last executing test programs: 12.493674803s ago: executing program 4 (id=4585): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 12.389718848s ago: executing program 4 (id=4587): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 12.280247558s ago: executing program 4 (id=4590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000640)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newspdinfo={0x2c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x4, {0x0, 0xfe}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x2c}}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB], 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@dev, @local, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0xca, 0x0, {{0x5, 0x4, 0x3, 0x3d, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYRES32=r8, @ANYBLOB='\b\x004'], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000240)=0x7, 0x4) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x470, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x0, 0x4e, 0xffff}, {0x7, 0x41, 0x76, 0x3}, {0x9, 0x0, 0x8, 0x3}, {0x1, 0x7, 0x4, 0x401}, {0xc499, 0x4, 0x6, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x17}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r12}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8001, 0x8, 0x8, 0x1}, {0x1, 0x0, 0xd4, 0x5}, {0x401, 0x3, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x4000001}, 0x28) 12.144931171s ago: executing program 4 (id=4591): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f}}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) fcntl$addseals(r4, 0x409, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000340)) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r6, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001400010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a010200000000000000000200000008000340000000000900010073797a30000000000c0006400000000000000002140000001100010000000000000000000000000a8b85be2deaaf75ab9d52915b7399b78df19fafe5bf11e32f84ac3b0d56a9f642e01862d78709b0f88e1eb76229691e875ffeed4d6dc8c7449daa0394cd06953b6601f00630db6c57d75382f15630b437db54f7ded1721158f42e725fe8dc06e0724697acb83fa6c27bd0632948794a49c601e3ec55170eba9e7477f2b42c629bc05e9aec"], 0x5c}}, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x20000000000101, 0x12) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) gettid() 11.681689214s ago: executing program 4 (id=4598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffe1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 11.292235927s ago: executing program 4 (id=4607): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 1.892064129s ago: executing program 3 (id=4699): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.847806415s ago: executing program 3 (id=4700): getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1.636208825s ago: executing program 3 (id=4702): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 1.459833109s ago: executing program 0 (id=4704): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "d53495ed19ac6f39"}, 0x10}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0) 1.308704051s ago: executing program 0 (id=4705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x791, 0x400, 0x0, 0x1000000000000000}, {0x0, 0x1, 0x0, 0x1000}, {}, 0x0, 0x3507, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x20000000) 1.297880387s ago: executing program 3 (id=4706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffffb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4ca}]}, 0x44}}, 0x0) 1.107431525s ago: executing program 3 (id=4709): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.084141387s ago: executing program 2 (id=4710): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0), 0x8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 871.94746ms ago: executing program 2 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 871.583281ms ago: executing program 1 (id=4712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x76, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x258b}}, 0x3, 0x7}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8800080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 859.941429ms ago: executing program 3 (id=4713): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) write$binfmt_misc(r3, 0x0, 0x4) 763.714877ms ago: executing program 0 (id=4714): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/37, 0x25}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 644.198351ms ago: executing program 2 (id=4715): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 626.134912ms ago: executing program 1 (id=4716): r0 = socket$inet(0x2, 0x2, 0x0) readv(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="c68a76fc052ea9e5861f22eefbe4355322573df4473febc5460a4ac3cf40c7fb7d5f6d3de3c066b337381c804f1ad36dfc60d71b78058e", 0x37}], 0x1}}], 0x1, 0x0) 538.274615ms ago: executing program 1 (id=4717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000a40)="e7ff", 0x2, 0x20004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0xff, 0x5, 0x0, 0x2, 0x8, 0x20, 0xfb, 0x81, 0x82, 0x0, 0x94, 0xf7}, 0xe) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/169, 0xa9}, 0x7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/17, 0x11}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/88, 0x58}], 0x1, &(0x7f0000000d40)=""/2, 0x2}, 0x1}], 0x3, 0x10162, 0x0) 468.210743ms ago: executing program 2 (id=4718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffffb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4ca}]}, 0x44}}, 0x0) 450.608587ms ago: executing program 0 (id=4719): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000f00)={0x5, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) 348.260468ms ago: executing program 1 (id=4720): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 270.75083ms ago: executing program 2 (id=4721): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0), 0x8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 220.221159ms ago: executing program 0 (id=4722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c200"], 0x0) 185.838762ms ago: executing program 1 (id=4723): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) 66.398765ms ago: executing program 2 (id=4724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x791, 0x400, 0x0, 0x1000000000000000}, {0x0, 0x1, 0x0, 0x1000}, {}, 0x0, 0x3507, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x20000000) 43.753271ms ago: executing program 1 (id=4725): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) 0s ago: executing program 0 (id=4726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x76, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x258b}}, 0x3, 0x7}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8800080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) kernel console output (not intermixed with test programs): T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.512816][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.551853][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.561601][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.601614][ T5230] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1283.629805][ T52] veth1_macvtap: left promiscuous mode [ 1283.635549][ T52] veth0_macvtap: left promiscuous mode [ 1283.643097][ T52] veth1_vlan: left promiscuous mode [ 1283.651003][ T52] veth0_vlan: left promiscuous mode [ 1283.657156][ T5230] usb 1-1: device descriptor read/8, error -71 [ 1283.777034][ T5230] usb usb1-port1: unable to enumerate USB device [ 1283.784550][ T5300] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1283.855208][T29197] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1283.997144][ T5300] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1284.024253][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.045836][ T5300] usb 4-1: config 0 descriptor?? [ 1284.067553][ T5300] cp210x 4-1:0.0: cp210x converter detected [ 1284.077688][T29197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.111243][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1284.144705][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1284.195950][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1284.238188][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1284.290746][T29197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.299410][ T5300] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1284.337918][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1284.378619][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1284.413468][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1284.427441][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1284.439554][T29197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.460638][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1284.486104][ T8] usb 4-1: USB disconnect, device number 69 [ 1284.502548][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1284.513056][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1284.550312][ T8] cp210x 4-1:0.0: device disconnected [ 1284.556686][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1284.579298][T29197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1284.594280][T29197] usb 3-1: string descriptor 0 read error: -22 [ 1284.604410][ T5239] Bluetooth: hci4: command tx timeout [ 1284.616838][T29197] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1284.637056][T29197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.690945][T29197] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1284.902643][T29197] usb 3-1: USB disconnect, device number 84 [ 1285.097720][ T940] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1285.162801][T18715] blktrace: Concurrent blktraces are not allowed on nbd4 [ 1285.281639][ T940] usb 1-1: device descriptor read/64, error -71 [ 1285.362944][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1285.522687][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1285.565666][ T5239] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1285.575761][ T940] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1285.583482][ T5239] Bluetooth: hci5: Injecting HCI hardware error event [ 1285.595573][ T6746] Bluetooth: hci5: hardware error 0x00 [ 1285.768546][ T940] usb 1-1: device descriptor read/64, error -71 [ 1285.804482][T27537] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1285.829878][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1285.829894][ T29] audit: type=1326 audit(1725236826.653:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18745 comm="syz.4.4148" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 1285.906771][ T940] usb usb1-port1: attempt power cycle [ 1286.004187][T27537] usb 4-1: Using ep0 maxpacket: 8 [ 1286.011566][T27537] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1286.021713][T27537] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.033701][T27537] usb 4-1: config 135 has no interface number 0 [ 1286.040341][T27537] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1286.056402][T27537] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1286.077110][T27537] usb 4-1: config 135 interface 230 has no altsetting 0 [ 1286.084488][ T5306] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1286.103811][T27537] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1286.113527][T27537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.122570][T27537] usb 4-1: Product: syz [ 1286.128081][T27537] usb 4-1: Manufacturer: syz [ 1286.132795][T27537] usb 4-1: SerialNumber: syz [ 1286.276982][ T5306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1286.286837][ T5306] usb 3-1: config 1 has no interface number 0 [ 1286.293070][ T5306] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.311025][ T5306] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1286.321628][ T940] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1286.329756][ T5306] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 1286.346335][ T5306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1286.356132][ T5306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.365640][ T5306] usb 3-1: Product: syz [ 1286.369968][ T940] usb 1-1: device descriptor read/8, error -71 [ 1286.376569][ T5306] usb 3-1: Manufacturer: syz [ 1286.381208][ T5306] usb 3-1: SerialNumber: syz [ 1286.389937][T27537] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 1286.397332][T27537] usb 4-1: No valid video chain found. [ 1286.599066][ T8] usb 4-1: USB disconnect, device number 70 [ 1286.655436][ T940] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1286.682183][T18424] chnl_net:caif_netlink_parms(): no params data found [ 1286.690453][ T5239] Bluetooth: hci4: command tx timeout [ 1286.724996][ T940] usb 1-1: device descriptor read/8, error -71 [ 1286.856304][ T940] usb usb1-port1: unable to enumerate USB device [ 1287.009851][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.025532][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.041729][T18424] bridge_slave_0: entered allmulticast mode [ 1287.054819][T18424] bridge_slave_0: entered promiscuous mode [ 1287.063692][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.082252][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.093461][T18424] bridge_slave_1: entered allmulticast mode [ 1287.113357][T18424] bridge_slave_1: entered promiscuous mode [ 1287.201373][T18424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.241085][ T5306] cdc_ncm 3-1:1.1: bind() failure [ 1287.245367][T18424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.417461][ T29] audit: type=1326 audit(1725236828.243:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18856 comm="syz.3.4149" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 1287.426136][T18424] team0: Port device team_slave_0 added [ 1287.471581][T18424] team0: Port device team_slave_1 added [ 1287.582118][T18424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.598463][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.641520][T18424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.654713][ T6746] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1287.669946][T18424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.677438][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.704672][T18424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.842688][T18424] hsr_slave_0: entered promiscuous mode [ 1287.861677][T18424] hsr_slave_1: entered promiscuous mode [ 1287.878135][T18424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1287.894269][T18424] Cannot create hsr debugfs directory [ 1287.959936][ T29] audit: type=1326 audit(1725236828.783:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1287.998665][ T29] audit: type=1326 audit(1725236828.813:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.023326][ T29] audit: type=1326 audit(1725236828.813:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.077501][ T29] audit: type=1326 audit(1725236828.813:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.153993][ T29] audit: type=1326 audit(1725236828.813:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.224935][ T29] audit: type=1326 audit(1725236828.813:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.292622][ T29] audit: type=1326 audit(1725236828.813:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.327463][ T29] audit: type=1326 audit(1725236828.813:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1288.764532][ T6746] Bluetooth: hci4: command tx timeout [ 1288.853630][ T5300] usb 3-1: USB disconnect, device number 85 [ 1289.194827][T19067] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1289.343314][T18424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1289.381621][T18424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1289.459055][T18424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1289.493484][T19107] tipc: Failed to obtain node identity [ 1289.519558][T19107] tipc: Enabling of bearer rejected, failed to enable media [ 1289.528584][T18424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1289.555701][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.785428][ T8] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1290.005808][T18424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.019347][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.037344][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1290.078422][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1290.106808][T18424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.118212][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1290.148107][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.155266][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.163415][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1290.181310][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.195593][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1290.215555][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.222734][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.243677][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1290.267740][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1290.339889][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1290.388110][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.407762][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1290.439000][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1290.476814][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1290.490177][T19153] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1290.514409][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1290.569668][T18424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.587963][T19155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1290.633813][T19155] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1290.822973][T18424] veth0_vlan: entered promiscuous mode [ 1290.866426][T19162] FAULT_INJECTION: forcing a failure. [ 1290.866426][T19162] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.874015][T18424] veth1_vlan: entered promiscuous mode [ 1290.932733][T19162] CPU: 0 UID: 0 PID: 19162 Comm: syz.2.4169 Not tainted 6.11.0-rc6-syzkaller #0 [ 1290.941800][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1290.951970][T19162] Call Trace: [ 1290.955271][T19162] [ 1290.958208][T19162] dump_stack_lvl+0x241/0x360 [ 1290.962907][T19162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.968123][T19162] ? __pfx__printk+0x10/0x10 [ 1290.972739][T19162] ? fs_reclaim_acquire+0x93/0x140 [ 1290.977886][T19162] ? __pfx___might_resched+0x10/0x10 [ 1290.983188][T19162] should_fail_ex+0x3b0/0x4e0 [ 1290.987882][T19162] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1290.993606][T19162] should_failslab+0xac/0x100 [ 1290.998292][T19162] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1291.004012][T19162] __kmalloc_noprof+0xd8/0x400 [ 1291.008773][T19162] ? kfree+0x4e/0x360 [ 1291.012761][T19162] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1291.018328][T19162] tomoyo_path_number_perm+0x23a/0x880 [ 1291.023795][T19162] ? __lock_acquire+0x137a/0x2040 [ 1291.028821][T19162] ? tomoyo_path_number_perm+0x208/0x880 [ 1291.034462][T19162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1291.040483][T19162] ? __fget_files+0x29/0x470 [ 1291.045076][T19162] ? __fget_files+0x3f6/0x470 [ 1291.049754][T19162] security_file_ioctl_compat+0x75/0xb0 [ 1291.055302][T19162] __se_compat_sys_ioctl+0xd6/0xca0 [ 1291.060532][T19162] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1291.066362][T19162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1291.072341][T19162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1291.078674][T19162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1291.085257][T19162] ? lockdep_hardirqs_on+0x99/0x150 [ 1291.090460][T19162] __do_fast_syscall_32+0xb4/0x110 [ 1291.095566][T19162] ? exc_page_fault+0x590/0x8c0 [ 1291.100446][T19162] do_fast_syscall_32+0x34/0x80 [ 1291.105290][T19162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.111613][T19162] RIP: 0023:0xf73cd579 [ 1291.115678][T19162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1291.135365][T19162] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1291.143774][T19162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c542c [ 1291.151735][T19162] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.159784][T19162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.167755][T19162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1291.175849][T19162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.183822][T19162] [ 1291.250216][T18424] veth0_macvtap: entered promiscuous mode [ 1291.256785][T19162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1291.323819][T18424] veth1_macvtap: entered promiscuous mode [ 1291.409919][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.460791][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.493020][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.527854][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.544412][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.564205][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.571392][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4172'. [ 1291.585435][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.620223][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.637641][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.669068][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.679947][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.691436][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.704131][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.717347][ T5230] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1291.728572][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.742605][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.756503][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.767436][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.778607][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.798659][T18424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.813199][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.853992][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.867293][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.878418][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.884216][T11201] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1291.889557][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.907549][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.920290][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.931508][ T5230] usb 1-1: Using ep0 maxpacket: 8 [ 1291.943483][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.953786][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1291.964728][ T5230] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1291.979407][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.991277][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1292.003007][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.013490][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1292.025284][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.039133][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.050348][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.062893][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.074569][ T5230] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1292.086184][T11201] usb 5-1: Using ep0 maxpacket: 32 [ 1292.091484][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.102016][T11201] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.114199][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.114527][ T5230] usb 1-1: Product: syz [ 1292.133744][ T5230] usb 1-1: Manufacturer: syz [ 1292.143534][ T5230] usb 1-1: SerialNumber: syz [ 1292.145584][T11201] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1292.152748][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.169426][T11201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.181909][ T5230] usb 1-1: config 0 descriptor?? [ 1292.187155][T11201] usb 5-1: Product: syz [ 1292.192258][T11201] usb 5-1: Manufacturer: syz [ 1292.198125][T19171] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1292.204811][T18424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.225381][ T5230] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 1292.238604][T11201] usb 5-1: SerialNumber: syz [ 1292.245386][T18424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.247655][T18424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.271290][ T5230] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 1292.283469][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1292.297268][T11201] usb 5-1: config 0 descriptor?? [ 1292.307715][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.337338][T11201] usb 5-1: bad CDC descriptors [ 1292.342870][T11201] usb 5-1: unsupported MDLM descriptors [ 1292.359045][ T8] usb 4-1: can't set config #168, error -71 [ 1292.407313][T18424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.414700][ T8] usb 4-1: USB disconnect, device number 71 [ 1292.444514][T18424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.464687][ T5230] usb 1-1: USB disconnect, device number 41 [ 1292.494635][T18424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.520635][T18424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.685257][ T6746] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1292.705963][ T6746] Bluetooth: hci0: Injecting HCI hardware error event [ 1292.716223][ T5239] Bluetooth: hci0: hardware error 0x00 [ 1292.967744][ T5300] usb 5-1: USB disconnect, device number 79 [ 1292.979809][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.020104][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.124765][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.138575][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.301157][T19270] FAULT_INJECTION: forcing a failure. [ 1293.301157][T19270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.360002][T19270] CPU: 0 UID: 0 PID: 19270 Comm: syz.0.4178 Not tainted 6.11.0-rc6-syzkaller #0 [ 1293.369109][T19270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1293.379196][T19270] Call Trace: [ 1293.382511][T19270] [ 1293.385461][T19270] dump_stack_lvl+0x241/0x360 [ 1293.390156][T19270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.395372][T19270] ? __pfx__printk+0x10/0x10 [ 1293.399986][T19270] ? __pfx_lock_release+0x10/0x10 [ 1293.405047][T19270] should_fail_ex+0x3b0/0x4e0 [ 1293.409761][T19270] _copy_from_user+0x2f/0xe0 [ 1293.414394][T19270] ip_tunnel_parm_from_user+0xa5/0x400 [ 1293.419892][T19270] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 1293.425998][T19270] ? __mutex_trylock_common+0x183/0x2e0 [ 1293.431654][T19270] ? __pfx___might_resched+0x10/0x10 [ 1293.436968][T19270] ip_tunnel_siocdevprivate+0x9a/0x180 [ 1293.442451][T19270] ? rcu_is_watching+0x15/0xb0 [ 1293.447250][T19270] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1293.453333][T19270] ? trace_contention_end+0x3c/0x120 [ 1293.458640][T19270] ? full_name_hash+0x93/0xe0 [ 1293.463344][T19270] dev_ifsioc+0xaec/0xe70 [ 1293.467697][T19270] ? __pfx_dev_ifsioc+0x10/0x10 [ 1293.472676][T19270] ? dev_load+0x21/0x1f0 [ 1293.476946][T19270] dev_ioctl+0x881/0x1340 [ 1293.481302][T19270] sock_ioctl+0x7f2/0x8e0 [ 1293.485655][T19270] ? __pfx_sock_ioctl+0x10/0x10 [ 1293.490543][T19270] compat_sock_ioctl+0x294/0xf20 [ 1293.495507][T19270] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1293.500992][T19270] ? __fget_files+0x29/0x470 [ 1293.505605][T19270] ? __fget_files+0x3f6/0x470 [ 1293.510343][T19270] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 1293.515910][T19270] ? security_file_ioctl_compat+0x87/0xb0 [ 1293.521654][T19270] __se_compat_sys_ioctl+0x51c/0xca0 [ 1293.527050][T19270] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1293.532887][T19270] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1293.538895][T19270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1293.545262][T19270] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1293.551871][T19270] ? lockdep_hardirqs_on+0x99/0x150 [ 1293.557095][T19270] __do_fast_syscall_32+0xb4/0x110 [ 1293.562218][T19270] ? exc_page_fault+0x590/0x8c0 [ 1293.567090][T19270] do_fast_syscall_32+0x34/0x80 [ 1293.571939][T19270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1293.578286][T19270] RIP: 0023:0xf7f74579 [ 1293.582349][T19270] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1293.602034][T19270] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1293.610440][T19270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1293.618399][T19270] RDX: 0000000020001040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.626356][T19270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1293.634316][T19270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1293.642274][T19270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1293.650247][T19270] [ 1293.725641][ T5306] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1293.914486][ T5306] usb 2-1: Using ep0 maxpacket: 16 [ 1293.922899][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1293.938825][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1293.970546][ T5306] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 1294.003698][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.014187][ T46] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1294.028463][ T5306] usb 2-1: Product: syz [ 1294.033356][ T5306] usb 2-1: Manufacturer: syz [ 1294.042229][ T5306] usb 2-1: SerialNumber: syz [ 1294.082269][ T5306] usb 2-1: config 0 descriptor?? [ 1294.127857][ T5306] imon_raw 2-1:0.0: IR endpoint missing [ 1294.179517][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.204722][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 1294.218696][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.254140][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.304721][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1294.347703][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1294.368327][T19272] tipc: Invalid UDP bearer configuration [ 1294.368383][T19272] tipc: Enabling of bearer rejected, failed to enable media [ 1294.385495][T19308] FAULT_INJECTION: forcing a failure. [ 1294.385495][T19308] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.402774][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.428441][T19310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.430926][ T46] usb 4-1: config 0 descriptor?? [ 1294.458597][T19308] CPU: 0 UID: 0 PID: 19308 Comm: syz.2.4182 Not tainted 6.11.0-rc6-syzkaller #0 [ 1294.467758][T19308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1294.477836][T19308] Call Trace: [ 1294.481114][T19308] [ 1294.484035][T19308] dump_stack_lvl+0x241/0x360 [ 1294.488717][T19308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.493920][T19308] ? __pfx__printk+0x10/0x10 [ 1294.498606][T19308] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1294.504249][T19308] ? __pfx___might_resched+0x10/0x10 [ 1294.509552][T19308] should_fail_ex+0x3b0/0x4e0 [ 1294.514226][T19308] ? __anon_vma_prepare+0xc4/0x4a0 [ 1294.519332][T19308] should_failslab+0xac/0x100 [ 1294.524008][T19308] ? __anon_vma_prepare+0xc4/0x4a0 [ 1294.529120][T19308] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1294.534527][T19308] __anon_vma_prepare+0xc4/0x4a0 [ 1294.539450][T19308] ? __pfx_validate_chain+0x10/0x10 [ 1294.544636][T19308] handle_pte_fault+0x587e/0x6fc0 [ 1294.549657][T19308] ? mark_lock+0x9a/0x350 [ 1294.553974][T19308] ? __pfx_handle_pte_fault+0x10/0x10 [ 1294.559327][T19308] ? __lock_acquire+0x137a/0x2040 [ 1294.564372][T19308] ? mt_find+0x226/0x850 [ 1294.568596][T19308] ? __pfx_lock_release+0x10/0x10 [ 1294.573612][T19308] handle_mm_fault+0x1109/0x1bc0 [ 1294.578556][T19308] ? __pfx_handle_mm_fault+0x10/0x10 [ 1294.583861][T19308] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1294.589153][T19308] exc_page_fault+0x2b9/0x8c0 [ 1294.593833][T19308] asm_exc_page_fault+0x26/0x30 [ 1294.598695][T19308] RIP: 0010:__ia32_compat_sys_sched_getaffinity+0x1f6/0x320 [ 1294.605988][T19308] Code: 83 c4 fe 49 83 c7 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 4e ed 71 00 49 8b 47 f8 <41> 89 45 00 48 c1 e8 20 41 89 45 04 49 83 fc 01 76 22 49 83 c5 04 [ 1294.625593][T19308] RSP: 0018:ffffc9000a817e20 EFLAGS: 00050246 [ 1294.631647][T19308] RAX: 0000000000000003 RBX: ffffc9000a817e60 RCX: dffffc0000000000 [ 1294.639609][T19308] RDX: ffff88807c76bc00 RSI: 0000000000000008 RDI: 0000000000000004 [ 1294.649129][T19308] RBP: ffffc9000a817ed0 R08: ffffffff8188e9a2 R09: 1ffffffff2030de5 [ 1294.657087][T19308] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: 0000000000000000 [ 1294.665042][T19308] R13: 0000000020000080 R14: 0000000000000008 R15: ffffc9000a817e68 [ 1294.673025][T19308] ? __ia32_compat_sys_sched_getaffinity+0x1c2/0x320 [ 1294.679728][T19308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1294.686054][T19308] ? __pfx___ia32_compat_sys_sched_getaffinity+0x10/0x10 [ 1294.693072][T19308] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1294.699748][T19308] ? lockdep_hardirqs_on+0x99/0x150 [ 1294.704967][T19308] __do_fast_syscall_32+0xb4/0x110 [ 1294.710084][T19308] ? exc_page_fault+0x590/0x8c0 [ 1294.714952][T19308] do_fast_syscall_32+0x34/0x80 [ 1294.719804][T19308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1294.726161][T19308] RIP: 0023:0xf73cd579 [ 1294.730236][T19308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1294.749939][T19308] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 00000000000000f2 [ 1294.758363][T19308] RAX: ffffffffffffffda RBX: 000000000000004c RCX: 0000000000000008 [ 1294.766322][T19308] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1294.774288][T19308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1294.782249][T19308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1294.790209][T19308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1294.798192][T19308] [ 1294.811409][T19310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.851553][ T5239] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1295.154922][T27537] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1295.228660][ T5230] usb 2-1: USB disconnect, device number 70 [ 1295.245953][ T5306] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 1295.364786][T27537] usb 5-1: Using ep0 maxpacket: 32 [ 1295.372334][T27537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.391951][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 1295.403462][T27537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.426518][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1295.441780][T27537] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1295.460128][ T5306] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.472894][ T46] usb 4-1: USB disconnect, device number 72 [ 1295.481423][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1295.496356][T27537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.523411][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.542995][T27537] usb 5-1: config 0 descriptor?? [ 1295.558528][T27537] hub 5-1:0.0: USB hub found [ 1295.563268][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1295.598043][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1295.611505][ T5306] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.622792][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1295.655697][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.680470][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1295.707869][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1295.739537][ T5306] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.752389][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1295.787907][T27537] hub 5-1:0.0: 1 port detected [ 1295.793853][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.818139][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1295.848061][ T5306] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1295.993841][T27537] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1296.015853][T27537] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1296.065737][T27537] usbhid 5-1:0.0: can't add hid device: -71 [ 1296.071840][T27537] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1296.115451][T27537] usb 5-1: USB disconnect, device number 80 [ 1296.574555][ T5300] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1296.766806][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.797786][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.833335][ T5300] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1296.870031][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.899488][T19429] FAULT_INJECTION: forcing a failure. [ 1296.899488][T19429] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.922935][T19429] CPU: 1 UID: 0 PID: 19429 Comm: syz.4.4192 Not tainted 6.11.0-rc6-syzkaller #0 [ 1296.928940][ T5300] usb 4-1: config 0 descriptor?? [ 1296.931991][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1296.932007][T19429] Call Trace: [ 1296.932017][T19429] [ 1296.932026][T19429] dump_stack_lvl+0x241/0x360 [ 1296.932056][T19429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.932077][T19429] ? __pfx__printk+0x10/0x10 [ 1296.967818][T19429] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1296.973302][T19429] ? __pfx___might_resched+0x10/0x10 [ 1296.978614][T19429] should_fail_ex+0x3b0/0x4e0 [ 1296.983319][T19429] should_failslab+0xac/0x100 [ 1296.988019][T19429] ? apparmor_sk_alloc_security+0x77/0x100 [ 1296.993844][T19429] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1296.999155][T19429] apparmor_sk_alloc_security+0x77/0x100 [ 1297.004901][T19429] security_sk_alloc+0x75/0xb0 [ 1297.009689][T19429] sk_prot_alloc+0xfa/0x210 [ 1297.014216][T19429] ? sk_alloc+0x26/0x370 [ 1297.018476][T19429] sk_alloc+0x38/0x370 [ 1297.022542][T19429] ? __pfx_genl_release+0x10/0x10 [ 1297.027564][T19429] __netlink_create+0x65/0x260 [ 1297.032431][T19429] ? __pfx_genl_release+0x10/0x10 [ 1297.037460][T19429] netlink_create+0x3ab/0x560 [ 1297.042224][T19429] ? __pfx_genl_unbind+0x10/0x10 [ 1297.047156][T19429] ? __pfx_genl_bind+0x10/0x10 [ 1297.051915][T19429] ? __sock_create+0x337/0x920 [ 1297.056673][T19429] __sock_create+0x490/0x920 [ 1297.061275][T19429] __sys_socket+0x150/0x3c0 [ 1297.065776][T19429] ? __pfx___sys_socket+0x10/0x10 [ 1297.070793][T19429] ? __might_fault+0xc6/0x120 [ 1297.075481][T19429] __se_compat_sys_socketcall+0xa73/0x1430 [ 1297.081378][T19429] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 1297.087631][T19429] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1297.094231][T19429] ? lockdep_hardirqs_on+0x99/0x150 [ 1297.099542][T19429] __do_fast_syscall_32+0xb4/0x110 [ 1297.104665][T19429] ? exc_page_fault+0x590/0x8c0 [ 1297.109528][T19429] do_fast_syscall_32+0x34/0x80 [ 1297.114451][T19429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.120877][T19429] RIP: 0023:0xf747d579 [ 1297.124950][T19429] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1297.144656][T19429] RSP: 002b:00000000f5785500 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1297.153075][T19429] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f5785510 [ 1297.161046][T19429] RDX: 00000000f7470ff4 RSI: 0000000000000000 RDI: 00000000f7470ff4 [ 1297.169103][T19429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1297.177156][T19429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1297.185117][T19429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.193090][T19429] [ 1297.453057][ T5306] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1297.474420][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.504194][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.511397][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.537334][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.560486][ T5306] usb 1-1: can't set config #168, error -71 [ 1297.570165][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.570208][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.570236][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.570260][ T5300] lg-g15 0003:046D:C222.0044: unknown main item tag 0x0 [ 1297.606787][ T5300] lg-g15 0003:046D:C222.0044: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 1297.632941][ T5306] usb 1-1: USB disconnect, device number 42 [ 1297.821023][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4196'. [ 1297.886881][ T5300] usb 4-1: USB disconnect, device number 73 [ 1298.384574][T16803] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1298.584994][T16803] usb 5-1: Using ep0 maxpacket: 16 [ 1298.620618][T16803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1298.640943][T16803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1298.687079][T16803] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 1298.695065][T19503] trusted_key: syz.3.4202 sent an empty control message without MSG_MORE. [ 1298.708521][T16803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.754482][T16803] usb 5-1: Product: syz [ 1298.759233][T16803] usb 5-1: Manufacturer: syz [ 1298.777050][T16803] usb 5-1: SerialNumber: syz [ 1298.798509][T16803] usb 5-1: config 0 descriptor?? [ 1298.818747][T16803] imon_raw 5-1:0.0: IR endpoint missing [ 1299.057473][T19489] tipc: Invalid UDP bearer configuration [ 1299.057530][T19489] tipc: Enabling of bearer rejected, failed to enable media [ 1299.108732][T19489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.176486][T19489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.254783][T16803] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1299.440184][T19529] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1299.464839][T16803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.485092][T16803] usb 2-1: config 0 has no interfaces? [ 1299.487028][ T8] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1299.490592][T16803] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1299.490619][T16803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.493139][T16803] usb 2-1: config 0 descriptor?? [ 1299.578315][ T5300] usb 5-1: USB disconnect, device number 81 [ 1299.726392][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1299.757730][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1299.794490][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1299.810613][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1299.826292][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1299.842318][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1299.884552][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1299.920504][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1299.939513][T16803] usb 2-1: USB disconnect, device number 71 [ 1299.949734][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1299.976734][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1300.000048][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1300.018714][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1300.045779][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1300.066261][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1300.089427][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1300.388256][T19579] netlink: 'syz.3.4210': attribute type 8 has an invalid length. [ 1300.450681][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.458072][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.476789][ T5230] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1300.686301][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1300.722478][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1300.753633][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1300.764525][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1300.778461][ T5230] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1300.793340][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.815045][ T5230] usb 5-1: config 0 descriptor?? [ 1301.006357][ T5300] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1301.216750][ T5300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.231501][ T5300] usb 2-1: config 0 has no interfaces? [ 1301.241534][ T5230] plantronics 0003:047F:FFFF.0045: ignoring exceeding usage max [ 1301.271868][ T5300] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1301.284434][ T5230] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 1301.292382][ T5300] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1301.303105][ T5300] usb 2-1: Manufacturer: syz [ 1301.310146][ T5230] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1301.344503][ T5300] usb 2-1: config 0 descriptor?? [ 1301.612263][T11201] usb 2-1: USB disconnect, device number 72 [ 1302.111537][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1302.158762][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.189248][ T8] usb 3-1: can't set config #168, error -71 [ 1302.218914][ T8] usb 3-1: USB disconnect, device number 86 [ 1302.479611][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1302.479628][ T29] audit: type=1400 audit(1725236843.303:5729): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=B2 pid=19646 comm="syz.1.4221" [ 1302.804918][T11201] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1302.812650][ T8] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1302.910166][T19669] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4226'. [ 1303.017299][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1303.031148][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1303.041686][T11201] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 1303.060378][T11201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.075856][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1303.087769][T11201] usb 2-1: config 0 has no interface number 0 [ 1303.099147][ T8] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 1303.124516][T11201] usb 2-1: config 0 interface 25 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.136597][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.154869][T11201] usb 2-1: config 0 interface 25 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1303.166455][ T8] usb 3-1: Product: syz [ 1303.170665][ T8] usb 3-1: Manufacturer: syz [ 1303.185364][ T8] usb 3-1: SerialNumber: syz [ 1303.191164][T11201] usb 2-1: config 0 interface 25 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1303.215509][ T8] usb 3-1: config 0 descriptor?? [ 1303.228849][T11201] usb 2-1: config 0 interface 25 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1303.245227][ T8] imon_raw 3-1:0.0: IR endpoint missing [ 1303.256284][T11201] usb 2-1: config 0 interface 25 has no altsetting 0 [ 1303.286204][T11201] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 1303.314542][T11201] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 1303.324641][ T5306] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1303.325038][T11201] usb 2-1: Product: syz [ 1303.355274][T11201] usb 2-1: SerialNumber: syz [ 1303.385893][T11201] usb 2-1: config 0 descriptor?? [ 1303.409400][T16803] usb 5-1: USB disconnect, device number 82 [ 1303.488791][T19645] tipc: Invalid UDP bearer configuration [ 1303.488844][T19645] tipc: Enabling of bearer rejected, failed to enable media [ 1303.536558][ T5306] usb 4-1: Using ep0 maxpacket: 8 [ 1303.548979][T19645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.566452][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1303.594341][T19645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.595864][ T5306] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 1303.652286][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.676594][ T5306] usb 4-1: Product: syz [ 1303.687031][ T5306] usb 4-1: Manufacturer: syz [ 1303.699212][ T5306] usb 4-1: SerialNumber: syz [ 1303.718775][ T5306] usb 4-1: config 0 descriptor?? [ 1303.736654][ T5306] redrat3 4-1:0.0: Couldn't find all endpoints [ 1303.814880][ T5239] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1303.824006][ T5239] Bluetooth: hci4: Injecting HCI hardware error event [ 1303.834173][ T6746] Bluetooth: hci4: hardware error 0x00 [ 1303.876318][ T5306] usb 3-1: USB disconnect, device number 87 [ 1303.904436][T11201] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 1303.990307][T16803] usb 4-1: USB disconnect, device number 74 [ 1304.100288][T11201] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.114425][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1304.135002][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1304.146102][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1304.157684][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1304.169714][T11201] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.182659][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1304.193159][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1304.203945][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1304.215874][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1304.229305][T11201] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.244532][ T29] audit: type=1326 audit(1725236845.063:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1304.265285][T19755] FAULT_INJECTION: forcing a failure. [ 1304.265285][T19755] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.267063][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1304.293747][T19755] CPU: 1 UID: 0 PID: 19755 Comm: syz.4.4231 Not tainted 6.11.0-rc6-syzkaller #0 [ 1304.302569][ T29] audit: type=1326 audit(1725236845.063:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1304.302871][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1304.329086][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1304.334915][T19755] Call Trace: [ 1304.334929][T19755] [ 1304.334939][T19755] dump_stack_lvl+0x241/0x360 [ 1304.334967][T19755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.345566][ T29] audit: type=1326 audit(1725236845.063:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1304.348007][T19755] ? __pfx__printk+0x10/0x10 [ 1304.350938][ T29] audit: type=1326 audit(1725236845.063:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1304.355569][T19755] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1304.355593][T19755] ? __pfx___might_resched+0x10/0x10 [ 1304.355622][T19755] should_fail_ex+0x3b0/0x4e0 [ 1304.355655][T19755] should_failslab+0xac/0x100 [ 1304.355679][T19755] ? __alloc_skb+0x1c3/0x440 [ 1304.355700][T19755] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1304.355733][T19755] __alloc_skb+0x1c3/0x440 [ 1304.355761][T19755] ? __pfx___alloc_skb+0x10/0x10 [ 1304.355783][T19755] ? fib_nlmsg_size+0x391/0x5b0 [ 1304.355818][T19755] rtmsg_fib+0x144/0x630 [ 1304.355849][T19755] ? __pfx_rtmsg_fib+0x10/0x10 [ 1304.355873][T19755] ? fib_insert_alias+0x46c/0x1280 [ 1304.355900][T19755] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 1304.355925][T19755] fib_table_insert+0xfbe/0x1f30 [ 1304.355974][T19755] ? __pfx_fib_table_insert+0x10/0x10 [ 1304.356000][T19755] ? fib_new_table+0x120/0x2d0 [ 1304.356028][T19755] fib_magic+0x3d8/0x620 [ 1304.356060][T19755] ? __pfx_fib_magic+0x10/0x10 [ 1304.356102][T19755] ? lockdep_rtnl_is_held+0x26/0x40 [ 1304.356123][T19755] ? ip_mc_up+0x287/0x300 [ 1304.356148][T19755] fib_add_ifaddr+0x398/0x5e0 [ 1304.356182][T19755] fib_netdev_event+0x375/0x490 [ 1304.356209][T19755] notifier_call_chain+0x19f/0x3e0 [ 1304.356241][T19755] dev_open+0x13a/0x1b0 [ 1304.356267][T19755] ? __pfx_dev_open+0x10/0x10 [ 1304.356291][T19755] ? team_add_slave+0x69e/0x2760 [ 1304.356310][T19755] ? team_add_slave+0x69e/0x2760 [ 1304.372529][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1304.383508][T19755] ? team_add_slave+0x8b5/0x2760 [ 1304.383543][T19755] team_add_slave+0x9c8/0x2760 [ 1304.383576][T19755] ? deref_stack_reg+0x1c7/0x260 [ 1304.383608][T19755] ? __pfx_team_add_slave+0x10/0x10 [ 1304.389586][ T29] audit: type=1326 audit(1725236845.063:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1304.410261][T19755] ? is_bpf_text_address+0x285/0x2a0 [ 1304.410291][T19755] ? is_bpf_text_address+0x26/0x2a0 [ 1304.410317][T19755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1304.410342][T19755] ? kernel_text_address+0xa7/0xe0 [ 1304.441901][T11201] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1304.445745][T19755] ? nla_strscpy+0x100/0x180 [ 1304.445779][T19755] ? mutex_is_locked+0x12/0x50 [ 1304.636165][T19755] do_setlink+0xe73/0x41f0 [ 1304.640597][T19755] ? stack_trace_save+0x118/0x1d0 [ 1304.645622][T19755] ? __pfx_stack_trace_save+0x10/0x10 [ 1304.651004][T19755] ? __pfx_do_setlink+0x10/0x10 [ 1304.655850][T19755] ? __nla_validate_parse+0x26ce/0x3090 [ 1304.661411][T19755] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1304.666948][T19755] ? rtnl_newlink+0xf2/0x20a0 [ 1304.671655][T19755] ? __pfx___nla_validate_parse+0x10/0x10 [ 1304.677458][T19755] ? nla_strscpy+0x100/0x180 [ 1304.682050][T19755] ? full_name_hash+0x93/0xe0 [ 1304.686728][T19755] ? validate_linkmsg+0x71e/0x900 [ 1304.691784][T19755] rtnl_newlink+0x180d/0x20a0 [ 1304.696516][T19755] ? rtnl_newlink+0x4d1/0x20a0 [ 1304.701309][T19755] ? __pfx_rtnl_newlink+0x10/0x10 [ 1304.706466][T19755] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1304.712391][T19755] ? __pfx_lock_release+0x10/0x10 [ 1304.717450][T19755] ? __pfx_rtnl_newlink+0x10/0x10 [ 1304.722489][T19755] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1304.727449][T19755] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1304.732555][T19755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1304.738042][T19755] ? ref_tracker_free+0x643/0x7e0 [ 1304.743080][T19755] netlink_rcv_skb+0x1e3/0x430 [ 1304.747853][T19755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1304.753325][T19755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1304.758626][T19755] ? netlink_deliver_tap+0x2e/0x1b0 [ 1304.763836][T19755] netlink_unicast+0x7f6/0x990 [ 1304.768628][T19755] ? __pfx_netlink_unicast+0x10/0x10 [ 1304.773925][T19755] ? __virt_addr_valid+0x183/0x530 [ 1304.779036][T19755] ? __check_object_size+0x49c/0x900 [ 1304.784335][T19755] ? bpf_lsm_netlink_send+0x9/0x10 [ 1304.789441][T19755] netlink_sendmsg+0x8e4/0xcb0 [ 1304.794214][T19755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.799491][T19755] ? aa_sock_msg_perm+0x91/0x160 [ 1304.804449][T19755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1304.809738][T19755] ? security_socket_sendmsg+0x87/0xb0 [ 1304.815197][T19755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.820493][T19755] __sock_sendmsg+0x221/0x270 [ 1304.825215][T19755] ____sys_sendmsg+0x525/0x7d0 [ 1304.830005][T19755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.835314][T19755] __sys_sendmsg+0x2b0/0x3a0 [ 1304.839907][T19755] ? __pfx___sys_sendmsg+0x10/0x10 [ 1304.845007][T19755] ? vfs_write+0x7c4/0xc90 [ 1304.849451][T19755] ? __secure_computing+0x125/0x370 [ 1304.854659][T19755] __do_fast_syscall_32+0xb4/0x110 [ 1304.859782][T19755] ? exc_page_fault+0x590/0x8c0 [ 1304.864650][T19755] do_fast_syscall_32+0x34/0x80 [ 1304.869520][T19755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1304.875850][T19755] RIP: 0023:0xf747d579 [ 1304.879927][T19755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1304.899550][T19755] RSP: 002b:00000000f576556c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1304.907975][T19755] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000280 [ 1304.915956][T19755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.923928][T19755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1304.931902][T19755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1304.939871][T19755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1304.947861][T19755] [ 1304.962436][ T29] audit: type=1326 audit(1725236845.063:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1305.019626][T19755] team0: Device ipvlan1 failed to register rx_handler [ 1305.033166][T11201] usb 1-1: string descriptor 0 read error: -22 [ 1305.040310][T11201] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1305.054189][ T29] audit: type=1326 audit(1725236845.063:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1305.063068][T11201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.095048][T11201] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1305.161412][ T29] audit: type=1326 audit(1725236845.063:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1305.316635][ T29] audit: type=1326 audit(1725236845.063:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1305.340082][T11201] usb 1-1: USB disconnect, device number 43 [ 1305.411154][T16803] usb 2-1: USB disconnect, device number 73 [ 1305.796723][T19801] FAULT_INJECTION: forcing a failure. [ 1305.796723][T19801] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.809475][T19801] CPU: 1 UID: 0 PID: 19801 Comm: syz.4.4239 Not tainted 6.11.0-rc6-syzkaller #0 [ 1305.818603][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1305.828670][T19801] Call Trace: [ 1305.831965][T19801] [ 1305.834916][T19801] dump_stack_lvl+0x241/0x360 [ 1305.839621][T19801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.844849][T19801] ? __pfx__printk+0x10/0x10 [ 1305.849466][T19801] should_fail_ex+0x3b0/0x4e0 [ 1305.854170][T19801] ? skb_clone+0x20c/0x390 [ 1305.858613][T19801] should_failslab+0xac/0x100 [ 1305.863403][T19801] ? skb_clone+0x20c/0x390 [ 1305.868274][T19801] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1305.873666][T19801] skb_clone+0x20c/0x390 [ 1305.877932][T19801] ? dev_queue_xmit_nit+0x220/0xc10 [ 1305.883143][T19801] dev_queue_xmit_nit+0x419/0xc10 [ 1305.888195][T19801] ? dev_queue_xmit_nit+0x2b/0xc10 [ 1305.893323][T19801] ? validate_xmit_skb+0x9f9/0x1120 [ 1305.898541][T19801] dev_hard_start_xmit+0x15f/0x7e0 [ 1305.903668][T19801] ? __pfx_validate_xmit_skb+0x10/0x10 [ 1305.909139][T19801] __dev_queue_xmit+0x1b63/0x3e90 [ 1305.914169][T19801] ? kasan_save_track+0x51/0x80 [ 1305.919032][T19801] ? __do_fast_syscall_32+0xb4/0x110 [ 1305.924400][T19801] ? __dev_queue_xmit+0x2da/0x3e90 [ 1305.929508][T19801] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1305.934883][T19801] ? __copy_skb_header+0x437/0x5b0 [ 1305.939988][T19801] ? __asan_memcpy+0x40/0x70 [ 1305.944570][T19801] ? __copy_skb_header+0x437/0x5b0 [ 1305.949763][T19801] ? __skb_clone+0x454/0x6c0 [ 1305.954382][T19801] ? skb_clone+0x240/0x390 [ 1305.958797][T19801] __netlink_deliver_tap+0x54d/0x7c0 [ 1305.964092][T19801] ? netlink_deliver_tap+0x2e/0x1b0 [ 1305.969386][T19801] netlink_deliver_tap+0x19d/0x1b0 [ 1305.974493][T19801] netlink_unicast+0x7c4/0x990 [ 1305.979257][T19801] ? __pfx_netlink_unicast+0x10/0x10 [ 1305.984537][T19801] ? __virt_addr_valid+0x183/0x530 [ 1305.989641][T19801] ? __check_object_size+0x49c/0x900 [ 1305.994921][T19801] ? bpf_lsm_netlink_send+0x9/0x10 [ 1306.000027][T19801] netlink_sendmsg+0x8e4/0xcb0 [ 1306.004793][T19801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.010068][T19801] ? aa_sock_msg_perm+0x91/0x160 [ 1306.015034][T19801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1306.020341][T19801] ? security_socket_sendmsg+0x87/0xb0 [ 1306.025801][T19801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.031081][T19801] __sock_sendmsg+0x221/0x270 [ 1306.035758][T19801] ____sys_sendmsg+0x525/0x7d0 [ 1306.040523][T19801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.045812][T19801] __sys_sendmsg+0x2b0/0x3a0 [ 1306.050416][T19801] ? __pfx___sys_sendmsg+0x10/0x10 [ 1306.055530][T19801] ? vfs_write+0x7c4/0xc90 [ 1306.059980][T19801] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1306.066586][T19801] ? lockdep_hardirqs_on+0x99/0x150 [ 1306.071795][T19801] __do_fast_syscall_32+0xb4/0x110 [ 1306.076904][T19801] ? exc_page_fault+0x590/0x8c0 [ 1306.081759][T19801] do_fast_syscall_32+0x34/0x80 [ 1306.086607][T19801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.092937][T19801] RIP: 0023:0xf747d579 [ 1306.097001][T19801] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1306.116688][T19801] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1306.125110][T19801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000640 [ 1306.133079][T19801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.141130][T19801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.149099][T19801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1306.157063][T19801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.165041][T19801] [ 1306.186752][ T6746] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1306.379467][ T6667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.668659][ T6667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.012219][ T6667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.123371][T19828] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.4245'. [ 1307.309253][ T6667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.369110][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1307.380385][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1307.393179][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1307.412242][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1307.429613][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1307.437051][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1307.522665][T19848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4248'. [ 1307.674301][ T5230] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1307.814517][T11201] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1307.884635][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 1307.913669][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.950252][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.982925][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1308.019822][ T6667] bridge_slave_1: left allmulticast mode [ 1308.022385][ T5230] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1308.036135][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.044966][ T6667] bridge_slave_1: left promiscuous mode [ 1308.046716][T11201] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1308.060348][T11201] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 1308.070988][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.071191][ T5230] usb 5-1: config 0 descriptor?? [ 1308.084271][T11201] usb 3-1: Manufacturer: syz [ 1308.101942][T11201] usb 3-1: config 0 descriptor?? [ 1308.119241][ T6667] bridge_slave_0: left allmulticast mode [ 1308.120838][T11201] hub 3-1:0.0: bad descriptor, ignoring hub [ 1308.135521][ T6667] bridge_slave_0: left promiscuous mode [ 1308.141270][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.148480][T11201] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1308.157095][ T1169] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1308.167883][T11201] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1308.178105][T11201] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1308.372082][ T1169] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1308.385172][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1308.395426][ T1169] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1308.415557][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.419126][T19945] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1308.467801][ T1169] usb 4-1: config 0 descriptor?? [ 1308.477147][T11201] usb 3-1: USB disconnect, device number 88 [ 1308.490718][ T1169] smsusb:smsusb_probe: board id=8, interface number 0 [ 1308.504782][T11201] ftdi_sio 3-1:0.0: device disconnected [ 1308.519852][ T1169] smsusb:smsusb_probe: Device initialized with return code -19 [ 1308.721238][ T5230] usbhid 5-1:0.0: can't add hid device: -71 [ 1308.738967][ T5230] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1308.753797][ T5230] usb 5-1: USB disconnect, device number 83 [ 1308.802911][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.815179][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.974619][ T1169] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1309.186399][ T1169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1309.193838][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1309.216387][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1309.235634][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1309.263069][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1309.273897][ T6667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.289958][ T6667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.312409][ T1169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1309.317089][ T6667] bond0 (unregistering): Released all slaves [ 1309.338841][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1309.351396][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1309.361906][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1309.373294][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1309.429804][ T1169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1309.460534][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1309.475864][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1309.486142][ T6746] Bluetooth: hci4: command tx timeout [ 1309.497531][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1309.510283][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1309.526084][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1309.580068][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1309.590329][ T1169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1309.611524][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1309.626044][ T1169] usb 3-1: string descriptor 0 read error: -22 [ 1309.632559][ T1169] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1309.647656][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.647862][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4250'. [ 1309.697359][ T1169] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1309.714006][T19987] netlink: 'syz.3.4250': attribute type 25 has an invalid length. [ 1309.763274][T19987] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.773156][T19987] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.782010][T19987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.790802][T19987] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1309.847238][T19850] chnl_net:caif_netlink_parms(): no params data found [ 1310.019056][ T1169] usb 3-1: USB disconnect, device number 89 [ 1310.381028][T20097] pimreg: entered allmulticast mode [ 1310.474932][T11201] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1310.493488][ T6667] hsr_slave_0: left promiscuous mode [ 1310.517264][ T6667] hsr_slave_1: left promiscuous mode [ 1310.530550][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.558142][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.581882][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.596522][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.661484][ T6667] veth1_macvtap: left promiscuous mode [ 1310.667530][T11201] usb 5-1: Using ep0 maxpacket: 32 [ 1310.683103][T11201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1310.703576][ T6667] veth0_macvtap: left promiscuous mode [ 1310.711798][ T6667] veth1_vlan: left promiscuous mode [ 1310.720855][T11201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1310.745145][ T6667] veth0_vlan: left promiscuous mode [ 1310.765267][T11201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1310.783782][T11201] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1310.793506][T11201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.805756][T11201] usb 5-1: config 0 descriptor?? [ 1310.830374][T20079] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1310.854944][T11201] hub 5-1:0.0: USB hub found [ 1310.857066][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1310.857082][ T29] audit: type=1326 audit(1725236851.673:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19888 comm="syz.3.4250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7fc00000 [ 1311.000002][T16803] usb 4-1: USB disconnect, device number 75 [ 1311.051237][T11201] hub 5-1:0.0: 2 ports detected [ 1311.573353][ T6746] Bluetooth: hci4: command tx timeout [ 1311.586305][T16803] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1311.822160][T16803] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 1311.840082][T16803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.864626][T16803] usb 4-1: config 0 has no interface number 0 [ 1311.870943][T16803] usb 4-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 1311.904941][T16803] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1311.925181][T16803] usb 4-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1311.969053][T16803] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1312.003519][T16803] usb 4-1: config 0 interface 224 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1312.036558][T16803] usb 4-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1312.087438][T16803] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 1312.111997][T16803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.128050][T16803] usb 4-1: Product: syz [ 1312.132240][T16803] usb 4-1: Manufacturer: syz [ 1312.140110][T16803] usb 4-1: SerialNumber: syz [ 1312.179698][T16803] usb 4-1: config 0 descriptor?? [ 1312.189050][T16803] keyspan 4-1:0.224: Keyspan 4 port adapter converter detected [ 1312.197499][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 87 [ 1312.225623][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 7 [ 1312.234832][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 81 [ 1312.257869][T16803] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1312.284981][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 82 [ 1312.296693][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 2 [ 1312.307292][T16803] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1312.333673][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 83 [ 1312.350086][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 3 [ 1312.368280][T16803] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1312.381843][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 84 [ 1312.393683][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.408603][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.420533][T16803] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 4 [ 1312.449700][T16803] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1312.720555][ T6667] team0 (unregistering): Port device team_slave_1 removed [ 1312.797926][ T6667] team0 (unregistering): Port device team_slave_0 removed [ 1313.203490][T16803] usb 5-1: USB disconnect, device number 84 [ 1313.628881][T19850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.636589][T19850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.644681][ T6746] Bluetooth: hci4: command tx timeout [ 1313.654824][T19850] bridge_slave_0: entered allmulticast mode [ 1313.663299][T19850] bridge_slave_0: entered promiscuous mode [ 1313.694273][T20181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1313.822249][T19850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.837489][ T1169] usb 4-1: USB disconnect, device number 76 [ 1313.846359][T19850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.852639][ T1169] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1313.879761][ T1169] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1313.890598][T19850] bridge_slave_1: entered allmulticast mode [ 1313.918208][T19850] bridge_slave_1: entered promiscuous mode [ 1313.935462][ T1169] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1314.023744][ T1169] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1314.083459][ T1169] keyspan 4-1:0.224: device disconnected [ 1314.237423][T19850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.268825][T20285] FAULT_INJECTION: forcing a failure. [ 1314.268825][T20285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.302838][T20285] CPU: 1 UID: 0 PID: 20285 Comm: syz.0.4269 Not tainted 6.11.0-rc6-syzkaller #0 [ 1314.310907][T19850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.311879][T20285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1314.330948][T20285] Call Trace: [ 1314.334241][T20285] [ 1314.337187][T20285] dump_stack_lvl+0x241/0x360 [ 1314.341889][T20285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1314.347094][T20285] ? __pfx__printk+0x10/0x10 [ 1314.351670][T20285] ? __pfx_lock_release+0x10/0x10 [ 1314.356703][T20285] should_fail_ex+0x3b0/0x4e0 [ 1314.361406][T20285] _copy_from_iter+0x1f6/0x1960 [ 1314.366270][T20285] ? __virt_addr_valid+0x183/0x530 [ 1314.371483][T20285] ? __pfx_lock_release+0x10/0x10 [ 1314.376530][T20285] ? __alloc_skb+0x28f/0x440 [ 1314.381136][T20285] ? __pfx__copy_from_iter+0x10/0x10 [ 1314.386437][T20285] ? __virt_addr_valid+0x183/0x530 [ 1314.391557][T20285] ? __virt_addr_valid+0x183/0x530 [ 1314.396656][T20285] ? __virt_addr_valid+0x45f/0x530 [ 1314.401844][T20285] ? __check_object_size+0x49c/0x900 [ 1314.407128][T20285] netlink_sendmsg+0x73d/0xcb0 [ 1314.411892][T20285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.417170][T20285] ? aa_sock_msg_perm+0x91/0x160 [ 1314.422097][T20285] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1314.427371][T20285] ? security_socket_sendmsg+0x87/0xb0 [ 1314.432824][T20285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.438099][T20285] __sock_sendmsg+0x221/0x270 [ 1314.442858][T20285] ____sys_sendmsg+0x525/0x7d0 [ 1314.447623][T20285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.452909][T20285] __sys_sendmsg+0x2b0/0x3a0 [ 1314.457492][T20285] ? __pfx___sys_sendmsg+0x10/0x10 [ 1314.462602][T20285] ? vfs_write+0x7c4/0xc90 [ 1314.467143][T20285] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1314.473727][T20285] ? lockdep_hardirqs_on+0x99/0x150 [ 1314.478924][T20285] __do_fast_syscall_32+0xb4/0x110 [ 1314.484025][T20285] ? exc_page_fault+0x590/0x8c0 [ 1314.488877][T20285] do_fast_syscall_32+0x34/0x80 [ 1314.493803][T20285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1314.500215][T20285] RIP: 0023:0xf7f74579 [ 1314.504277][T20285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1314.524049][T20285] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1314.532479][T20285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000d80 [ 1314.540620][T20285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.548583][T20285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1314.556546][T20285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1314.564517][T20285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1314.572509][T20285] [ 1314.614352][ T6746] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1314.623131][ T6746] Bluetooth: hci2: Injecting HCI hardware error event [ 1314.633535][ T5239] Bluetooth: hci2: hardware error 0x00 [ 1314.900920][T19850] team0: Port device team_slave_0 added [ 1314.937261][T19850] team0: Port device team_slave_1 added [ 1315.096129][T19850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.103116][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.114924][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1315.158353][T19850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.185157][T19850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.200901][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.234579][T19850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.324486][T11201] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1315.357387][T19850] hsr_slave_0: entered promiscuous mode [ 1315.365296][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1315.377840][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1315.378872][T19850] hsr_slave_1: entered promiscuous mode [ 1315.392071][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.408113][ T8] usb 3-1: Product: syz [ 1315.412433][ T8] usb 3-1: Manufacturer: syz [ 1315.413310][T19850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.417487][ T8] usb 3-1: SerialNumber: syz [ 1315.428559][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1315.442478][T19850] Cannot create hsr debugfs directory [ 1315.450272][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 1315.519779][T11201] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1315.527932][ T1169] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1315.541042][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1315.553988][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1315.568473][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1315.580310][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1315.626879][T11201] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1315.635873][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1315.652191][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1315.704049][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1315.724160][ T6746] Bluetooth: hci4: command tx timeout [ 1315.744921][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1315.755305][ T1169] usb 5-1: Using ep0 maxpacket: 8 [ 1315.762979][ T1169] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 1315.774966][ T1169] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 1315.787361][T11201] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1315.797514][ T1169] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.810732][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1315.821472][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1315.832701][ T1169] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 1315.850863][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1315.863170][ T1169] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 1315.875633][T11201] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1315.886112][ T1169] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.907732][ T1169] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 1315.949694][ T1169] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 1315.962102][T11201] usb 4-1: string descriptor 0 read error: -22 [ 1315.971535][T11201] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1315.983900][T20318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.995441][T11201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.000265][T20318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.018721][ T1169] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1316.033123][ T5306] r8152-cfgselector 3-1: USB disconnect, device number 90 [ 1316.057705][ T1169] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1316.086540][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.106075][T11201] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1316.113985][ T29] audit: type=1326 audit(1725236856.933:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20450 comm="syz.0.4274" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 1316.138118][ T1169] usb 5-1: Product: syz [ 1316.142305][ T1169] usb 5-1: Manufacturer: syz [ 1316.147497][ T1169] usb 5-1: SerialNumber: syz [ 1316.317984][T11201] usb 4-1: USB disconnect, device number 77 [ 1316.585667][T20368] delete_channel: no stack [ 1316.653004][ T1169] adutux 5-1:168.0: interrupt endpoints not found [ 1316.711512][ T1169] usb 5-1: USB disconnect, device number 85 [ 1316.865080][ T5239] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1316.909505][T20558] hsr0: entered promiscuous mode [ 1317.031562][T19850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1317.053090][T19850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1317.086608][T19850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1317.118042][T19850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1317.399878][ T6667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.591782][ T6667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.780361][T20590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.857235][T20600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.869433][ T6667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.958224][T20600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4282'. [ 1318.099171][ T6667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.230877][ T6746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1318.237923][T19850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.258788][ T6746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1318.281012][ T6746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1318.295302][ T6746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1318.303046][ T6746] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1318.314181][ T6746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1318.430435][ T6667] bridge_slave_1: left allmulticast mode [ 1318.441117][ T6667] bridge_slave_1: left promiscuous mode [ 1318.447759][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.467411][ T6667] bridge_slave_0: left allmulticast mode [ 1318.482630][ T6667] bridge_slave_0: left promiscuous mode [ 1318.494205][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.720411][T20668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.983167][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 1319.338899][T20688] sctp: [Deprecated]: syz.4.4289 (pid 20688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1319.338899][T20688] Use struct sctp_sack_info instead [ 1320.301445][ T6667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.322784][ T6667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.345608][ T6667] bond0 (unregistering): Released all slaves [ 1320.364623][ T6746] Bluetooth: hci2: command tx timeout [ 1320.442368][T19850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.500101][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.507358][T10349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.599961][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1320.826822][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.833985][T10349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.880138][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4291'. [ 1320.935577][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4291'. [ 1321.431816][T20765] netlink: 'syz.2.4294': attribute type 10 has an invalid length. [ 1321.474890][T20765] hsr0: left promiscuous mode [ 1321.509711][T20765] hsr0: entered promiscuous mode [ 1321.566660][T20765] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1321.616205][T20765] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1321.668045][T20765] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1321.694233][T20765] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1322.128292][ T6667] hsr_slave_0: left promiscuous mode [ 1322.195946][ T6667] hsr_slave_1: left promiscuous mode [ 1322.226488][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.254622][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.285636][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.293076][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.413435][ T6667] veth1_macvtap: left promiscuous mode [ 1322.432158][ T6667] veth0_macvtap: left promiscuous mode [ 1322.445006][ T6746] Bluetooth: hci2: command tx timeout [ 1322.447871][ T6667] veth1_vlan: left promiscuous mode [ 1322.463911][ T6667] veth0_vlan: left promiscuous mode [ 1322.642521][ T6667] pimreg (unregistering): left allmulticast mode [ 1323.191215][ T6667] team0 (unregistering): Port device team_slave_1 removed [ 1323.251887][ T6667] team0 (unregistering): Port device team_slave_0 removed [ 1323.951520][T19850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1324.240792][T19850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.250116][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1324.432210][T20646] chnl_net:caif_netlink_parms(): no params data found [ 1324.527461][ T6746] Bluetooth: hci2: command tx timeout [ 1324.584217][T19850] veth0_vlan: entered promiscuous mode [ 1324.776834][T19850] veth1_vlan: entered promiscuous mode [ 1324.987394][T20646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.005907][T20646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.028974][T20646] bridge_slave_0: entered allmulticast mode [ 1325.061231][T20646] bridge_slave_0: entered promiscuous mode [ 1325.098466][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1325.115258][T20979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.142323][T20979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.174691][T20979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.182222][T20979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.281588][T20646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.311264][T20646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.344827][T20646] bridge_slave_1: entered allmulticast mode [ 1325.352222][T20646] bridge_slave_1: entered promiscuous mode [ 1325.429218][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1325.455889][T21011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1325.476573][T21029] GUP no longer grows the stack in syz.2.4315 (21029): 20006000-20008000 (20005000) [ 1325.514599][T21029] CPU: 0 UID: 0 PID: 21029 Comm: syz.2.4315 Not tainted 6.11.0-rc6-syzkaller #0 [ 1325.523682][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1325.533787][T21029] Call Trace: [ 1325.537181][T21029] [ 1325.540129][T21029] dump_stack_lvl+0x241/0x360 [ 1325.544834][T21029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1325.550063][T21029] ? __pfx__printk+0x10/0x10 [ 1325.554681][T21029] ? find_vma+0xf9/0x170 [ 1325.558966][T21029] ? vma_is_secretmem+0xd/0x50 [ 1325.563755][T21029] ? check_vma_flags+0x531/0x5a0 [ 1325.568727][T21029] __get_user_pages+0x114d/0x16a0 [ 1325.573416][T21018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1325.573778][T21029] ? __pfx___get_user_pages+0x10/0x10 [ 1325.588152][T21029] ? __pfx_lock_acquire+0x10/0x10 [ 1325.593208][T21029] __gup_longterm_locked+0x3ba/0x17d0 [ 1325.598628][T21029] pin_user_pages+0x137/0x1f0 [ 1325.603332][T21029] ? __pfx_pin_user_pages+0x10/0x10 [ 1325.608551][T21029] ? __kmalloc_node_noprof+0x247/0x440 [ 1325.614038][T21029] xdp_umem_create+0x978/0xf30 [ 1325.618832][T21029] xsk_setsockopt+0x732/0x950 [ 1325.623530][T21029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1325.628758][T21029] ? aa_sock_opt_perm+0x79/0x120 [ 1325.633722][T21029] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1325.639393][T21029] ? security_socket_setsockopt+0x87/0xb0 [ 1325.645140][T21029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1325.650365][T21029] do_sock_setsockopt+0x3af/0x720 [ 1325.655417][T21029] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1325.661004][T21029] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1325.667377][T21029] __sys_setsockopt+0x1ae/0x250 [ 1325.672274][T21029] __ia32_sys_setsockopt+0xb5/0xd0 [ 1325.677416][T21029] __do_fast_syscall_32+0xb4/0x110 [ 1325.682551][T21029] ? ret_from_fork_asm+0x1a/0x30 [ 1325.687610][T21029] ? lockdep_hardirqs_on+0x99/0x150 [ 1325.692842][T21029] do_fast_syscall_32+0x34/0x80 [ 1325.697717][T21029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1325.704063][T21029] RIP: 0023:0xf73cd579 [ 1325.708145][T21029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1325.727773][T21029] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1325.736294][T21029] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000011b [ 1325.744278][T21029] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000020 [ 1325.752264][T21029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1325.760254][T21029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1325.768243][T21029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.776248][T21029] [ 1325.811715][T20646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.856825][T20646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.019936][T20646] team0: Port device team_slave_0 added [ 1326.053992][T19850] veth0_macvtap: entered promiscuous mode [ 1326.085435][T20646] team0: Port device team_slave_1 added [ 1326.246555][T19850] veth1_macvtap: entered promiscuous mode [ 1326.281259][T20646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.304857][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.367728][T20646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.457637][T20646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.464926][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.524882][T20646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.612291][ T6746] Bluetooth: hci2: command tx timeout [ 1326.620544][T21123] tipc: Started in network mode [ 1326.635156][T21123] tipc: Node identity ac1414aa, cluster identity 4711 [ 1326.651872][T21123] tipc: Enabled bearer , priority 10 [ 1326.679137][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.714566][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.735174][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.758652][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.776361][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.801613][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.824314][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.859186][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.885787][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.901034][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.911391][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.923121][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.945725][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1326.964237][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.986231][T19850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.150317][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.167926][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.184023][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.196465][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.208872][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.222765][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.237008][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.270243][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.295979][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.317602][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.355016][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.382612][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.406330][T19850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.443576][T19850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.459319][T19850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.527658][T19850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.567826][T19850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.604203][T19850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.613029][T19850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.650809][T20646] hsr_slave_0: entered promiscuous mode [ 1327.658482][T20646] hsr_slave_1: entered promiscuous mode [ 1327.688213][T20646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.700286][T20646] Cannot create hsr debugfs directory [ 1327.764365][ T940] tipc: Node number set to 2886997162 [ 1327.835397][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4335'. [ 1328.311208][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.366331][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.533346][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.571610][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.200459][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1329.244807][T21357] bridge0: port 3(team0) entered blocking state [ 1329.269072][T21357] bridge0: port 3(team0) entered disabled state [ 1329.291453][T21357] team0: entered allmulticast mode [ 1329.317309][T21357] team_slave_0: entered allmulticast mode [ 1329.344163][T21357] team_slave_1: entered allmulticast mode [ 1329.376202][T21357] team0: entered promiscuous mode [ 1329.383436][T21357] team_slave_0: entered promiscuous mode [ 1329.398294][T21357] team_slave_1: entered promiscuous mode [ 1329.410429][T21357] bridge0: port 3(team0) entered blocking state [ 1329.416873][T21357] bridge0: port 3(team0) entered forwarding state [ 1329.518819][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1329.878449][T20646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1329.940976][T20646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1329.983799][T20646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1330.030626][T20646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1330.253109][T21417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1330.481295][T20646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.581592][T21428] netlink: 'syz.4.4368': attribute type 10 has an invalid length. [ 1330.662938][T21428] hsr0: entered promiscuous mode [ 1330.728232][T21428] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1330.825533][T20646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.890339][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.897540][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.997451][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.004675][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.254519][T20646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.440132][T21458] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4373'. [ 1331.450880][T20646] veth0_vlan: entered promiscuous mode [ 1331.453809][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1331.480252][T21458] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4373'. [ 1331.503300][T20646] veth1_vlan: entered promiscuous mode [ 1331.525730][T21458] unsupported nlmsg_type 40 [ 1331.644654][T20646] veth0_macvtap: entered promiscuous mode [ 1331.673587][T20646] veth1_macvtap: entered promiscuous mode [ 1331.701133][T21461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1331.708438][T21461] IPv6: NLM_F_CREATE should be set when creating new route [ 1331.815848][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.839125][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.877582][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.910323][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.944379][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.977933][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.009444][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.029607][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.041626][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.091557][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.122053][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.153568][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.174830][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.190570][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.201138][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.213367][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.228396][T20646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.238832][T21496] netlink: 'syz.4.4384': attribute type 7 has an invalid length. [ 1332.248610][T21496] netlink: 'syz.4.4384': attribute type 39 has an invalid length. [ 1332.271911][T21494] netlink: 'syz.4.4384': attribute type 7 has an invalid length. [ 1332.299586][T21494] netlink: 'syz.4.4384': attribute type 39 has an invalid length. [ 1332.388199][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.439286][T21501] sctp: [Deprecated]: syz.2.4385 (pid 21501) Use of int in maxseg socket option. [ 1332.439286][T21501] Use struct sctp_assoc_value instead [ 1332.444097][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.498471][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.508992][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.519447][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.531213][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.541848][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.553887][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.579805][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.593296][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.604651][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.615886][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.626403][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.640271][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.658439][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.680124][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.708401][T20646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.861626][T20646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.888902][T20646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.933052][T20646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.949795][T20646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.040484][T21526] batadv_slave_0: entered promiscuous mode [ 1333.186289][ T6667] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1333.493769][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.494459][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1333.513495][T10349] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1333.535426][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.618967][T10349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.638792][T10349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.743068][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.763863][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.379558][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1335.701897][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'. [ 1336.311394][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 1336.935818][ T940] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1336.982747][T21710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1337.134537][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 1337.147830][ T940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.173636][ T940] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1337.223682][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.254020][ T940] usb 2-1: Product: syz [ 1337.258740][ T940] usb 2-1: Manufacturer: syz [ 1337.263401][ T940] usb 2-1: SerialNumber: syz [ 1337.301586][ T940] usb 2-1: config 0 descriptor?? [ 1337.845140][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4455'. [ 1338.010996][T16803] usb 2-1: USB disconnect, device number 74 [ 1338.405940][T21788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4464'. [ 1338.432855][T21788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4464'. [ 1339.548637][T21839] netlink: 'syz.2.4485': attribute type 4 has an invalid length. [ 1340.151238][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1340.357543][T21876] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1341.429400][T21930] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1341.595081][ T3954] bridge_slave_1: left allmulticast mode [ 1341.602861][ T3954] bridge_slave_1: left promiscuous mode [ 1341.645032][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.686346][ T3954] bridge_slave_0: left allmulticast mode [ 1341.692456][ T3954] bridge_slave_0: left promiscuous mode [ 1341.704582][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.696087][ T3954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.707982][ T3954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.719577][ T3954] bond0 (unregistering): Released all slaves [ 1342.736760][T21940] netlink: 'syz.4.4518': attribute type 49 has an invalid length. [ 1343.000994][T21981] netlink: 'syz.2.4533': attribute type 4 has an invalid length. [ 1343.424604][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1343.714741][ T46] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1343.894692][ T3954] hsr_slave_0: left promiscuous mode [ 1343.902170][ T3954] hsr_slave_1: left promiscuous mode [ 1343.914765][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.924561][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1343.936114][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1343.957213][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.982263][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1344.016054][ T46] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 1344.026698][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.049082][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.062159][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.091518][ T46] usb 3-1: Product: syz [ 1344.111751][ T46] usb 3-1: Manufacturer: syz [ 1344.130825][ T46] usb 3-1: SerialNumber: syz [ 1344.159837][ T46] usb 3-1: config 0 descriptor?? [ 1344.176536][ T3954] veth1_macvtap: left promiscuous mode [ 1344.192516][ T3954] veth0_macvtap: left promiscuous mode [ 1344.202093][ T46] imon_raw 3-1:0.0: IR endpoint missing [ 1344.219048][ T3954] veth1_vlan: left promiscuous mode [ 1344.228497][T22045] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4547'. [ 1344.251214][ T3954] veth0_vlan: left promiscuous mode [ 1344.347409][ T29] audit: type=1326 audit(1725236885.173:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.1.4547" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 1344.598862][T22056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.656583][T22056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.693139][ T3954] team0 (unregistering): Port device team_slave_1 removed [ 1345.778349][ T3954] team0 (unregistering): Port device team_slave_0 removed [ 1346.826561][T22012] tipc: Invalid UDP bearer configuration [ 1346.826679][T22012] tipc: Enabling of bearer rejected, failed to enable media [ 1347.298877][T16803] usb 3-1: USB disconnect, device number 91 [ 1347.936694][T22138] debugfs: Directory '!0x000000000000000c18446744073709551615' with parent 'ieee80211' already present! [ 1348.076911][T22151] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1348.096299][T22151] netlink: 296 bytes leftover after parsing attributes in process `syz.4.4571'. [ 1348.255293][T16803] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1348.449715][T16803] usb 1-1: Using ep0 maxpacket: 8 [ 1348.471875][T16803] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1348.491337][T16803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.491797][T22169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1348.506739][T22169] IPv6: NLM_F_CREATE should be set when creating new route [ 1348.507701][T16803] usb 1-1: Product: syz [ 1348.519075][T16803] usb 1-1: Manufacturer: syz [ 1348.524284][T16803] usb 1-1: SerialNumber: syz [ 1348.541047][T16803] usb 1-1: config 0 descriptor?? [ 1348.567997][T16803] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1348.773531][T22177] tipc: Started in network mode [ 1348.793115][T22177] tipc: Node identity ac1414aa, cluster identity 4711 [ 1348.841818][T22177] tipc: Enabled bearer , priority 10 [ 1348.969110][T16803] gspca_m5602: Failed to find a sensor [ 1348.980157][T16803] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1348.993477][T16803] usb 1-1: USB disconnect, device number 44 [ 1349.211647][T22204] sctp: [Deprecated]: syz.3.4582 (pid 22204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1349.211647][T22204] Use struct sctp_sack_info instead [ 1349.359207][T22210] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1349.369026][T22210] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1349.901718][T22235] tipc: Started in network mode [ 1349.917723][T22235] tipc: Node identity ac1414aa, cluster identity 4711 [ 1349.939615][T22235] tipc: Enabled bearer , priority 10 [ 1349.964618][T11201] tipc: Node number set to 2886997162 [ 1350.504648][ T6667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.748987][ T6667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.982831][ T6667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.056086][ T46] tipc: Node number set to 2886997162 [ 1351.077263][T22283] sctp: [Deprecated]: syz.2.4613 (pid 22283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1351.077263][T22283] Use struct sctp_sack_info instead [ 1351.372105][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1351.383146][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1351.397584][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1351.407252][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1351.416863][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1351.429472][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1351.502572][ T6667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.214792][ T6667] bridge_slave_1: left allmulticast mode [ 1352.220486][ T6667] bridge_slave_1: left promiscuous mode [ 1352.280273][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.316558][ T6667] bridge_slave_0: left allmulticast mode [ 1352.365851][ T6667] bridge_slave_0: left promiscuous mode [ 1352.371633][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.411493][T22387] sctp: [Deprecated]: syz.0.4625 (pid 22387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1352.411493][T22387] Use struct sctp_sack_info instead [ 1353.242364][T22418] sctp: [Deprecated]: syz.2.4636 (pid 22418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1353.242364][T22418] Use struct sctp_sack_info instead [ 1353.313707][T22419] dccp_close: ABORT with 192 bytes unread [ 1353.485416][ T5239] Bluetooth: hci5: command tx timeout [ 1353.490372][T22427] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 1353.756933][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1354.000927][ T6667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.012022][ T6667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.022686][ T6667] bond0 (unregistering): Released all slaves [ 1354.213510][ T6667] tipc: Disabling bearer [ 1354.235030][ T6667] tipc: Left network mode [ 1354.299450][T22309] chnl_net:caif_netlink_parms(): no params data found [ 1354.495258][T22556] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 1354.915509][T22610] netlink: 'syz.0.4656': attribute type 4 has an invalid length. [ 1354.989492][T22309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.025072][T22309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.040633][T22309] bridge_slave_0: entered allmulticast mode [ 1355.060458][T22309] bridge_slave_0: entered promiscuous mode [ 1355.099502][T22309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.139003][T22309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.159409][T22309] bridge_slave_1: entered allmulticast mode [ 1355.179247][T22309] bridge_slave_1: entered promiscuous mode [ 1355.428889][T22309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.518798][T22309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.564216][ T5239] Bluetooth: hci5: command tx timeout [ 1355.927476][T22309] team0: Port device team_slave_0 added [ 1355.972207][T22309] team0: Port device team_slave_1 added [ 1356.195068][T22309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.202057][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.257128][T22309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.270664][T22769] netlink: 'syz.3.4673': attribute type 4 has an invalid length. [ 1356.322558][T22309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.350342][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.410127][T22309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.752394][T22309] hsr_slave_0: entered promiscuous mode [ 1356.790801][T22309] hsr_slave_1: entered promiscuous mode [ 1356.826533][T22309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1356.844937][T22309] Cannot create hsr debugfs directory [ 1356.886550][T22840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1357.025591][ T6667] hsr_slave_0: left promiscuous mode [ 1357.055953][ T6667] hsr_slave_1: left promiscuous mode [ 1357.080366][T22859] netlink: 'syz.2.4682': attribute type 1 has an invalid length. [ 1357.108125][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4682'. [ 1357.124213][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.136614][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.161799][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.184521][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.328373][ T6667] veth1_macvtap: left promiscuous mode [ 1357.348664][ T6667] veth1_vlan: left promiscuous mode [ 1357.365792][ T6667] veth0_vlan: left promiscuous mode [ 1357.658801][ T5239] Bluetooth: hci5: command tx timeout [ 1358.243448][ T6667] team0 (unregistering): Port device team_slave_1 removed [ 1358.359333][ T6667] team0 (unregistering): Port device team_slave_0 removed [ 1359.295600][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4693'. [ 1359.738120][ T5239] Bluetooth: hci5: command tx timeout [ 1360.964408][T23055] openvswitch: netlink: Flow key attr not present in new flow. [ 1361.190003][T22309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1361.221822][T22309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1361.259848][T22309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1361.302424][T22309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1361.598751][T22309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.679051][T22309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.720224][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.727432][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.766638][T23102] [ 1361.769001][T23102] ====================================================== [ 1361.776021][T23102] WARNING: possible circular locking dependency detected [ 1361.783041][T23102] 6.11.0-rc6-syzkaller #0 Not tainted [ 1361.788436][T23102] ------------------------------------------------------ [ 1361.795475][T23102] syz.1.4725/23102 is trying to acquire lock: [ 1361.801542][T23102] ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 1361.810705][T23102] [ 1361.810705][T23102] but task is already holding lock: [ 1361.818070][T23102] ffff888033ed1550 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 1361.828190][T23102] [ 1361.828190][T23102] which lock already depends on the new lock. [ 1361.828190][T23102] [ 1361.838596][T23102] [ 1361.838596][T23102] the existing dependency chain (in reverse order) is: [ 1361.847618][T23102] [ 1361.847618][T23102] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 1361.856320][T23102] lock_acquire+0x1ed/0x550 [ 1361.861359][T23102] __mutex_lock+0x136/0xd70 [ 1361.866395][T23102] smc_switch_to_fallback+0x35/0xdb0 [ 1361.872213][T23102] smc_sendmsg+0x11f/0x530 [ 1361.877158][T23102] __sock_sendmsg+0x221/0x270 [ 1361.882371][T23102] __sys_sendto+0x3a4/0x4f0 [ 1361.887492][T23102] __ia32_sys_sendto+0xdd/0x100 [ 1361.892876][T23102] __do_fast_syscall_32+0xb4/0x110 [ 1361.896415][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.898504][T23102] do_fast_syscall_32+0x34/0x80 [ 1361.898529][T23102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1361.907246][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.910082][T23102] [ 1361.910082][T23102] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0} [ 1361.920988][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.923133][T23102] : [ 1361.930834][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.937723][T23102] lock_acquire+0x1ed/0x550 [ 1361.952383][T23102] lock_sock_nested+0x48/0x100 [ 1361.957675][T23102] do_ipv6_setsockopt+0xbf3/0x3630 [ 1361.963316][T23102] ipv6_setsockopt+0x5c/0x1a0 [ 1361.968526][T23102] do_sock_setsockopt+0x3af/0x720 [ 1361.974167][T23102] __sys_setsockopt+0x1ae/0x250 [ 1361.979551][T23102] __ia32_sys_setsockopt+0xb5/0xd0 [ 1361.985197][T23102] __do_fast_syscall_32+0xb4/0x110 [ 1361.990841][T23102] do_fast_syscall_32+0x34/0x80 [ 1361.992173][T22309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1361.996206][T23102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1361.996234][T23102] [ 1361.996234][T23102] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 1361.996265][T23102] validate_chain+0x18e0/0x5900 [ 1361.996283][T23102] __lock_acquire+0x137a/0x2040 [ 1361.996307][T23102] lock_acquire+0x1ed/0x550 [ 1361.996329][T23102] __mutex_lock+0x136/0xd70 [ 1361.996348][T23102] do_ipv6_setsockopt+0x9e4/0x3630 [ 1361.996366][T23102] ipv6_setsockopt+0x5c/0x1a0 [ 1361.996383][T23102] smc_setsockopt+0x275/0xe50 [ 1361.996403][T23102] do_sock_setsockopt+0x3af/0x720 [ 1361.996424][T23102] __sys_setsockopt+0x1ae/0x250 [ 1361.996450][T23102] __ia32_sys_setsockopt+0xb5/0xd0 [ 1361.996470][T23102] __do_fast_syscall_32+0xb4/0x110 [ 1361.996489][T23102] do_fast_syscall_32+0x34/0x80 [ 1361.996508][T23102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1361.996531][T23102] [ 1361.996531][T23102] other info that might help us debug this: [ 1361.996531][T23102] [ 1361.996539][T23102] Chain exists of: [ 1361.996539][T23102] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 1361.996539][T23102] [ 1361.996574][T23102] Possible unsafe locking scenario: [ 1361.996574][T23102] [ 1361.996581][T23102] CPU0 CPU1 [ 1361.996587][T23102] ---- ---- [ 1361.996594][T23102] lock(&smc->clcsock_release_lock); [ 1361.996609][T23102] lock(sk_lock-AF_INET6); [ 1361.996625][T23102] lock(&smc->clcsock_release_lock); [ 1361.996641][T23102] lock(rtnl_mutex); [ 1361.996654][T23102] [ 1361.996654][T23102] *** DEADLOCK *** [ 1361.996654][T23102] [ 1361.996660][T23102] 1 lock held by syz.1.4725/23102: [ 1361.996673][T23102] #0: ffff888033ed1550 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 1361.996722][T23102] [ 1361.996722][T23102] stack backtrace: [ 1361.996730][T23102] CPU: 0 UID: 0 PID: 23102 Comm: syz.1.4725 Not tainted 6.11.0-rc6-syzkaller #0 [ 1361.996752][T23102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1361.996765][T23102] Call Trace: [ 1361.996773][T23102] [ 1361.996782][T23102] dump_stack_lvl+0x241/0x360 [ 1361.996804][T23102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1362.060520][T22309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.063332][T23102] ? print_circular_bug+0x130/0x1a0 [ 1362.112151][T22309] veth0_vlan: entered promiscuous mode [ 1362.115925][T23102] check_noncircular+0x36a/0x4a0 [ 1362.115953][T23102] ? mark_lock+0x9a/0x350 [ 1362.147644][T22309] veth1_vlan: entered promiscuous mode [ 1362.154419][T23102] ? __pfx_check_noncircular+0x10/0x10 [ 1362.154446][T23102] ? lockdep_lock+0x123/0x2b0 [ 1362.154473][T23102] ? _find_first_zero_bit+0xd3/0x100 [ 1362.191116][T22309] veth0_macvtap: entered promiscuous mode [ 1362.197117][T23102] validate_chain+0x18e0/0x5900 [ 1362.197148][T23102] ? __pfx_validate_chain+0x10/0x10 [ 1362.197177][T23102] ? __pfx_validate_chain+0x10/0x10 [ 1362.239030][T22309] veth1_macvtap: entered promiscuous mode [ 1362.240693][T23102] ? __lock_acquire+0x137a/0x2040 [ 1362.291937][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.297370][T23102] ? mark_lock+0x9a/0x350 [ 1362.297404][T23102] ? __lock_acquire+0x137a/0x2040 [ 1362.297434][T23102] ? mark_lock+0x9a/0x350 [ 1362.297460][T23102] __lock_acquire+0x137a/0x2040 [ 1362.297493][T23102] lock_acquire+0x1ed/0x550 [ 1362.297517][T23102] ? do_ipv6_setsockopt+0x9e4/0x3630 [ 1362.297541][T23102] ? __pfx_lock_acquire+0x10/0x10 [ 1362.297567][T23102] ? __pfx___might_resched+0x10/0x10 [ 1362.297592][T23102] ? __schedule+0x1808/0x4a60 [ 1362.297629][T23102] __mutex_lock+0x136/0xd70 [ 1362.297649][T23102] ? do_ipv6_setsockopt+0x9e4/0x3630 [ 1362.297671][T23102] ? __pfx_register_lock_class+0x10/0x10 [ 1362.297696][T23102] ? do_ipv6_setsockopt+0x9e4/0x3630 [ 1362.297712][T23102] ? __pfx___mutex_lock+0x10/0x10 [ 1362.297733][T23102] ? __lock_acquire+0x137a/0x2040 [ 1362.297758][T23102] do_ipv6_setsockopt+0x9e4/0x3630 [ 1362.297781][T23102] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1362.297806][T23102] ? __mutex_trylock_common+0x183/0x2e0 [ 1362.297823][T23102] ? __pfx___might_resched+0x10/0x10 [ 1362.297844][T23102] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1362.297866][T23102] ? rcu_is_watching+0x15/0xb0 [ 1362.297891][T23102] ? trace_contention_end+0x3c/0x120 [ 1362.297911][T23102] ? __mutex_lock+0x2ef/0xd70 [ 1362.297930][T23102] ? __pfx___might_resched+0x10/0x10 [ 1362.297954][T23102] ? smc_setsockopt+0x1c3/0xe50 [ 1362.297974][T23102] ? __pfx___mutex_lock+0x10/0x10 [ 1362.297995][T23102] ipv6_setsockopt+0x5c/0x1a0 [ 1362.309646][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.313386][T23102] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1362.339653][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.341603][T23102] smc_setsockopt+0x275/0xe50 [ 1362.348143][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.351870][T23102] ? __pfx_smc_setsockopt+0x10/0x10 [ 1362.359081][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.361015][T23102] ? aa_sock_opt_perm+0x79/0x120 [ 1362.509993][T23102] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1362.515543][T23102] ? security_socket_setsockopt+0x87/0xb0 [ 1362.521256][T23102] ? __pfx_smc_setsockopt+0x10/0x10 [ 1362.526451][T23102] do_sock_setsockopt+0x3af/0x720 [ 1362.531478][T23102] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1362.537020][T23102] ? __fget_files+0x3f6/0x470 [ 1362.541697][T23102] __sys_setsockopt+0x1ae/0x250 [ 1362.546560][T23102] __ia32_sys_setsockopt+0xb5/0xd0 [ 1362.551666][T23102] __do_fast_syscall_32+0xb4/0x110 [ 1362.556771][T23102] ? exc_page_fault+0x590/0x8c0 [ 1362.561615][T23102] do_fast_syscall_32+0x34/0x80 [ 1362.566459][T23102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1362.572783][T23102] RIP: 0023:0xf7f96579 [ 1362.576839][T23102] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1362.596628][T23102] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1362.605123][T23102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1362.613080][T23102] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.621035][T23102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.628993][T23102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1362.636951][T23102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.645000][T23102] [ 1362.690535][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.707246][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.717875][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.730454][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.800092][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.815163][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.831174][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.841303][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.865853][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.893749][T22309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.376247][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.550827][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.620568][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.721036][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.937437][ T61] bridge_slave_1: left allmulticast mode [ 1363.943126][ T61] bridge_slave_1: left promiscuous mode [ 1363.967090][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.988217][ T61] bridge_slave_0: left allmulticast mode [ 1363.993880][ T61] bridge_slave_0: left promiscuous mode [ 1364.016067][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.759812][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.771619][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.781433][ T61] bond0 (unregistering): Released all slaves [ 1365.181711][ T61] hsr_slave_0: left promiscuous mode [ 1365.188884][ T61] hsr_slave_1: left promiscuous mode [ 1365.197964][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.206033][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.213920][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.230289][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.240117][ T61] veth1_macvtap: left promiscuous mode [ 1365.248680][ T61] veth0_macvtap: left promiscuous mode [ 1365.256211][ T61] veth1_vlan: left promiscuous mode [ 1365.261507][ T61] veth0_vlan: left promiscuous mode [ 1365.432576][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1365.444546][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1367.267101][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.279868][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.320612][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.332746][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.374940][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.387133][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.431366][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.442575][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.561005][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.620790][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.673760][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.735672][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.851322][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.900887][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.952509][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.006352][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.110350][ T61] bridge_slave_1: left allmulticast mode [ 1368.118268][ T61] bridge_slave_1: left promiscuous mode [ 1368.127957][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.137861][ T61] bridge_slave_0: left allmulticast mode [ 1368.143525][ T61] bridge_slave_0: left promiscuous mode [ 1368.149651][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.161824][ T61] team0: left allmulticast mode [ 1368.168937][ T61] team_slave_0: left allmulticast mode [ 1368.176971][ T61] team_slave_1: left allmulticast mode [ 1368.182560][ T61] team0: left promiscuous mode [ 1368.189227][ T61] team_slave_0: left promiscuous mode [ 1368.197242][ T61] team_slave_1: left promiscuous mode [ 1368.202938][ T61] bridge0: port 3(team0) entered disabled state [ 1368.211521][ T61] bridge_slave_1: left allmulticast mode [ 1368.219994][ T61] bridge_slave_1: left promiscuous mode [ 1368.227773][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.237507][ T61] bridge_slave_0: left allmulticast mode [ 1368.243165][ T61] bridge_slave_0: left promiscuous mode [ 1368.249531][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.266981][ T61] bridge_slave_1: left allmulticast mode [ 1368.272641][ T61] bridge_slave_1: left promiscuous mode [ 1368.279789][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.293300][ T61] bridge_slave_0: left allmulticast mode [ 1368.303412][ T61] bridge_slave_0: left promiscuous mode [ 1368.312450][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.322606][ T61] bridge_slave_1: left allmulticast mode [ 1368.333551][ T61] bridge_slave_1: left promiscuous mode [ 1368.347918][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.357158][ T61] bridge_slave_0: left allmulticast mode [ 1368.362816][ T61] bridge_slave_0: left promiscuous mode [ 1368.372537][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.060849][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.070808][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.080629][ T61] bond0 (unregistering): Released all slaves [ 1369.093155][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.105092][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.118472][ T61] bond0 (unregistering): Released all slaves [ 1369.131977][ T61] bond1 (unregistering): Released all slaves [ 1369.147337][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.157297][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.167123][ T61] bond0 (unregistering): Released all slaves [ 1369.186762][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.198196][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.208695][ T61] bond0 (unregistering): Released all slaves [ 1369.363399][ T61] tipc: Disabling bearer [ 1369.369391][ T61] tipc: Left network mode [ 1369.377969][ T61] tipc: Disabling bearer [ 1369.383337][ T61] tipc: Left network mode [ 1370.069371][ T61] hsr_slave_0: left promiscuous mode [ 1370.075176][ T61] hsr_slave_1: left promiscuous mode [ 1370.080868][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.089659][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.097242][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.108182][ T61] hsr_slave_0: left promiscuous mode [ 1370.113880][ T61] hsr_slave_1: left promiscuous mode [ 1370.121678][ T61] hsr_slave_0: left promiscuous mode [ 1370.127631][ T61] hsr_slave_1: left promiscuous mode [ 1370.133355][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.141214][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.149341][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.157732][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.168453][ T61] hsr_slave_0: left promiscuous mode [ 1370.174885][ T61] hsr_slave_1: left promiscuous mode [ 1370.180669][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.188197][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.197175][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.204636][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.219324][ T61] veth1_macvtap: left promiscuous mode [ 1370.224886][ T61] veth0_macvtap: left promiscuous mode [ 1370.230426][ T61] veth1_vlan: left promiscuous mode [ 1370.236280][ T61] veth0_vlan: left promiscuous mode [ 1370.242090][ T61] veth1_macvtap: left promiscuous mode [ 1370.247937][ T61] veth0_macvtap: left promiscuous mode [ 1370.253483][ T61] veth1_vlan: left promiscuous mode [ 1370.259378][ T61] veth0_vlan: left promiscuous mode [ 1370.265436][ T61] veth1_macvtap: left promiscuous mode [ 1370.271572][ T61] veth0_macvtap: left promiscuous mode [ 1370.277475][ T61] veth1_vlan: left promiscuous mode [ 1370.282784][ T61] veth0_vlan: left promiscuous mode [ 1370.288915][ T61] veth1_macvtap: left promiscuous mode [ 1370.294742][ T61] veth0_macvtap: left promiscuous mode [ 1370.300268][ T61] veth1_vlan: left promiscuous mode [ 1370.305558][ T61] veth0_vlan: left promiscuous mode [ 1370.622027][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1370.651476][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1370.901638][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1370.932404][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1371.164798][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1371.177743][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1371.390379][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1371.421836][ T61] team0 (unregistering): Port device team_slave_0 removed