last executing test programs: 34.780731701s ago: executing program 4 (id=5898): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.584540581s ago: executing program 4 (id=5901): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r0}, 0xc) 34.376581645s ago: executing program 4 (id=5904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbb}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.164574412s ago: executing program 4 (id=5907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.00345558s ago: executing program 4 (id=5909): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 33.85329233s ago: executing program 4 (id=5911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000277fbac141416e000030a89079f03b18000440818fe00845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000400000085000000798800009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1000, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 25.569393153s ago: executing program 3 (id=5955): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.40704064s ago: executing program 3 (id=5956): userfaultfd(0x80001) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 23.633912733s ago: executing program 3 (id=5961): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f0359", 0x3}], 0x1, 0x0, 0x0, 0x8c1}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) 23.26446504s ago: executing program 3 (id=5962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r4) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x3, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 21.884131172s ago: executing program 3 (id=5964): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="1876", 0x2}], 0x1) 21.664604928s ago: executing program 3 (id=5965): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 8.516231365s ago: executing program 1 (id=5949): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004d00)={0x2020}, 0x2020) 7.888602891s ago: executing program 1 (id=5989): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) ppoll(&(0x7f0000000340)=[{r3}], 0x1, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0x0) keyctl$get_security(0x11, r5, &(0x7f0000000100)=""/109, 0x6d) 7.023822278s ago: executing program 0 (id=5991): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setrlimit(0x5, &(0x7f00000005c0)={0x8af3, 0xffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = mmap$binder(&(0x7f0000103000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000008c0)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/214, 0xd6, 0x2, 0x6}, @fda={0x66646185, 0x5, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/186, 0xba, 0x0, 0x34}}, 0x0}, 0x400}, @free_buffer={0x40086303, r6}, @acquire], 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) 6.08814976s ago: executing program 1 (id=5994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000540)={0x0, "0770b436a5415a946ef09f12d55a4291f1819beffbf44957d0bfca58e18a844d"}) lseek(0xffffffffffffffff, 0xae7d, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r7, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x9, 0x9, 0x80000000, 0x81, 0x81, 0x7ff, 0x6}, &(0x7f00000003c0)=0x9c) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) 5.546532478s ago: executing program 0 (id=5995): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.624801214s ago: executing program 2 (id=5998): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_io_uring_setup(0x1866, 0x0, &(0x7f0000000040), &(0x7f0000000100)) syz_emit_vhci(0x0, 0x32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f045f041904"], 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000440)=""/245) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 3.606691531s ago: executing program 2 (id=5999): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xb) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x103001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 3.509391927s ago: executing program 2 (id=6000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000001280)={0x1, "9d1729c0a34506e82ff9b5276f1f1488904fe4e427228ab75f5e5970ca3f7e70bb0c5a485c34f32ec3bd80465177c7a05beee1b2d476ed82ca76f8c03fa2cdff5682260714df3a4138b8596dc1b3fbd8c2bf45df2a5b14c6195bffd42b5e65fea1805ba1be7a99146e8f9dbf342ba274b39e69ee1adfa3ca92ea2e7e3ff1ac41907c4a7af2b300fc66c13273373b046353d31a9fd4270f1e4d9dcb65484c9dd7a0742da36f8f3e76f0629db82e78c77176ce4fac5ad07c6c8110af71cde70c8a4a39b25237462b955b98446af8e97ba3ce3db2d2be36079b60092a6ff467537aff1561d6f8eb538e4b36de844aa3273159cdf851704cd5817336d6df03f7f657d1af3068965dcdc649a0ea752513c9477fbb40c03bddae06ed6405392ac2b1c502155127dd835c1f67de9b3bba3c46c243fb8a6883e9bea7281b00a0c7b77512fe5cc6780da72be6802265f2d4ef7ed913751b3188ae98044552150f6b103976cd3b6a1c9dd9a136f5c7c21ace40de1f363ad28b76267b9a9cc7ada6afc4ed02e4d850baf019987bde7ad11d81d3bee159368f3c9842348163bf4adb0821ac680a4f55e5618fcd499b7cd60c0e9e6c5407ef955df362a76d68d32246463c60671d8b703886270bd902cf26a57f274f808a8f8e229446cfba93d7ea903b01ecd30518c507afddfc431171e66eb30ee055d72b74f776dd2e7433c69c02b93db5a21fd60982b2e354d36739684e5bbb097ad4b4e40491d9b93a38ec905457afc2090fadb62cd1a0e0ef2110bf56f79ebb9d9ebc58a11ce0ce70cd04f262ffa2c86d57edfb3d4a1335474dbcdd414254e2b6a2c9bbccf744fa05861e66a27b5c751bf13d35be778f97c8fefa7a842e7f99c9c5b120923e279001944f378d5a4cb1992c91832ebf69543f571d0efe1e776549f0c68a2430de9b63f2d73a11bf4ed215647f3ea41bd3836c3abd2d0c8e03f96e284f2e80417555e6a49a51016b749c0ed5639153d88c7716fc05935771e8b0130686798b1729f29dc4304d65972c68dffdd40981d59442357cc64b22cb3f653fa71fb89a2fbffb49e0ddd62fbb50e581ca05cee487b4531ed7d07fca7b81af2b706f8263532f4fd6e417ab3536674553b486061c4bbd6e15d27d57883dd2539047c17f7563d93c41f94b80b3bd4b18bab2ff92518c6f6e19a7ab883c0626d3223b4f3e6b8a2095a97e249be03938acb365d331522ac40b43a671948bb644a3f5d731fd719b2595842c0334a546e0449cdf16d8fd169a47f8df308af2c9a10ff495b7fa06187d107d5a58bdd5b5938963a5b73e97cb5cc41c8557c90e003e28e68b7fb1c752b4d8c8bf4fcc981dc779c6aa936bcc59e3ab4bae67b51f424994d349a7ee087a542713ddaaac431b5fea94eb5641"}, 0x3eb, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) 3.264748494s ago: executing program 2 (id=6001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000540)={0x0, "0770b436a5415a946ef09f12d55a4291f1819beffbf44957d0bfca58e18a844d"}) lseek(0xffffffffffffffff, 0xae7d, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r6, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x9, 0x9, 0x80000000, 0x81, 0x81, 0x7ff, 0x6}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) 2.268991604s ago: executing program 0 (id=6002): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x10, 0x4, {0xffffffffffffffff}, {0xee01}, 0x4, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f41100002100000125bd7000fedbdf25fe8000000000000000000000000000bbfe80000500"/48, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x11f4}}, 0x4008000) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r2, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 1.760235741s ago: executing program 1 (id=6003): request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 1.276701005s ago: executing program 0 (id=6004): r0 = syz_io_uring_setup(0xf8f, &(0x7f00000000c0)={0x0, 0x0, 0x43}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 1.276595722s ago: executing program 1 (id=6005): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x1100) 1.022410953s ago: executing program 1 (id=6006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x8000, 0x1, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) 1.022024056s ago: executing program 2 (id=6007): socket$kcm(0x29, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd65d15cdc00482f01fe8000000000000000000000000000aafc"], 0x0) 833.771409ms ago: executing program 2 (id=6008): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 236.660858ms ago: executing program 0 (id=6009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 0 (id=6010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): red BSSID 50:50:50:50:50:50 [ 2205.585548][T14994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.850211][ T6578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.142112][ T4559] ALSA: mixer_oss: invalid OSS volume '' [ 2206.222462][ T6578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.575403][ T623] usb 2-1: USB disconnect, device number 52 [ 2206.596051][ T6578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.770735][T21305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2206.783050][T21305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2206.793435][T21305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2206.810498][T21305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2206.818933][T21305] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2206.829824][T21305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2206.987625][ T6578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.003114][ T623] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2207.191237][ T623] usb 2-1: config 0 has no interfaces? [ 2207.202234][ T623] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2207.242127][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.303836][ T623] usb 2-1: config 0 descriptor?? [ 2207.593163][ T937] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2207.699445][ T6578] bridge_slave_1: left allmulticast mode [ 2207.719585][ T6578] bridge_slave_1: left promiscuous mode [ 2207.743215][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.768394][ T6578] bridge_slave_0: left allmulticast mode [ 2207.774910][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 2207.784380][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2207.788393][ T6578] bridge_slave_0: left promiscuous mode [ 2207.793510][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2207.825132][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.842995][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2207.873805][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2207.893750][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2207.932291][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2207.953260][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2207.986592][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2208.031567][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2208.057708][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2208.097515][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2208.121904][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2208.164693][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2208.200449][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2208.213468][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2208.250449][ T937] usb 5-1: string descriptor 0 read error: -22 [ 2208.289782][ T937] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2208.316571][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.372011][ T937] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2208.478865][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 2208.478887][ T29] audit: type=1326 audit(1727441789.617:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.564527][ T29] audit: type=1326 audit(1727441789.617:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.638370][ T29] audit: type=1326 audit(1727441789.657:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.663607][ T4637] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5757'. [ 2208.705722][ T29] audit: type=1326 audit(1727441789.657:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.743346][ T29] audit: type=1326 audit(1727441789.657:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.794625][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.803669][ T29] audit: type=1326 audit(1727441789.687:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.849665][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.867017][ T29] audit: type=1326 audit(1727441789.687:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.894186][T21305] Bluetooth: hci2: command tx timeout [ 2208.937168][ T29] audit: type=1326 audit(1727441789.687:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2208.963924][ T29] audit: type=1326 audit(1727441789.687:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2209.026572][ T29] audit: type=1326 audit(1727441789.687:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.5756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 2209.346523][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2209.362281][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2209.382590][ T6578] bond0 (unregistering): Released all slaves [ 2209.407350][T28385] usb 2-1: USB disconnect, device number 53 [ 2209.475463][ T4642] bridge0: port 3(vlan2) entered blocking state [ 2209.483598][ T4642] bridge0: port 3(vlan2) entered disabled state [ 2209.490575][ T4642] vlan2: entered allmulticast mode [ 2209.512248][ T4642] geneve0: entered allmulticast mode [ 2209.524239][ T4642] vlan2: entered promiscuous mode [ 2209.529408][ T4642] geneve0: entered promiscuous mode [ 2209.539316][ T4642] bridge0: port 3(vlan2) entered blocking state [ 2209.545869][ T4642] bridge0: port 3(vlan2) entered forwarding state [ 2209.914749][ T4585] chnl_net:caif_netlink_parms(): no params data found [ 2210.419938][ T6578] hsr_slave_0: left promiscuous mode [ 2210.450574][ T5283] usb 5-1: USB disconnect, device number 20 [ 2210.531388][ T6578] hsr_slave_1: left promiscuous mode [ 2210.579393][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2210.603893][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2210.626977][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2210.649242][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2210.762532][ T6578] veth1_macvtap: left promiscuous mode [ 2210.793116][ T6578] veth0_macvtap: left promiscuous mode [ 2210.798808][ T6578] veth1_vlan: left promiscuous mode [ 2210.822352][ T6578] veth0_vlan: left promiscuous mode [ 2210.973884][T21305] Bluetooth: hci2: command tx timeout [ 2211.095272][ T435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2211.105409][ T435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2211.117833][ T435] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2211.139813][ T435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2211.156771][ T435] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2211.164543][ T435] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2211.740634][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 2211.809478][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 2212.510201][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.525908][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.542389][ T4585] bridge_slave_0: entered allmulticast mode [ 2212.549909][ T4585] bridge_slave_0: entered promiscuous mode [ 2212.591122][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.600659][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.609639][ T4585] bridge_slave_1: entered allmulticast mode [ 2212.618972][ T4585] bridge_slave_1: entered promiscuous mode [ 2212.771873][ T4585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2212.832339][ T4585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2213.012833][ T4585] team0: Port device team_slave_0 added [ 2213.057345][ T435] Bluetooth: hci2: command tx timeout [ 2213.085083][ T4585] team0: Port device team_slave_1 added [ 2213.293216][ T435] Bluetooth: hci1: command tx timeout [ 2213.294034][ T4585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2213.373152][ T4585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.436322][ T4585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2213.474773][ T4704] chnl_net:caif_netlink_parms(): no params data found [ 2213.480241][ T4730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5772'. [ 2213.519679][ T4585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2213.543111][ T4585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.598185][ T4585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.688414][T21305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2213.701241][T21305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2213.710863][T21305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2213.718976][T21305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2213.726731][T21305] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2213.734247][T21305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2213.843941][ T4585] hsr_slave_0: entered promiscuous mode [ 2213.855884][ T4585] hsr_slave_1: entered promiscuous mode [ 2213.880260][ T4585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2213.896152][ T4585] Cannot create hsr debugfs directory [ 2213.997728][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 2214.005086][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 2214.012364][ T4704] bridge_slave_0: entered allmulticast mode [ 2214.022091][ T4704] bridge_slave_0: entered promiscuous mode [ 2214.042527][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.050034][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.057459][ T4704] bridge_slave_1: entered allmulticast mode [ 2214.064836][ T4704] bridge_slave_1: entered promiscuous mode [ 2214.139304][ T6578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.289020][ T6578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.321947][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.358034][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2214.483637][ T6578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.680294][ T6578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.764086][ T4704] team0: Port device team_slave_0 added [ 2214.876827][ T4704] team0: Port device team_slave_1 added [ 2215.036817][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2215.046973][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2215.078735][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2215.133279][T21305] Bluetooth: hci2: command tx timeout [ 2215.144081][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2215.151236][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2215.178371][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2215.192305][ T5283] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2215.300534][ T4704] hsr_slave_0: entered promiscuous mode [ 2215.307395][ T4704] hsr_slave_1: entered promiscuous mode [ 2215.314280][ T4704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2215.321982][ T4704] Cannot create hsr debugfs directory [ 2215.363208][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 2215.373449][T21305] Bluetooth: hci1: command tx timeout [ 2215.376165][ T5283] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 2215.388485][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.398851][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2215.408221][ T5283] usb 5-1: config 0 has no interface number 0 [ 2215.414440][ T5283] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2215.423651][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.433941][ T5283] usb 5-1: config 0 descriptor?? [ 2215.629777][ T6578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.719892][ T937] usb 5-1: USB disconnect, device number 21 [ 2215.785858][T21305] Bluetooth: hci4: command tx timeout [ 2215.805971][ T6578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.827236][ T4739] chnl_net:caif_netlink_parms(): no params data found [ 2215.970408][ T6578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.095643][ T6578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.212045][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.233639][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.240989][ T4739] bridge_slave_0: entered allmulticast mode [ 2216.263611][ T4739] bridge_slave_0: entered promiscuous mode [ 2216.300515][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.320096][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.332492][ T4739] bridge_slave_1: entered allmulticast mode [ 2216.354549][ T4739] bridge_slave_1: entered promiscuous mode [ 2216.478814][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2216.527954][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.556723][ T4585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2216.582122][ T4585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2216.640162][ T4585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2216.677759][ T4585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2216.708812][ T4739] team0: Port device team_slave_0 added [ 2216.739280][ T4739] team0: Port device team_slave_1 added [ 2216.755256][T28385] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2216.821772][ T6578] bridge_slave_1: left allmulticast mode [ 2216.827625][ T6578] bridge_slave_1: left promiscuous mode [ 2216.835517][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.850761][ T6578] bridge_slave_0: left allmulticast mode [ 2216.856683][ T6578] bridge_slave_0: left promiscuous mode [ 2216.862386][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.873444][ T6578] bridge_slave_1: left allmulticast mode [ 2216.879152][ T6578] bridge_slave_1: left promiscuous mode [ 2216.886111][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.897201][ T6578] bridge_slave_0: left allmulticast mode [ 2216.902917][ T6578] bridge_slave_0: left promiscuous mode [ 2216.909301][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.920586][T28385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.935895][T28385] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2216.963372][T28385] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2216.979100][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2217.013473][T28385] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2217.025616][T28385] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2217.054606][T28385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.062633][T28385] usb 5-1: Product: syz [ 2217.067857][T28385] usb 5-1: Manufacturer: syz [ 2217.072524][T28385] usb 5-1: SerialNumber: syz [ 2217.083788][T28385] cdc_ncm 5-1:1.0: skipping garbage [ 2217.089884][T28385] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 2217.098489][T28385] cdc_ncm 5-1:1.0: bind() failure [ 2217.427825][T28385] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2217.452838][T28385] usb 5-1: USB disconnect, device number 22 [ 2217.459127][T21305] Bluetooth: hci1: command tx timeout [ 2217.853516][T21305] Bluetooth: hci4: command tx timeout [ 2218.094758][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2218.115028][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2218.132642][ T6578] bond0 (unregistering): Released all slaves [ 2218.355616][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2218.367989][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2218.381285][ T6578] bond0 (unregistering): Released all slaves [ 2218.392100][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2218.399732][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2218.427959][ T4739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2218.542298][ T4799] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5780'. [ 2218.566976][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2218.583303][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2218.645606][ T4739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2218.968136][ T4739] hsr_slave_0: entered promiscuous mode [ 2218.994836][ T4739] hsr_slave_1: entered promiscuous mode [ 2219.015218][ T4739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2219.022838][ T4739] Cannot create hsr debugfs directory [ 2219.535008][T21305] Bluetooth: hci1: command tx timeout [ 2219.691248][ T4585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.732591][ T4704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2219.815987][ T4704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2219.834612][ T4704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2219.939318][T21305] Bluetooth: hci4: command tx timeout [ 2219.991525][ T4704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2220.141666][ T4585] 8021q: adding VLAN 0 to HW filter on device team0 [ 2220.169062][ T6578] hsr_slave_0: left promiscuous mode [ 2220.185172][ T6578] hsr_slave_1: left promiscuous mode [ 2220.201823][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.212442][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.231590][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.241690][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.268538][ T6578] hsr_slave_0: left promiscuous mode [ 2220.285382][ T6578] hsr_slave_1: left promiscuous mode [ 2220.291581][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.300002][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.310137][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.317905][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.378173][ T6578] veth0_macvtap: left promiscuous mode [ 2220.385021][ T6578] veth1_macvtap: left promiscuous mode [ 2220.390564][ T6578] veth0_macvtap: left promiscuous mode [ 2220.396533][ T6578] veth1_vlan: left promiscuous mode [ 2220.402084][ T6578] veth0_vlan: left promiscuous mode [ 2221.116419][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 2221.182030][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 2222.026887][T21305] Bluetooth: hci4: command tx timeout [ 2222.096051][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.102427][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.431631][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 2222.502519][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 2223.220356][ T4837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5791'. [ 2223.230232][ T4837] tipc: Invalid UDP bearer configuration [ 2223.230280][ T4837] tipc: Enabling of bearer rejected, failed to enable media [ 2223.248480][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.255720][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.317723][T27382] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.324904][T27382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.552214][ T4585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2223.635076][ T5229] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2223.636637][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2223.784957][ T4739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2223.798381][ T4739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2223.820575][ T4739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2223.830545][ T4849] input: syz0 as /devices/virtual/input/input104 [ 2223.837569][ T5229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2223.849976][ T5229] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2223.851050][ T4585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2223.874033][ T4739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2223.901031][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.925539][ T5229] usb 5-1: config 0 descriptor?? [ 2223.931922][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.036231][T27382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.043459][T27382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.192824][T27382] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.200075][T27382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.312786][ T4859] tipc: Enabling of bearer rejected, failed to enable media [ 2224.361400][ T4843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5793'. [ 2224.385246][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'. [ 2224.425676][ T4585] veth0_vlan: entered promiscuous mode [ 2224.434350][ T4843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5793'. [ 2224.504116][ T5229] (null): keene_cmd_main failed (-110) [ 2224.523284][ T5229] video4linux radio32: keene_cmd_main failed (-32) [ 2224.523319][ T5229] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 2224.583929][ T4585] veth1_vlan: entered promiscuous mode [ 2224.792808][ T4585] veth0_macvtap: entered promiscuous mode [ 2224.819873][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2224.901032][ T4585] veth1_macvtap: entered promiscuous mode [ 2224.919478][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2224.946138][ T4739] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.970679][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2224.983244][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.993651][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.004632][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.015676][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.033512][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.055282][ T4585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2225.112292][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.119507][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.175212][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.214290][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.232066][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.245963][ T4877] FAULT_INJECTION: forcing a failure. [ 2225.245963][ T4877] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.262070][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.282733][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.0.5797 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 2225.293145][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2225.303248][ T4877] Call Trace: [ 2225.306566][ T4877] [ 2225.309534][ T4877] dump_stack_lvl+0x241/0x360 [ 2225.314268][ T4877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2225.319520][ T4877] ? __pfx__printk+0x10/0x10 [ 2225.324163][ T4877] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 2225.330192][ T4877] ? __pfx___might_resched+0x10/0x10 [ 2225.333553][ T4585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.335503][ T4877] should_fail_ex+0x3b0/0x4e0 [ 2225.335546][ T4877] should_failslab+0xac/0x100 [ 2225.335572][ T4877] ? dup_task_struct+0x57/0x8c0 [ 2225.335627][ T4877] kmem_cache_alloc_node_noprof+0x71/0x320 [ 2225.335662][ T4877] dup_task_struct+0x57/0x8c0 [ 2225.335693][ T4877] ? _raw_spin_unlock_irq+0x23/0x50 [ 2225.346517][ T4585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.350760][ T4877] ? lockdep_hardirqs_on+0x99/0x150 [ 2225.350803][ T4877] copy_process+0x5d1/0x3d50 [ 2225.367761][ T4585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2225.370825][ T4877] ? get_pid_task+0x23/0x1f0 [ 2225.370857][ T4877] ? __pfx_lock_release+0x10/0x10 [ 2225.370891][ T4877] ? kstrtouint_from_user+0x128/0x190 [ 2225.417918][ T4877] ? __pfx_copy_process+0x10/0x10 [ 2225.423009][ T4877] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2225.428937][ T4877] kernel_clone+0x226/0x8f0 [ 2225.433467][ T4877] ? __pfx_kernel_clone+0x10/0x10 [ 2225.438527][ T4877] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 2225.444532][ T4877] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 2225.450975][ T4877] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2225.457584][ T4877] ? lockdep_hardirqs_on+0x99/0x150 [ 2225.462799][ T4877] __do_fast_syscall_32+0xb4/0x110 [ 2225.467941][ T4877] ? exc_page_fault+0x590/0x8c0 [ 2225.472809][ T4877] do_fast_syscall_32+0x34/0x80 [ 2225.477672][ T4877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2225.484028][ T4877] RIP: 0023:0xf7fbf579 [ 2225.488119][ T4877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2225.507762][ T4877] RSP: 002b:00000000f574651c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 2225.516191][ T4877] RAX: ffffffffffffffda RBX: 0000000020003000 RCX: 0000000000000000 [ 2225.524175][ T4877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.532152][ T4877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.540134][ T4877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2225.548117][ T4877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.556109][ T4877] [ 2225.565032][ T4585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.574558][ T4585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.588702][ T4585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.597571][ T4585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.646146][T15001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.653349][T15001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2225.819444][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.833217][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.944932][T14998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.968362][T14998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.006897][ T4704] veth0_vlan: entered promiscuous mode [ 2226.044419][ T4704] veth1_vlan: entered promiscuous mode [ 2226.104507][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2226.122497][ T4893] netlink: 'syz.0.5799': attribute type 10 has an invalid length. [ 2226.159053][T21305] Bluetooth: Fragment is too long (len 22, expected 2) [ 2226.189224][ T4893] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2226.336986][ T4739] veth0_vlan: entered promiscuous mode [ 2226.350600][ T4739] veth1_vlan: entered promiscuous mode [ 2226.378846][ T4739] veth0_macvtap: entered promiscuous mode [ 2226.388629][ T4739] veth1_macvtap: entered promiscuous mode [ 2226.407450][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.418044][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.427990][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.438505][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.448493][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.459884][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.469810][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.480389][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.492059][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2226.511998][ T4704] veth0_macvtap: entered promiscuous mode [ 2226.555525][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.566371][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.577280][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.588228][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.598638][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.609407][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.621135][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.632345][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.634598][ T5229] usb 5-1: USB disconnect, device number 23 [ 2226.658154][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2226.671162][ T4704] veth1_macvtap: entered promiscuous mode [ 2226.700128][ T4739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.727092][ T4912] syz.2.5800 (4912): drop_caches: 2 [ 2226.737166][ T4912] syz.2.5800 (4912): drop_caches: 2 [ 2226.755624][ T4739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.764647][ T4739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.774003][ T4739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.819204][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.830466][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.843582][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.855412][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.869263][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.900190][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.905629][ T4907] syz.2.5800 (4907): drop_caches: 2 [ 2226.923785][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5803'. [ 2226.933692][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.975587][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.997983][ T4907] syz.2.5800 (4907): drop_caches: 2 [ 2227.006133][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2227.038426][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.056701][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2227.093108][ T4925] fuse: root generation should be zero [ 2227.160111][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.202904][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.212872][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.248729][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.269782][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.289185][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.309094][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.319720][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.330145][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2227.342316][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2227.365058][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2227.422406][ T4704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.446047][ T4704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.456724][ T4704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.469867][ T4704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.570465][T15001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.582341][T15001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.701543][ T976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.889044][ T976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.038278][ T976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.067379][T15001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.083230][T15001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2228.183235][T21305] Bluetooth: hci0: command tx timeout [ 2228.239349][ T976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.293180][ T435] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2228.306255][ T435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2228.323629][ T435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2228.332500][ T435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2228.369119][ T435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2228.378494][ T435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2228.432706][T14994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.441542][T14994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2228.712531][T14998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.763290][T14998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.196835][ T435] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2229.229412][ T435] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2229.239413][ T435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2229.258078][ T435] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2229.266026][ T435] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2229.276727][ T435] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2229.363164][T11834] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2229.546739][T11834] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2229.559566][T11834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.568509][T11834] usb 2-1: Product: syz [ 2229.580536][T11834] usb 2-1: Manufacturer: syz [ 2229.586339][T11834] usb 2-1: SerialNumber: syz [ 2229.623737][T11834] usb 2-1: config 0 descriptor?? [ 2229.883506][ T976] bond0 (unregistering): Released all slaves [ 2230.076736][ T5282] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2230.084544][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2230.084563][ T29] audit: type=1326 audit(1727441811.207:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.276433][ T29] audit: type=1326 audit(1727441811.207:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.334869][ T5282] usb 4-1: config 0 has no interfaces? [ 2230.340477][ T5282] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2230.390648][T11834] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2230.421133][ T435] Bluetooth: hci3: command tx timeout [ 2230.423546][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.441372][ T29] audit: type=1326 audit(1727441811.207:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.482884][ T5282] usb 4-1: config 0 descriptor?? [ 2230.525993][ T29] audit: type=1326 audit(1727441811.207:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.579118][ T29] audit: type=1326 audit(1727441811.207:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.601138][ C0] vkms_vblank_simulate: vblank timer overrun [ 2230.610620][T17942] usb 2-1: USB disconnect, device number 54 [ 2230.622081][ T976] hsr_slave_0: left promiscuous mode [ 2230.636230][ T976] hsr_slave_1: left promiscuous mode [ 2230.659796][ T29] audit: type=1326 audit(1727441811.207:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.671625][ T976] veth1_macvtap: left promiscuous mode [ 2230.711696][ T976] veth0_macvtap: left promiscuous mode [ 2230.714992][ T29] audit: type=1326 audit(1727441811.207:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.729465][ T976] veth1_vlan: left promiscuous mode [ 2230.739095][ C0] vkms_vblank_simulate: vblank timer overrun [ 2230.762710][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.783793][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.784134][ T976] veth0_vlan: left promiscuous mode [ 2230.798745][ T29] audit: type=1326 audit(1727441811.207:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.820671][ C0] vkms_vblank_simulate: vblank timer overrun [ 2230.861027][ T29] audit: type=1326 audit(1727441811.207:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2230.903069][ T29] audit: type=1326 audit(1727441811.207:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.1.5812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2231.373201][ T435] Bluetooth: hci2: command tx timeout [ 2232.515887][ T435] Bluetooth: hci3: command tx timeout [ 2232.642818][ T4950] chnl_net:caif_netlink_parms(): no params data found [ 2232.734465][ T4995] netlink: 'syz.0.5818': attribute type 4 has an invalid length. [ 2232.778439][ T4996] netlink: 'syz.0.5818': attribute type 4 has an invalid length. [ 2232.924127][T11834] usb 4-1: USB disconnect, device number 38 [ 2232.975299][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2233.090028][ T4965] chnl_net:caif_netlink_parms(): no params data found [ 2233.204018][ T937] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2233.360495][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.373261][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 2233.386553][ T937] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2233.393141][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.403114][T17942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2233.403839][ T4950] bridge_slave_0: entered allmulticast mode [ 2233.413431][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.437263][ T937] usb 2-1: config 0 descriptor?? [ 2233.445785][ T937] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2233.451697][ T4950] bridge_slave_0: entered promiscuous mode [ 2233.463061][ T435] Bluetooth: hci2: command tx timeout [ 2233.499026][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.533075][ T4950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.566247][ T4950] bridge_slave_1: entered allmulticast mode [ 2233.575658][ T4950] bridge_slave_1: entered promiscuous mode [ 2233.595368][T17942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.613593][T17942] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2233.638847][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.661566][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.670004][T17942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2233.674786][ T4965] bridge_slave_0: entered allmulticast mode [ 2233.700764][T17942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2233.707109][ T4965] bridge_slave_0: entered promiscuous mode [ 2233.720997][T17942] usb 4-1: SerialNumber: syz [ 2233.728555][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.748373][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.772515][ T4965] bridge_slave_1: entered allmulticast mode [ 2233.803448][ T4965] bridge_slave_1: entered promiscuous mode [ 2233.899813][ T4950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2233.922175][ T4950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2233.965534][ T5019] IPv4: Oversized IP packet from 127.202.26.0 [ 2234.018401][ T4965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.179710][ T4950] team0: Port device team_slave_0 added [ 2234.244262][ T4965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2234.267314][ T5041] fuse: Bad value for 'fd' [ 2234.297120][ T5041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5825'. [ 2234.333348][ T5041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5825'. [ 2234.350070][ T4950] team0: Port device team_slave_1 added [ 2234.449352][T17942] usb 4-1: USB disconnect, device number 39 [ 2234.567606][ T976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.573870][ T435] Bluetooth: hci3: command tx timeout [ 2234.611916][ T4965] team0: Port device team_slave_0 added [ 2234.621400][ T4965] team0: Port device team_slave_1 added [ 2234.647865][ T4950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.671212][ T4950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.699631][ T4950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.766348][ T976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.785734][ T4950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.792770][ T4950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.822895][ T4950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.846542][ T4965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.853809][ T4965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.880818][ T4965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.896595][ T4965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.906373][ T4965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.933266][ T4965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.977298][ T976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.129229][ T976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.141469][ T5051] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2235.151377][ T5051] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2235.167855][ T4965] hsr_slave_0: entered promiscuous mode [ 2235.184525][ T4965] hsr_slave_1: entered promiscuous mode [ 2235.194661][ T4965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2235.202478][ T4965] Cannot create hsr debugfs directory [ 2235.244573][ T4950] hsr_slave_0: entered promiscuous mode [ 2235.252162][ T4950] hsr_slave_1: entered promiscuous mode [ 2235.262316][ T4950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2235.278090][ T4950] Cannot create hsr debugfs directory [ 2235.528202][ T5013] Cannot find set identified by id 0 to match [ 2235.534720][ T435] Bluetooth: hci2: command tx timeout [ 2235.591499][ T937] gspca_sonixj: reg_r err -71 [ 2235.596485][ T937] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 2235.642032][ T937] usb 2-1: USB disconnect, device number 55 [ 2235.674985][ T976] bridge_slave_1: left allmulticast mode [ 2235.684282][T31589] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2235.691754][ T976] bridge_slave_1: left promiscuous mode [ 2235.711967][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.733571][ T976] bridge_slave_0: left allmulticast mode [ 2235.739297][ T976] bridge_slave_0: left promiscuous mode [ 2235.745874][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.833676][T31589] usb 4-1: Using ep0 maxpacket: 32 [ 2235.845863][T31589] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2235.857227][T31589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.868921][T31589] usb 4-1: config 0 descriptor?? [ 2235.878884][T31589] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2236.302576][ T5075] binder: 5074:5075 ioctl c0306201 20000480 returned -22 [ 2236.653208][ T435] Bluetooth: hci3: command tx timeout [ 2236.669584][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2236.692107][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2236.716888][ T976] bond0 (unregistering): Released all slaves [ 2237.238353][T31589] gspca_vc032x: reg_w err -71 [ 2237.243232][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.255565][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.261720][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.283962][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.299703][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.309844][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.322882][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.342554][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.349294][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.355485][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.360913][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.369701][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.375925][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.381413][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.387398][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.392882][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.410937][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.422559][T31589] gspca_vc032x: I2c Bus Busy Wait 00 [ 2237.472438][T31589] gspca_vc032x: Unknown sensor... [ 2237.483935][T31589] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2237.502564][T31589] usb 4-1: USB disconnect, device number 40 [ 2237.623315][ T435] Bluetooth: hci2: command tx timeout [ 2237.685227][ T976] hsr_slave_0: left promiscuous mode [ 2237.715085][ T976] hsr_slave_1: left promiscuous mode [ 2237.727218][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2237.735633][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2237.750675][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2237.761403][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2237.929036][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 2237.929055][ T29] audit: type=1326 audit(1727441819.077:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.0.5831" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fbf579 code=0x0 [ 2237.978789][ T976] veth1_macvtap: left promiscuous mode [ 2237.995129][ T976] veth0_macvtap: left promiscuous mode [ 2238.000786][ T976] veth1_vlan: left promiscuous mode [ 2238.019997][ T976] veth0_vlan: left promiscuous mode [ 2238.873150][T11834] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2238.973971][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2239.023350][T11834] usb 2-1: Using ep0 maxpacket: 16 [ 2239.034627][T11834] usb 2-1: config 0 has an invalid interface number: 54 but max is 0 [ 2239.046505][T11834] usb 2-1: config 0 has no interface number 0 [ 2239.052751][T11834] usb 2-1: config 0 interface 54 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2239.054980][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2239.078488][T11834] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a3c, bcdDevice=87.f9 [ 2239.099584][T11834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.108765][T11834] usb 2-1: Product: syz [ 2239.113051][T11834] usb 2-1: Manufacturer: syz [ 2239.117718][T11834] usb 2-1: SerialNumber: syz [ 2239.129837][T11834] usb 2-1: config 0 descriptor?? [ 2240.451459][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5835'. [ 2240.613153][ T4950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2240.631203][ T4950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2240.651715][ T4950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2240.665674][ T4950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2240.740302][ T4965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2240.758731][ T4965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2240.778973][ T4965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2240.798759][ T4965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2240.867012][ T4950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2240.908313][ T4950] 8021q: adding VLAN 0 to HW filter on device team0 [ 2240.931568][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.938764][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2240.966735][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.973959][T14998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2241.120465][ T4965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2241.185252][ T4965] 8021q: adding VLAN 0 to HW filter on device team0 [ 2241.224063][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.231259][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2241.272487][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.279714][T15005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2241.342136][ T4950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2241.353247][ T5229] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2241.372308][ T4965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2241.392529][ T4965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2241.496756][ T4965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2241.534625][ T4950] veth0_vlan: entered promiscuous mode [ 2241.547666][ T5229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2241.564040][ T5229] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2241.585420][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.594736][ T4950] veth1_vlan: entered promiscuous mode [ 2241.631983][ T5229] usb 4-1: config 0 descriptor?? [ 2241.638818][T25347] usb 2-1: USB disconnect, device number 56 [ 2241.732500][ T4965] veth0_vlan: entered promiscuous mode [ 2241.776786][ T4965] veth1_vlan: entered promiscuous mode [ 2241.796015][ T4950] veth0_macvtap: entered promiscuous mode [ 2241.859924][ T4950] veth1_macvtap: entered promiscuous mode [ 2242.034404][ T5143] tipc: Enabling of bearer rejected, failed to enable media [ 2242.054410][ T4965] veth0_macvtap: entered promiscuous mode [ 2242.090226][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.104508][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5839'. [ 2242.107651][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.133028][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5839'. [ 2242.136505][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.180248][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.180279][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.180301][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.180354][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.180373][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.180394][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.180412][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.182772][ T4950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2242.182886][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5839'. [ 2242.198653][ T4965] veth1_macvtap: entered promiscuous mode [ 2242.221346][ T5229] (null): keene_cmd_main failed (-110) [ 2242.224153][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.224180][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.224196][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.224214][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.224230][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.224257][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.224273][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.224289][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.224304][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.224321][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.225766][ T4950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2242.226402][ T5229] video4linux radio32: keene_cmd_main failed (-32) [ 2242.226430][ T5229] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 2242.261151][ T4950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.261197][ T4950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.261230][ T4950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.261270][ T4950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.265516][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265539][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.265553][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265586][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.265600][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265615][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.265628][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265643][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.265656][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265671][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.265685][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.265699][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.266969][ T4965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2242.270538][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270559][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270573][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270588][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270600][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270614][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270626][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270640][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270652][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270667][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270680][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.270694][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.271890][ T4965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2242.336318][ T5155] kAFS: unable to lookup cell '' [ 2242.341110][ T4965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.341149][ T4965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.341177][ T4965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.341204][ T4965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.588333][T15001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.588361][T15001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.663660][ T5291] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2242.673516][T15001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.723289][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.801238][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.923172][T15001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.144688][ T5291] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 2243.239871][ T5291] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 2243.239908][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.239934][ T5291] usb 2-1: Product: syz [ 2243.239953][ T5291] usb 2-1: Manufacturer: syz [ 2243.239966][ T5291] usb 2-1: SerialNumber: syz [ 2243.274167][ T5291] usb 2-1: config 0 descriptor?? [ 2243.292274][T27382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.292304][T27382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.677436][ T5291] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2243.706456][ T5291] asix 2-1:0.0: probe with driver asix failed with error -61 [ 2243.743528][ T5229] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2243.883219][ T5229] usb 5-1: device descriptor read/64, error -71 [ 2244.153369][ T5229] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2244.293243][ T5229] usb 5-1: device descriptor read/64, error -71 [ 2244.403673][ T5229] usb usb5-port1: attempt power cycle [ 2244.419160][ T5191] netlink: 'syz.2.5846': attribute type 3 has an invalid length. [ 2244.427386][ T5191] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5846'. [ 2244.628385][T31589] usb 4-1: USB disconnect, device number 41 [ 2244.753423][ T5229] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2244.783972][ T5229] usb 5-1: device descriptor read/8, error -71 [ 2244.827670][ T5208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5849'. [ 2244.943261][ T623] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 2245.033276][ T5229] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2245.074785][ T5229] usb 5-1: device descriptor read/8, error -71 [ 2245.103156][ T5291] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2245.137738][ T623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2245.150256][ T623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.160500][ T623] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2245.180349][ T623] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2245.190510][ T623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.199021][ T5229] usb usb5-port1: unable to enumerate USB device [ 2245.213601][ T623] usb 3-1: config 0 descriptor?? [ 2245.254962][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.271655][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.281535][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2245.297573][ T5291] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 2245.308140][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.332857][ T5291] usb 4-1: config 0 descriptor?? [ 2245.355432][T25347] usb 2-1: USB disconnect, device number 57 [ 2245.445554][ T623] usbhid 3-1:0.0: can't add hid device: -71 [ 2245.451801][ T623] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2245.471366][ T623] usb 3-1: USB disconnect, device number 9 [ 2245.588124][ T5214] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 2245.771644][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.785088][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.805924][ T5291] usbhid 4-1:0.0: can't add hid device: -71 [ 2245.822214][ T5291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2245.843317][ T5291] usb 4-1: USB disconnect, device number 42 [ 2246.233119][T31589] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2246.395047][T31589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2246.408631][T31589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2246.433221][T31589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 2246.463034][T31589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2246.494526][T31589] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2246.511322][T31589] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2246.522409][T31589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.599379][T31589] usb 3-1: config 0 descriptor?? [ 2247.084286][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2247.105161][T31589] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 2247.122536][T31589] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 2247.153435][T31589] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 2247.171457][T31589] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 2247.181203][T31589] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 2247.201767][T31589] ntrig 0003:1B96:000A.0072: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 2247.229966][ T976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.277075][ T5232] netlink: 'syz.4.5860': attribute type 10 has an invalid length. [ 2247.295713][ T5283] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2247.323645][T31589] usb 3-1: USB disconnect, device number 10 [ 2247.362806][ T5232] team0: Port device netdevsim0 added [ 2247.380345][T21305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2247.394372][T21305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2247.404503][T21305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2247.426961][T21305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2247.436491][T21305] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2247.460081][T21305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2247.463396][ T937] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2247.476601][ T976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.503857][ T5283] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2247.510610][ T5283] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2247.520345][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.534248][ T5283] usb 2-1: config 0 descriptor?? [ 2247.644761][ T976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.674972][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 2247.682325][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.723145][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2247.761761][ T976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.763060][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2247.795653][ T937] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 2247.817001][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.851686][ T937] usb 5-1: config 0 descriptor?? [ 2247.907776][ T5243] tipc: Enabling of bearer rejected, failed to enable media [ 2247.936457][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5859'. [ 2247.966699][ T5236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5859'. [ 2248.011320][ T5236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5859'. [ 2248.046326][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 2248.103435][ T5283] (null): keene_cmd_main failed (-110) [ 2248.105176][ T5283] video4linux radio32: keene_cmd_main failed (-32) [ 2248.105206][ T5283] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 2248.197542][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2248.257766][ T976] bridge_slave_1: left allmulticast mode [ 2248.257796][ T976] bridge_slave_1: left promiscuous mode [ 2248.257999][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.274636][ T976] bridge_slave_0: left allmulticast mode [ 2248.274668][ T976] bridge_slave_0: left promiscuous mode [ 2248.274889][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.438771][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5863'. [ 2248.609279][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 2248.616638][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2248.646239][ T937] usb 5-1: USB disconnect, device number 28 [ 2248.953243][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.967370][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2248.982333][ T976] bond0 (unregistering): Released all slaves [ 2249.006520][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2249.015972][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2249.171596][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.188606][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.197654][ T5240] bridge_slave_0: entered allmulticast mode [ 2249.207438][ T5240] bridge_slave_0: entered promiscuous mode [ 2249.244878][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.258223][ T5259] FAULT_INJECTION: forcing a failure. [ 2249.258223][ T5259] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.266853][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.271683][ T5259] CPU: 1 UID: 0 PID: 5259 Comm: syz.2.5864 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 2249.279995][ T5240] bridge_slave_1: entered allmulticast mode [ 2249.288992][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2249.289011][ T5259] Call Trace: [ 2249.289022][ T5259] [ 2249.289033][ T5259] dump_stack_lvl+0x241/0x360 [ 2249.289079][ T5259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2249.289117][ T5259] ? __pfx__printk+0x10/0x10 [ 2249.297504][ T5240] bridge_slave_1: entered promiscuous mode [ 2249.305064][ T5259] should_fail_ex+0x3b0/0x4e0 [ 2249.305110][ T5259] ? inet_bind_bucket_create+0x2f/0x230 [ 2249.341859][ T5259] should_failslab+0xac/0x100 [ 2249.346557][ T5259] ? inet_bind_bucket_create+0x2f/0x230 [ 2249.352119][ T5259] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2249.357530][ T5259] inet_bind_bucket_create+0x2f/0x230 [ 2249.362933][ T5259] inet_csk_get_port+0x3c2/0x1660 [ 2249.368011][ T5259] __inet_bind+0x613/0xbb0 [ 2249.372447][ T5259] inet_bind_sk+0x14d/0x260 [ 2249.376999][ T5259] ? __pfx_aa_sk_perm+0x10/0x10 [ 2249.381898][ T5259] ? __pfx_inet_bind_sk+0x10/0x10 [ 2249.386966][ T5259] ? rep_movs_alternative+0x30/0x70 [ 2249.392220][ T5259] __sys_bind+0x22d/0x2d0 [ 2249.396588][ T5259] ? __pfx___sys_bind+0x10/0x10 [ 2249.401465][ T5259] __ia32_sys_bind+0x7a/0x90 [ 2249.406106][ T5259] __do_fast_syscall_32+0xb4/0x110 [ 2249.411229][ T5259] ? exc_page_fault+0x590/0x8c0 [ 2249.416097][ T5259] do_fast_syscall_32+0x34/0x80 [ 2249.420953][ T5259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2249.427305][ T5259] RIP: 0023:0xf7f9f579 [ 2249.431396][ T5259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2249.451020][ T5259] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2249.459450][ T5259] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 2249.467437][ T5259] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2249.475437][ T5259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2249.483449][ T5259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2249.491455][ T5259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2249.499474][ T5259] [ 2249.533359][ T435] Bluetooth: hci1: command tx timeout [ 2249.633920][ T976] hsr_slave_0: left promiscuous mode [ 2249.640177][ T976] hsr_slave_1: left promiscuous mode [ 2249.647754][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2249.656616][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2249.669853][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2249.677746][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2249.701840][ T976] veth1_macvtap: left promiscuous mode [ 2249.707501][ T976] veth0_macvtap: left promiscuous mode [ 2249.713550][ T976] veth1_vlan: left promiscuous mode [ 2249.718944][ T976] veth0_vlan: left promiscuous mode [ 2249.825564][ T623] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 2250.025025][ T623] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2250.056372][ T623] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2250.073602][ T623] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2250.083877][ T623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.113837][ T623] usb 3-1: config 0 descriptor?? [ 2250.136778][T31589] usb 2-1: USB disconnect, device number 58 [ 2250.145560][ T623] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2250.155154][ T623] dvb-usb: bulk message failed: -22 (3/0) [ 2250.177956][ T623] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2250.197475][ T623] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2250.231968][ T623] usb 3-1: media controller created [ 2250.240639][ T623] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2250.287242][ T623] dvb-usb: bulk message failed: -22 (6/0) [ 2250.299990][ T623] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2250.324488][ T623] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input110 [ 2250.334299][ T5261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.354474][ T623] dvb-usb: schedule remote query interval to 150 msecs. [ 2250.361884][ T623] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2250.362123][ T5261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.392628][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.421443][ T5261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.444399][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.466547][ T5261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.490251][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.512796][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.539845][ T623] dvb-usb: bulk message failed: -22 (1/0) [ 2250.553048][ T623] dvb-usb: error while querying for an remote control event. [ 2250.573740][ T623] usb 3-1: USB disconnect, device number 11 [ 2250.623431][ T623] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2251.026657][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2251.155915][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2251.223641][ T5281] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5870'. [ 2251.613232][ T435] Bluetooth: hci1: command tx timeout [ 2252.433865][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2252.466107][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2252.620353][ T5240] team0: Port device team_slave_0 added [ 2252.719019][ T5240] team0: Port device team_slave_1 added [ 2252.863632][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2252.870652][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2252.918369][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2252.954647][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2252.992107][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2253.037471][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2253.231148][ T5240] hsr_slave_0: entered promiscuous mode [ 2253.271117][ T5240] hsr_slave_1: entered promiscuous mode [ 2253.291050][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2253.330088][ T5240] Cannot create hsr debugfs directory [ 2253.693942][ T435] Bluetooth: hci1: command tx timeout [ 2254.549061][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2254.639955][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2254.707525][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2254.725918][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2255.008418][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2255.071135][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 2255.099323][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.106575][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2255.180303][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.187530][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2255.422892][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2255.569645][ T5240] veth0_vlan: entered promiscuous mode [ 2255.615926][ T5240] veth1_vlan: entered promiscuous mode [ 2255.777560][ T435] Bluetooth: hci1: command tx timeout [ 2255.801625][ T5401] syzkaller0: entered promiscuous mode [ 2255.810905][ T5401] syzkaller0: entered allmulticast mode [ 2255.842011][ T5240] veth0_macvtap: entered promiscuous mode [ 2259.571205][ T5240] veth1_macvtap: entered promiscuous mode [ 2259.590582][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.602060][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.623289][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.642434][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.652593][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.675053][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.693454][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.712084][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.722461][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.742188][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.752836][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.772545][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.785371][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2259.833708][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.854191][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.872507][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.892575][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.920981][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.936741][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.953885][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.973284][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.991806][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2260.004350][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2260.025733][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2260.053134][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2260.074355][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2260.116479][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.141182][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.157747][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.183400][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.399500][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.423374][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.466527][T14994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.501318][T14994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.933362][ T623] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2261.033099][T31589] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2261.195078][T31589] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.213476][T31589] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2261.263039][T31589] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2261.276785][T31589] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2261.303038][T31589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.318684][T31589] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2261.349726][T31589] usb 3-1: invalid MIDI out EP 0 [ 2261.467046][T31589] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2261.568650][T31589] usb 3-1: USB disconnect, device number 12 [ 2261.634603][ T5497] binder: transaction release 197 bad handle 1, ret = -22 [ 2262.121460][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2262.163692][ T5504] syz.0.5935 (5504) used greatest stack depth: 15216 bytes left [ 2262.569425][ T5516] dccp_close: ABORT with 40 bytes unread [ 2263.695100][T21305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2263.707129][T21305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2263.715831][T21305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2263.727889][T21305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2263.760504][T21305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2263.768094][T21305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2263.849160][T21305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2263.859990][T21305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2263.869768][T21305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2263.893245][T21305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2263.905355][T21305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2263.912808][T21305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2264.452874][ T5545] chnl_net:caif_netlink_parms(): no params data found [ 2264.643158][ T5549] chnl_net:caif_netlink_parms(): no params data found [ 2264.717535][ T5545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.741890][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.769490][ T5545] bridge_slave_0: entered allmulticast mode [ 2264.787522][ T5545] bridge_slave_0: entered promiscuous mode [ 2264.818353][ T5545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.843795][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.851086][ T5545] bridge_slave_1: entered allmulticast mode [ 2264.862756][ T5545] bridge_slave_1: entered promiscuous mode [ 2264.997871][ T5545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2265.046140][ T5545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2265.094529][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.111737][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.136111][ T5549] bridge_slave_0: entered allmulticast mode [ 2265.153907][ T5549] bridge_slave_0: entered promiscuous mode [ 2265.195741][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.231254][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.243956][ T5549] bridge_slave_1: entered allmulticast mode [ 2265.261405][ T5549] bridge_slave_1: entered promiscuous mode [ 2265.403529][ T5545] team0: Port device team_slave_0 added [ 2265.434644][ T5549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2265.467407][ T5545] team0: Port device team_slave_1 added [ 2265.498164][ T5549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2265.551540][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.573052][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.623044][ T5545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.758343][T15001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.844685][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.851708][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.891837][T21305] Bluetooth: hci0: command tx timeout [ 2265.934776][T21305] Bluetooth: hci5: command tx timeout [ 2265.954049][ T5545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2265.981042][ T5549] team0: Port device team_slave_0 added [ 2265.989903][ T5549] team0: Port device team_slave_1 added [ 2266.140120][T15001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.259324][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2266.387012][ T435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2266.402505][ T435] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2266.448938][ T435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2266.459239][T15001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.470307][ T435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2266.483332][ T435] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2266.490728][ T435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2266.680144][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2266.698507][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2266.752990][ T5549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2266.775311][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2266.782325][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2266.835965][ T5549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.876668][ T5545] hsr_slave_0: entered promiscuous mode [ 2266.884748][ T5545] hsr_slave_1: entered promiscuous mode [ 2266.897739][ T5545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2266.905951][ T5545] Cannot create hsr debugfs directory [ 2266.961972][T15001] bond0: (slave netdevsim0): Releasing backup interface [ 2266.988499][T15001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.230873][ T5549] hsr_slave_0: entered promiscuous mode [ 2267.237992][ T5549] hsr_slave_1: entered promiscuous mode [ 2267.245221][ T5549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2267.254962][ T5549] Cannot create hsr debugfs directory [ 2267.478030][T15001] vlan2: left allmulticast mode [ 2267.484126][T15001] geneve0: left allmulticast mode [ 2267.489429][T15001] vlan2: left promiscuous mode [ 2267.495006][T15001] geneve0: left promiscuous mode [ 2267.500433][T15001] bridge0: port 3(vlan2) entered disabled state [ 2267.509977][T15001] bridge_slave_1: left allmulticast mode [ 2267.516102][T15001] bridge_slave_1: left promiscuous mode [ 2267.522024][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2267.534392][T15001] bridge_slave_0: left allmulticast mode [ 2267.540229][T15001] bridge_slave_0: left promiscuous mode [ 2267.548675][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2267.698199][ T5588] [U] v [ 2267.943484][ T435] Bluetooth: hci0: command tx timeout [ 2268.015593][ T435] Bluetooth: hci5: command tx timeout [ 2268.103164][ T5283] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2268.210402][T15001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2268.223393][T15001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2268.238610][T15001] bond0 (unregistering): Released all slaves [ 2268.281744][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 2268.315381][ T5283] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2268.344240][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.352314][ T5283] usb 3-1: Product: syz [ 2268.366146][ T5283] usb 3-1: Manufacturer: syz [ 2268.384768][ T5283] usb 3-1: SerialNumber: syz [ 2268.400901][ T5283] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2268.407665][ T5283] r8152-cfgselector 3-1: config 0 descriptor?? [ 2268.573289][ T435] Bluetooth: hci6: command tx timeout [ 2268.843277][T15001] hsr_slave_0: left promiscuous mode [ 2268.854634][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.864515][T15001] hsr_slave_1: left promiscuous mode [ 2268.870766][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2268.878897][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.886808][T15001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2268.907005][ T623] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 2268.919660][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2268.945705][T15001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.004175][T15001] veth1_macvtap: left promiscuous mode [ 2269.011065][T15001] veth0_macvtap: left promiscuous mode [ 2269.023700][T15001] veth1_vlan: left promiscuous mode [ 2269.029100][T15001] veth0_vlan: left promiscuous mode [ 2269.867046][T15001] team0 (unregistering): Port device team_slave_1 removed [ 2269.921149][T15001] team0 (unregistering): Port device team_slave_0 removed [ 2270.013617][ T435] Bluetooth: hci0: command tx timeout [ 2270.095546][ T435] Bluetooth: hci5: command tx timeout [ 2270.653380][ T435] Bluetooth: hci6: command tx timeout [ 2270.683398][ T5583] chnl_net:caif_netlink_parms(): no params data found [ 2271.035002][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.042174][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.068260][ T5583] bridge_slave_0: entered allmulticast mode [ 2271.076541][ T5583] bridge_slave_0: entered promiscuous mode [ 2271.120770][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.148193][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.156417][ T5583] bridge_slave_1: entered allmulticast mode [ 2271.166103][ T5583] bridge_slave_1: entered promiscuous mode [ 2271.280594][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.317514][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.399031][ T5583] team0: Port device team_slave_0 added [ 2271.469198][ T5583] team0: Port device team_slave_1 added [ 2271.514940][ T5545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2271.622565][ T5549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.726583][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.735355][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2271.793509][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.815792][ T5545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2271.856288][ T5545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2271.979855][T15001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.093119][ T435] Bluetooth: hci0: command tx timeout [ 2272.102135][ T5549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.124329][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2272.131337][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.170588][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2272.193029][ T435] Bluetooth: hci5: command tx timeout [ 2272.201277][ T5545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2272.257390][T15001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.342229][ T5549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.390681][T15001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.504073][ T5549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.721761][T15001] team0: Port device netdevsim0 removed [ 2272.733143][ T435] Bluetooth: hci6: command tx timeout [ 2272.745853][T15001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.779848][ T5583] hsr_slave_0: entered promiscuous mode [ 2272.786760][ T5583] hsr_slave_1: entered promiscuous mode [ 2273.304855][ T5545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2273.325300][ T5549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2273.381705][T15001] bridge_slave_1: left allmulticast mode [ 2273.387683][T15001] bridge_slave_1: left promiscuous mode [ 2273.403147][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.445263][T15001] bridge_slave_0: left allmulticast mode [ 2273.450995][T15001] bridge_slave_0: left promiscuous mode [ 2273.483302][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.398598][T15001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2274.410820][T15001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2274.423037][T15001] bond0 (unregistering): Released all slaves [ 2274.438925][ T5549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2274.451586][ T5549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2274.582398][ T5549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2274.768567][ T5545] 8021q: adding VLAN 0 to HW filter on device team0 [ 2274.823383][ T435] Bluetooth: hci6: command tx timeout [ 2275.074021][T14994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.081171][T14994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2275.110893][T15001] hsr_slave_0: left promiscuous mode [ 2275.123915][T15001] hsr_slave_1: left promiscuous mode [ 2275.131541][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2275.145865][T15001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2275.170687][T15001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2275.191781][T15001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2275.263320][T15001] veth1_macvtap: left promiscuous mode [ 2275.283066][T15001] veth0_macvtap: left promiscuous mode [ 2275.293920][T15001] veth1_vlan: left promiscuous mode [ 2275.313035][T15001] veth0_vlan: left promiscuous mode [ 2276.124800][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5978'. [ 2276.276109][ T29] audit: type=1326 audit(1727441857.427:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.332198][ T29] audit: type=1326 audit(1727441857.427:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.368722][ T29] audit: type=1326 audit(1727441857.457:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.392732][ T29] audit: type=1326 audit(1727441857.457:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.427933][ T29] audit: type=1326 audit(1727441857.457:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.462830][ T29] audit: type=1326 audit(1727441857.477:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.487495][ T29] audit: type=1326 audit(1727441857.547:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.521208][ T29] audit: type=1326 audit(1727441857.547:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.5980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 2276.622028][T15001] team0 (unregistering): Port device team_slave_1 removed [ 2276.689605][T15001] team0 (unregistering): Port device team_slave_0 removed [ 2277.341454][T14994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.348616][T14994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2277.455460][ T5545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2277.710288][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2277.738537][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2277.771586][ T5545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2277.794921][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2277.816303][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2277.840389][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 2277.862719][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2277.908600][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.915814][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2277.937363][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.944515][T15005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.117651][ T5545] veth0_vlan: entered promiscuous mode [ 2278.180085][ T5545] veth1_vlan: entered promiscuous mode [ 2278.249707][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.298092][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.349294][ T5545] veth0_macvtap: entered promiscuous mode [ 2278.384834][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 2278.442494][ T5545] veth1_macvtap: entered promiscuous mode [ 2278.461008][ T5549] veth0_vlan: entered promiscuous mode [ 2278.507621][T27382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.514843][T27382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.557972][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.565220][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.607590][ T5549] veth1_vlan: entered promiscuous mode [ 2278.629043][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.654941][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.681617][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.702975][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.712869][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.751205][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.776695][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.802660][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.823419][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.846528][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.875014][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.990611][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2279.021858][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.057506][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2279.086653][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.098085][T21305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2279.133494][T21305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2279.144925][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2279.163061][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.183089][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2279.202446][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.212447][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2279.223563][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.235214][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2279.253390][T21305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2279.302769][T21305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2279.340549][ T5545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.349069][T21305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2279.350170][ T5545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.365487][ T5545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.374462][ T5545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.399699][T21305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2279.516030][ T5549] veth0_macvtap: entered promiscuous mode [ 2279.575338][ T5549] veth1_macvtap: entered promiscuous mode [ 2279.679880][ T3981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.731505][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.750408][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.782530][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.803001][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.813343][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.824009][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.834015][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.845461][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.855511][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.868415][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.879136][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2279.890489][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2279.902724][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2279.934294][T27382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.942185][T27382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.037484][ T3981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.068307][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.087594][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.100226][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.117472][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.127781][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.138953][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.149998][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.160662][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.170994][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.182686][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.192679][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.205823][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.217662][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2280.331746][ T3981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.376700][ T5549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.385903][ T5549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.396278][ T5549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.405318][ T5549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.425054][T15001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.444669][T15001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.487891][ T3981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.666158][T14998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.690713][T14998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.742190][T14998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.811621][T14998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.812801][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2280.878992][ T5716] chnl_net:caif_netlink_parms(): no params data found [ 2280.963927][ T5729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2280.978221][ T5729] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2280.998323][ T5729] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2281.030436][ T5729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2281.046227][ T5729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2281.089970][ T5729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2281.109294][ T5729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2281.125479][ T5729] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2281.134711][ T3981] bridge_slave_1: left allmulticast mode [ 2281.146183][ T3981] bridge_slave_1: left promiscuous mode [ 2281.159256][ T3981] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.168311][ T5729] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2281.179896][ T3981] bridge_slave_0: left allmulticast mode [ 2281.198119][ T3981] bridge_slave_0: left promiscuous mode [ 2281.204259][ T5729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2281.210694][ T3981] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.221310][ T5729] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2281.253821][ T5729] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2281.274836][ T5729] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2281.296605][ T5729] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2281.338366][ T5729] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2281.368350][ T5729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2281.378153][ T5729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2281.417171][ T5729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2282.209081][ T3981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.240068][ T3981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.274156][ T3981] bond0 (unregistering): Released all slaves [ 2282.463519][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5990'. [ 2282.500245][ T5747] binder: 5746:5747 ioctl 4018620d 0 returned -22 [ 2282.697883][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.717279][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.734068][ T5716] bridge_slave_0: entered allmulticast mode [ 2282.752002][ T5716] bridge_slave_0: entered promiscuous mode [ 2282.973084][ T435] Bluetooth: hci4: command 0x0c1a tx timeout [ 2283.047989][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.066952][ T435] Bluetooth: hci2: command 0x0c1a tx timeout [ 2283.073353][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.088702][ T5716] bridge_slave_1: entered allmulticast mode [ 2283.101089][ T5716] bridge_slave_1: entered promiscuous mode [ 2283.135070][ T435] Bluetooth: hci0: command 0x0c1a tx timeout [ 2283.224305][ T435] Bluetooth: hci5: command 0x0c1a tx timeout [ 2283.293519][ T435] Bluetooth: hci6: command 0x0c1a tx timeout [ 2283.312053][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.366292][ T5761] binder: 5746:5761 ioctl 4018620d 0 returned -22 [ 2283.373550][ T435] Bluetooth: hci3: command 0x041b tx timeout [ 2283.382793][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2283.456121][ T3981] hsr_slave_0: left promiscuous mode [ 2283.476027][ T3981] hsr_slave_1: left promiscuous mode [ 2283.498452][ T3981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2283.523888][ T3981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2283.541191][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.548413][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.573151][ T3981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2283.580746][ T3981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2283.621301][ T3981] veth1_macvtap: left promiscuous mode [ 2283.634179][ T3981] veth0_macvtap: left promiscuous mode [ 2283.647399][ T3981] veth1_vlan: left promiscuous mode [ 2283.663129][ T3981] veth0_vlan: left promiscuous mode [ 2285.061184][ T435] Bluetooth: hci4: command 0x0c1a tx timeout [ 2285.140229][ T435] Bluetooth: hci2: command 0x0c1a tx timeout [ 2285.227858][ T435] Bluetooth: hci0: command 0x0c1a tx timeout [ 2285.306099][ T435] Bluetooth: hci5: command 0x0c1a tx timeout [ 2285.378559][ T435] Bluetooth: hci6: command 0x0c1a tx timeout [ 2285.453700][ T435] Bluetooth: hci3: command 0x041b tx timeout [ 2285.665641][ T3981] team0 (unregistering): Port device team_slave_1 removed [ 2285.803379][ T435] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 2285.827923][ T3981] team0 (unregistering): Port device team_slave_0 removed [ 2287.135358][ T435] Bluetooth: hci4: command 0x0c1a tx timeout [ 2287.156722][ T5583] veth0_vlan: entered promiscuous mode [ 2287.244556][ T5716] team0: Port device team_slave_0 added [ 2287.293071][ T435] Bluetooth: hci0: command 0x0c1a tx timeout [ 2287.295922][ T5716] team0: Port device team_slave_1 added [ 2287.373454][ T435] Bluetooth: hci5: command 0x0c1a tx timeout [ 2287.453252][ T435] Bluetooth: hci6: command 0x0c1a tx timeout [ 2287.484349][ T5583] veth1_vlan: entered promiscuous mode [ 2287.533117][ T435] Bluetooth: hci3: command 0x041b tx timeout [ 2287.755437][ T5583] veth0_macvtap: entered promiscuous mode [ 2287.765133][ T5583] veth1_macvtap: entered promiscuous mode [ 2287.789035][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.799864][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.810080][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.820943][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.830825][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.841343][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.851849][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.863053][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.873002][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.883473][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.893320][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.903847][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.915184][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2287.923211][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.930190][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.956686][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.969781][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.976863][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.002876][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.209990][ T5812] input: syz0 as /devices/virtual/input/input111 [ 2288.247683][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.263273][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.302975][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.342974][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.352870][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.433062][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.471592][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.518097][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.553182][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.599535][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.621317][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.647800][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.684665][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2288.785304][T31589] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2288.819335][ T5716] hsr_slave_0: entered promiscuous mode [ 2288.843744][ T5716] hsr_slave_1: entered promiscuous mode [ 2288.851015][ T5716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2288.881012][ T5716] Cannot create hsr debugfs directory [ 2288.911124][ T5583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.942960][ T5583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.943213][T31589] usb 2-1: Using ep0 maxpacket: 32 [ 2288.951703][ T5583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.951745][ T5583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.967223][T31589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2288.998216][T31589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2289.011936][T31589] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2289.023928][T31589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.042443][T31589] usb 2-1: config 0 descriptor?? [ 2289.053451][ T5827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2289.070288][T31589] hub 2-1:0.0: USB hub found [ 2289.300096][T31589] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2289.334999][T31589] usbhid 2-1:0.0: can't add hid device: -71 [ 2289.354079][T31589] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2289.425356][T31589] usb 2-1: USB disconnect, device number 59 [ 2289.490672][T14998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2289.546273][T14998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2289.598003][T14994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2289.617668][ T435] Bluetooth: hci3: command 0x041b tx timeout [ 2289.625213][T14994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2289.653416][ T5831] [ 2289.655782][ T5831] ====================================================== [ 2289.662798][ T5831] WARNING: possible circular locking dependency detected [ 2289.669832][ T5831] 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 Not tainted [ 2289.676251][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.676599][ T5831] ------------------------------------------------------ [ 2289.690668][ T5831] syz.2.6008/5831 is trying to acquire lock: [ 2289.696662][ T5831] ffff888071a164c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0 [ 2289.707391][ T5831] [ 2289.707391][ T5831] but task is already holding lock: [ 2289.714762][ T5831] ffff8880746cd718 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 2289.724790][ T5831] [ 2289.724790][ T5831] which lock already depends on the new lock. [ 2289.724790][ T5831] [ 2289.735209][ T5831] [ 2289.735209][ T5831] the existing dependency chain (in reverse order) is: [ 2289.744239][ T5831] [ 2289.744239][ T5831] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 2289.751826][ T5831] lock_acquire+0x1ed/0x550 [ 2289.756886][ T5831] down_read_killable+0xca/0xd30 [ 2289.762359][ T5831] mmap_read_lock_killable+0x1d/0x70 [ 2289.768195][ T5831] lock_mm_and_find_vma+0x29c/0x2f0 [ 2289.773933][ T5831] exc_page_fault+0x1bf/0x8c0 [ 2289.779148][ T5831] asm_exc_page_fault+0x26/0x30 [ 2289.784552][ T5831] fault_in_readable+0x165/0x2b0 [ 2289.790029][ T5831] fault_in_iov_iter_readable+0x229/0x280 [ 2289.796289][ T5831] generic_perform_write+0x259/0x6d0 [ 2289.802112][ T5831] shmem_file_write_iter+0xf9/0x120 [ 2289.807852][ T5831] vfs_write+0xa6d/0xc90 [ 2289.812629][ T5831] ksys_write+0x183/0x2b0 [ 2289.817492][ T5831] __do_fast_syscall_32+0xb4/0x110 [ 2289.823136][ T5831] do_fast_syscall_32+0x34/0x80 [ 2289.828538][ T5831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2289.835398][ T5831] [ 2289.835398][ T5831] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 2289.844109][ T5831] validate_chain+0x18ef/0x5920 [ 2289.849495][ T5831] __lock_acquire+0x1384/0x2050 [ 2289.854886][ T5831] lock_acquire+0x1ed/0x550 [ 2289.860018][ T5831] down_write+0x99/0x220 [ 2289.864838][ T5831] process_measurement+0x439/0x1fb0 [ 2289.870578][ T5831] ima_file_mmap+0x13d/0x2b0 [ 2289.875697][ T5831] security_mmap_file+0x7e7/0xa40 [ 2289.881257][ T5831] __se_sys_remap_file_pages+0x6e6/0xa50 [ 2289.887414][ T5831] __do_fast_syscall_32+0xb4/0x110 [ 2289.893051][ T5831] do_fast_syscall_32+0x34/0x80 [ 2289.898432][ T5831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2289.905292][ T5831] [ 2289.905292][ T5831] other info that might help us debug this: [ 2289.905292][ T5831] [ 2289.915522][ T5831] Possible unsafe locking scenario: [ 2289.915522][ T5831] [ 2289.922975][ T5831] CPU0 CPU1 [ 2289.928338][ T5831] ---- ---- [ 2289.933706][ T5831] lock(&mm->mmap_lock); [ 2289.938051][ T5831] lock(&sb->s_type->i_mutex_key#12); [ 2289.946055][ T5831] lock(&mm->mmap_lock); [ 2289.952928][ T5831] lock(&sb->s_type->i_mutex_key#12); [ 2289.958413][ T5831] [ 2289.958413][ T5831] *** DEADLOCK *** [ 2289.958413][ T5831] [ 2289.966558][ T5831] 1 lock held by syz.2.6008/5831: [ 2289.971581][ T5831] #0: ffff8880746cd718 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 2289.982047][ T5831] [ 2289.982047][ T5831] stack backtrace: [ 2289.987961][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz.2.6008 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 2289.998293][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2290.008356][ T5831] Call Trace: [ 2290.011641][ T5831] [ 2290.014577][ T5831] dump_stack_lvl+0x241/0x360 [ 2290.019278][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2290.024491][ T5831] ? __pfx__printk+0x10/0x10 [ 2290.029100][ T5831] print_circular_bug+0x13a/0x1b0 [ 2290.034135][ T5831] check_noncircular+0x36a/0x4a0 [ 2290.039082][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2290.044299][ T5831] ? __pfx_check_noncircular+0x10/0x10 [ 2290.049766][ T5831] ? lockdep_lock+0x123/0x2b0 [ 2290.054459][ T5831] validate_chain+0x18ef/0x5920 [ 2290.059322][ T5831] ? cgroup_rstat_updated+0x13b/0xc60 [ 2290.064716][ T5831] ? __pfx_validate_chain+0x10/0x10 [ 2290.069925][ T5831] ? mark_lock+0x9a/0x360 [ 2290.074258][ T5831] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 2290.079983][ T5831] ? __lock_acquire+0x1384/0x2050 [ 2290.085025][ T5831] ? look_up_lock_class+0x77/0x170 [ 2290.090157][ T5831] ? register_lock_class+0x102/0x980 [ 2290.095457][ T5831] ? __pfx_register_lock_class+0x10/0x10 [ 2290.101110][ T5831] ? mark_lock+0x9a/0x360 [ 2290.105446][ T5831] ? ima_match_policy+0x115/0x22f0 [ 2290.110569][ T5831] __lock_acquire+0x1384/0x2050 [ 2290.115442][ T5831] lock_acquire+0x1ed/0x550 [ 2290.119972][ T5831] ? process_measurement+0x439/0x1fb0 [ 2290.125356][ T5831] ? __pfx_lock_acquire+0x10/0x10 [ 2290.130398][ T5831] ? __pfx___might_resched+0x10/0x10 [ 2290.135694][ T5831] ? ima_match_policy+0x115/0x22f0 [ 2290.140815][ T5831] ? __schedule+0x189d/0x4b30 [ 2290.145505][ T5831] ? __pfx_ima_match_policy+0x10/0x10 [ 2290.150888][ T5831] down_write+0x99/0x220 [ 2290.155138][ T5831] ? process_measurement+0x439/0x1fb0 [ 2290.160517][ T5831] ? __pfx_down_write+0x10/0x10 [ 2290.165375][ T5831] ? ima_get_action+0x75/0xb0 [ 2290.170067][ T5831] process_measurement+0x439/0x1fb0 [ 2290.175280][ T5831] ? __pfx_process_measurement+0x10/0x10 [ 2290.180920][ T5831] ? __pfx_lock_acquire+0x10/0x10 [ 2290.185959][ T5831] ? aa_file_perm+0x137/0xf50 [ 2290.190830][ T5831] ? mtree_load+0x8a1/0x9c0 [ 2290.195350][ T5831] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 2290.201529][ T5831] ima_file_mmap+0x13d/0x2b0 [ 2290.206177][ T5831] ? __pfx_mtree_load+0x10/0x10 [ 2290.211046][ T5831] ? __pfx_ima_file_mmap+0x10/0x10 [ 2290.216165][ T5831] ? end_current_label_crit_section+0x151/0x180 [ 2290.222416][ T5831] ? common_file_perm+0x1a6/0x210 [ 2290.227447][ T5831] security_mmap_file+0x7e7/0xa40 [ 2290.232488][ T5831] __se_sys_remap_file_pages+0x6e6/0xa50 [ 2290.238130][ T5831] ? __pfx_do_futex+0x10/0x10 [ 2290.242821][ T5831] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 2290.248995][ T5831] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2290.254996][ T5831] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2290.261342][ T5831] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2290.267947][ T5831] ? __ia32_sys_remap_file_pages+0x20/0xc0 [ 2290.273760][ T5831] __do_fast_syscall_32+0xb4/0x110 [ 2290.278876][ T5831] ? exc_page_fault+0x590/0x8c0 [ 2290.283740][ T5831] do_fast_syscall_32+0x34/0x80 [ 2290.288595][ T5831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2290.294941][ T5831] RIP: 0023:0xf7f9f579 [ 2290.299013][ T5831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2290.318637][ T5831] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 2290.327069][ T5831] RAX: ffffffffffffffda RBX: 0000000020491000 RCX: 0000000000001000 [ 2290.335054][ T5831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2290.343036][ T5831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2290.351019][ T5831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2290.358993][ T5831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2290.366984][ T5831] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2290.401197][ T5837] bridge_slave_1: left allmulticast mode [ 2290.453949][ T5837] bridge_slave_1: left promiscuous mode [ 2290.466250][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.059363][ T976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.205345][ T976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.278390][ T976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.337675][ T976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.443488][ T976] bridge_slave_1: left allmulticast mode [ 2291.449190][ T976] bridge_slave_1: left promiscuous mode [ 2291.469981][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.488587][ T976] bridge_slave_0: left allmulticast mode [ 2291.497580][ T976] bridge_slave_0: left promiscuous mode [ 2291.505083][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.626542][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2291.638449][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2291.648878][ T976] bond0 (unregistering): Released all slaves [ 2291.847301][ T976] hsr_slave_0: left promiscuous mode [ 2291.856467][ T976] hsr_slave_1: left promiscuous mode [ 2291.862396][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2291.871320][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2291.883080][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2291.890541][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2291.905339][ T976] veth1_macvtap: left promiscuous mode [ 2291.910873][ T976] veth0_macvtap: left promiscuous mode [ 2291.917346][ T976] veth1_vlan: left promiscuous mode [ 2291.922701][ T976] veth0_vlan: left promiscuous mode [ 2292.132998][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2292.170630][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2292.582111][ T976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.728022][ T976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.809450][ T976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.072692][ T976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.167162][ T976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.208644][ T976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.271840][ T976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.319795][ T976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.444388][ T976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.515985][ T976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.579651][ T976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.630201][ T976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.739817][ T976] bridge_slave_1: left allmulticast mode [ 2293.746856][ T976] bridge_slave_1: left promiscuous mode [ 2293.752577][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.762542][ T976] bridge_slave_0: left allmulticast mode [ 2293.768554][ T976] bridge_slave_0: left promiscuous mode [ 2293.783160][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.806414][ T976] bridge_slave_1: left allmulticast mode [ 2293.812119][ T976] bridge_slave_1: left promiscuous mode [ 2293.833524][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.856631][ T976] bridge_slave_0: left allmulticast mode [ 2293.862347][ T976] bridge_slave_0: left promiscuous mode [ 2293.883102][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.905675][ T976] bridge_slave_0: left allmulticast mode [ 2293.911389][ T976] bridge_slave_0: left promiscuous mode [ 2293.933132][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.955639][ T976] bridge_slave_1: left allmulticast mode [ 2293.961436][ T976] bridge_slave_1: left promiscuous mode [ 2293.973440][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.991611][ T976] bridge_slave_0: left allmulticast mode [ 2294.003665][ T976] bridge_slave_0: left promiscuous mode [ 2294.009470][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.439376][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.451677][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.461986][ T976] bond0 (unregistering): Released all slaves [ 2294.471594][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.482854][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.492845][ T976] bond0 (unregistering): Released all slaves [ 2294.509489][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.521429][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.531705][ T976] bond0 (unregistering): Released all slaves [ 2294.547868][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.558975][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.571130][ T976] bond0 (unregistering): Released all slaves [ 2295.069233][ T976] hsr_slave_0: left promiscuous mode [ 2295.075292][ T976] hsr_slave_1: left promiscuous mode [ 2295.081169][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2295.089979][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.105522][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.115911][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.129962][ T976] hsr_slave_0: left promiscuous mode [ 2295.143058][ T976] hsr_slave_1: left promiscuous mode [ 2295.149453][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.162495][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.172850][ T976] hsr_slave_0: left promiscuous mode [ 2295.179845][ T976] hsr_slave_1: left promiscuous mode [ 2295.186106][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2295.194557][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.202429][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.210764][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.222915][ T976] hsr_slave_0: left promiscuous mode [ 2295.228881][ T976] hsr_slave_1: left promiscuous mode [ 2295.235231][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2295.242774][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.250998][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.259040][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.271372][ T976] veth1_macvtap: left promiscuous mode [ 2295.277073][ T976] veth0_macvtap: left promiscuous mode [ 2295.282622][ T976] veth1_vlan: left promiscuous mode [ 2295.288268][ T976] veth0_vlan: left promiscuous mode [ 2295.294458][ T976] veth1_macvtap: left promiscuous mode [ 2295.299953][ T976] veth0_macvtap: left promiscuous mode [ 2295.305773][ T976] veth1_vlan: left promiscuous mode [ 2295.311042][ T976] veth0_vlan: left promiscuous mode [ 2295.317137][ T976] veth1_macvtap: left promiscuous mode [ 2295.322792][ T976] veth0_macvtap: left promiscuous mode [ 2295.329429][ T976] veth1_vlan: left promiscuous mode [ 2295.334795][ T976] veth0_vlan: left promiscuous mode [ 2295.640479][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2295.676224][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2295.902023][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2295.941137][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2296.112247][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2296.129363][ T976] team0 (unregistering): Port device team_slave_0 removed [ 2296.398994][ T976] team0 (unregistering): Port device team_slave_1 removed [ 2296.442843][ T976] team0 (unregistering): Port device team_slave_0 removed