slave_0: left promiscuous mode [ 208.412633][ T8692] hsr_slave_1: left promiscuous mode [ 208.454131][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.472339][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.527333][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.534813][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.605332][ T8692] veth1_macvtap: left promiscuous mode [ 208.612025][ T8692] veth0_macvtap: left promiscuous mode [ 208.626172][ T8692] veth1_vlan: left promiscuous mode [ 208.637348][ T8692] veth0_vlan: left promiscuous mode [ 209.470350][ T8692] team0 (unregistering): Port device team_slave_1 removed [ 209.526615][ T8692] team0 (unregistering): Port device team_slave_0 removed [ 210.275263][ T54] Bluetooth: hci1: command tx timeout [ 210.308495][ T9667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.514374][ T9667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.721135][ T9768] hsr_slave_0: entered promiscuous mode [ 210.735379][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.757506][ T9768] hsr_slave_1: entered promiscuous mode [ 210.768720][ T9768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.788186][ T9768] Cannot create hsr debugfs directory [ 210.833558][ T9667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.883590][T10088] veth1_macvtap: left promiscuous mode [ 210.897492][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 210.912787][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 210.974069][ T46] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 210.986420][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.994460][ T46] usb 5-1: Product: syz [ 211.029111][ T46] usb 5-1: Manufacturer: syz [ 211.033773][ T46] usb 5-1: SerialNumber: syz [ 211.041960][ T46] usb 5-1: config 0 descriptor?? [ 211.048824][ T9667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.083930][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.097218][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.290612][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.304872][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.337966][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.345553][T10081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.353374][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.361638][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.370442][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.425836][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.615017][ T8692] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.770206][ T46] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 211.848136][ T8692] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.893173][ T9667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.976700][ T8692] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.982384][ T46] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 212.009333][ T46] usb 5-1: USB disconnect, device number 6 [ 212.044900][ T9667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.064262][ T9667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.153791][ T5884] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 212.176351][ T8692] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.204165][ T9667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.327356][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.338977][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.353062][ T5884] usb 10-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 212.362939][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.373598][ T5884] usb 10-1: config 0 descriptor?? [ 212.417912][T10108] chnl_net:caif_netlink_parms(): no params data found [ 212.670156][ T8692] bridge_slave_1: left allmulticast mode [ 212.695807][ T8692] bridge_slave_1: left promiscuous mode [ 212.701701][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.757187][ T8692] bridge_slave_0: left allmulticast mode [ 212.762951][ T8692] bridge_slave_0: left promiscuous mode [ 212.791520][ T5884] logitech-hidpp-device 0003:046D:C086.0006: unbalanced delimiter at end of report description [ 212.813351][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.830240][ T5884] logitech-hidpp-device 0003:046D:C086.0006: hidpp_probe:parse failed [ 212.847648][ T8692] bridge_slave_1: left allmulticast mode [ 212.861209][ T8692] bridge_slave_1: left promiscuous mode [ 212.867631][ T5884] logitech-hidpp-device 0003:046D:C086.0006: probe with driver logitech-hidpp-device failed with error -22 [ 212.885725][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.905330][ T8692] bridge_slave_0: left allmulticast mode [ 212.911030][ T8692] bridge_slave_0: left promiscuous mode [ 212.919210][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.007273][ T5884] usb 10-1: USB disconnect, device number 6 [ 213.482284][ T5833] Bluetooth: hci3: command tx timeout [ 214.309133][ T8692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.330717][ T8692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.351209][ T8692] bond0 (unregistering): Released all slaves [ 214.597331][ T8692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.613410][ T8692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.624435][ T8692] bond0 (unregistering): Released all slaves [ 214.763805][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.805366][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.812634][T10108] bridge_slave_0: entered allmulticast mode [ 214.843734][T10108] bridge_slave_0: entered promiscuous mode [ 214.862499][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.885407][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.906555][T10108] bridge_slave_1: entered allmulticast mode [ 214.922236][T10108] bridge_slave_1: entered promiscuous mode [ 214.990320][T10222] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 215.136788][ T9768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.157697][T10108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.178592][ T9768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.193706][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.201086][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.256848][T10108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.418610][ T9768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.521402][ T9768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.556568][ T5833] Bluetooth: hci3: command tx timeout [ 215.704052][T10108] team0: Port device team_slave_0 added [ 215.721332][T10108] team0: Port device team_slave_1 added [ 215.739684][ T9667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.774590][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.956776][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.963933][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.989907][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.997099][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.017031][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.028785][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.038647][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.046743][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.049096][T10108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.054299][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.075391][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.082203][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.182265][T10108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.246153][T10108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.253171][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.329316][T10108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.414820][ T8692] hsr_slave_0: left promiscuous mode [ 216.427318][ T8692] hsr_slave_1: left promiscuous mode [ 216.448115][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.457890][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.475674][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.483148][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.502678][ T8692] hsr_slave_0: left promiscuous mode [ 216.518454][ T8692] hsr_slave_1: left promiscuous mode [ 216.530719][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.546866][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.556020][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.563476][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.644549][ T8692] veth1_macvtap: left promiscuous mode [ 216.659881][ T8692] veth0_macvtap: left promiscuous mode [ 216.666321][ T8692] veth1_vlan: left promiscuous mode [ 216.671648][ T8692] veth0_vlan: left promiscuous mode [ 216.715844][ T8692] veth1_macvtap: left promiscuous mode [ 216.721429][ T8692] veth0_macvtap: left promiscuous mode [ 216.753659][ T8692] veth1_vlan: left promiscuous mode [ 216.772801][ T8692] veth0_vlan: left promiscuous mode [ 217.636286][ T54] Bluetooth: hci3: command tx timeout [ 217.644469][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 217.667326][ T8692] team0 (unregistering): Port device team_slave_1 removed [ 217.704033][ T8692] team0 (unregistering): Port device team_slave_0 removed [ 218.202473][ T54] Bluetooth: hci2: command tx timeout [ 218.501218][ T8692] team0 (unregistering): Port device team_slave_1 removed [ 218.547775][ T8692] team0 (unregistering): Port device team_slave_0 removed [ 219.007248][T10108] hsr_slave_0: entered promiscuous mode [ 219.022187][T10108] hsr_slave_1: entered promiscuous mode [ 219.031261][T10108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.042121][T10108] Cannot create hsr debugfs directory [ 219.291521][ T9667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.325567][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.457238][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.506396][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 219.532839][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.571212][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 219.595568][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.610433][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.670351][ T46] usb 5-1: config 0 descriptor?? [ 219.698870][T10260] chnl_net:caif_netlink_parms(): no params data found [ 219.723336][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.730535][ T8690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.735348][ T54] Bluetooth: hci3: command tx timeout [ 219.739736][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.750295][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.820305][ T9667] veth0_vlan: entered promiscuous mode [ 219.958511][ T9667] veth1_vlan: entered promiscuous mode [ 220.053319][ T9768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.098570][ T46] hid (null): unknown global tag 0xc [ 220.103973][ T46] hid (null): report_id 29935 is invalid [ 220.123922][ T46] hid (null): unknown global tag 0x24 [ 220.147873][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.159455][ T46] input: HID 0458:5014 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5014.0007/input/input14 [ 220.178332][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.190697][T10260] bridge_slave_0: entered allmulticast mode [ 220.213184][T10260] bridge_slave_0: entered promiscuous mode [ 220.224396][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.236959][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.244209][T10260] bridge_slave_1: entered allmulticast mode [ 220.259909][T10260] bridge_slave_1: entered promiscuous mode [ 220.282006][ T54] Bluetooth: hci2: command tx timeout [ 220.296044][ T46] kye 0003:0458:5014.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 220.321182][ T46] usb 5-1: USB disconnect, device number 7 [ 220.454192][T10260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.477138][T10260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.532992][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.653143][ T8692] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.689161][T10108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.734128][T10260] team0: Port device team_slave_0 added [ 220.744753][T10260] team0: Port device team_slave_1 added [ 220.771746][ T8692] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.790074][T10108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.800810][T10108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.817502][T10108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.946926][ T9667] veth0_macvtap: entered promiscuous mode [ 220.997827][ T8692] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.046899][T10260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.053899][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.102050][T10260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.122643][T10260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.131164][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.157888][T10260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.191516][ T8692] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.226306][ T9667] veth1_macvtap: entered promiscuous mode [ 221.377123][ T9768] veth0_vlan: entered promiscuous mode [ 221.414448][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.427437][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.446098][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.463588][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.496738][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.534686][T10260] hsr_slave_0: entered promiscuous mode [ 221.543902][T10260] hsr_slave_1: entered promiscuous mode [ 221.567285][T10260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.574897][T10260] Cannot create hsr debugfs directory [ 221.616097][ T9768] veth1_vlan: entered promiscuous mode [ 221.645008][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.657691][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.667666][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.678522][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.695106][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.787759][ T9667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.810405][ T9667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.820584][ T9667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.835814][ T9667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.079795][ T8692] bridge_slave_1: left allmulticast mode [ 222.091358][ T8692] bridge_slave_1: left promiscuous mode [ 222.098190][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.116851][ T8692] bridge_slave_0: left allmulticast mode [ 222.122548][ T8692] bridge_slave_0: left promiscuous mode [ 222.145424][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.360166][ T54] Bluetooth: hci2: command tx timeout [ 222.778753][ T8692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.791091][ T8692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.808393][ T8692] bond0 (unregistering): Released all slaves [ 222.927133][ T9768] veth0_macvtap: entered promiscuous mode [ 223.046209][ T8690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.084330][ T8690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.150552][ T9768] veth1_macvtap: entered promiscuous mode [ 223.233957][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.252101][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.531253][ T8692] hsr_slave_0: left promiscuous mode [ 223.541434][ T8692] hsr_slave_1: left promiscuous mode [ 223.557942][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.585814][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.609101][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.631752][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.692811][ T8692] veth0_macvtap: left promiscuous mode [ 223.698536][ T8692] veth1_vlan: left promiscuous mode [ 223.703877][ T8692] veth0_vlan: left promiscuous mode [ 224.446362][ T54] Bluetooth: hci2: command tx timeout [ 224.856721][ T8692] team0 (unregistering): Port device team_slave_1 removed [ 224.964750][ T8692] team0 (unregistering): Port device team_slave_0 removed [ 226.040959][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.085536][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.115249][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.158750][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.183151][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.204824][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.254180][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.292853][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.329045][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.349950][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.385617][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.429907][ T9768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.440890][ T9768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.450121][ T9768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.458923][ T9768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.534860][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.605553][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.626372][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.633522][ T8690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.663048][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.670307][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.795450][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 226.803155][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.816740][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.877325][T10260] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 226.886625][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.912249][T10260] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 226.929333][T10260] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 226.936560][ T5881] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.950100][ T5881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.959385][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.034036][ T8692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.042401][ T8692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.045413][T10260] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 227.061434][ T6401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.069565][ T6401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.094141][T10108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.182657][ T5881] usb 6-1: GET_CAPABILITIES returned 0 [ 227.192212][ T5881] usbtmc 6-1:16.0: can't read capabilities [ 227.260340][T10108] veth0_vlan: entered promiscuous mode [ 227.300695][T10108] veth1_vlan: entered promiscuous mode [ 227.406537][T10260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.406960][ T5881] usb 6-1: USB disconnect, device number 7 [ 227.444294][T10108] veth0_macvtap: entered promiscuous mode [ 227.498005][T10260] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.515326][T10108] veth1_macvtap: entered promiscuous mode [ 227.548332][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.555488][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.591618][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.598813][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.694061][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.719746][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.735277][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.754932][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.775127][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.794259][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.812178][T10108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.863073][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.877654][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.890883][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.902377][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.912731][T10108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.923618][T10108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.939784][T10108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.011521][T10108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.038830][T10108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.082544][T10108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.118693][T10108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.326223][T10260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.375206][T10260] veth0_vlan: entered promiscuous mode [ 228.449444][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.484595][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.559250][T10260] veth1_vlan: entered promiscuous mode [ 228.613548][ T8692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.665087][ T8692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.702438][T10260] veth0_macvtap: entered promiscuous mode [ 228.720885][T10260] veth1_macvtap: entered promiscuous mode [ 228.764080][T10567] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.821018][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.851168][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.882077][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.952741][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.983458][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.025460][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.045364][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.072645][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.111936][T10260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.173004][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.202016][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.228632][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.261692][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.285456][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.301439][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.345811][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.389850][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.402290][T10260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.424932][T10260] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.483169][T10260] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.508021][T10260] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.533363][T10260] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.785834][ T8694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.793701][ T8694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.849522][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.885322][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.915497][ T5886] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 230.108139][ T5886] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 230.124720][ T5886] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 230.167441][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 230.205291][ T5886] usb 3-1: config 1 has no interface number 0 [ 230.216796][ T5886] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 230.255239][ T5886] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.297169][ T5886] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 230.339370][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.382347][ T5886] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 230.825958][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 230.941162][ T5886] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 231.036099][ T9] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 231.064876][ T9] usb 10-1: config 0 has no interface number 0 [ 231.085311][ T9] usb 10-1: config 0 interface 98 has no altsetting 0 [ 231.110497][ T9] usb 10-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 231.130183][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.175597][ T9] usb 10-1: Product: syz [ 231.191865][ T9] usb 10-1: Manufacturer: syz [ 231.206573][ T5886] usb 3-1: USB disconnect, device number 2 [ 231.216903][ T9] usb 10-1: SerialNumber: syz [ 231.226846][ T9] usb 10-1: config 0 descriptor?? [ 231.232747][ T5886] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 231.473072][ T9] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 231.962475][ T9] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 232.017701][ T9] usb 10-1: device reset changed ep0 maxpacket size! [ 232.066760][ T9] usb 10-1: [ueagle-atm] pre-firmware device, uploading firmware [ 232.093110][ T9] usb 10-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 232.106195][ T5940] usb 10-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 232.120036][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 232.140701][ T5940] usb 10-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 232.162609][ T9] usb 10-1: USB disconnect, device number 7 [ 232.255386][ T5940] ------------[ cut here ]------------ [ 232.261281][ T5940] WARNING: CPU: 0 PID: 5940 at fs/kernfs/dir.c:526 kernfs_get+0x71/0x90 [ 232.269856][ T5940] Modules linked in: [ 232.273830][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/0:7 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 232.285543][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.296885][ T5940] Workqueue: events request_firmware_work_func SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.303104][ T5940] RIP: 0010:kernfs_get+0x71/0x90 [ 232.308440][ T5940] Code: 23 e8 43 10 57 ff 48 89 df be 04 00 00 00 e8 a6 fa c1 ff f0 ff 03 eb 05 e8 2c 10 57 ff 5b 5d c3 cc cc cc cc e8 20 10 57 ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 a6 [ 232.328526][ T5940] RSP: 0018:ffffc900047bf6a0 EFLAGS: 00010293 [ 232.334657][ T5940] RAX: ffffffff82486200 RBX: ffff888032875690 RCX: ffff88801d313c00 [ 232.343010][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.351372][ T5940] RBP: 0000000000000000 R08: ffffffff824861d4 R09: 1ffff1100650ead2 [ 232.359713][ T5940] R10: dffffc0000000000 R11: ffffed100650ead3 R12: dffffc0000000000 [ 232.368565][ T5940] R13: ffff888028ffdc80 R14: ffffffff8c851c30 R15: ffff888028ffdcb0 [ 232.377429][ T5940] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 232.387063][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.394316][ T5940] CR2: 00007f6e198d2440 CR3: 000000005c7a6000 CR4: 00000000003526f0 [ 232.402376][ T5940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.410471][ T5940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.418523][ T5940] Call Trace: [ 232.421851][ T5940] [ 232.424801][ T5940] ? __warn+0x165/0x4d0 [ 232.429081][ T5940] ? kernfs_get+0x71/0x90 [ 232.433447][ T5940] ? report_bug+0x2b3/0x500 [ 232.438409][ T5940] ? kernfs_get+0x71/0x90 [ 232.442805][ T5940] ? handle_bug+0x60/0x90 [ 232.447337][ T5940] ? exc_invalid_op+0x1a/0x50 [ 232.452067][ T5940] ? asm_exc_invalid_op+0x1a/0x20 [ 232.457240][ T5940] ? kernfs_get+0x44/0x90 [ 232.461608][ T5940] ? kernfs_get+0x70/0x90 [ 232.466081][ T5940] ? kernfs_get+0x71/0x90 [ 232.470444][ T5940] kobject_add_internal+0x4ba/0x8d0 [ 232.475750][ T5940] kobject_add+0x152/0x220 [ 232.480809][ T5940] ? __pfx_kobject_add+0x10/0x10 [ 232.486472][ T5940] ? __kasan_kmalloc+0x98/0xb0 [ 232.491422][ T5940] ? kobject_init+0x83/0x1f0 [ 232.496104][ T5940] get_device_parent+0x391/0x410 [ 232.501080][ T5940] device_add+0x325/0xbf0 [ 232.505497][ T5940] ? fw_create_instance+0xd2/0x180 [ 232.510656][ T5940] firmware_fallback_sysfs+0x307/0x9e0 [ 232.516892][ T5940] _request_firmware+0xdf7/0x13b0 [ 232.522222][ T5940] ? __pfx__request_firmware+0x10/0x10 [ 232.527829][ T5940] request_firmware_work_func+0x12a/0x280 [ 232.533588][ T5940] ? __pfx_request_firmware_work_func+0x10/0x10 [ 232.540018][ T5940] ? process_scheduled_works+0x976/0x1840 [ 232.545805][ T5940] process_scheduled_works+0xa66/0x1840 [ 232.551411][ T5940] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.557511][ T5940] ? assign_work+0x364/0x3d0 [ 232.562136][ T5940] worker_thread+0x870/0xd30 [ 232.566816][ T5940] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 232.572795][ T5940] ? __kthread_parkme+0x169/0x1d0 [ 232.578008][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 232.583776][ T5940] kthread+0x2f0/0x390 [ 232.588596][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 232.593756][ T5940] ? __pfx_kthread+0x10/0x10 [ 232.599076][ T5940] ret_from_fork+0x4b/0x80 [ 232.603534][ T5940] ? __pfx_kthread+0x10/0x10 [ 232.608529][ T5940] ret_from_fork_asm+0x1a/0x30 [ 232.613362][ T5940] [ 232.616512][ T5940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.623814][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/0:7 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 232.634606][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.644690][ T5940] Workqueue: events request_firmware_work_func [ 232.650889][ T5940] Call Trace: [ 232.654190][ T5940] [ 232.657138][ T5940] dump_stack_lvl+0x241/0x360 [ 232.661851][ T5940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.667079][ T5940] ? __pfx__printk+0x10/0x10 [ 232.671695][ T5940] ? _printk+0xd5/0x120 [ 232.675879][ T5940] ? __init_begin+0x41000/0x41000 [ 232.680933][ T5940] ? vscnprintf+0x5d/0x90 [ 232.685286][ T5940] panic+0x349/0x880 [ 232.689213][ T5940] ? __warn+0x174/0x4d0 [ 232.693440][ T5940] ? __pfx_panic+0x10/0x10 [ 232.697896][ T5940] ? ret_from_fork_asm+0x1a/0x30 [ 232.702861][ T5940] __warn+0x344/0x4d0 [ 232.706867][ T5940] ? kernfs_get+0x71/0x90 [ 232.711243][ T5940] report_bug+0x2b3/0x500 [ 232.715611][ T5940] ? kernfs_get+0x71/0x90 [ 232.719992][ T5940] handle_bug+0x60/0x90 [ 232.724181][ T5940] exc_invalid_op+0x1a/0x50 [ 232.728732][ T5940] asm_exc_invalid_op+0x1a/0x20 [ 232.733623][ T5940] RIP: 0010:kernfs_get+0x71/0x90 [ 232.738606][ T5940] Code: 23 e8 43 10 57 ff 48 89 df be 04 00 00 00 e8 a6 fa c1 ff f0 ff 03 eb 05 e8 2c 10 57 ff 5b 5d c3 cc cc cc cc e8 20 10 57 ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 a6 [ 232.758245][ T5940] RSP: 0018:ffffc900047bf6a0 EFLAGS: 00010293 [ 232.764349][ T5940] RAX: ffffffff82486200 RBX: ffff888032875690 RCX: ffff88801d313c00 [ 232.772355][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.780357][ T5940] RBP: 0000000000000000 R08: ffffffff824861d4 R09: 1ffff1100650ead2 [ 232.788350][ T5940] R10: dffffc0000000000 R11: ffffed100650ead3 R12: dffffc0000000000 [ 232.796326][ T5940] R13: ffff888028ffdc80 R14: ffffffff8c851c30 R15: ffff888028ffdcb0 [ 232.804302][ T5940] ? kernfs_get+0x44/0x90 [ 232.808641][ T5940] ? kernfs_get+0x70/0x90 [ 232.812981][ T5940] kobject_add_internal+0x4ba/0x8d0 [ 232.818186][ T5940] kobject_add+0x152/0x220 [ 232.822607][ T5940] ? __pfx_kobject_add+0x10/0x10 [ 232.827545][ T5940] ? __kasan_kmalloc+0x98/0xb0 [ 232.832308][ T5940] ? kobject_init+0x83/0x1f0 [ 232.836897][ T5940] get_device_parent+0x391/0x410 [ 232.841833][ T5940] device_add+0x325/0xbf0 [ 232.846157][ T5940] ? fw_create_instance+0xd2/0x180 [ 232.851266][ T5940] firmware_fallback_sysfs+0x307/0x9e0 [ 232.856732][ T5940] _request_firmware+0xdf7/0x13b0 [ 232.861765][ T5940] ? __pfx__request_firmware+0x10/0x10 [ 232.867233][ T5940] request_firmware_work_func+0x12a/0x280 [ 232.872952][ T5940] ? __pfx_request_firmware_work_func+0x10/0x10 [ 232.879194][ T5940] ? process_scheduled_works+0x976/0x1840 [ 232.884910][ T5940] process_scheduled_works+0xa66/0x1840 [ 232.890474][ T5940] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.896463][ T5940] ? assign_work+0x364/0x3d0 [ 232.901055][ T5940] worker_thread+0x870/0xd30 [ 232.905654][ T5940] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 232.911546][ T5940] ? __kthread_parkme+0x169/0x1d0 [ 232.916586][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 232.921689][ T5940] kthread+0x2f0/0x390 [ 232.925764][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 232.930886][ T5940] ? __pfx_kthread+0x10/0x10 [ 232.935484][ T5940] ret_from_fork+0x4b/0x80 [ 232.939898][ T5940] ? __pfx_kthread+0x10/0x10 [ 232.944486][ T5940] ret_from_fork_asm+0x1a/0x30 [ 232.949253][ T5940] [ 232.952514][ T5940] Kernel Offset: disabled [ 232.956958][ T5940] Rebooting in 86400 seconds..