last executing test programs: 2m40.54421199s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 2m16.53860388s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 1m55.188421745s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 1m28.484890421s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 59.825171723s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 36.498378023s ago: executing program 1 (id=4626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000340)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}}, 0x0) 36.253320663s ago: executing program 1 (id=4628): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000005c0)={0x1, 0x0, 0x8, 0x20, 0x0, &(0x7f00000001c0)}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaabb88a80000810000000800450000680000000000069078ac14140000000000070700ac141400832b007f000001ac1e000100000000ffffffff7f000001ffffffffac141400000000007f000001e0000002440c00037f00000100"/110, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0953ceee71ab04c4"], 0x7e) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r1, 0x0, 0x20000000009, 0x0) write$binfmt_misc(r4, 0x0, 0x4) dup(0xffffffffffffffff) timer_create(0x5, &(0x7f0000000140)={0x0, 0x9, 0x0, @thr={&(0x7f0000000040)="8850adbdc6b02ad106796ff21054170b1d09bf445bca7a721e52fd21bddb5d8758104fd2e3078344aeab2909a044843e5b95f5f28776e5233fae29912ab09af966497c072a8acca71a4067f3455b7a547ba28bc04530de0008978aed16f33414", &(0x7f00000000c0)="231a29a3e606bb8eadc32ea16ddd498ce360f6ad74361ea50fa43066a50950834370bdd87de332cfb5928f9a"}}, &(0x7f00000001c0)) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7f8, 0xa8002) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000070060000000"]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r11 = dup(r10) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x1000000000000, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001340)={&(0x7f000005e000/0x1000)=nil, &(0x7f0000503000/0x2000)=nil, &(0x7f00005e0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a68000/0x3000)=nil, &(0x7f0000882000/0x2000)=nil, &(0x7f00000bc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f00001f2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)="1c9d213260d616482e8dde726680825f5e87122382635adbfa63812f2b707106acd11e5525f033d7dd75b0b54376b7e1b677678c630aece5f76387b2a8eaca14f4b730e4fe81533ec94ea86fb3c744f91f115793989133f21aea2ea774bfbf3403d37207e08d69d339bbd0c1599e9db7d60b4f17f041a1ce5d85c86bb897bc7275e7566362e404afe4618287657a04ce43729805e5182c05fb9eaacca574554368f8b95a874601b91a32626b5bcf816cc7c4a6ecffce9a56da576f9a3cf8dbd0aa3dd2a899f80f06535301a66c5e9809de48ce5f4021ee4397afee6fcbb3c6c8b850eea24d6a7ed5513f20737e11ed6807470173bf38edb8f966ee201432b40087482abd163a19a185fe68119140ad8a36c096ea77aff7883a5304547710c3346ea23c2d80ca388982dcf2083176e61c3a4f4786cff31b643aafbab68639d76d49eb9ec68ed37d8916da5222248bfc5fc69395ef08b87d30d12fc7649cc4762401f979ec99c6a252492f35587432eb4a1438141c6768dd1690006bfb925f170daae65f66220e4b6013b94f43ded7eab99432c3b3ebbbf55382c76805cb14262ed7e3b71d4340ad22f783148ff0e4237fd493a95354ed8f7dc044bc2e137510e95f0d2020417b71261720884d9a448f66bec03107bc771b3c296e7ca48d721a26b7a1766fcc1d6b7a26f7a59ce302d26cd75d81544857ba0219c1fcf9f16143bc1e99d69c00ffef19cc19a2a6390ace782073e772b87e83cebec8f316d4d381087e92e60602aa4e814d806366fe41f89dd4fbf45fa36741c4f8899aef9030f4d78d85cb26ae6d01b6c686faacf12dfd2d3dbb14d00d15668e0c0f65db2f479a18fce7c6f5c61f00acbdafa22ee51e23d5ab141dfc50f3a19cb6cb5e60c8e539981b328e390d9b40ba8c41b5ae714941ce851172c2700ff342c49a6bf82da8ecde70c417c1353ff9bea12a371bcc100d463f2f7750ae7633c70c262a894fb0192752469b89e1bdc1c938910515cdb02de7f4af251062e24acfabdf8b41e557b7054d142493ebc027ff9eabf5e11f92415d994fa65b87f9226618d1c44b1139453a6491b8099b4911d5347b2d58c872cd0b81c586d66a9a55ca713bb4de9e14db79b6f31c806bc784d621bf6f60756cdd5f504cf12627f0eee5303cf02f19c40ab1eec39d42c9213c920318fd18007d99fb1e8ef98b5e9c26fb1cb5a70fdfa62e857668782b0a27b7ec8d7421f61bddd2d1d892d23da5bea73a00c203193fa9529177e8419dc6887c2479a8d390d7ae0173e863b95e2d28007b6a47f73ce849b68ab923d80196ee980a1d16bd8f842a07b27206b42079b36fcaee698fd3e043340f40b91b101650c87df7417e9ebb3afb2d5f676303f2bed452c9a48c9874e4bed7cd5415481ead435d88fb236919cf104b3711c80f4fe013a9c707b1c1f646c01941516ce99c351b1aea2d61b53035b91ace0de50cf72ac7d219f0aa40cdd95c2d19a1e5c752dbc06deafa894f222e7b993ae7fad8f88604ad459e64fcd38f939401c7bcbe44926b15ddd6d9d431ec30e10e6f17e699842455540011ee7a443ab895f52bf98a4db5f215be5be019ae1f4ff95eda30aa8ef575b4808bf5ca9de55064bf99d4e8f43ff5bb6329015b3847268d6b47e505074d75ae139763c0cb858ef8b38967cb2fdfc60165f4e96ae676f446cef3e517fc7ca41983f1ecd71f42049938fb7b3f7a5f2d7a909875f20318e0245db56c04b8ed7e4856a14784f5d31660eda1709e337860937f53fde1b6b243e94017865712f008f8f3f4501205ae810f4fd3fd4f489fb5d4fe227ed1038d0048b8a11b5fd0fd274114b6b065495c0c606997c6c9b8f4ff631f0677f1fac050dc3eb248aa9cab6c4c753b6fa6d933c8ad5f7be6991f85a2593a80848f14ed2ce4a82344b766f984e6a121ea0e76279572c679b230ab5958d18258da614750bb7d1ccc9593e017262ec99dfaf5f428d54215de46f82e65173523e10061a7fd369d56e6c1c5d6da6f32ab9243c665e935e92aad1107429a508dab2c98e05ac7a41df23ee804f12afc7ca874d38f996bed5cbff9fe0ccee80a193b7a0ccaa9f01b976c76a139e7b55ff07daad71e44958fc866fb7bf581dc66271be678f58568bb7a194bce999eaee2a78bbc3b4798416c66c142ad74ef1c0e1eb583787a1ab72187c46f4db0be138d1f63d203c10613cdb963c9b86b284df568bfb372eb6077bc73c46c8a849d0abea4f0b77a5cafd28ea5f187d1f6eef933686fdf553fb7246bda756fcac6adc94da90bfc76ca502d2f7e5191bf7ad281e3b148565120c791f5a358d270ddf77d73497bc225b4bd75695c63e31e71544d0220b718bf29708d62bd3deed6ccfddcaab69a20b490f43bfefd5a142a5431ebb7450b80c42ff747f7a5011147952b97ef519f9aa6dc1b125d9948ecc936b9e440bbd8898d82aee8654b37f0a38d02449d8ba43044aaaffa55da30415e9679dc70c3197f050f666b22fb0f4b008242f68a7abf7fa7447b14616f048117fd7865af479b742621bd8d873a5aa759aaf194369110a25a97bd1e5159833faec70feb8d1db7d9c407d9e6372a6fd0cd7059a7954b0a063767be77d8aa14340abdfdfe9e3df7ee99310ff3bbcebc78dee3e7f6f1275cc0f25bee3834bbad73be1365629d4ccc89cd7a575075e7206cf18f77fac3f867f9bc9a7cd3f25f3b1e9c29d2f7e0934ff3b420750e51a80eac8eba1cc19a785c27bf995d393bc2392388f652a036e5361eafc87d2120a6209ecc914eb5d15967f68e3b578cbabe1fb441f3ef836971a97afcee2cd6907966de80aa4ee0120958d37e82aa842b7b2a7de8d2f21a7ac06ca592eba7e597abc1f1063470e90f1c565c466af89c554da92052421d938436a65760010b203253adec85092875e258bc6f04bf8dabea473459b32892fbad710b1c6c0488d8b5bdcf2479957c6fdc0ac88ef8099d69af9d25eac54e4dc0ceb13283fcbccf79f1f2f6e3cea96be0a529f9333532727b597d1169ecce00f615a7aad43b0c130fbff92afa237c26f382011ecf4ad38e240ad9b1d9d81add6d6282abd9e41d123847b6cbc5a23a33909bd14aca4f64f303b4432fe0a27db350290a57b26776bec913b13103e935bf9f4941e1ade8fff5aca07138df199f1331671ab0b81755cc4d3012918f92387063cde434cf2fb9639632f35d8450d4f85001ca2218fcef100d416869014ae6ae9dd014e120358726a5e2f1c0eb46381f282f1b9c1a8c3db2f042565ff1b67eda0ce424d04c347b1468b97a3f77233fed6930bae14af1b2a8f2f72137d8e6b66c308652a24fc71bfedeb3e6ff2dbaf372ec32f58acd9e5e74bf64bfe9256d0745d73a8d30d9c778d130e8f6730de1470f1a28409d2054f3bff9b6b4246a14de6237872549056cf82a64694239d9c13368b31139dae3d724bac64e79a97e4a32c172b86d89e241a395eae35cebd5829f38d2cd93bfe4fb5e57aed270bb0ec48a73a57785cb490d55aef384c124ef164f985cec16caaf2740506b94c1de2a6f9199d62acf136c539329beac6b302db8643051f61cd8e8f0a5c8b43e41a0eb3e6c9593c85ef1e2b15a284bcf7a8bf1f79c86e583063290e8b3a8474c03908d7c94eef18296112a55e3ca6caf610ba0e4a602447d8d9fcc3a6151a5e22059bf22711f0072888d60cc9b37d36d219f20aad9d0e6f1f2f7343b6e01968974d806612bdc81098952d03897faca0d0de03c688a9ac90ee1e590dbd398038496e2f9170abcf172e4afa1dfe29ea940ea0ed893a6da10a99342b509f5d0e0223867b36e3ea344bed9c7d2ec748d696373646ecd97f28f24eaf1869f101c87dcd93fb97fee7fddfbc7c6f4176ddab12be4daa8dcc480884c225a065620656eecaebc486b3d431a5e0ae61582b6645b44459ab7444cfefc59d5a9f88a65cc70747731d368ecf4cb2241e6274ce3a97cf76e214268f2bdbe9d2010595870233cfd007e7527b73cd02664b31a90de6049b885e2a92d8fc6550b324f29802131fa7e40f09dd95409cf29b15dce869df784993fa4a9941ac121ca95a08a4fdca9793bd723ea065977a0fad2122dbc6214e4874a5f1e3e80540b9ca5a3de0eea873c206cfe96ba43967fedde2d190bef3c527ec40e05390573ecac542ea15487d595cb78c2f48effd760624be309d107d384c6216622a6e12bd53a49a765316134f2294d99d176126f2c1d55c4b9ff7041057d50e621008e08a71e99e71ae7d76790654f4eee863ffb08ad9627c6fe8185ceb126877e7cd4f1545338eebd3a3d7cb3d5edc4e4e905bfb66ae2b8ea9b1f50b0cc5f4db373a0bec25ee126e186a3917cedb37de5cddc983444686a1dae0763a7fe22ef95c5bf1328e6f114db5be149f40a97af523ac665f0241f9fa3bca9e0dd66af6ea90209a600eb01994d734f5236c6392ae2162aad8a7fbc7752e4782878f4c6c91a878c3efaa72d63fbe064a961e718d8dcb32c72d6a2aed0f9c2d857379d2c0de23dbc87130d8cab687b5d951e72d78430775805e6753ab4fa3d8c5b42b76b986dce5ee6c8535a801e77d29d5cf89f27c74d8363345f8d19dffc2b2b41ff0989015b10db7d0d03e59f8c9773c69c5f4afe2bbd7f7b8cce3bc7fd8580a87b7327e2956050a59bf04b30bbcf61a80718d9f6bc1f19af2e1b0bdb31c8a7e027395c927bdb95e4a15b6957fab8a62d890c19cda2f27db98924d53d4f6055bd60c75b5aaa4d64e4569e6fc03e14755055ba6a5bd208da7233cd069791bf3d8d3aa44ef49f38c3bec6cd172909891a55559782d695f6d4c841d228e6301ccc4aa5e77b93d5d3e94baa9015d0c308b52679723cf0d2c35d655f5a48f3d940ae61e6cac2056c79827e09f1d7511bf3d3d6788ec9e637478bb0c46a5b310672e12e5d1781184b397ad07b16c404d7e605961ada559ec645ffe19a66873c808bb725a757bd6648a28fffda026b27ca84684caefea04344f290c95c3b1cf18fc9eaf18aab6583039ea92bd0ba6f904fd21b4c203e68b6e26cc1b3f07ff91d388e5328ca6d3a7fd8e7f554f8d5813c3c65bad02dc00ad2a4eb08b339651468c73cbd237d702d195bab9a9c53703fbd14b6f1ba0dafb6e19aa655127a7e646d41c3e22776dd38e730c45c2eab228a41d40d73127bff8937fa5fef2da17eb8b2495939e7b5a34bf57654b933aa67b4af8ac298b9fd22cd49706d082db415adc4d827afb348680801b0e5ec43567336a3d52235b8f9961cfccbd16aa79da89494fbfbd13985e637ccefdd4776b15eb7cf8158a9a76788fa9843f9c3f98cf368a97d005ef95de3f5dc2b0540a60efd6168a129ec9e3e7f347093bb7831aeaafb2e0022bc0678bbe0de00cb059d5607a4974f24e85dc90fdbdddc08841f6585b5ac1caa15d3b7b9ab3715c835140d719e70efd5eb4bc7f23588023b1b54e112b57e6868a7badab6c266e3806816b61f04a1003b025a83c76e59d7db27276a8e383c43955f6d2e35914b41ea4bf102c6ae203da36cea3f50d4f50649738b49b6fdbc097cee9a4bd89105138f4391880bd5b36aef86c3f4ce70ede8f40e425880a50310df7ff881587c7896d5525fcb23d5ecd94e77056eb3c4db098b5820105c0ac86312b0705d478abc358f903075b4d29d1e155026d107bdcdc2c3a68949da44e7eb4da24e8fe31ccf6b2c446e89a2c42bb13226d76c99d4c7a0886a9f0157f13ba94f8bd3690084a0ea1639812386fc1622d3f8349542a118258b7bca07b139aa0a30524574", 0x1000, r12}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d5e1a363536c5678281db19d14629e3d642f8b8af3636c93944c76a146da15", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x125f, 0x0) 34.885539936s ago: executing program 1 (id=4641): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 34.545288724s ago: executing program 1 (id=4643): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a31e", 0x28}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r1, &(0x7f0000010bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x39, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @broadcast, @void, {@mpls_uc={0x8847, {[{0x4}, {0x8000}], @llc={@snap={0x1, 0xab, "18cf", "58ec00", 0x888e, "6b3c46047a4c58c16bd1254deb4146b470a955857fb4cebfac47"}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$rxrpc(0x21, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x2000) ioctl$CEC_RECEIVE(r6, 0xc0386106, 0x0) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000000a00000000000000000000000500342804f01722979821"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0) 34.276895502s ago: executing program 4 (id=3167): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) 32.418524328s ago: executing program 1 (id=4647): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x2ec1, &(0x7f0000000140), &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x1}) 31.666562453s ago: executing program 1 (id=4652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x81, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key$keyring(&(0x7f00000016c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb", 0x36}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9", 0x4d}], 0x3}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x18) 25.211359523s ago: executing program 0 (id=4667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 25.135380189s ago: executing program 0 (id=4668): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_CAPBSET_READ(0x17, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4}, 0x10}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 24.947994215s ago: executing program 0 (id=4671): unshare(0x24020400) r0 = socket(0x10, 0x803, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000600)={0x2}) 24.877697711s ago: executing program 0 (id=4672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x218, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 24.765505417s ago: executing program 0 (id=4673): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0', [{0x20, '\x83,\xde\xe6\x91\xca\xf7\x8a\x01\x80\xc1\xf0\xff\x0fTo\x00'}, {0x20, ','}, {0x20, '/de\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x20, '8D\xc1K\xde\xe4\xef\xcb\xea\xea!\x85n\xcc$\r\xea\xc3~[w\x10t0\xcf\x9c\xca\x7f$\xc5\xdb\xe7\xf0%\xaa\x9c\xfb\x176\xbd\x9e\xa5\xd1\x84d\x7f\xb1\xa1\xc0\n\x97a\x1b\"\f4\xa2;kR\xf5cE\x03:6S\xc9Mf\xb8\x91\x99~\"\xfe#[\xcd\xde\xe2\xe3\x1a\xdcY\x1e\xf5\x90\x94\xd7q.\x19\xd5s\xa7\x15p\xfd\xd0\x16Ey\a\x84zE\xd2+9\xc3C\xa4\xa2A\xbf,xp\r]\xeb\'\xa63\xf1\xd6\xf3\xfe?\x06I\x8f\v\xd2\xa5\xc0\xc8e\xdb\x05\x9bh|\xfd\x7f\x17]\xed\xb1\x9a\x91\xe0\xd8\xd8\x9c\xacFH\xd6a\x81\xbf\xb3\xe8q\xd1\x06\xc36\x90\x81\'\xd9\x8fN\x8c\x92\xab\xbe5\x99\x97\x05XM\xd1Q\xe9i\xe6%;f\x91\xd5C\xb9U\x0fh\xd1\x81\f\xbf'}, {0x20, 'user\x00'}, {0x20, '^}-]\''}]}, 0x105) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 24.649967816s ago: executing program 0 (id=4674): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r1, 0x8924, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x400007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x43, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x7}}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000200)=0x8) openat$cgroup_int(r6, 0x0, 0x2, 0x0) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x6, 0x1f, 0x0) unshare(0x400) unshare(0x30000f00) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x8bcc0c0000000000, 0x0, 0x0, 0x0, 0x3}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00000d0000006a10a066b224df247f0030f3b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r7, 0x301, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) 2.277480578s ago: executing program 3 (id=4737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f2f41bbebe16910ee82a3ac6f0b07590"}]}}}}}}}}, 0x0) 2.120874083s ago: executing program 3 (id=4738): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000008c0)={0x20, 0x0, &(0x7f0000000880)=[{}], 0xdeadbeef, 0x8, 0x1}) 1.927886359s ago: executing program 3 (id=4739): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000400)=ANY=[@ANYBLOB='size=0%,huge=never']) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x42000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1001, 0x7}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) socket$can_raw(0x1d, 0x3, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT=r8, @ANYRESDEC=r9], 0x44) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r11, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x83a6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2800) 1.620962683s ago: executing program 2 (id=4740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0xc01, 0x3, 0x228, 0xd0, 0x5002004a, 0x6, 0x0, 0x3, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@empty, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x3fa}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xfffff716, 0x8942, 0x0, 0x8}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 1.531468947s ago: executing program 3 (id=4741): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000100)=0x9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r3, 0x201}, 0x14}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 1.200075119s ago: executing program 2 (id=4742): r0 = fsopen(&(0x7f00000008c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000900)='/sys/fs/smackfs/logging\x00', &(0x7f0000000940)="90", 0x1) 999.575415ms ago: executing program 2 (id=4743): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000b80)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) 840.064255ms ago: executing program 2 (id=4744): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r1, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="14000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 599.033901ms ago: executing program 2 (id=4745): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000003c0)=@v={0x93, 0x0, 0xa0}) 433.139386ms ago: executing program 3 (id=4746): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x8}, 0x0) 390.932626ms ago: executing program 2 (id=4747): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required], 0x6) io_setup(0x4, &(0x7f00000002c0)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000001ac0)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001080)={0x1, 0x0, [{0x2000, 0xc1, &(0x7f0000000c40)=""/193}]}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffdfffffe}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@udp6}, 0x20) 0s ago: executing program 3 (id=4748): ioprio_set$pid(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) sendfile(r2, r2, 0x0, 0x1) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 910.302696][T13829] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.452295][T13829] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.699911][T13829] bridge_slave_1: left allmulticast mode [ 910.716261][T13829] bridge_slave_1: left promiscuous mode [ 910.722048][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.746482][T13829] bridge_slave_0: left allmulticast mode [ 910.755413][T13829] bridge_slave_0: left promiscuous mode [ 910.761230][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.568864][T12850] Bluetooth: hci1: Frame reassembly failed (-84) [ 912.244245][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 912.256194][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 912.272890][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 912.281370][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 912.290400][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 912.301583][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 912.748983][T17081] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 913.338790][ T4487] Bluetooth: hci1: command 0x1003 tx timeout [ 913.369926][ T5096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 914.101353][T17095] program syz.2.3932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.459399][ T5096] Bluetooth: hci6: command tx timeout [ 914.848145][T13829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.877854][T13829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.919094][T13829] bond0 (unregistering): Released all slaves [ 914.960749][T17093] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 915.001199][T17093] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 915.153786][T17073] lo speed is unknown, defaulting to 1000 [ 915.164695][T17113] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 915.308966][ T29] audit: type=1326 audit(2000000372.324:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17112 comm="syz.0.3939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed1975b59 code=0x0 [ 915.439409][T17122] PM: Enabling pm_trace changes system date and time during resume. [ 915.439409][T17122] PM: Correct system time has to be restored manually after resume. [ 916.538453][ T5096] Bluetooth: hci6: command tx timeout [ 916.951250][T17143] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3948'. [ 917.904224][T13829] hsr_slave_0: left promiscuous mode [ 917.921280][T13829] hsr_slave_1: left promiscuous mode [ 917.936874][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.959037][T13829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.991940][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.038487][T13829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.178902][T13829] veth1_macvtap: left promiscuous mode [ 918.184502][T13829] veth0_macvtap: left promiscuous mode [ 918.222401][T13829] veth1_vlan: left promiscuous mode [ 918.227967][T13829] veth0_vlan: left promiscuous mode [ 918.529394][T17164] PM: Enabling pm_trace changes system date and time during resume. [ 918.529394][T17164] PM: Correct system time has to be restored manually after resume. [ 918.635826][ T5096] Bluetooth: hci6: command tx timeout [ 919.171741][T17175] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 920.691372][T17190] Unknown options in mask 5 [ 920.700390][ T5096] Bluetooth: hci6: command tx timeout [ 921.625462][T13829] team0 (unregistering): Port device team_slave_1 removed [ 922.316794][T13829] team0 (unregistering): Port device team_slave_0 removed [ 924.239824][T17073] chnl_net:caif_netlink_parms(): no params data found [ 924.239834][T17221] netlink: 9216 bytes leftover after parsing attributes in process `syz.2.3978'. [ 924.738269][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.752242][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.759780][T17073] bridge_slave_0: entered allmulticast mode [ 924.765115][T17234] netlink: 'syz.3.3983': attribute type 12 has an invalid length. [ 924.767503][T17073] bridge_slave_0: entered promiscuous mode [ 924.791552][T17240] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.802495][T17240] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.811222][T17240] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.820605][T17240] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.850575][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.852197][T17234] netlink: 'syz.3.3983': attribute type 11 has an invalid length. [ 924.864905][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.904599][T17073] bridge_slave_1: entered allmulticast mode [ 924.944997][T17073] bridge_slave_1: entered promiscuous mode [ 924.967752][T17234] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.3983'. [ 925.120223][T17073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.171527][T17073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.364143][T17073] team0: Port device team_slave_0 added [ 925.385562][T17073] team0: Port device team_slave_1 added [ 925.487155][T17073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.498615][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.592581][ T5266] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 925.601309][T17073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.646437][T17073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.662985][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.688887][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.711755][T17073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.792513][ T5266] usb 1-1: Using ep0 maxpacket: 8 [ 925.822986][ T5266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.851026][ T5266] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 925.881557][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 925.898513][T17073] hsr_slave_0: entered promiscuous mode [ 925.908372][T17073] hsr_slave_1: entered promiscuous mode [ 925.922163][ T5266] usb 1-1: SerialNumber: syz [ 925.931375][T17073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.945150][T17073] Cannot create hsr debugfs directory [ 925.945743][ T5266] usb 1-1: config 0 descriptor?? [ 925.960172][T17266] netlink: 'syz.3.3996': attribute type 21 has an invalid length. [ 925.992673][T17266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3996'. [ 926.014988][T17266] netlink: 'syz.3.3996': attribute type 5 has an invalid length. [ 926.032918][T17266] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3996'. [ 926.213737][ T5266] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 926.246012][ T5266] usb 1-1: No valid video chain found. [ 926.571549][ T5141] usb 1-1: USB disconnect, device number 47 [ 926.783193][ T9396] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 926.983129][ T9396] usb 3-1: Using ep0 maxpacket: 32 [ 926.999941][ T9396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 927.020146][ T9396] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 927.043066][ T9396] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 927.062026][ T9396] usb 3-1: Product: syz [ 927.069395][ T9396] usb 3-1: Manufacturer: syz [ 927.084900][ T9396] usb 3-1: SerialNumber: syz [ 927.114255][ T9396] usb 3-1: config 0 descriptor?? [ 927.263438][T17073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 927.279949][T17073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 927.298455][T17073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 927.326326][T17073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 927.356610][ T9396] usb 3-1: USB disconnect, device number 46 [ 927.598356][T17300] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4011'. [ 927.612385][T17073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.678778][T17073] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.724392][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.731605][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.264113][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.271336][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.399778][T17073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 928.989160][T17073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.593282][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 929.698038][T17349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.710275][T17073] veth0_vlan: entered promiscuous mode [ 929.763930][T17349] team_slave_0: entered promiscuous mode [ 929.784316][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 929.795027][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 929.826727][ T46] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 929.854697][ T46] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 929.873197][ T46] usb 3-1: Product: syz [ 929.887928][ T46] usb 3-1: Manufacturer: syz [ 929.892592][ T46] usb 3-1: SerialNumber: syz [ 929.918712][ T46] usb 3-1: config 0 descriptor?? [ 929.967958][T17349] team0: Port device team_slave_0 removed [ 929.996920][T17073] veth1_vlan: entered promiscuous mode [ 930.090198][T17073] veth0_macvtap: entered promiscuous mode [ 930.115084][T17073] veth1_macvtap: entered promiscuous mode [ 930.134564][ T9396] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 930.154146][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.184649][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.189375][ T5266] usb 3-1: USB disconnect, device number 47 [ 930.207111][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.245476][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.266007][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.288861][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.329642][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.347183][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.365294][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.378757][ T9396] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 930.394740][ T9396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.402874][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.425819][ T9396] usb 4-1: config 0 descriptor?? [ 930.433173][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.460623][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.474990][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.515891][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.558060][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.585047][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.595096][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.605853][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.618616][T17073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.681335][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.713049][ T9396] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 930.735854][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.752043][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.764730][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.791784][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.810278][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.844904][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.857911][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.873175][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.887943][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.902968][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.976819][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.005398][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.015593][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.091682][ T5266] usb 4-1: USB disconnect, device number 51 [ 931.127558][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.162222][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.198484][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.242781][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.274311][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.312065][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.408110][T17073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.432147][T17073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.489677][T17073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.510185][T17073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.551254][T17073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.964766][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.991612][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.116648][T13829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.141752][T13829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.076194][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.082512][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.116215][ T5099] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 933.125245][ T5099] Bluetooth: hci0: Injecting HCI hardware error event [ 933.136624][ T5099] Bluetooth: hci0: hardware error 0x00 [ 933.354244][T17396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4041'. [ 933.437570][T17396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4041'. [ 933.752675][ T4424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.051441][ T4424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.586755][ T5101] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 934.595490][ T5101] Bluetooth: hci8: Injecting HCI hardware error event [ 934.634127][ T4424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.777903][ T4424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.026916][ T5096] Bluetooth: hci8: command 0x0406 tx timeout [ 935.027171][ T5101] Bluetooth: hci9: command 0x0406 tx timeout [ 935.097780][ T4487] Bluetooth: hci8: hardware error 0x00 [ 935.377784][ T4424] bridge_slave_1: left allmulticast mode [ 935.407032][ T4424] bridge_slave_1: left promiscuous mode [ 935.428861][ T5099] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 935.451684][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.532113][ T29] audit: type=1326 audit(2000000392.534:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17417 comm="syz.3.4048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x0 [ 935.571484][ T4424] bridge_slave_0: left allmulticast mode [ 935.607141][ T4424] bridge_slave_0: left promiscuous mode [ 935.624858][T17426] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 935.637183][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.656822][T17426] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4051'. [ 935.821971][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.837853][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.851327][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.865331][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.878732][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 935.886302][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 937.268315][ T4487] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 937.303210][T17440] kvm: kvm [17438]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x13df00000000 [ 937.411454][T17440] kvm: kvm [17438]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x6cce00000000 [ 938.009967][ T4487] Bluetooth: hci1: command tx timeout [ 938.899327][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.948683][T17459] input: syz0 as /devices/virtual/input/input35 [ 939.040976][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.228130][ T4424] bond0 (unregistering): Released all slaves [ 939.303047][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 939.559834][T17458] IPv6: NLM_F_REPLACE set, but no existing node found! [ 939.767247][T17430] lo speed is unknown, defaulting to 1000 [ 940.071197][ T4487] Bluetooth: hci1: command tx timeout [ 940.252156][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 940.343940][ T4487] Bluetooth: hci9: ISO packet for unknown connection handle 3840 [ 940.798242][T17482] netlink: 'syz.1.4065': attribute type 37 has an invalid length. [ 940.806754][ T5225] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 941.029830][ T5225] usb 1-1: Using ep0 maxpacket: 32 [ 941.037097][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.060336][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4065'. [ 941.066616][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.099651][ T5225] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 941.126223][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.137010][ T4424] hsr_slave_0: left promiscuous mode [ 941.166785][ T5225] usb 1-1: config 0 descriptor?? [ 941.176323][ T4424] hsr_slave_1: left promiscuous mode [ 941.230149][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.247922][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.273292][T17486] kvm: kvm [17485]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x13df00000000 [ 941.295962][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.312151][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.335018][T17486] kvm: kvm [17485]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x6cce00000000 [ 941.413954][ T4424] veth1_macvtap: left promiscuous mode [ 941.444273][ T4424] veth0_macvtap: left promiscuous mode [ 941.457736][ T4424] veth1_vlan: left promiscuous mode [ 941.467969][ T4424] veth0_vlan: left promiscuous mode [ 941.593460][ T5225] lua 0003:1E7D:2C2E.001C: global environment stack underflow [ 941.623045][ T5225] lua 0003:1E7D:2C2E.001C: item 0 0 1 11 parsing failed [ 941.644729][ T5225] lua 0003:1E7D:2C2E.001C: parse failed [ 941.655972][ T5225] lua 0003:1E7D:2C2E.001C: probe with driver lua failed with error -22 [ 941.845271][ T5225] usb 1-1: USB disconnect, device number 48 [ 942.152524][ T4487] Bluetooth: hci1: command tx timeout [ 943.136607][T17501] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 943.151307][T16570] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 943.340713][T16570] usb 3-1: Using ep0 maxpacket: 32 [ 943.360834][T16570] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 943.383340][T16570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.413047][T16570] usb 3-1: config 0 descriptor?? [ 943.462505][T16570] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 943.494279][T16570] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 943.903609][T16570] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 944.077900][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 944.098600][T16570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 944.151711][T16570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.179510][T16570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 944.231274][ T4487] Bluetooth: hci1: command tx timeout [ 944.252467][T16570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 944.274054][T16570] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 944.340891][T16570] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 944.388212][T16570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.412098][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 944.418404][T16570] usb 1-1: config 0 descriptor?? [ 945.027770][T16570] ntrig 0003:1B96:000A.001D: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 945.602163][T16570] usb 1-1: USB disconnect, device number 49 [ 946.330399][T17518] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 946.422655][T17498] netlink: 'syz.3.4070': attribute type 1 has an invalid length. [ 946.430495][T17498] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4070'. [ 946.464327][T17496] vlan2: entered promiscuous mode [ 946.714766][ T9396] usb 3-1: USB disconnect, device number 48 [ 946.918924][T17526] IPv6: NLM_F_REPLACE set, but no existing node found! [ 947.053101][T17430] chnl_net:caif_netlink_parms(): no params data found [ 947.249103][T17526] input: syz0 as /devices/virtual/input/input37 [ 947.617565][T17547] sctp: [Deprecated]: syz.0.4081 (pid 17547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 947.617565][T17547] Use struct sctp_sack_info instead [ 948.273387][T17430] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.298610][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.313327][T17430] bridge_slave_0: entered allmulticast mode [ 948.348164][T17430] bridge_slave_0: entered promiscuous mode [ 948.392373][T17430] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.407294][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.415627][T17430] bridge_slave_1: entered allmulticast mode [ 948.424932][T17430] bridge_slave_1: entered promiscuous mode [ 948.529023][T17430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.567007][T17430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.596843][T17557] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 948.613352][T16570] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 948.710197][T17430] team0: Port device team_slave_0 added [ 948.732582][T17430] team0: Port device team_slave_1 added [ 948.781540][T17430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.799370][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.839324][T16570] usb 4-1: Using ep0 maxpacket: 16 [ 948.856538][T17430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.873207][T16570] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 948.889443][T16570] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 948.905303][T17430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.919630][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.946635][T16570] usb 4-1: language id specifier not provided by device, defaulting to English [ 948.977666][T16570] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.996986][T16570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.018976][T17430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.037747][T16570] usb 4-1: Product: 㰊 [ 949.041944][T16570] usb 4-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 949.072414][T16570] usb 4-1: SerialNumber: ఊ [ 949.124607][T17430] hsr_slave_0: entered promiscuous mode [ 949.136123][T17430] hsr_slave_1: entered promiscuous mode [ 949.148854][T17430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.159508][T17430] Cannot create hsr debugfs directory [ 949.410388][T17551] IPVS: Error connecting to the multicast addr [ 949.591137][T17576] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 949.628257][T16570] cdc_ncm 4-1:1.0: skipping garbage [ 949.645492][T17577] batadv0: entered promiscuous mode [ 949.663946][T16570] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 949.691165][T16570] cdc_ncm 4-1:1.0: bind() failure [ 949.738246][T16570] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 949.761333][T16570] cdc_ncm 4-1:1.1: bind() failure [ 949.771961][T16570] usb 4-1: USB disconnect, device number 52 [ 950.189510][T17587] netlink: 'syz.0.4093': attribute type 30 has an invalid length. [ 950.200457][T17430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 950.216685][T17430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 950.264999][T17430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 950.318397][T17430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 950.693250][T17593] sctp: [Deprecated]: syz.2.4094 (pid 17593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.693250][T17593] Use struct sctp_sack_info instead [ 951.236255][T17430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.334938][T17430] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.383976][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.391107][T16570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.483136][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.490345][T16570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.604300][T17602] binder: 17601:17602 ioctl c00c6211 0 returned -14 [ 952.061432][T17430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.606315][T17641] netlink: 'syz.0.4110': attribute type 1 has an invalid length. [ 953.637939][T17641] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.4110'. [ 953.674152][T17641] netlink: 'syz.0.4110': attribute type 1 has an invalid length. [ 953.765474][ T4487] Bluetooth: hci9: unexpected event for opcode 0x203b [ 953.769301][T17635] netlink: 'syz.2.4108': attribute type 30 has an invalid length. [ 954.013036][T17430] veth0_vlan: entered promiscuous mode [ 954.508139][T17430] veth1_vlan: entered promiscuous mode [ 954.554585][T17430] veth0_macvtap: entered promiscuous mode [ 954.675312][T17430] veth1_macvtap: entered promiscuous mode [ 954.743892][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.786336][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.816306][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.848687][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.876132][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.913626][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.952850][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.034201][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.084611][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.153455][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.194439][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.236982][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.271160][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.309220][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.351112][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.388734][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.421681][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.470120][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.518758][T17430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.583046][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.826727][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.852774][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.886657][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.903117][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.933496][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.947465][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.967062][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.985243][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.011045][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.076108][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.103474][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.130957][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.147212][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.179723][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.192425][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.216543][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.235102][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.236855][ T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 956.249398][T17430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.288321][T17668] hsr_slave_1: left allmulticast mode [ 956.440734][T17430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.482372][T17430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.525545][T17430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.534759][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 956.553907][ T46] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 956.557020][T17430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.593796][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.635086][T17686] : Can't lookup blockdev [ 956.663913][ T46] usb 2-1: config 0 descriptor?? [ 956.732908][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.744606][ T46] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 956.752371][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.780948][ T46] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 956.861377][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.893039][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.402132][T17675] vlan2: entered promiscuous mode [ 957.433823][T17706] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 957.476533][T17706] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4130'. [ 957.763007][ T1031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.176752][ T1031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.383013][ T1031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.591409][ T1031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.614436][T16545] usb 2-1: USB disconnect, device number 44 [ 958.834982][ T1031] bridge_slave_1: left allmulticast mode [ 958.842196][ T1031] bridge_slave_1: left promiscuous mode [ 958.850070][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.930030][ T1031] bridge_slave_0: left allmulticast mode [ 958.935693][ T1031] bridge_slave_0: left promiscuous mode [ 958.972028][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.329379][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.345417][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.354832][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.374949][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.395175][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 960.402877][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 960.645493][T17742] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4138'. [ 960.701132][T17742] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 961.415416][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.451559][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.475127][ T1031] bond0 (unregistering): Released all slaves [ 961.532010][T17719] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 961.743456][T17737] lo speed is unknown, defaulting to 1000 [ 961.948176][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4144'. [ 961.966937][T17762] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 962.018248][T17762] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4145'. [ 962.489928][ T5099] Bluetooth: hci1: command tx timeout [ 962.994477][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 963.243231][ T1031] hsr_slave_0: left promiscuous mode [ 963.286062][ T1031] hsr_slave_1: left promiscuous mode [ 963.433407][T17783] overlayfs: workdir and upperdir must reside under the same mount [ 964.560802][ T5099] Bluetooth: hci1: command tx timeout [ 965.084316][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.211551][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.255503][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.292641][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.351865][ T1031] veth1_macvtap: left promiscuous mode [ 965.358243][ T1031] veth0_macvtap: left promiscuous mode [ 965.364600][ T1031] veth1_vlan: left promiscuous mode [ 965.371732][ T1031] veth0_vlan: left promiscuous mode [ 966.642060][ T5099] Bluetooth: hci1: command tx timeout [ 966.658781][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 966.836356][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 968.336474][T17792] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 968.515511][T17737] chnl_net:caif_netlink_parms(): no params data found [ 968.617224][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4158'. [ 968.723591][ T5099] Bluetooth: hci1: command tx timeout [ 968.900567][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.923169][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.969433][T17737] bridge_slave_0: entered allmulticast mode [ 968.997652][T17737] bridge_slave_0: entered promiscuous mode [ 969.033708][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 969.112999][ T5225] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 969.174804][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.185084][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.201484][T17737] bridge_slave_1: entered allmulticast mode [ 969.221098][T17737] bridge_slave_1: entered promiscuous mode [ 969.230073][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4164'. [ 969.304542][ T5225] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 969.436082][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.500784][ T5225] usb 4-1: config 0 descriptor?? [ 969.526261][ T5225] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 969.599138][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.668135][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.850356][T17835] input: syz0 as /devices/virtual/input/input39 [ 969.918789][T17737] team0: Port device team_slave_0 added [ 969.945890][T17737] team0: Port device team_slave_1 added [ 970.048760][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4172'. [ 970.062889][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.083945][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.161678][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.201701][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.221648][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.287961][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.340031][ T5225] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 970.349894][ T5225] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 970.412520][ T5225] usb 4-1: USB disconnect, device number 53 [ 970.626089][T17737] hsr_slave_0: entered promiscuous mode [ 970.665181][T17737] hsr_slave_1: entered promiscuous mode [ 970.693062][T17737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.729004][T17737] Cannot create hsr debugfs directory [ 970.914612][T17852] IPv6: NLM_F_REPLACE set, but no existing node found! [ 971.023357][T17852] input: syz0 as /devices/virtual/input/input40 [ 971.204577][T17863] program syz.2.4181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.358712][T17865] input: syz0 as /devices/virtual/input/input41 [ 971.908720][ T29] audit: type=1326 audit(2000000428.897:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17874 comm="syz.2.4186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a1d375b59 code=0x0 [ 972.301680][T17737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 972.332343][T17737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 972.359272][T17737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 972.380448][T17737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 972.936409][T17737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.971370][T17737] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.017057][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.024221][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.126541][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.133735][ T9392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.215514][T17895] geneve2: entered promiscuous mode [ 973.234985][T17895] geneve2: entered allmulticast mode [ 973.434382][T17898] program syz.0.4193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.559645][T17901] input: syz0 as /devices/virtual/input/input42 [ 974.098523][T17737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.399926][ T29] audit: type=1326 audit(2000000431.386:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.474742][ T29] audit: type=1326 audit(2000000431.386:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.521309][ T29] audit: type=1326 audit(2000000431.426:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.547591][ T29] audit: type=1326 audit(2000000431.426:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.572225][ T29] audit: type=1326 audit(2000000431.436:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.657921][ T29] audit: type=1326 audit(2000000431.446:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.715161][ T29] audit: type=1326 audit(2000000431.446:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 974.757771][ T29] audit: type=1326 audit(2000000431.446:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f75ec56cba7 code=0x7ffc0000 [ 974.816028][ T29] audit: type=1326 audit(2000000431.446:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75ec511569 code=0x7ffc0000 [ 974.875432][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4205'. [ 974.912384][T17737] veth0_vlan: entered promiscuous mode [ 974.978830][T17737] veth1_vlan: entered promiscuous mode [ 975.104487][T17737] veth0_macvtap: entered promiscuous mode [ 975.179291][T17737] veth1_macvtap: entered promiscuous mode [ 975.288277][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.316035][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.335039][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.348392][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.358718][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.369646][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.385288][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.395998][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.406027][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.420150][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.439043][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.461122][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.538762][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.559050][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.578566][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.596052][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.606084][ T5141] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 975.619760][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.650550][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.662595][T17737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.699781][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.735239][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.747167][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.761191][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.775548][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.791601][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.792580][T17952] input: syz0 as /devices/virtual/input/input44 [ 975.806885][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.826697][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.837130][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.848359][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.859106][ T5141] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.884755][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.895470][ T5141] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 975.914096][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.924286][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.942367][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.953231][ T5141] usb 4-1: config 0 descriptor?? [ 975.961161][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.971277][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.982860][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.993846][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.004513][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.033344][T17737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.113226][T17737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.166447][T17737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.194274][T17737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.229382][T17737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.401594][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.443829][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.474471][T17962] geneve2: entered promiscuous mode [ 976.489843][T17962] geneve2: entered allmulticast mode [ 976.576197][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.642441][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.916881][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 976.916900][ T29] audit: type=1326 audit(2000000433.904:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1d311569 code=0x7ffc0000 [ 976.969590][ T29] audit: type=1326 audit(2000000433.904:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1d36cba7 code=0x7ffc0000 [ 977.052907][ T29] audit: type=1326 audit(2000000433.904:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1d311569 code=0x7ffc0000 [ 977.092632][ T29] audit: type=1326 audit(2000000433.904:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1d36cba7 code=0x7ffc0000 [ 977.193336][ T29] audit: type=1326 audit(2000000433.904:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1d311569 code=0x7ffc0000 [ 977.260764][ T29] audit: type=1326 audit(2000000433.904:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1d36cba7 code=0x7ffc0000 [ 977.312277][ T29] audit: type=1326 audit(2000000433.904:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1d311569 code=0x7ffc0000 [ 977.342446][ T29] audit: type=1326 audit(2000000433.904:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1d36cba7 code=0x7ffc0000 [ 977.411414][ T29] audit: type=1326 audit(2000000433.904:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a1d311569 code=0x7ffc0000 [ 977.448435][ T29] audit: type=1326 audit(2000000433.904:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17968 comm="syz.2.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1d36cba7 code=0x7ffc0000 [ 977.608251][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4222'. [ 978.457485][T17990] netlink: 'syz.0.4223': attribute type 10 has an invalid length. [ 978.549533][ T5141] usb 4-1: USB disconnect, device number 54 [ 978.579382][T17992] program syz.2.4224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.763537][T17996] : Can't lookup blockdev [ 979.102434][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.161983][T18008] nbd: device at index 2 is going down [ 979.703397][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.885465][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.021482][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.328445][ T12] bridge_slave_1: left allmulticast mode [ 980.348157][ T12] bridge_slave_1: left promiscuous mode [ 980.353958][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.411105][ T12] bridge_slave_0: left allmulticast mode [ 980.428209][ T12] bridge_slave_0: left promiscuous mode [ 980.437514][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.802975][T18034] netlink: 'syz.3.4235': attribute type 10 has an invalid length. [ 981.969604][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 982.159352][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 982.585276][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 982.602637][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 982.621678][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 982.630468][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 984.023734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.046917][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.060920][ T12] bond0 (unregistering): Released all slaves [ 984.305180][T18036] lo speed is unknown, defaulting to 1000 [ 984.822686][ T4487] Bluetooth: hci1: command tx timeout [ 985.090419][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 985.090442][ T29] audit: type=1326 audit(2000000442.041:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 987.498964][ T4487] Bluetooth: hci1: command tx timeout [ 987.783533][ T29] audit: type=1326 audit(2000000442.041:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 987.877528][ T29] audit: type=1326 audit(2000000442.041:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 987.919202][ T29] audit: type=1326 audit(2000000442.041:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 987.938435][T18089] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4251'. [ 987.964186][T18089] unsupported nlmsg_type 40 [ 987.979662][ T29] audit: type=1326 audit(2000000442.041:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 988.171701][ T29] audit: type=1326 audit(2000000442.041:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 988.905813][ T5099] Bluetooth: hci9: unexpected event 0x30 length: 23 > 3 [ 989.035489][ T29] audit: type=1326 audit(2000000442.041:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 989.055197][T18099] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 989.122590][ T29] audit: type=1326 audit(2000000442.041:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 989.153405][T18099] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 989.197158][ T29] audit: type=1326 audit(2000000442.041:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 989.309883][ T29] audit: type=1326 audit(2000000442.041:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18067 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x7ffc0000 [ 989.537202][ T5099] Bluetooth: hci1: command tx timeout [ 989.663341][ T12] hsr_slave_0: left promiscuous mode [ 989.708758][ T12] hsr_slave_1: left promiscuous mode [ 989.734673][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.742152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.764831][T18122] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4264'. [ 989.786880][T18125] binder: 18117:18125 ioctl 1 20001200 returned -22 [ 989.842387][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.851100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.934020][ T5099] Bluetooth: hci9: command 0x0406 tx timeout [ 990.022941][ T12] veth1_macvtap: left promiscuous mode [ 990.050727][ T12] veth0_macvtap: left promiscuous mode [ 990.065030][ T12] veth1_vlan: left promiscuous mode [ 990.088215][ T12] veth0_vlan: left promiscuous mode [ 990.103224][T18133] input: syz0 as /devices/virtual/input/input45 [ 990.726135][T18144] ecryptfs_parse_options: eCryptfs: unrecognized option [arrier] [ 990.763396][T18144] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 990.793681][T18144] Error parsing options; rc = [-22] [ 991.618226][ T5099] Bluetooth: hci1: command tx timeout [ 991.747535][ T12] team0 (unregistering): Port device team_slave_1 removed [ 991.814181][ T12] team0 (unregistering): Port device team_slave_0 removed [ 992.717493][T18127] IPv6: NLM_F_REPLACE set, but no existing node found! [ 993.029374][T18162] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4276'. [ 993.172360][T18036] chnl_net:caif_netlink_parms(): no params data found [ 993.382582][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 993.392372][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 993.625465][T18178] netlink: 'syz.2.4282': attribute type 1 has an invalid length. [ 993.768979][T18036] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.796783][T18036] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.845355][T18036] bridge_slave_0: entered allmulticast mode [ 993.877676][T18036] bridge_slave_0: entered promiscuous mode [ 993.915457][T18036] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.924929][T18036] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.954872][T18036] bridge_slave_1: entered allmulticast mode [ 993.962361][T18036] bridge_slave_1: entered promiscuous mode [ 994.385771][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.392621][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.937505][T18036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.041647][T18036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.235451][ T46] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 995.304979][T18036] team0: Port device team_slave_0 added [ 995.337448][T18036] team0: Port device team_slave_1 added [ 995.363344][T18197] xt_TCPMSS: Only works on TCP SYN packets [ 995.410263][T18036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.437712][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.468355][ T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.477604][T18036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.515354][ T46] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 995.540205][T18036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.559484][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.567821][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.618983][ T46] usb 1-1: config 0 descriptor?? [ 995.643772][T18036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.807755][T18036] hsr_slave_0: entered promiscuous mode [ 995.846179][T18036] hsr_slave_1: entered promiscuous mode [ 995.873531][T18036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.899531][T18036] Cannot create hsr debugfs directory [ 996.064053][T18209] netlink: 'syz.2.4293': attribute type 1 has an invalid length. [ 996.170570][T18211] input: syz1 as /devices/virtual/input/input46 [ 996.445890][ T5099] Bluetooth: hci9: ACL packet for unknown connection handle 200 [ 998.758196][T18227] overlayfs: workdir and upperdir must reside under the same mount [ 998.881040][ T5266] usb 1-1: USB disconnect, device number 50 [ 999.305400][T18036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 999.316534][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 999.316551][ T29] audit: type=1326 audit(2000000456.284:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.3.4302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x0 [ 999.383795][T18036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 999.542897][T18036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 999.565035][T18036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 999.742148][T18251] input: syz1 as /devices/virtual/input/input47 [ 999.983875][T18036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.072270][T18036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.140304][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.147529][ T9392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.233483][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.240721][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.433527][T18036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.559835][ T29] audit: type=1326 audit(2000000457.533:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18267 comm="syz.1.4314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2372375b59 code=0x0 [ 1000.602823][T18268] lo speed is unknown, defaulting to 1000 [ 1000.808488][ T5141] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1000.964789][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.008251][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 1001.025163][ T5141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1001.056338][ T5141] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1001.092966][ T5141] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1001.117863][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1001.147254][ T5141] usb 4-1: Product: syz [ 1001.158826][ T5141] usb 4-1: Manufacturer: syz [ 1001.176687][ T5141] usb 4-1: SerialNumber: syz [ 1001.202956][ T5141] usb 4-1: config 0 descriptor?? [ 1001.448707][ T5141] usb 4-1: USB disconnect, device number 55 [ 1001.725625][T18036] veth0_vlan: entered promiscuous mode [ 1001.768165][T18036] veth1_vlan: entered promiscuous mode [ 1001.964364][T18036] veth0_macvtap: entered promiscuous mode [ 1002.014199][T18036] veth1_macvtap: entered promiscuous mode [ 1002.104926][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.138655][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.163190][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.188549][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.198414][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.249015][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.274289][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.295890][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.312553][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.340824][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.358968][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.376845][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.397116][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.415283][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.437980][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.476888][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.506478][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.527403][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.554608][T18036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.672597][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.688838][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.707240][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.718548][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.730179][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.745852][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.764895][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.778938][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.790533][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.801666][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.811808][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.822775][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.832927][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.848079][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.877617][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.889034][ T9393] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1002.901302][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.921496][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.944448][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.983963][T18036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.066900][T18036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.086947][T18036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.103340][T18036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.131311][ T9393] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1003.134859][T18036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.159682][ T9393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.202456][ T9393] usb 1-1: config 0 descriptor?? [ 1003.244690][ T9393] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 1003.333207][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.360610][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.415668][ T1850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.425931][ T1850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.671397][ T9393] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1003.684402][ T9393] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1003.711813][ T9393] usb 1-1: USB disconnect, device number 51 [ 1003.797593][T18341] input: syz1 as /devices/virtual/input/input48 [ 1005.079155][T18370] netlink: 'syz.3.4350': attribute type 3 has an invalid length. [ 1005.087086][T18370] netlink: 'syz.3.4350': attribute type 1 has an invalid length. [ 1005.924103][ T4408] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.370138][ T4408] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.492003][ T4408] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.618894][ T4408] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.880319][ T4408] bridge_slave_1: left allmulticast mode [ 1006.891701][ T4408] bridge_slave_1: left promiscuous mode [ 1006.921050][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.929636][ T4408] bridge_slave_0: left allmulticast mode [ 1006.956450][ T4408] bridge_slave_0: left promiscuous mode [ 1006.976613][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.409941][T18387] overlayfs: overlapping lowerdir path [ 1007.480383][T18390] xt_hashlimit: max too large, truncated to 1048576 [ 1007.526537][T18390] xt_hashlimit: overflow, try lower: 0/0 [ 1007.572097][T18394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.586501][T18392] sctp: [Deprecated]: syz.3.4359 (pid 18392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1007.586501][T18392] Use struct sctp_sack_info instead [ 1007.633431][T18394] fuse: Bad value for 'fd' [ 1007.686716][ C1] eth0: bad gso: type: 1, size: 1408 [ 1007.811472][ T46] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1008.006585][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.021753][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.036273][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1008.042219][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.055974][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.067696][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.075191][ T46] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1008.086641][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.101423][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1008.109082][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.122585][ T46] usb 1-1: config 0 descriptor?? [ 1008.133011][ T46] cdc_acm 1-1:0.0: skipping garbage [ 1008.138436][ T46] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 1008.729275][ T4408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.777469][ T4408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.809441][ T4408] bond0 (unregistering): Released all slaves [ 1008.859126][T18405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1008.907591][T18406] batadv_slave_1: entered promiscuous mode [ 1008.958432][T18408] batadv_slave_1: left promiscuous mode [ 1009.120678][T18401] lo speed is unknown, defaulting to 1000 [ 1009.762137][ T4408] hsr_slave_0: left promiscuous mode [ 1009.786090][ T4408] hsr_slave_1: left promiscuous mode [ 1009.797914][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.816847][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.854663][ T4408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.873635][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.010972][ T4408] veth1_macvtap: left promiscuous mode [ 1010.023296][ T4408] veth0_macvtap: left promiscuous mode [ 1010.039564][ T4408] veth1_vlan: left promiscuous mode [ 1010.050847][ T4408] veth0_vlan: left promiscuous mode [ 1010.182455][ T5099] Bluetooth: hci1: command tx timeout [ 1010.512807][ T9393] usb 1-1: USB disconnect, device number 52 [ 1012.266317][ T4487] Bluetooth: hci1: command tx timeout [ 1013.453095][ T4408] team0 (unregistering): Port device team_slave_1 removed [ 1013.623372][ T4408] team0 (unregistering): Port device team_slave_0 removed [ 1014.362278][ T4487] Bluetooth: hci1: command tx timeout [ 1015.161931][ T29] audit: type=1326 audit(2000000472.126:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18495 comm="syz.2.4396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a1d375b59 code=0x0 [ 1015.794120][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1015.882743][T18491] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1015.916366][T18491] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1016.187326][T18401] chnl_net:caif_netlink_parms(): no params data found [ 1016.429520][ T4487] Bluetooth: hci1: command tx timeout [ 1016.666147][T18516] netlink: 'syz.2.4399': attribute type 3 has an invalid length. [ 1016.673966][T18516] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 1017.432929][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1017.512198][T18534] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 1017.522777][T18534] netlink: 9320 bytes leftover after parsing attributes in process `syz.2.4405'. [ 1017.543783][T18534] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 1017.552218][T18534] netlink: 'syz.2.4405': attribute type 2 has an invalid length. [ 1017.717054][ T4487] Bluetooth: hci9: unexpected event for opcode 0x204e [ 1017.724708][ T29] audit: type=1326 audit(2000000474.685:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18538 comm="syz.0.4407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed1975b59 code=0x0 [ 1017.887253][T18401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.894518][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.100720][T18401] bridge_slave_0: entered allmulticast mode [ 1018.219204][T18401] bridge_slave_0: entered promiscuous mode [ 1018.474398][T18401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.669003][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.721749][T18401] bridge_slave_1: entered allmulticast mode [ 1018.837151][T18401] bridge_slave_1: entered promiscuous mode [ 1019.062887][T18401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.101930][T18401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.118183][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4415'. [ 1019.312787][T18401] team0: Port device team_slave_0 added [ 1019.485603][T18401] team0: Port device team_slave_1 added [ 1020.439950][T18575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.501354][T18401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.517472][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.580540][T18401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.693072][T18401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.713427][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.743095][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1020.807901][T18401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.860930][T18592] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 32973 - 0 [ 1020.884214][T18592] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 32973 - 0 [ 1020.917543][T18592] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 32973 - 0 [ 1020.927618][T18592] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 32973 - 0 [ 1021.248644][T18588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.072310][T18401] hsr_slave_0: entered promiscuous mode [ 1022.109900][T18401] hsr_slave_1: entered promiscuous mode [ 1022.168029][T18401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.198152][T18401] Cannot create hsr debugfs directory [ 1022.484087][T18623] dvmrp0: entered allmulticast mode [ 1022.519001][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4440'. [ 1022.808383][ T9393] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1023.083184][T18638] lo speed is unknown, defaulting to 1000 [ 1023.098506][ T9393] usb 4-1: Using ep0 maxpacket: 8 [ 1023.108233][ T9393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.129866][ T9393] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 1023.139793][ T9393] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1023.147826][ T9393] usb 4-1: Manufacturer: syz [ 1023.210224][ T9393] usb 4-1: config 0 descriptor?? [ 1023.580402][ T9393] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 1024.229821][ T9393] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 1024.293378][ T9393] usb 4-1: USB disconnect, device number 56 [ 1024.809433][T18658] netlink: 'syz.3.4452': attribute type 1 has an invalid length. [ 1024.849832][T18658] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1024.872420][T18658] netlink: 'syz.3.4452': attribute type 1 has an invalid length. [ 1024.924432][T18658] netlink: 'syz.3.4452': attribute type 2 has an invalid length. [ 1025.078860][T18660] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 41719 - 0 [ 1025.122885][T18660] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 41719 - 0 [ 1025.139421][T18660] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 41719 - 0 [ 1025.149053][T18660] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 41719 - 0 [ 1025.375218][T18401] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.396342][T18401] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.459715][T18401] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.484342][T18401] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1025.679091][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.752189][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.771196][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.778409][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.825592][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.832736][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.861848][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1026.113985][T18679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.252759][T18693] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1027.281800][T18692] tipc: Started in network mode [ 1027.286853][T18692] tipc: Node identity 8000, cluster identity 4711 [ 1027.325905][T18692] tipc: Node number set to 32768 [ 1027.476815][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.148981][T18401] veth0_vlan: entered promiscuous mode [ 1028.357258][T18401] veth1_vlan: entered promiscuous mode [ 1029.202779][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1029.220567][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1029.317891][T18401] veth0_macvtap: entered promiscuous mode [ 1029.487998][T18401] veth1_macvtap: entered promiscuous mode [ 1029.518679][T18735] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1029.566849][T18736] fuse: Unknown parameter '0xffffffffffffffff' [ 1030.317261][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.361898][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.371726][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.421850][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.455636][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.486856][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.505919][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.539852][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.577749][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.611908][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.651962][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.694140][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.716459][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.734086][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.770918][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.826585][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.876062][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.019790][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.031890][T18401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.048299][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.805132][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.815426][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.826588][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.839824][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.850549][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.861740][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.872836][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.893284][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.912572][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.928157][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.946054][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.958410][T18762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.974840][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.995268][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.016855][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.046713][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.100140][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1032.102615][T18401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.192027][T18401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.220402][T18401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.262822][T18401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.297730][T18401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.331490][T18401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.353768][T18401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.399002][T18762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.571929][T18762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.579439][T13829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.626344][T13829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.708595][T13829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.729424][T13829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.586059][T18798] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4503'. [ 1034.474848][ T2832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.679748][ T2832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.821374][ T2832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.975370][ T2832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.149735][ T2832] bridge_slave_1: left allmulticast mode [ 1035.174249][ T2832] bridge_slave_1: left promiscuous mode [ 1035.179950][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.220912][ T2832] bridge_slave_0: left allmulticast mode [ 1035.228892][ T2832] bridge_slave_0: left promiscuous mode [ 1035.258426][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.223761][T18821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.325465][T18825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1038.156568][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.171271][T18838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.197854][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1038.211341][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1038.235415][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1038.254545][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1038.274421][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1038.283717][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1038.295306][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1038.334826][ T2832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.374415][ T2832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.417189][ T2832] bond0 (unregistering): Released all slaves [ 1038.696473][T18840] lo speed is unknown, defaulting to 1000 [ 1039.399636][T18859] vhci_hcd: invalid port number 129 [ 1039.404951][T18859] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 1040.380833][ T4487] Bluetooth: hci1: command tx timeout [ 1040.395967][T18871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1040.987690][ T2832] hsr_slave_0: left promiscuous mode [ 1041.114398][ T2832] hsr_slave_1: left promiscuous mode [ 1041.126109][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1041.261832][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.387504][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.412703][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.428624][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.624311][ T2832] veth1_macvtap: left promiscuous mode [ 1041.633339][ T2832] veth0_macvtap: left promiscuous mode [ 1041.645896][ T2832] veth1_vlan: left promiscuous mode [ 1041.659185][ T2832] veth0_vlan: left promiscuous mode [ 1042.437680][ T4487] Bluetooth: hci1: command tx timeout [ 1042.779008][T18922] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 1042.844846][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1043.848982][ T2832] team0 (unregistering): Port device team_slave_1 removed [ 1044.519019][ T4487] Bluetooth: hci1: command tx timeout [ 1044.592326][ T2832] team0 (unregistering): Port device team_slave_0 removed [ 1044.979607][T18954] netlink: 'syz.3.4561': attribute type 1 has an invalid length. [ 1044.997219][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4561'. [ 1045.115309][T18956] input: syz1 as /devices/virtual/input/input50 [ 1046.564440][T18968] [U] [ 1046.567967][T18968] [U] [ 1046.570691][T18968] [U] [ 1046.573394][T18968] [U] [ 1046.600908][ T4487] Bluetooth: hci1: command tx timeout [ 1046.627148][T18968] [U] [ 1046.629861][T18968] [U] [ 1046.632528][T18968] [U] [ 1046.635192][T18968] [U] [ 1046.655035][T18968] [U] [ 1046.657743][T18968] [U] [ 1046.660414][T18968] [U] [ 1046.904665][T18840] chnl_net:caif_netlink_parms(): no params data found [ 1047.445232][T18966] [U] [ 1047.771699][ T29] audit: type=1326 audit(2000000504.721:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1047.930309][ T29] audit: type=1326 audit(2000000504.721:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1047.961078][ T29] audit: type=1326 audit(2000000504.741:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1047.984763][ T29] audit: type=1326 audit(2000000504.791:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1048.079704][ T29] audit: type=1326 audit(2000000504.791:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1048.194465][T18840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.225202][T18840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.235863][T18840] bridge_slave_0: entered allmulticast mode [ 1048.262764][T18840] bridge_slave_0: entered promiscuous mode [ 1048.285148][T18840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.285255][ T29] audit: type=1326 audit(2000000504.791:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1048.328754][T18840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.351861][T18840] bridge_slave_1: entered allmulticast mode [ 1048.519164][T18840] bridge_slave_1: entered promiscuous mode [ 1049.156690][ T29] audit: type=1326 audit(2000000504.791:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1049.342449][ T29] audit: type=1326 audit(2000000504.801:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18979 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1049.466147][T18840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.505801][T18840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.696680][T18840] team0: Port device team_slave_0 added [ 1049.881300][T18840] team0: Port device team_slave_1 added [ 1050.766770][T18840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.801576][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.904430][T18840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.970937][T18840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.005653][T18840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.124057][T18840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.477174][T18840] hsr_slave_0: entered promiscuous mode [ 1051.912453][ T5141] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1051.971428][T18840] hsr_slave_1: entered promiscuous mode [ 1052.227174][T18840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1052.248872][T18840] Cannot create hsr debugfs directory [ 1052.284554][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 1052.302033][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.320314][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1052.337894][ T5141] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1052.347262][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.388165][ T5141] usb 3-1: config 0 descriptor?? [ 1052.993559][ T5141] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001E/input/input51 [ 1053.123516][ T5141] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1053.408590][ T9396] usb 3-1: USB disconnect, device number 49 [ 1054.363960][T18840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1054.389597][T18840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1054.433083][T18840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1054.498818][ C1] eth0: bad gso: type: 1, size: 1408 [ 1054.514408][T18840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1054.748449][T19087] lo speed is unknown, defaulting to 1000 [ 1054.969848][T18840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.011628][T18840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.042638][T19104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4608'. [ 1055.090761][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.097990][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.139229][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.146555][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.693522][ T29] audit: type=1804 audit(2000000512.627:877): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.4615" name="/newroot/232/bus/file0" dev="overlay" ino=1256 res=1 errno=0 [ 1055.736920][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.743292][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.975886][T18840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.184139][ T9396] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1056.397930][ T9396] usb 3-1: Using ep0 maxpacket: 16 [ 1056.417979][ T9396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.439401][ T9396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1056.480840][ T9396] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1056.541218][ T9396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.595145][ T9396] usb 3-1: config 0 descriptor?? [ 1056.976613][T18840] veth0_vlan: entered promiscuous mode [ 1057.036775][T18840] veth1_vlan: entered promiscuous mode [ 1057.153067][T19152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1057.190462][ T9396] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001F/input/input52 [ 1057.236817][T18840] veth0_macvtap: entered promiscuous mode [ 1057.259847][T18840] veth1_macvtap: entered promiscuous mode [ 1057.382902][ T9396] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1057.396806][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.452540][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.482971][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.512302][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.526220][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.544677][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.563827][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.614076][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.630841][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.677812][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.714440][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.744859][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.777865][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.814766][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.827018][ T9396] usb 3-1: USB disconnect, device number 50 [ 1057.854881][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.880360][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.900505][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.927805][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.972060][T18840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.036249][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.085111][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.111093][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.148660][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.170366][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.206905][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.225074][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.254979][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.264830][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.305046][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.314933][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.365055][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.374914][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.413654][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.432357][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.449023][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.475953][T18840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.497037][T18840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.524472][T18840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.549080][T18840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.596189][T18840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.617743][T18840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.633071][T18840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.651010][T19172] syzkaller1: entered promiscuous mode [ 1058.679247][T19172] syzkaller1: entered allmulticast mode [ 1058.968446][T19190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1059.071924][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.082207][ C1] eth0: bad gso: type: 1, size: 1408 [ 1059.108375][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.200681][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.208863][ T5141] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1059.235515][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.437478][ T5141] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1059.490629][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.509377][ T5141] usb 3-1: config 16 has no interfaces? [ 1059.520002][ T5141] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1059.546692][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.695564][T19217] dvmrp0: entered allmulticast mode [ 1059.891126][ T5141] usb 3-1: USB disconnect, device number 51 [ 1059.967529][ T2832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.066829][T16570] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1060.187657][ T2832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.328927][T16570] usb 2-1: Using ep0 maxpacket: 8 [ 1060.339660][ T2832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.349680][T16570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.375395][T16570] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 1060.384868][T16570] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1060.396229][T16570] usb 2-1: Manufacturer: syz [ 1060.405754][T16570] usb 2-1: config 0 descriptor?? [ 1060.492100][ T2832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.636749][T16570] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 1060.648086][T16570] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 1060.696694][T16570] usb 2-1: USB disconnect, device number 45 [ 1060.778586][ T2832] bridge_slave_1: left allmulticast mode [ 1060.847469][ T2832] bridge_slave_1: left promiscuous mode [ 1060.866464][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.888400][ T2832] bridge_slave_0: left allmulticast mode [ 1060.894082][ T2832] bridge_slave_0: left promiscuous mode [ 1060.906505][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.067258][T19232] vivid-000: disconnect [ 1062.081777][T19232] vivid-000: reconnect [ 1062.243216][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1062.257341][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1062.267554][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1062.276525][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1062.286484][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1062.294015][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1062.973819][T19250] binder: 19249:19250 ioctl 4018620d 0 returned -22 [ 1063.197334][ T29] audit: type=1326 audit(2000000520.124:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.3.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1063.662494][ T29] audit: type=1326 audit(2000000520.124:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.3.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1063.722217][ T29] audit: type=1326 audit(2000000520.154:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.3.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1063.795149][ T29] audit: type=1326 audit(2000000520.164:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.3.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1063.818472][ T29] audit: type=1326 audit(2000000520.164:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.3.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ec575b59 code=0x7ffc0000 [ 1064.001477][ T2832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.018875][ T2832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.038334][ T2832] bond0 (unregistering): Released all slaves [ 1064.086175][T19237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4650'. [ 1064.278275][T19239] lo speed is unknown, defaulting to 1000 [ 1064.368592][ T4487] Bluetooth: hci1: command tx timeout [ 1064.477982][T16545] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1064.767068][T16545] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1064.802021][T16545] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.826409][T16545] usb 3-1: config 16 has no interfaces? [ 1064.850064][T16545] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1064.950383][T16545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.092145][T19247] lo speed is unknown, defaulting to 1000 [ 1066.449215][ T4487] Bluetooth: hci1: command tx timeout [ 1067.347081][T19287] xt_connbytes: Forcing CT accounting to be enabled [ 1067.367162][T16570] usb 3-1: USB disconnect, device number 52 [ 1067.399722][T19287] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1068.720270][ T4487] Bluetooth: hci1: command tx timeout [ 1068.812730][ T2832] hsr_slave_0: left promiscuous mode [ 1068.870650][ T2832] hsr_slave_1: left promiscuous mode [ 1068.898210][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.930671][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.960106][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.981872][T19304] input: syz1 as /devices/virtual/input/input53 [ 1068.988354][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.089856][ T2832] veth1_macvtap: left promiscuous mode [ 1069.105298][ T2832] veth0_macvtap: left promiscuous mode [ 1069.128351][ T2832] veth1_vlan: left promiscuous mode [ 1069.146653][ T2832] veth0_vlan: left promiscuous mode [ 1070.779042][ T4487] Bluetooth: hci1: command tx timeout [ 1070.896454][T19324] Falling back ldisc for ptm0. [ 1071.077225][ T2832] team0 (unregistering): Port device team_slave_1 removed [ 1071.279233][ T2832] team0 (unregistering): Port device team_slave_0 removed [ 1072.692204][T19239] chnl_net:caif_netlink_parms(): no params data found [ 1072.723498][T19307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1073.437320][ T5099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1073.460709][ T5099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1073.470141][ T5099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1073.482150][ T5099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1073.492378][ T5099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1073.499833][ T5099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1073.620927][T19239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.652050][T19239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.686215][T19239] bridge_slave_0: entered allmulticast mode [ 1073.736358][T19239] bridge_slave_0: entered promiscuous mode [ 1073.811521][T19239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.859659][T19239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.866987][T19239] bridge_slave_1: entered allmulticast mode [ 1073.911420][T19239] bridge_slave_1: entered promiscuous mode [ 1074.047359][T19342] lo speed is unknown, defaulting to 1000 [ 1074.055291][T19239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.104314][T19239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.309225][T19239] team0: Port device team_slave_0 added [ 1074.379679][T19239] team0: Port device team_slave_1 added [ 1074.502011][T19239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.535352][T19239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.575335][T19239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.629315][T19239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.654576][T19239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.746248][T19239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.056684][T19239] hsr_slave_0: entered promiscuous mode [ 1075.089089][T19239] hsr_slave_1: entered promiscuous mode [ 1075.128325][T19239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1075.169548][T19239] Cannot create hsr debugfs directory [ 1075.715314][ T4487] Bluetooth: hci6: command tx timeout [ 1076.500991][ T4424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.538997][ T4424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.551317][T19376] xt_connbytes: Forcing CT accounting to be enabled [ 1076.570631][ T4424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41719 - 0 [ 1077.236404][ T4424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.264174][ T4424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.284289][ T4424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41719 - 0 [ 1077.714267][ T4424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.757840][ T4424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.798217][ T4424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41719 - 0 [ 1078.116709][ T4424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1078.142846][ T4424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.167306][ T4424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41719 - 0 [ 1078.227711][T19342] chnl_net:caif_netlink_parms(): no params data found [ 1078.271856][ T4487] Bluetooth: hci6: command tx timeout [ 1078.472659][ T9393] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1079.147856][ T9393] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1079.243022][ T9393] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.279445][ T9393] usb 4-1: config 16 has no interfaces? [ 1079.285067][ T9393] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1079.329933][ T9393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.367351][ T4487] Bluetooth: hci6: command tx timeout [ 1080.536046][ T1153] usb 4-1: USB disconnect, device number 57 [ 1080.589676][T19342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.617890][T19342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.648677][T19342] bridge_slave_0: entered allmulticast mode [ 1080.656173][T19342] bridge_slave_0: entered promiscuous mode [ 1080.699791][T19342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.706950][T19342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.769734][T19342] bridge_slave_1: entered allmulticast mode [ 1080.777192][T19342] bridge_slave_1: entered promiscuous mode [ 1080.967926][T19342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.012970][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1081.026444][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1081.035784][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1081.054735][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1081.079000][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1081.079490][ T4424] bridge_slave_1: left allmulticast mode [ 1081.103850][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1081.142280][ T4424] bridge_slave_1: left promiscuous mode [ 1081.164291][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.204270][ T4424] bridge_slave_0: left allmulticast mode [ 1081.220214][ T4424] bridge_slave_0: left promiscuous mode [ 1081.230797][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.210123][ T4424] dvmrp0 (unregistering): left allmulticast mode [ 1082.461785][ T4487] Bluetooth: hci6: command tx timeout [ 1083.189790][ T4487] Bluetooth: hci0: command tx timeout [ 1083.337579][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.376169][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.399477][ T4424] bond0 (unregistering): Released all slaves [ 1084.161581][ T4424] bond1 (unregistering): Released all slaves [ 1084.215274][ T4424] bond2 (unregistering): Released all slaves [ 1084.278641][T19342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.345780][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4708'. [ 1084.730740][T19417] lo speed is unknown, defaulting to 1000 [ 1084.743017][T19342] team0: Port device team_slave_0 added [ 1085.029849][T19342] team0: Port device team_slave_1 added [ 1085.135750][T19239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1085.283198][ T4487] Bluetooth: hci0: command tx timeout [ 1085.350502][T19342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.424797][T19342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.450829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.522207][T19342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.564580][T19239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1085.694486][T19342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.701471][T19342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.727410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.814307][T19342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.851598][T19239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1086.049672][ T4424] hsr_slave_0: left promiscuous mode [ 1086.056477][ T4424] hsr_slave_1: left promiscuous mode [ 1086.077605][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.085110][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.133523][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.156493][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.256552][ T4424] veth1_macvtap: left promiscuous mode [ 1086.277300][ T4424] veth0_macvtap: left promiscuous mode [ 1086.283028][ T4424] veth1_vlan: left promiscuous mode [ 1086.531492][ T4424] veth0_vlan: left promiscuous mode [ 1087.374510][ T4487] Bluetooth: hci0: command tx timeout [ 1088.148316][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 1088.285785][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 1089.476902][ T4487] Bluetooth: hci0: command tx timeout [ 1089.916542][T19239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1090.184492][T19342] hsr_slave_0: entered promiscuous mode [ 1090.219263][T19342] hsr_slave_1: entered promiscuous mode [ 1090.274302][T19342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.283266][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4731'. [ 1090.318396][T19342] Cannot create hsr debugfs directory [ 1091.033327][T19239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.298318][T19239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.403018][T19417] chnl_net:caif_netlink_parms(): no params data found [ 1091.607186][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.614333][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.705742][T19509] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4732'. [ 1091.883470][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.890700][ T5225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.165720][T19417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.223834][T19417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.251683][T19417] bridge_slave_0: entered allmulticast mode [ 1092.258858][T19417] bridge_slave_0: entered promiscuous mode [ 1092.331259][T19417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.367925][T19417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.397565][T19417] bridge_slave_1: entered allmulticast mode [ 1092.406851][T19417] bridge_slave_1: entered promiscuous mode [ 1092.633223][T19417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.713238][T19417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.748586][T19527] xt_HMARK: proto mask must be zero with L3 mode [ 1093.079607][T19417] team0: Port device team_slave_0 added [ 1093.215889][T19417] team0: Port device team_slave_1 added [ 1093.381585][T19417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.416908][T19417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.501493][T19417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.535012][T19417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.543239][T19417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.613254][T19417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.727050][T19342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1093.748062][T19342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1093.788263][T19239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.933806][T19342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1093.978277][T19342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1094.049476][T19417] hsr_slave_0: entered promiscuous mode [ 1094.107762][T19417] hsr_slave_1: entered promiscuous mode [ 1094.120489][T19551] [ 1094.122862][T19551] ====================================================== [ 1094.129878][T19551] WARNING: possible circular locking dependency detected [ 1094.136877][T19551] 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 Not tainted [ 1094.143610][T19551] ------------------------------------------------------ [ 1094.150610][T19551] syz.3.4748/19551 is trying to acquire lock: [ 1094.156652][T19551] ffff888059b0d940 (&sbi->pipe_mutex){+.+.}-{3:3}, at: autofs_notify_daemon+0x71f/0xf80 [ 1094.166383][T19551] [ 1094.166383][T19551] but task is already holding lock: [ 1094.173734][T19551] ffff8880758e7888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1094.183036][T19551] [ 1094.183036][T19551] which lock already depends on the new lock. [ 1094.183036][T19551] [ 1094.193427][T19551] [ 1094.193427][T19551] the existing dependency chain (in reverse order) is: [ 1094.202436][T19551] [ 1094.202436][T19551] -> #2 (&of->mutex){+.+.}-{3:3}: [ 1094.209652][T19551] lock_acquire+0x1ed/0x550 [ 1094.214672][T19551] __mutex_lock+0x136/0xd70 [ 1094.219686][T19551] kernfs_fop_write_iter+0x1eb/0x500 [ 1094.225489][T19551] iter_file_splice_write+0xbd7/0x14e0 [ 1094.231461][T19551] do_splice+0xd77/0x1900 [ 1094.236304][T19551] __se_sys_splice+0x331/0x4a0 [ 1094.241576][T19551] do_syscall_64+0xf3/0x230 [ 1094.246590][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.252993][T19551] [ 1094.252993][T19551] -> #1 (&pipe->mutex){+.+.}-{3:3}: [ 1094.260367][T19551] lock_acquire+0x1ed/0x550 [ 1094.265378][T19551] __mutex_lock+0x136/0xd70 [ 1094.270390][T19551] pipe_write+0x1c9/0x1a40 [ 1094.275317][T19551] __kernel_write_iter+0x47e/0x900 [ 1094.280936][T19551] __kernel_write+0x120/0x180 [ 1094.286120][T19551] autofs_notify_daemon+0x732/0xf80 [ 1094.291826][T19551] autofs_wait+0x10b8/0x1b30 [ 1094.296924][T19551] autofs_do_expire_multi+0x659/0x950 [ 1094.302805][T19551] autofs_root_ioctl+0x4c/0x60 [ 1094.308076][T19551] __se_sys_ioctl+0xfc/0x170 [ 1094.313176][T19551] do_syscall_64+0xf3/0x230 [ 1094.318189][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.324593][T19551] [ 1094.324593][T19551] -> #0 (&sbi->pipe_mutex){+.+.}-{3:3}: [ 1094.332318][T19551] validate_chain+0x18e0/0x5900 [ 1094.337682][T19551] __lock_acquire+0x137a/0x2040 [ 1094.343040][T19551] lock_acquire+0x1ed/0x550 [ 1094.348048][T19551] __mutex_lock+0x136/0xd70 [ 1094.353057][T19551] autofs_notify_daemon+0x71f/0xf80 [ 1094.358766][T19551] autofs_wait+0x10b8/0x1b30 [ 1094.363864][T19551] autofs_mount_wait+0x170/0x330 [ 1094.369310][T19551] autofs_d_automount+0x555/0x710 [ 1094.374843][T19551] __traverse_mounts+0x2ba/0x580 [ 1094.380294][T19551] step_into+0x5e5/0x1080 [ 1094.385129][T19551] path_lookupat+0x16f/0x450 [ 1094.390225][T19551] filename_lookup+0x256/0x610 [ 1094.395496][T19551] kern_path+0x35/0x50 [ 1094.400071][T19551] lookup_bdev+0xc5/0x290 [ 1094.404913][T19551] resume_store+0x1a0/0x710 [ 1094.409934][T19551] kernfs_fop_write_iter+0x3a1/0x500 [ 1094.415735][T19551] iter_file_splice_write+0xbd7/0x14e0 [ 1094.421701][T19551] direct_splice_actor+0x11e/0x220 [ 1094.427318][T19551] splice_direct_to_actor+0x58e/0xc90 [ 1094.433200][T19551] do_splice_direct+0x28c/0x3e0 [ 1094.438561][T19551] do_sendfile+0x56d/0xe20 [ 1094.443487][T19551] __se_sys_sendfile64+0x17c/0x1e0 [ 1094.449114][T19551] do_syscall_64+0xf3/0x230 [ 1094.454141][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.460544][T19551] [ 1094.460544][T19551] other info that might help us debug this: [ 1094.460544][T19551] [ 1094.470758][T19551] Chain exists of: [ 1094.470758][T19551] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1094.470758][T19551] [ 1094.483175][T19551] Possible unsafe locking scenario: [ 1094.483175][T19551] [ 1094.490612][T19551] CPU0 CPU1 [ 1094.495959][T19551] ---- ---- [ 1094.501308][T19551] lock(&of->mutex); [ 1094.505280][T19551] lock(&pipe->mutex); [ 1094.511946][T19551] lock(&of->mutex); [ 1094.518440][T19551] lock(&sbi->pipe_mutex); [ 1094.522940][T19551] [ 1094.522940][T19551] *** DEADLOCK *** [ 1094.522940][T19551] [ 1094.531066][T19551] 3 locks held by syz.3.4748/19551: [ 1094.536248][T19551] #0: ffff88801e524420 (sb_writers#8){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 1094.545906][T19551] #1: ffff8880758e7888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1094.555746][T19551] #2: ffff888017adb4b8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1094.565752][T19551] [ 1094.565752][T19551] stack backtrace: [ 1094.571635][T19551] CPU: 1 PID: 19551 Comm: syz.3.4748 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 1094.581425][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1094.591482][T19551] Call Trace: [ 1094.594751][T19551] [ 1094.597671][T19551] dump_stack_lvl+0x241/0x360 [ 1094.602344][T19551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.607536][T19551] ? print_circular_bug+0x130/0x1a0 [ 1094.612730][T19551] check_noncircular+0x36a/0x4a0 [ 1094.617662][T19551] ? __pfx_check_noncircular+0x10/0x10 [ 1094.623123][T19551] validate_chain+0x18e0/0x5900 [ 1094.627974][T19551] ? __pfx_validate_chain+0x10/0x10 [ 1094.633172][T19551] ? check_noncircular+0x259/0x4a0 [ 1094.638282][T19551] ? __pfx___bfs+0x10/0x10 [ 1094.642703][T19551] ? mark_lock+0x9a/0x350 [ 1094.647044][T19551] __lock_acquire+0x137a/0x2040 [ 1094.651915][T19551] lock_acquire+0x1ed/0x550 [ 1094.656420][T19551] ? autofs_notify_daemon+0x71f/0xf80 [ 1094.661786][T19551] ? __pfx_lock_acquire+0x10/0x10 [ 1094.666825][T19551] ? __pfx___might_resched+0x10/0x10 [ 1094.672117][T19551] ? autofs_notify_daemon+0x6c6/0xf80 [ 1094.677490][T19551] ? __pfx_lock_release+0x10/0x10 [ 1094.682511][T19551] __mutex_lock+0x136/0xd70 [ 1094.687001][T19551] ? autofs_notify_daemon+0x71f/0xf80 [ 1094.692363][T19551] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1094.697983][T19551] ? autofs_notify_daemon+0x71f/0xf80 [ 1094.703340][T19551] ? __pfx___mutex_lock+0x10/0x10 [ 1094.708351][T19551] ? from_kgid_munged+0x1fe/0x7a0 [ 1094.713365][T19551] ? __pfx_from_kgid_munged+0x10/0x10 [ 1094.718731][T19551] ? kasan_save_track+0x51/0x80 [ 1094.723574][T19551] ? kasan_save_track+0x3f/0x80 [ 1094.728439][T19551] ? __kasan_kmalloc+0x98/0xb0 [ 1094.733225][T19551] ? autofs_notify_daemon+0x48c/0xf80 [ 1094.738601][T19551] autofs_notify_daemon+0x71f/0xf80 [ 1094.743790][T19551] ? iter_file_splice_write+0xbd7/0x14e0 [ 1094.749417][T19551] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1094.755143][T19551] ? __init_waitqueue_head+0xae/0x150 [ 1094.760506][T19551] autofs_wait+0x10b8/0x1b30 [ 1094.765093][T19551] ? __pfx_autofs_wait+0x10/0x10 [ 1094.770018][T19551] ? autofs_d_automount+0x54b/0x710 [ 1094.775203][T19551] ? __pfx_lock_release+0x10/0x10 [ 1094.780222][T19551] ? _raw_spin_unlock+0x28/0x50 [ 1094.785074][T19551] ? path_has_submounts+0x10b/0x170 [ 1094.790265][T19551] autofs_mount_wait+0x170/0x330 [ 1094.795195][T19551] autofs_d_automount+0x555/0x710 [ 1094.800212][T19551] __traverse_mounts+0x2ba/0x580 [ 1094.805150][T19551] step_into+0x5e5/0x1080 [ 1094.809467][T19551] ? __up_read+0x2c2/0x6b0 [ 1094.813869][T19551] ? __pfx___up_read+0x10/0x10 [ 1094.818619][T19551] ? make_vfsuid+0x46/0x90 [ 1094.823033][T19551] ? __pfx_step_into+0x10/0x10 [ 1094.827790][T19551] ? walk_component+0x18d/0x410 [ 1094.832632][T19551] path_lookupat+0x16f/0x450 [ 1094.837271][T19551] filename_lookup+0x256/0x610 [ 1094.842049][T19551] ? __pfx_filename_lookup+0x10/0x10 [ 1094.847344][T19551] ? getname_kernel+0x59/0x2f0 [ 1094.852094][T19551] ? rcu_is_watching+0x15/0xb0 [ 1094.856850][T19551] ? getname_kernel+0x59/0x2f0 [ 1094.861604][T19551] ? getname_kernel+0x140/0x2f0 [ 1094.866447][T19551] kern_path+0x35/0x50 [ 1094.870594][T19551] lookup_bdev+0xc5/0x290 [ 1094.874915][T19551] ? rcu_is_watching+0x15/0xb0 [ 1094.879670][T19551] ? __pfx_lookup_bdev+0x10/0x10 [ 1094.884614][T19551] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1094.891202][T19551] ? __asan_memcpy+0x40/0x70 [ 1094.895786][T19551] resume_store+0x1a0/0x710 [ 1094.900282][T19551] ? __pfx_resume_store+0x10/0x10 [ 1094.905303][T19551] ? sysfs_kf_write+0x182/0x2a0 [ 1094.910142][T19551] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1094.915330][T19551] kernfs_fop_write_iter+0x3a1/0x500 [ 1094.920613][T19551] iter_file_splice_write+0xbd7/0x14e0 [ 1094.926079][T19551] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1094.931974][T19551] ? rcu_read_lock_any_held+0xb7/0x160 [ 1094.937432][T19551] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1094.943316][T19551] direct_splice_actor+0x11e/0x220 [ 1094.948420][T19551] splice_direct_to_actor+0x58e/0xc90 [ 1094.953791][T19551] ? __pfx_direct_splice_actor+0x10/0x10 [ 1094.959414][T19551] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1094.965296][T19551] ? __fget_files+0x29/0x470 [ 1094.969879][T19551] ? __pfx_lock_release+0x10/0x10 [ 1094.974899][T19551] do_splice_direct+0x28c/0x3e0 [ 1094.979744][T19551] ? __pfx_do_splice_direct+0x10/0x10 [ 1094.985125][T19551] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1094.991021][T19551] ? rw_verify_area+0x1d2/0x6b0 [ 1094.995868][T19551] do_sendfile+0x56d/0xe20 [ 1095.000281][T19551] ? __pfx_do_sendfile+0x10/0x10 [ 1095.005210][T19551] __se_sys_sendfile64+0x17c/0x1e0 [ 1095.010315][T19551] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1095.015940][T19551] ? do_syscall_64+0x100/0x230 [ 1095.020695][T19551] ? do_syscall_64+0xb6/0x230 [ 1095.025365][T19551] do_syscall_64+0xf3/0x230 [ 1095.029861][T19551] ? clear_bhb_loop+0x35/0x90 [ 1095.034574][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.040460][T19551] RIP: 0033:0x7f75ec575b59 [ 1095.044874][T19551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.064468][T19551] RSP: 002b:00007f75ebfde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1095.072870][T19551] RAX: ffffffffffffffda RBX: 00007f75ec706038 RCX: 00007f75ec575b59 [ 1095.080829][T19551] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1095.088789][T19551] RBP: 00007f75ec5e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 1095.096750][T19551] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1095.104795][T19551] R13: 000000000000006e R14: 00007f75ec706038 R15: 00007ffef2866ed8 [ 1095.112763][T19551] [ 1095.115816][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1095.212743][T19417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.220368][T19417] Cannot create hsr debugfs directory [ 1095.317467][T19551] PM: Image not found (code -6) [ 1095.967187][ T12] bridge_slave_1: left allmulticast mode [ 1095.972932][ T12] bridge_slave_1: left promiscuous mode [ 1096.008669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.049143][ T12] bridge_slave_0: left allmulticast mode [ 1096.078111][ T12] bridge_slave_0: left promiscuous mode [ 1096.083853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.321651][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.341497][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.363595][ T12] bond0 (unregistering): Released all slaves [ 1096.552327][ T12] hsr_slave_0: left promiscuous mode [ 1096.561637][ T12] hsr_slave_1: left promiscuous mode [ 1096.600960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.611516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.834703][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1096.893928][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1097.457064][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.530546][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.629750][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.690886][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.234075][ T12] bridge_slave_1: left allmulticast mode [ 1098.239753][ T12] bridge_slave_1: left promiscuous mode [ 1098.280240][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.288399][ T12] bridge_slave_0: left allmulticast mode [ 1098.295943][ T12] bridge_slave_0: left promiscuous mode [ 1098.312198][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.328384][ T12] bridge_slave_1: left allmulticast mode [ 1098.341564][ T12] bridge_slave_1: left promiscuous mode [ 1098.347213][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.357196][ T12] bridge_slave_0: left allmulticast mode [ 1098.362885][ T12] bridge_slave_0: left promiscuous mode [ 1098.382715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.393081][ T12] bridge_slave_1: left allmulticast mode [ 1098.400986][ T12] bridge_slave_1: left promiscuous mode [ 1098.406627][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.415663][ T12] bridge_slave_0: left allmulticast mode [ 1098.422083][ T12] bridge_slave_0: left promiscuous mode [ 1098.427711][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.211177][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.237087][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.269047][ T12] bond0 (unregistering): Released all slaves [ 1099.311488][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.327941][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.349856][ T12] bond0 (unregistering): Released all slaves [ 1099.382464][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.408093][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.429903][ T12] bond0 (unregistering): Released all slaves [ 1099.527901][ T12] tipc: Left network mode [ 1100.115787][ T12] hsr_slave_0: left promiscuous mode [ 1100.133692][ T12] hsr_slave_1: left promiscuous mode [ 1100.140444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.147869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.172594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.179994][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.212562][ T12] hsr_slave_0: left promiscuous mode [ 1100.218204][ T12] hsr_slave_1: left promiscuous mode [ 1100.242932][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.251500][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.292275][ T12] hsr_slave_0: left promiscuous mode [ 1100.297927][ T12] hsr_slave_1: left promiscuous mode [ 1100.332357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.341980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.383830][ T12] veth1_macvtap: left promiscuous mode [ 1100.389323][ T12] veth0_macvtap: left promiscuous mode [ 1100.395010][ T12] veth1_vlan: left promiscuous mode [ 1100.400239][ T12] veth0_vlan: left promiscuous mode [ 1101.197985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1101.238764][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1102.074790][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1102.111448][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1102.567089][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1102.646499][ T12] team0 (unregistering): Port device team_slave_0 removed