last executing test programs: 2m21.396270707s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m11.488335557s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m8.783525374s ago: executing program 2 (id=7097): r0 = syz_io_uring_setup(0xd79, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$rds(0x15, 0x5, 0x0) dup3(r4, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x17ac1, 0x0, 0x0, 0x0, 0x0) 2m6.827066427s ago: executing program 2 (id=7108): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m46.063339219s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m44.885305179s ago: executing program 2 (id=7108): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m15.636905862s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m14.933789288s ago: executing program 2 (id=7108): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 46.364294169s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 44.121303637s ago: executing program 3 (id=7508): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 43.793725199s ago: executing program 3 (id=7511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) 43.62461612s ago: executing program 3 (id=7513): sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 43.42201689s ago: executing program 3 (id=7515): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) 42.770886377s ago: executing program 2 (id=7108): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 42.139249271s ago: executing program 3 (id=7517): r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0) 17.894926369s ago: executing program 1 (id=6969): mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436dd2a", 0x2a}], 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 16.391103775s ago: executing program 3 (id=7517): r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0) 14.535394119s ago: executing program 2 (id=7108): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) read$dsp(r0, &(0x7f00000004c0)=""/97, 0xfffffff3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8.693687452s ago: executing program 0 (id=7621): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 3.262374111s ago: executing program 0 (id=7625): r0 = epoll_create(0x8002) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfefd) 2.749962567s ago: executing program 4 (id=7629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.647909766s ago: executing program 4 (id=7630): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x230, 0xf0, 0xffffffff, 0x390, 0x230, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@empty, @dev, [], [], 'ip6erspan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local, @icmp_id, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'ipvlan1\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key}}}, {{@ipv6={@remote, @remote, [], [], 'erspan0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003e000000080001007063690011000200303030303a30303a31302e300003000000008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a"], 0x94}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000007"]) 2.390424757s ago: executing program 4 (id=7631): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.332901641s ago: executing program 0 (id=7632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) 2.239003529s ago: executing program 4 (id=7633): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1}) 1.793295802s ago: executing program 4 (id=7634): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904000000eb77e06e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0xff9a, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "28bbe78c61c75b078b946365c06f2310756c3975872c8cbd3134f40474504fe9d101d5cc96e19bc3a48800eee4ee537b93b72105275fd82abfd941ccee24bc65db5c6b1932f66afcc1a8a9569074ca1b85f44ac95d6515669f594adc02915f8c2d9bb1979f0c27b2197e07e3a1f08305e885eb38ee5da0b8dcdc7681facfafe624038e625dc2826b493ea5ebc917206d427a885a505e3771aa426ab047d899df55fde55122ca75b77ea0555fe6840614fc72878e174448c394fa70b3dfc2caca294da9d6be886771c3"}}, 0x0, 0x0, 0x0}, 0x0) 1.541271266s ago: executing program 0 (id=7635): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={r2, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) 1.431831696s ago: executing program 0 (id=7636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) shmget$private(0x0, 0x4000, 0x78000cc9, &(0x7f0000ffc000/0x4000)=nil) 1.301358274s ago: executing program 0 (id=7637): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 4 (id=7638): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): romiscuous mode [ 558.458545][T21686] veth0_macvtap: entered promiscuous mode [ 558.521372][T21686] veth1_macvtap: entered promiscuous mode [ 558.613189][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.662215][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.691322][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.732631][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.767150][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.798131][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.829579][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.850465][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.877110][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.880555][T22934] Process accounting resumed [ 558.895316][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.937287][T21686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.996918][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.017779][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.047173][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.058276][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.071219][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.082397][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.092841][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.113916][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.134246][T21686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.161165][T21686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.192878][T21686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.229564][T22014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.260069][T21686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.285887][T21686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.299588][T21686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.316238][T21686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.597614][T22014] veth0_vlan: entered promiscuous mode [ 559.666204][T22314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.674110][T22314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.768332][T22014] veth1_vlan: entered promiscuous mode [ 559.832332][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.858974][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.916393][T22014] veth0_macvtap: entered promiscuous mode [ 559.942889][T22014] veth1_macvtap: entered promiscuous mode [ 560.012879][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.025610][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 560.025629][ T29] audit: type=1400 audit(2000001276.251:723): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22992 comm="syz.4.7231" saddr=172.20.20.0 daddr=172.20.20.170 dest=20000 netif=wpan0 [ 560.065084][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.096768][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.135810][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.158643][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.199454][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.230058][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.261649][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.295881][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.328778][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.359651][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.395434][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.419569][T22014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.459071][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.520390][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.546835][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.575418][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.595458][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.615962][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.636380][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.656297][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.675536][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.686729][T23012] netlink: 'syz.0.7239': attribute type 11 has an invalid length. [ 560.694809][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.694836][T22014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.694853][T22014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.697186][T22014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.906112][T22014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.925548][T22014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.934306][T22014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.986546][T22014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.235484][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.284897][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.517073][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.663853][T22307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.686738][T22307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.199539][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.213524][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.229933][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.252990][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.275498][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 562.294737][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.377230][T23080] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 562.604818][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.804127][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.090533][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.115848][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.124009][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.701577][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 563.718451][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 563.731909][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 563.757015][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 563.775780][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 563.786649][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.855759][ T35] bridge_slave_1: left allmulticast mode [ 563.861569][ T35] bridge_slave_1: left promiscuous mode [ 563.877327][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.896374][ T35] bridge_slave_0: left allmulticast mode [ 563.905885][ T5318] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 563.919404][ T35] bridge_slave_0: left promiscuous mode [ 563.926080][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.130017][ T5318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.146746][ T5318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.167616][ T5318] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 564.185535][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 564.193589][ T5318] usb 1-1: SerialNumber: syz [ 564.297720][ T58] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 564.392115][ T5216] Bluetooth: hci3: command tx timeout [ 564.438612][ T5318] usb 1-1: 0:2 : does not exist [ 564.492868][ T5318] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 564.505614][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 564.557933][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 564.567462][ T5318] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 564.595314][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.613978][ T58] usb 4-1: Product: syz [ 564.623751][ T58] usb 4-1: Manufacturer: syz [ 564.634273][ T5318] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 564.662717][ T5318] usb 1-1: USB disconnect, device number 63 [ 564.666052][ T58] usb 4-1: SerialNumber: syz [ 564.707833][ T58] usb 4-1: config 0 descriptor?? [ 564.733053][ T58] appledisplay 4-1:0.0: Could not find int-in endpoint [ 564.751626][ T58] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 564.910316][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.939603][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.971492][ T35] bond0 (unregistering): Released all slaves [ 565.040164][T23068] chnl_net:caif_netlink_parms(): no params data found [ 565.059502][ T5215] usb 4-1: USB disconnect, device number 60 [ 565.502783][T23327] PM: Enabling pm_trace changes system date and time during resume. [ 565.502783][T23327] PM: Correct system time has to be restored manually after resume. [ 565.811053][ T35] hsr_slave_0: left promiscuous mode [ 565.825878][ T5216] Bluetooth: hci5: command tx timeout [ 565.846849][ T35] hsr_slave_1: left promiscuous mode [ 565.863432][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.885310][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.921268][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.945351][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.992102][ T35] veth1_macvtap: left promiscuous mode [ 566.019594][ T35] veth0_macvtap: left promiscuous mode [ 566.046538][ T35] veth1_vlan: left promiscuous mode [ 566.051927][ T35] veth0_vlan: left promiscuous mode [ 566.465375][ T5216] Bluetooth: hci3: command tx timeout [ 567.905448][ T5216] Bluetooth: hci5: command tx timeout [ 568.545473][ T5216] Bluetooth: hci3: command tx timeout [ 568.920625][ T35] team0 (unregistering): Port device team_slave_1 removed [ 569.323059][ T35] team0 (unregistering): Port device team_slave_0 removed [ 569.601802][T23394] input: syz1 as /devices/virtual/input/input71 [ 569.985762][ T5216] Bluetooth: hci5: command tx timeout [ 570.646016][ T5216] Bluetooth: hci3: command tx timeout [ 571.172071][T23068] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.190777][T23068] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.204445][T23068] bridge_slave_0: entered allmulticast mode [ 571.218121][T23068] bridge_slave_0: entered promiscuous mode [ 571.419870][T23068] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.435466][T23068] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.442943][T23068] bridge_slave_1: entered allmulticast mode [ 571.466753][T23068] bridge_slave_1: entered promiscuous mode [ 571.652491][T23068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.689572][T23068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.927241][T23068] team0: Port device team_slave_0 added [ 571.934538][T18319] kernel write not supported for file /sequencer (pid: 18319 comm: kworker/1:0) [ 572.074538][ T5216] Bluetooth: hci5: command tx timeout [ 572.085949][T23068] team0: Port device team_slave_1 added [ 572.206406][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.218778][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.230083][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.238517][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.247911][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 572.275913][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.415928][T23068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.435290][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.495500][T23068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.530850][T23068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.554495][T23068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.615346][T23068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.643508][T23622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.693895][T23192] chnl_net:caif_netlink_parms(): no params data found [ 572.825169][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.133386][T23068] hsr_slave_0: entered promiscuous mode [ 573.150246][T23068] hsr_slave_1: entered promiscuous mode [ 573.166703][T23068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.184829][T23068] Cannot create hsr debugfs directory [ 573.227722][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.369282][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.624340][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.759990][T23192] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.775984][T23192] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.793881][T23192] bridge_slave_0: entered allmulticast mode [ 573.813707][T23192] bridge_slave_0: entered promiscuous mode [ 573.846810][T23192] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.851219][T23774] 9pnet: p9_errstr2errno: server reported unknown error @hQItekKzE [ 573.862968][T23192] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.874346][T23192] bridge_slave_1: entered allmulticast mode [ 573.882215][T23192] bridge_slave_1: entered promiscuous mode [ 574.088344][T23192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.114869][T23192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.229289][T18319] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 574.305548][ T54] Bluetooth: hci6: command tx timeout [ 574.324022][T23192] team0: Port device team_slave_0 added [ 574.417350][T18319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.420533][T23192] team0: Port device team_slave_1 added [ 574.435382][T18319] usb 4-1: config 1 has no interface number 0 [ 574.451785][T18319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.473173][T18319] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 574.495478][T18319] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xED, changing to 0x8D [ 574.527143][T18319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.548127][T23885] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 574.554143][T18319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.576243][T18319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.605988][T18319] usb 4-1: Product: syz [ 574.610213][T18319] usb 4-1: Manufacturer: syz [ 574.626885][T18319] usb 4-1: SerialNumber: syz [ 574.647350][T23192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.654352][T23192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.698651][T23192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.829966][T23192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.850247][T23192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.890717][T23192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.164147][T23574] chnl_net:caif_netlink_parms(): no params data found [ 575.262201][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.327244][T23192] hsr_slave_0: entered promiscuous mode [ 575.337455][T23192] hsr_slave_1: entered promiscuous mode [ 575.358569][T23192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.371089][T23192] Cannot create hsr debugfs directory [ 575.474227][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.477112][T18319] cdc_ncm 4-1:1.1: bind() failure [ 575.717843][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.757786][T18319] usb 4-1: USB disconnect, device number 61 [ 575.899838][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.243361][T23574] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.272216][T23574] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.296383][T23574] bridge_slave_0: entered allmulticast mode [ 576.314819][T23574] bridge_slave_0: entered promiscuous mode [ 576.336278][T23574] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.343445][T23574] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.365982][T23574] bridge_slave_1: entered allmulticast mode [ 576.389607][ T54] Bluetooth: hci6: command tx timeout [ 576.389698][T23574] bridge_slave_1: entered promiscuous mode [ 576.661526][ T35] bridge_slave_1: left allmulticast mode [ 576.675940][ T35] bridge_slave_1: left promiscuous mode [ 576.683260][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.714064][ T35] bridge_slave_0: left allmulticast mode [ 576.730974][ T35] bridge_slave_0: left promiscuous mode [ 576.737208][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.760183][ T35] bridge_slave_1: left allmulticast mode [ 576.775449][ T35] bridge_slave_1: left promiscuous mode [ 576.786270][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.806238][ T35] bridge_slave_0: left allmulticast mode [ 576.811953][ T35] bridge_slave_0: left promiscuous mode [ 576.832422][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.104567][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.129124][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.152004][ T35] bond0 (unregistering): Released all slaves [ 578.404149][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.433810][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.468378][ T54] Bluetooth: hci6: command tx timeout [ 578.476750][ T35] bond0 (unregistering): Released all slaves [ 578.519298][T23574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.692451][T23574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.905866][T23574] team0: Port device team_slave_0 added [ 579.037609][T23068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.078762][T23068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 579.171132][T23574] team0: Port device team_slave_1 added [ 579.264279][T23068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 579.410643][T23574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.425324][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.485334][T23574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.523960][T23068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 579.615653][T24294] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 579.615653][T24294] cct.usage_percpu_sys' [ 579.628762][T23574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.645442][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.705385][T23574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.877486][T24309] 9pnet: p9_errstr2errno: server reported unknown error słܷM6' [ 580.013679][ T29] audit: type=1326 audit(2000001296.231:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24323 comm="syz.0.7340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe644579e79 code=0x0 [ 580.064726][T23574] hsr_slave_0: entered promiscuous mode [ 580.086238][T23574] hsr_slave_1: entered promiscuous mode [ 580.110659][T23574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.130930][T23574] Cannot create hsr debugfs directory [ 580.417049][ T35] hsr_slave_0: left promiscuous mode [ 580.429469][ T35] hsr_slave_1: left promiscuous mode [ 580.440869][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.457485][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.477542][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.495382][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.521687][ T35] hsr_slave_0: left promiscuous mode [ 580.532095][ T35] hsr_slave_1: left promiscuous mode [ 580.543517][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.552068][ T54] Bluetooth: hci6: command tx timeout [ 580.570832][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.597273][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.626096][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.739088][ T35] veth1_macvtap: left promiscuous mode [ 580.750236][ T35] veth0_macvtap: left promiscuous mode [ 580.762733][ T35] veth1_vlan: left promiscuous mode [ 580.773869][ T35] veth0_vlan: left promiscuous mode [ 580.791226][ T35] veth1_macvtap: left promiscuous mode [ 580.802566][ T35] veth0_macvtap: left promiscuous mode [ 580.808388][ T35] veth1_vlan: left promiscuous mode [ 580.813897][ T35] veth0_vlan: left promiscuous mode [ 582.235479][ T5215] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 582.448902][ T5215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.468320][ T5215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.495509][ T5215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.534193][ T5215] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.554663][ T5215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.598895][ T5215] usb 1-1: config 0 descriptor?? [ 582.775984][ T35] team0 (unregistering): Port device team_slave_1 removed [ 582.898102][ T35] team0 (unregistering): Port device team_slave_0 removed [ 583.040248][ T5215] plantronics 0003:047F:FFFF.0043: ignoring exceeding usage max [ 583.063416][ T5215] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 583.104306][ T5215] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 583.290893][T18319] usb 1-1: USB disconnect, device number 64 [ 584.975730][ T35] team0 (unregistering): Port device team_slave_1 removed [ 585.119928][ T35] team0 (unregistering): Port device team_slave_0 removed [ 586.286601][T24480] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7364'. [ 586.315612][T24480] openvswitch: netlink: Key type 29 is not supported [ 586.408573][T23192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.438025][T23192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.571011][T23192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.724526][T23192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.989071][T23068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.133955][T23068] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.228037][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.235281][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.287389][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.294571][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.711397][T24557] netlink: 'syz.0.7373': attribute type 11 has an invalid length. [ 587.757260][T23192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.922109][T23192] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.981574][T23574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 588.039983][T23574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 588.061724][T23574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 588.100891][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.108130][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.146368][T23574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 588.184457][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.191762][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.361818][T23068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.585643][T18142] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 588.608359][T23068] veth0_vlan: entered promiscuous mode [ 588.636787][T23068] veth1_vlan: entered promiscuous mode [ 588.704537][T23574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.785853][T18142] usb 4-1: Using ep0 maxpacket: 8 [ 588.787166][T23574] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.803712][T23068] veth0_macvtap: entered promiscuous mode [ 588.818029][T18142] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 588.826755][T23192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.858338][T18142] usb 4-1: config 179 has no interface number 0 [ 588.859804][T23068] veth1_macvtap: entered promiscuous mode [ 588.864647][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 588.915681][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 588.936924][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.944085][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.952718][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 588.974675][T18142] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 588.979568][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.993294][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.999463][T18142] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 589.076406][T18142] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 589.092474][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.097248][T18142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.121784][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.139608][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.149639][T24584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 589.156917][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.179564][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.201988][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.214864][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.236388][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.258984][T23068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.339813][T23192] veth0_vlan: entered promiscuous mode [ 589.364106][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.388268][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.406666][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.425241][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.450856][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.465227][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.494594][T23068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.515300][T23068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.547092][T23068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.583078][T18142] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input72 [ 589.614403][T23068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.627472][T23068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.641960][T23068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.651760][T23068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.671581][T23192] veth1_vlan: entered promiscuous mode [ 589.685919][T24603] netlink: 'syz.0.7380': attribute type 34 has an invalid length. [ 589.769213][T18142] usb 4-1: USB disconnect, device number 62 [ 589.775179][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 589.775221][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 589.848717][T18142] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 589.950356][T23192] veth0_macvtap: entered promiscuous mode [ 589.997853][T23192] veth1_macvtap: entered promiscuous mode [ 590.074337][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.078179][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.114332][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.120712][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.167169][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.191175][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.201253][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.219451][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.245340][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.265333][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.277462][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.298840][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.317148][T23192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.364633][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.405442][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.435710][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.465629][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.497339][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.519812][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.535838][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.548638][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.560902][T23192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.598412][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.622055][T23192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.638124][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 590.656652][ T29] audit: type=1400 audit(2000001306.881:725): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24638 comm="syz.3.7385" saddr=172.20.20.170 src=20002 daddr=172.20.20.170 dest=46610 netif=lo [ 590.707406][T23192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.731990][T23192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.752882][T23192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.771040][T23192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.803783][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.818935][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.827721][T23574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.090046][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.116775][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.291500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.308003][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.660677][T23574] veth0_vlan: entered promiscuous mode [ 591.863942][T21149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.962166][T23574] veth1_vlan: entered promiscuous mode [ 592.058335][T21149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.158512][T23574] veth0_macvtap: entered promiscuous mode [ 592.271940][T21149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.339084][T23574] veth1_macvtap: entered promiscuous mode [ 592.412700][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.475550][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.506556][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.545618][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.582138][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.614067][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.641079][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.675121][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.706250][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.737136][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.770821][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.804377][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.839841][T23574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.017983][T21149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.082941][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.116395][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.140535][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.146408][T24713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.151041][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.185948][T20023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.198031][T24713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.207838][T24713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 593.209795][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.227707][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.228326][T24713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 593.237837][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.248082][T24713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.255467][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.264414][T24713] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 593.273081][T24715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 593.281042][T24713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.290485][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.306707][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.324947][T23574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.325353][T24713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 593.336606][T23574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.347320][T24713] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 593.354933][T23574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.364508][T24713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 593.373713][ T5318] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 593.409372][T23574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.420669][T23574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.430783][T23574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.439646][T23574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.587517][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.616281][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.626902][ T5318] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 593.638006][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.649507][ T5318] usb 4-1: config 0 descriptor?? [ 594.115867][ T5318] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor [ 594.203193][ T5318] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0044/input/input73 [ 594.320147][T24788] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 594.340734][T21149] bridge_slave_1: left allmulticast mode [ 594.346537][T21149] bridge_slave_1: left promiscuous mode [ 594.352375][T21149] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.387948][ T5318] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 594.416367][T21149] bridge_slave_0: left allmulticast mode [ 594.422070][T21149] bridge_slave_0: left promiscuous mode [ 594.445586][T21149] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.665859][T18142] usb 4-1: USB disconnect, device number 63 [ 595.429753][T24713] Bluetooth: hci5: command tx timeout [ 595.437743][ T5216] Bluetooth: hci3: command tx timeout [ 595.489638][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.503675][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.531816][T21149] bond0 (unregistering): Released all slaves [ 595.689406][T13194] syz_tun (unregistering): left promiscuous mode [ 595.745521][T18142] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 595.753082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.753107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.952647][T18142] usb 4-1: Using ep0 maxpacket: 32 [ 595.972754][T18142] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 596.035351][T18142] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 596.072753][T18142] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 596.114749][T18142] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.136102][T18142] usb 4-1: config 0 interface 0 has no altsetting 0 [ 596.152191][T18142] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.162846][T18142] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.180539][T18142] usb 4-1: Product: syz [ 596.184749][T18142] usb 4-1: Manufacturer: syz [ 596.212713][T18142] usb 4-1: SerialNumber: syz [ 596.232738][T18142] usb 4-1: config 0 descriptor?? [ 596.251528][T18142] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 596.296814][T18142] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 596.313160][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.335344][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.504454][ T5215] usb 4-1: USB disconnect, device number 64 [ 596.512905][ T5215] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 596.595333][T21149] hsr_slave_0: left promiscuous mode [ 596.646784][T21149] hsr_slave_1: left promiscuous mode [ 596.681343][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.699232][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.729154][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.743051][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.765169][T24713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.780331][T24713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.793698][T21149] veth1_macvtap: left promiscuous mode [ 596.799440][T24713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.807634][T21149] veth0_macvtap: left promiscuous mode [ 596.813651][T21149] veth1_vlan: left promiscuous mode [ 596.819418][T24713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.826875][T21149] veth0_vlan: left promiscuous mode [ 596.837552][T24713] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 596.845835][T24713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.506326][T24713] Bluetooth: hci3: command tx timeout [ 597.511789][T24713] Bluetooth: hci5: command tx timeout [ 598.537117][T21149] team0 (unregistering): Port device team_slave_1 removed [ 598.605726][T21149] team0 (unregistering): Port device team_slave_0 removed [ 598.949431][T24713] Bluetooth: hci0: command tx timeout [ 599.585819][T24713] Bluetooth: hci5: command tx timeout [ 599.591309][ T5216] Bluetooth: hci3: command tx timeout [ 599.946206][T24705] chnl_net:caif_netlink_parms(): no params data found [ 600.039631][T24704] chnl_net:caif_netlink_parms(): no params data found [ 600.115535][T18142] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 600.305383][T18142] usb 4-1: Using ep0 maxpacket: 32 [ 600.314059][T18142] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.335306][T18142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 600.365653][T18142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 600.383198][T18142] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 600.415307][T18142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.436025][T18142] usb 4-1: config 0 descriptor?? [ 600.443859][T25044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.464604][T18142] hub 4-1:0.0: USB hub found [ 600.673832][T18142] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 600.809900][T24704] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.825396][T24704] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.843018][T24704] bridge_slave_0: entered allmulticast mode [ 600.857460][T24704] bridge_slave_0: entered promiscuous mode [ 600.884268][T24705] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.894006][T24705] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.907420][T18142] hid-generic 0003:046D:C314.0045: item fetching failed at offset 0/1 [ 600.913759][T24705] bridge_slave_0: entered allmulticast mode [ 600.925575][T24705] bridge_slave_0: entered promiscuous mode [ 600.938666][T24704] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.946227][T24704] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.946500][T18142] hid-generic 0003:046D:C314.0045: probe with driver hid-generic failed with error -22 [ 600.953574][T24704] bridge_slave_1: entered allmulticast mode [ 600.989405][T24704] bridge_slave_1: entered promiscuous mode [ 601.025368][T24713] Bluetooth: hci0: command tx timeout [ 601.049473][T24705] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.066137][T24705] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.079697][T24705] bridge_slave_1: entered allmulticast mode [ 601.118841][T24705] bridge_slave_1: entered promiscuous mode [ 601.241444][T24705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.312288][T24704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.316093][ T5215] usb 4-1: USB disconnect, device number 65 [ 601.352630][T24705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.419564][T24704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.583944][T24705] team0: Port device team_slave_0 added [ 601.666531][T24713] Bluetooth: hci5: command tx timeout [ 601.671987][ T5216] Bluetooth: hci3: command tx timeout [ 601.678512][T24704] team0: Port device team_slave_0 added [ 601.737152][T24705] team0: Port device team_slave_1 added [ 601.839574][T24704] team0: Port device team_slave_1 added [ 602.002998][T21149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.135161][T24705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.149753][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.205375][T24705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.433464][T21149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.493157][T24705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.505359][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.565403][T24705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.709934][T24704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.739753][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.816486][T24704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.838746][T24704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.855359][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.905286][T24704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.967931][T21149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.105661][T24713] Bluetooth: hci0: command tx timeout [ 603.216895][T21149] bond0: (slave netdevsim0): Releasing backup interface [ 603.238266][T21149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.501066][T24704] hsr_slave_0: entered promiscuous mode [ 603.556303][T24704] hsr_slave_1: entered promiscuous mode [ 603.576503][T24704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.587841][T24704] Cannot create hsr debugfs directory [ 603.614426][T25008] chnl_net:caif_netlink_parms(): no params data found [ 603.704358][T24705] hsr_slave_0: entered promiscuous mode [ 603.720216][T24705] hsr_slave_1: entered promiscuous mode [ 603.757939][T24705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.775390][T24705] Cannot create hsr debugfs directory [ 604.440711][ T58] libceph: connect (1)[c::]:6789 error -101 [ 604.508821][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 604.533475][ T58] libceph: connect (1)[c::]:6789 error -101 [ 604.558872][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 604.677174][T21149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.789282][T25008] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.818414][T25008] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.835921][T25008] bridge_slave_0: entered allmulticast mode [ 604.844869][T25008] bridge_slave_0: entered promiscuous mode [ 604.854836][ T5296] libceph: connect (1)[c::]:6789 error -101 [ 604.861381][ T5296] libceph: mon0 (1)[c::]:6789 connect error [ 604.936646][T21149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.001437][T25008] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.010809][T25008] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.021148][T25008] bridge_slave_1: entered allmulticast mode [ 605.029726][T25008] bridge_slave_1: entered promiscuous mode [ 605.064493][T25674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7434'. [ 605.150914][T21149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.185794][T24713] Bluetooth: hci0: command tx timeout [ 605.219209][T25614] ceph: No mds server is up or the cluster is laggy [ 605.262689][T25008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.512783][T21149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.609046][T25008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.796260][T25008] team0: Port device team_slave_0 added [ 605.824684][T25008] team0: Port device team_slave_1 added [ 606.023394][T25008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.049983][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.075978][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.103696][T25008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.149662][T25008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.165996][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.191986][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.203627][T25008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.438471][T25008] hsr_slave_0: entered promiscuous mode [ 606.456730][T25008] hsr_slave_1: entered promiscuous mode [ 606.465817][T25008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.485274][T25008] Cannot create hsr debugfs directory [ 606.619697][T21149] bridge_slave_1: left allmulticast mode [ 606.647841][T21149] bridge_slave_1: left promiscuous mode [ 606.657860][T21149] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.668572][T21149] bridge_slave_0: left allmulticast mode [ 606.674927][T21149] bridge_slave_0: left promiscuous mode [ 606.681478][T21149] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.696765][T21149] bridge_slave_1: left allmulticast mode [ 606.702525][T21149] bridge_slave_1: left promiscuous mode [ 606.708887][T21149] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.719984][T21149] bridge_slave_0: left allmulticast mode [ 606.727549][T21149] bridge_slave_0: left promiscuous mode [ 606.733467][T21149] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.645535][ T5215] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 607.996421][T21149] bridge0 (unregistering): left allmulticast mode [ 608.566596][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.602068][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.636970][T21149] bond0 (unregistering): Released all slaves [ 608.951259][T25904] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 608.980951][T21149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.996892][T21149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.018919][T21149] bond0 (unregistering): Released all slaves [ 609.543642][T24705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.565140][T24705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.709698][T24705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 609.808377][T24705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 610.287528][T25991] block nbd3: shutting down sockets [ 610.306995][T25991] block nbd3: NBD_DISCONNECT [ 610.311688][T25991] block nbd3: Send disconnect failed -32 [ 610.513425][T26003] program syz.3.7463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.554239][T21149] batadv_slave_0: left promiscuous mode [ 610.607601][T21149] hsr_slave_0: left promiscuous mode [ 610.627081][T21149] hsr_slave_1: left promiscuous mode [ 610.650320][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.674312][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.691631][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.703311][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.735386][T21149] hsr_slave_0: left promiscuous mode [ 610.744897][T21149] hsr_slave_1: left promiscuous mode [ 610.764134][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.798646][T21149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.809987][T21149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.817656][T21149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.909371][T21149] veth1_macvtap: left promiscuous mode [ 610.916055][T21149] veth0_macvtap: left promiscuous mode [ 610.921737][T21149] veth1_vlan: left promiscuous mode [ 610.927250][T21149] veth0_vlan: left promiscuous mode [ 610.934201][T21149] veth1_macvtap: left promiscuous mode [ 610.942827][T21149] veth0_macvtap: left promiscuous mode [ 610.956620][T21149] veth1_vlan: left promiscuous mode [ 610.967725][T21149] veth0_vlan: left promiscuous mode [ 610.985293][T18142] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 611.167123][T18142] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.175389][T18142] usb 5-1: config 0 has no interface number 0 [ 611.182347][T18142] usb 5-1: config 0 interface 1 has no altsetting 0 [ 611.195357][T18142] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 611.217214][T18142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.237536][T18142] usb 5-1: config 0 descriptor?? [ 611.254150][T18142] cp210x 5-1:0.1: cp210x converter detected [ 611.668768][T18142] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 611.920020][T18142] usb 5-1: cp210x converter now attached to ttyUSB0 [ 612.145729][T18142] usb 5-1: USB disconnect, device number 56 [ 612.154668][T18142] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 612.207433][T18142] cp210x 5-1:0.1: device disconnected [ 612.244195][T21149] team0 (unregistering): Port device team_slave_1 removed [ 612.325530][T21149] team0 (unregistering): Port device team_slave_0 removed [ 613.430734][T26051] loop8: detected capacity change from 0 to 7 [ 613.438855][T26051] Dev loop8: unable to read RDB block 7 [ 613.444474][T26051] loop8: unable to read partition table [ 613.462275][T26051] loop8: partition table beyond EOD, truncated [ 613.469690][T26051] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 613.469690][T26051] ) failed (rc=-5) [ 613.645677][T21149] lo (unregistering): left allmulticast mode [ 614.044922][ T29] audit: type=1326 audit(2000001586.256:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.106302][ T29] audit: type=1326 audit(2000001586.256:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.154619][ T29] audit: type=1326 audit(2000001586.256:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.176215][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.220376][ T29] audit: type=1326 audit(2000001586.256:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.241942][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.254179][ T29] audit: type=1326 audit(2000001586.256:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.275752][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.375482][ T29] audit: type=1326 audit(2000001586.256:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.435437][ T29] audit: type=1326 audit(2000001586.256:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26060 comm="syz.4.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa979e79 code=0x7ffc0000 [ 614.880175][T21149] team0 (unregistering): Port device team_slave_1 removed [ 614.957981][T21149] team0 (unregistering): Port device team_slave_0 removed [ 615.942691][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7465'. [ 615.951777][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7465'. [ 616.001579][T26013] gtp0: entered promiscuous mode [ 616.007598][T26013] gtp0: entered allmulticast mode [ 616.022659][T24705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.205745][T26074] netlink: 'syz.3.7478': attribute type 4 has an invalid length. [ 616.230618][T26074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.304717][T24705] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.353209][T24704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.554278][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.561518][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.593013][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.600158][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.663620][T24704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.763482][T24704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.807702][T24704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 617.319511][T24704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.411899][T24704] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.545022][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.552324][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.687714][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.694897][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.898164][T24705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.926423][T25008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.959132][T25008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.987634][T25008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 618.029416][T25008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.269220][T24705] veth0_vlan: entered promiscuous mode [ 618.323237][T24705] veth1_vlan: entered promiscuous mode [ 618.487915][T25008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.534983][T24704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.591406][T25008] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.613919][T24705] veth0_macvtap: entered promiscuous mode [ 618.624234][ T29] audit: type=1326 audit(2000001590.846:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26143 comm="syz.3.7489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778fd79e79 code=0x0 [ 618.643767][T24705] veth1_macvtap: entered promiscuous mode [ 618.645283][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.684933][ T29] audit: type=1326 audit(2000001590.886:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26143 comm="syz.3.7489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778fd79e79 code=0x0 [ 618.713500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.720729][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.755984][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.763176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.882512][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.903443][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.923889][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.946951][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.965869][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.986671][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.007037][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.027974][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.060291][T24705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.163225][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.186432][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.225360][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.245760][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.265403][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.285324][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.305482][T24705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.328774][T24705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.350664][T24705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.413403][T24704] veth0_vlan: entered promiscuous mode [ 619.479139][T24705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.507105][T24705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.527139][T24705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.548341][T24705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.699806][T24704] veth1_vlan: entered promiscuous mode [ 619.771620][T26155] netlink: 'syz.4.7492': attribute type 4 has an invalid length. [ 619.966472][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.974343][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.027596][T24704] veth0_macvtap: entered promiscuous mode [ 620.104940][T24704] veth1_macvtap: entered promiscuous mode [ 620.132710][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.181925][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.192203][T25008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.232551][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.264096][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.285004][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.296953][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.315317][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.338610][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.359002][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.380065][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.395500][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.406800][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.419732][T24704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.493344][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.523409][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.544951][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.570063][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.580813][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.592288][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.604332][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.615868][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.639033][T24704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.656916][T24704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.688513][T24704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.819424][T24704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.839142][T24704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.863901][T24704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.883761][T24704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.087861][T18319] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 621.171306][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.295547][T18319] usb 5-1: Using ep0 maxpacket: 32 [ 621.317515][T18319] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 621.343664][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.362026][T18319] usb 5-1: config 0 descriptor?? [ 621.368438][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.378505][T18319] gspca_main: sunplus-2.14.0 probing 041e:400b [ 621.458399][T25008] veth0_vlan: entered promiscuous mode [ 621.523055][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.578339][T25008] veth1_vlan: entered promiscuous mode [ 621.655991][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.795054][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.816221][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.919284][T25008] veth0_macvtap: entered promiscuous mode [ 621.947486][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.951385][T25008] veth1_macvtap: entered promiscuous mode [ 621.972705][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.976939][T26210] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 622.183226][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.229255][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.259623][T18319] gspca_sunplus: reg_w_riv err -71 [ 622.259887][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.264880][T18319] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 622.317473][T18319] usb 5-1: USB disconnect, device number 57 [ 622.335401][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.365675][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.385877][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.406373][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.442174][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.466558][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.485532][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.500535][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.520086][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.522610][ T5216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.531959][T25008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.557153][ T5216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.576874][ T2972] bridge_slave_1: left allmulticast mode [ 622.584171][ T5216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.594680][ T2972] bridge_slave_1: left promiscuous mode [ 622.614412][ T5216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.628468][ T5216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 622.638038][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.649351][ T5216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.692168][ T2972] bridge_slave_0: left allmulticast mode [ 622.725317][ T2972] bridge_slave_0: left promiscuous mode [ 622.765605][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.144892][T26253] ALSA: seq fatal error: cannot create timer (-22) [ 623.300443][T26255] input: syz0 as /devices/virtual/input/input74 [ 623.989496][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.013958][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.040616][ T2972] bond0 (unregistering): Released all slaves [ 624.076172][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.088373][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.101438][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.133963][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.145010][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.161022][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.171033][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.181669][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.192672][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.203325][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.215531][T25008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.227360][T25008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.278112][T25008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.305007][T25008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.314552][T25008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.324712][T25008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.334641][T25008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.565298][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.571653][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.785529][T24713] Bluetooth: hci3: command tx timeout [ 625.223390][ T2972] hsr_slave_0: left promiscuous mode [ 625.230582][ T2972] hsr_slave_1: left promiscuous mode [ 625.255592][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.263109][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.303998][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.335588][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.421787][ T2972] veth1_macvtap: left promiscuous mode [ 625.457929][ T2972] veth0_macvtap: left promiscuous mode [ 625.463621][ T2972] veth1_vlan: left promiscuous mode [ 625.495398][ T2972] veth0_vlan: left promiscuous mode [ 625.884880][ T5216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.897186][ T5216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.909582][ T5216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.925820][ T5216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.937252][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 625.946674][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 625.987565][T24713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.006493][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.015839][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.043387][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.057608][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 626.065075][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.825328][T18319] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 626.867413][ T5216] Bluetooth: hci3: command tx timeout [ 626.974694][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 627.027727][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 627.034884][T18319] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 627.045367][T18319] usb 5-1: config 179 has no interface number 0 [ 627.071298][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 627.082690][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 627.113321][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 627.120769][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 627.149848][T18319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 627.162324][T18319] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 627.188821][T18319] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 627.226453][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.259246][T26357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 627.588939][ T5267] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input75 [ 627.772304][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 627.772312][T18300] usb 5-1: USB disconnect, device number 58 [ 627.787680][T18300] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 628.068340][ T5216] Bluetooth: hci2: command tx timeout [ 628.145596][ T5216] Bluetooth: hci5: command tx timeout [ 628.571980][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.589291][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.728942][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.739148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.956811][ T5216] Bluetooth: hci3: command tx timeout [ 629.189972][T26235] chnl_net:caif_netlink_parms(): no params data found [ 629.934572][T26344] chnl_net:caif_netlink_parms(): no params data found [ 629.975504][T26235] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.982671][T26235] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.025624][T26235] bridge_slave_0: entered allmulticast mode [ 630.067226][T26235] bridge_slave_0: entered promiscuous mode [ 630.083006][T26235] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.101976][T26235] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.131152][T26235] bridge_slave_1: entered allmulticast mode [ 630.134224][T26736] 9pnet: p9_errstr2errno: server reported unknown error @hQIte [ 630.155570][ T5216] Bluetooth: hci2: command tx timeout [ 630.162521][T26235] bridge_slave_1: entered promiscuous mode [ 630.169494][T26738] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7531'. [ 630.226855][ T5216] Bluetooth: hci5: command tx timeout [ 630.245436][T26738] openvswitch: netlink: Key type 29 is not supported [ 630.516946][ C1] sd 0:0:1:0: [sda] tag#3840 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 630.527496][ C1] sd 0:0:1:0: [sda] tag#3840 CDB: Read(6) 08 00 00 00 85 f0 [ 630.581877][T26347] chnl_net:caif_netlink_parms(): no params data found [ 630.772503][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.823942][T26235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.901081][T26235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.025872][ T5216] Bluetooth: hci3: command tx timeout [ 631.094022][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.236220][T18300] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 631.348186][T26235] team0: Port device team_slave_0 added [ 631.427828][T26859] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 631.441736][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.457474][T18300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.475561][T18300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.505702][T18300] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 631.514791][T18300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.543000][T18300] usb 5-1: config 0 descriptor?? [ 631.591759][T26235] team0: Port device team_slave_1 added [ 631.791297][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 631.826242][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.932964][T26235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.954603][T26235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.054141][T26235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.089557][T26344] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.116265][T26344] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.133835][T26344] bridge_slave_0: entered allmulticast mode [ 632.147764][T26344] bridge_slave_0: entered promiscuous mode [ 632.167213][T26344] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.178611][T18300] usb 5-1: language id specifier not provided by device, defaulting to English [ 632.185404][T26344] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.205162][T26344] bridge_slave_1: entered allmulticast mode [ 632.215146][T26344] bridge_slave_1: entered promiscuous mode [ 632.226725][ T5216] Bluetooth: hci2: command tx timeout [ 632.313246][T26235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.321114][ T5216] Bluetooth: hci5: command tx timeout [ 632.345552][T26235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.372049][T26235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.502361][T26347] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.520177][T26347] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.536392][T26347] bridge_slave_0: entered allmulticast mode [ 632.554103][T26347] bridge_slave_0: entered promiscuous mode [ 632.605561][ T5269] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 632.627299][T26344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.641918][T26344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.652162][T26347] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.659567][T26347] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.677716][T26347] bridge_slave_1: entered allmulticast mode [ 632.697829][T26347] bridge_slave_1: entered promiscuous mode [ 632.791840][T18300] uclogic 0003:256C:006D.0046: failed retrieving string descriptor #100: -71 [ 632.818199][T18300] uclogic 0003:256C:006D.0046: failed retrieving pen parameters: -71 [ 632.826718][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 632.833829][T18300] uclogic 0003:256C:006D.0046: failed probing pen v1 parameters: -71 [ 632.843164][T18300] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 632.853475][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.876493][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.888460][T18300] uclogic 0003:256C:006D.0046: probe with driver uclogic failed with error -71 [ 632.901802][ T5269] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 632.918924][T18300] usb 5-1: USB disconnect, device number 59 [ 632.926165][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.959548][ T5269] usb 1-1: config 0 descriptor?? [ 632.978006][T26347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.999864][T26235] hsr_slave_0: entered promiscuous mode [ 633.007501][T26235] hsr_slave_1: entered promiscuous mode [ 633.014182][T26235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.023588][T26235] Cannot create hsr debugfs directory [ 633.079076][T26344] team0: Port device team_slave_0 added [ 633.098786][T26344] team0: Port device team_slave_1 added [ 633.108504][T26347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.378081][T26344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.402813][T26344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.406022][ T5269] lenovo 0003:17EF:6009.0047: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 633.445351][T26344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.467937][T26344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.477167][T26344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.524578][T26344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.554302][T26347] team0: Port device team_slave_0 added [ 633.566650][T26347] team0: Port device team_slave_1 added [ 633.683763][T18319] usb 1-1: USB disconnect, device number 65 [ 633.740360][ T2972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.908400][ T2972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.990453][T26347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.000425][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.037686][T26347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.142948][ T2972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.183830][T26347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.192891][T26347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.250283][T26347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.306150][ T5216] Bluetooth: hci2: command tx timeout [ 634.364370][T26344] hsr_slave_0: entered promiscuous mode [ 634.385499][ T5216] Bluetooth: hci5: command tx timeout [ 634.388112][ T29] audit: type=1326 audit(2000001606.616:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27250 comm="syz.0.7550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x0 [ 634.445811][T26344] hsr_slave_1: entered promiscuous mode [ 634.477224][T26344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.495968][T26344] Cannot create hsr debugfs directory [ 634.587638][ T2972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.993344][T26347] hsr_slave_0: entered promiscuous mode [ 635.010634][T26347] hsr_slave_1: entered promiscuous mode [ 635.028347][T26347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.055826][T26347] Cannot create hsr debugfs directory [ 635.805111][ T2972] bridge_slave_1: left allmulticast mode [ 635.812172][ T2972] bridge_slave_1: left promiscuous mode [ 635.830018][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.849263][ T2972] bridge_slave_0: left allmulticast mode [ 635.858454][ T2972] bridge_slave_0: left promiscuous mode [ 635.870009][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.891751][ T2972] bridge_slave_1: left allmulticast mode [ 635.904799][ T2972] bridge_slave_1: left promiscuous mode [ 635.919716][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.937743][ T2972] bridge_slave_0: left allmulticast mode [ 635.943573][ T2972] bridge_slave_0: left promiscuous mode [ 635.952888][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.733569][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.760167][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.782874][ T2972] bond0 (unregistering): Released all slaves [ 638.124692][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.137819][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.154971][ T2972] bond0 (unregistering): Released all slaves [ 638.925870][T26235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 639.010346][T26235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.034564][T26235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.072168][T26235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.261569][ T2972] macsec0: left promiscuous mode [ 639.281992][ T2972] hsr_slave_0: left promiscuous mode [ 639.301140][ T2972] hsr_slave_1: left promiscuous mode [ 639.316127][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.330552][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.386617][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.394061][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.475557][ T2972] hsr_slave_0: left promiscuous mode [ 639.487813][ T2972] hsr_slave_1: left promiscuous mode [ 639.516688][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.524249][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.544356][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.561753][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.671930][ T2972] veth1_macvtap: left promiscuous mode [ 639.685305][ T2972] veth0_macvtap: left promiscuous mode [ 639.691099][ T2972] veth1_vlan: left promiscuous mode [ 639.702166][ T2972] veth0_vlan: left promiscuous mode [ 639.726807][ T2972] veth1_macvtap: left promiscuous mode [ 639.734574][ T2972] veth0_macvtap: left promiscuous mode [ 639.750014][ T2972] veth1_vlan: left promiscuous mode [ 639.762485][ T2972] veth0_vlan: left promiscuous mode [ 641.159949][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 641.288156][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 643.061153][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 643.144932][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 644.209654][T27527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7560'. [ 644.219880][T27533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7563'. [ 644.229141][T27533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7563'. [ 644.272985][T27533] macvlan0: entered promiscuous mode [ 644.311909][T27533] batadv_slave_0: entered promiscuous mode [ 644.739349][T26235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.759754][T26344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.799063][T26344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.912414][T26344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.945678][T26344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.008084][T26235] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.035340][ T5267] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 645.140855][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.148085][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.259313][ T5267] usb 1-1: not running at top speed; connect to a high speed hub [ 645.269867][ T5267] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.294711][ T5267] usb 1-1: config 1 interface 0 has no altsetting 0 [ 645.313979][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 645.325305][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.337623][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.344812][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.362870][ T5267] usb 1-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴믰ꮘ睢 [ 645.386869][ T5267] usb 1-1: Manufacturer: Ь [ 645.391424][ T5267] usb 1-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧ欍㜶ꢒ䡔駌࠭놶昄㳐笑㏉濋筞䲵呻萷橴烗际鑦␵ꏯ੊퓰稏췭⦛炈霢⇢摸 [ 645.672964][T27561] kernel read not supported for file /  (pid: 27561 comm: syz.0.7566) [ 645.741342][ T29] audit: type=1800 audit(2000001617.966:736): pid=27561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.7566" name=2001 dev="mqueue" ino=90470 res=0 errno=0 [ 645.817108][ T5267] usbhid 1-1:1.0: can't add hid device: -71 [ 645.836953][ T5267] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 645.888423][ T5267] usb 1-1: USB disconnect, device number 66 [ 645.904028][T26347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 645.956897][T26347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 645.980255][T26347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 646.011322][T26344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.037269][T26347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 646.093125][T26344] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.204057][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.211328][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.274327][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.281562][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.343435][T26235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.548835][T26344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.618957][T26347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.694131][T26235] veth0_vlan: entered promiscuous mode [ 646.742941][T26347] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.772018][T26235] veth1_vlan: entered promiscuous mode [ 646.803227][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.810427][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.864639][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.871873][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.030583][T26235] veth0_macvtap: entered promiscuous mode [ 647.070178][T26235] veth1_macvtap: entered promiscuous mode [ 647.170360][T26344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.202273][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.233336][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.253609][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.291516][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.315333][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.326335][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.348535][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.383529][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.415813][T26235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.494099][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.515296][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.543670][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.573178][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.602045][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.612801][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.623904][T26235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.637273][T26235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.649304][T26235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.681345][T26235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.690941][T26235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.714014][T26235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.723143][ T5215] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 647.731304][T26235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.808282][T26347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.841360][T26344] veth0_vlan: entered promiscuous mode [ 647.892657][T26344] veth1_vlan: entered promiscuous mode [ 647.930107][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.951865][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.972026][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 647.996018][ T5215] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.024056][ T5215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.040017][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=68 [ 648.049234][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.059540][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.067582][ T5215] usb 1-1: Product: syz [ 648.071848][ T5215] usb 1-1: Manufacturer: syz [ 648.076052][T26347] veth0_vlan: entered promiscuous mode [ 648.082383][ T5215] usb 1-1: SerialNumber: syz [ 648.101518][T26344] veth0_macvtap: entered promiscuous mode [ 648.168260][T26347] veth1_vlan: entered promiscuous mode [ 648.178456][T26344] veth1_macvtap: entered promiscuous mode [ 648.218166][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.261628][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.280852][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.327706][T27639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 648.340580][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.365033][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.376731][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.398057][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.419236][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.441362][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.463252][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.486379][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.505645][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.527996][T26344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.570921][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.585106][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.596449][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.608118][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.619139][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.634936][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.658170][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.675454][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.695461][T26344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.715260][T26344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.738607][T26344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.781256][T26347] veth0_macvtap: entered promiscuous mode [ 648.806981][T26344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.825716][T26344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.834464][T26344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.855040][T26344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.884686][T26347] veth1_macvtap: entered promiscuous mode [ 648.950153][T27639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 649.067885][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.080994][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.102945][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.119382][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.137595][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.156493][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.169024][ T5215] cdc_ncm 1-1:1.0: bind() failure [ 649.176901][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.205502][ T5215] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 649.213865][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.235586][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.255402][ T5215] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 649.264395][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.287255][ T5215] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 649.295947][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.312056][ T5215] usb 1-1: USB disconnect, device number 67 [ 649.318195][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.335669][T26347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.398219][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.426467][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.436805][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.455556][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.476105][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.496273][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.530343][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.552020][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.582431][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.615479][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.649920][T26347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.670592][T26347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.694441][T26347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.812088][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.878879][T26347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.889838][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.913130][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.920764][T26347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.930956][T26347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.941003][T26347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.038793][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.214032][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.247602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.277859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.292602][T21149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.325258][T21149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.362103][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.511601][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.565867][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.025497][ T46] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 651.065937][ T35] bridge_slave_1: left allmulticast mode [ 651.071628][ T35] bridge_slave_1: left promiscuous mode [ 651.094415][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.132504][T24715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.144865][T24715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.154058][T24715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.163922][ T35] bridge_slave_0: left allmulticast mode [ 651.187683][ T35] bridge_slave_0: left promiscuous mode [ 651.187908][T24715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.203636][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.211673][T24715] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 651.225400][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 651.233526][T24715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.250187][ T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 651.275728][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.283895][ T46] usb 1-1: Product: syz [ 651.289421][ T46] usb 1-1: Manufacturer: syz [ 651.294472][ T46] usb 1-1: SerialNumber: syz [ 651.523896][ T46] aqc111 1-1:1.0: probe with driver aqc111 failed with error -22 [ 651.545654][ T46] usb 1-1: USB disconnect, device number 68 [ 651.999998][ T5216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 652.014000][ T5216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 652.037302][ T5216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 652.064211][ T5216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 652.089466][ T5216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 652.096959][ T5216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 652.479409][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.503033][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.524675][ T35] bond0 (unregistering): Released all slaves [ 653.085559][ T46] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 653.115970][ T5215] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 653.270253][ T35] hsr_slave_0: left promiscuous mode [ 653.280051][ T35] hsr_slave_1: left promiscuous mode [ 653.285476][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 653.291589][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.297394][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.300024][ T5215] usb 5-1: Using ep0 maxpacket: 32 [ 653.325285][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.326142][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.335067][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 653.354793][ T5215] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 653.364839][ T5215] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 653.375463][T24715] Bluetooth: hci2: command tx timeout [ 653.386201][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.395749][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.402937][ T5215] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 653.406597][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.416351][ T5215] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 653.444668][ T46] usb 1-1: config 0 descriptor?? [ 653.490277][ T35] veth1_macvtap: left promiscuous mode [ 653.497282][ T5215] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.517600][ T35] veth0_macvtap: left promiscuous mode [ 653.524211][ T5215] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 653.533940][ T35] veth1_vlan: left promiscuous mode [ 653.543861][ T5215] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 653.552617][ T35] veth0_vlan: left promiscuous mode [ 653.565258][ T5215] usb 5-1: Product: syz [ 653.579665][ T5215] usb 5-1: Manufacturer: syz [ 653.584314][ T5215] usb 5-1: SerialNumber: syz [ 653.603154][ T5215] usb 5-1: config 0 descriptor?? [ 653.624576][ T5215] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 653.660025][ T5215] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 653.882261][ T46] apple 0003:05AC:0247.0048: unknown main item tag 0xd [ 653.904806][ T46] apple 0003:05AC:0247.0048: unexpected long global item [ 653.936081][ T46] apple 0003:05AC:0247.0048: parse failed [ 653.941986][ T46] apple 0003:05AC:0247.0048: probe with driver apple failed with error -22 [ 653.987477][ T5215] usb 5-1: USB disconnect, device number 60 [ 653.995544][ T5215] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 654.145960][T24715] Bluetooth: hci3: command tx timeout [ 654.209205][ T5216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.227660][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.253126][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.271428][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.276966][T20677] usb 1-1: USB disconnect, device number 69 [ 654.289555][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 654.315985][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.375650][ T35] team0 (unregistering): Port device team_slave_1 removed [ 655.425679][T24715] Bluetooth: hci2: command tx timeout [ 655.559608][ T35] team0 (unregistering): Port device team_slave_0 removed [ 656.227732][T24715] Bluetooth: hci3: command tx timeout [ 656.395368][T24715] Bluetooth: hci5: command tx timeout [ 657.505530][T24715] Bluetooth: hci2: command tx timeout [ 657.593469][ T29] audit: type=1326 audit(2000001629.816:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000 [ 657.629973][ T29] audit: type=1326 audit(2000001629.826:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000 [ 657.667888][ T29] audit: type=1326 audit(2000001629.826:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000 [ 657.744401][ T29] audit: type=1326 audit(2000001629.826:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27973 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed48d79e79 code=0x7ffc0000 [ 658.105601][T27732] chnl_net:caif_netlink_parms(): no params data found [ 658.184426][T27754] chnl_net:caif_netlink_parms(): no params data found [ 658.307337][T24715] Bluetooth: hci3: command tx timeout [ 658.321368][T28128] nbd: couldn't find device at index 0 [ 658.441450][T28159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.468283][ T5216] Bluetooth: hci5: command tx timeout [ 658.872504][T28197] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 658.894072][T28197] macsec1: entered promiscuous mode [ 658.904136][T28197] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 658.967024][T27754] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.983463][T27754] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.005566][T27754] bridge_slave_0: entered allmulticast mode [ 659.013077][T27754] bridge_slave_0: entered promiscuous mode [ 659.168759][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.226873][T27732] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.234042][T27732] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.249381][T27732] bridge_slave_0: entered allmulticast mode [ 659.267125][T27732] bridge_slave_0: entered promiscuous mode [ 659.301662][T27732] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.319955][T27732] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.330293][T27732] bridge_slave_1: entered allmulticast mode [ 659.339067][T27732] bridge_slave_1: entered promiscuous mode [ 659.346141][T27754] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.354212][T27754] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.361971][T27754] bridge_slave_1: entered allmulticast mode [ 659.406970][T27754] bridge_slave_1: entered promiscuous mode [ 659.585513][ T5216] Bluetooth: hci2: command tx timeout [ 659.625157][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.159674][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.367871][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.406296][ T5216] Bluetooth: hci3: command tx timeout [ 660.545478][ T5216] Bluetooth: hci5: command tx timeout [ 660.984547][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.277625][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.577512][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.969547][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.455681][ T35] bridge_slave_1: left allmulticast mode [ 662.461382][ T35] bridge_slave_1: left promiscuous mode [ 662.475788][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.517687][ T35] bridge_slave_0: left allmulticast mode [ 662.523374][ T35] bridge_slave_0: left promiscuous mode [ 662.585652][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.635298][ T5216] Bluetooth: hci5: command tx timeout [ 662.657515][ T35] bridge_slave_1: left allmulticast mode [ 662.663314][ T35] bridge_slave_1: left promiscuous mode [ 662.765449][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.826296][ T35] bridge_slave_0: left allmulticast mode [ 662.831990][ T35] bridge_slave_0: left promiscuous mode [ 662.886478][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.411444][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.472564][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.518796][ T35] bond0 (unregistering): Released all slaves [ 665.835567][T18300] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 665.896607][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.909532][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.947599][ T35] bond0 (unregistering): Released all slaves [ 666.027313][T18300] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 666.037129][T18300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.086799][T18300] usb 5-1: config 0 descriptor?? [ 666.087114][T27732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.244427][T27732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.274447][T27845] chnl_net:caif_netlink_parms(): no params data found [ 666.329002][T27754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.405799][ T941] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 666.474702][T27754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.537525][T18300] usb 5-1: string descriptor 0 read error: -22 [ 666.556657][T18300] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 666.563275][T27732] team0: Port device team_slave_0 added [ 666.587265][T27732] team0: Port device team_slave_1 added [ 666.607598][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 666.625062][ T941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 666.635282][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.643422][ T941] usb 1-1: Product: syz [ 666.649365][ T941] usb 1-1: Manufacturer: syz [ 666.654044][ T941] usb 1-1: SerialNumber: syz [ 666.662022][ T941] usb 1-1: config 0 descriptor?? [ 666.739377][T18300] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 666.759073][T18300] pac7311 5-1:0.0: probe with driver pac7311 failed with error -71 [ 666.783656][T18300] usb 5-1: USB disconnect, device number 61 [ 666.880099][ T941] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 666.909828][T27754] team0: Port device team_slave_0 added [ 666.934714][T27754] team0: Port device team_slave_1 added [ 666.979552][T27732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.000996][T27732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.042983][T27732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.154888][T27732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.171568][T27732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.199796][T27732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.345140][T28687] ================================================================== [ 667.353255][T28687] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 667.360743][T28687] Read of size 8 at addr ffff888023451030 by task syz.4.7638/28687 [ 667.368655][T28687] [ 667.370989][T28687] CPU: 1 UID: 0 PID: 28687 Comm: syz.4.7638 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 667.381763][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 667.391828][T28687] Call Trace: [ 667.395112][T28687] [ 667.398051][T28687] dump_stack_lvl+0x241/0x360 [ 667.402749][T28687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.408050][T28687] ? __pfx__printk+0x10/0x10 [ 667.415259][T28687] ? _printk+0xd5/0x120 [ 667.419623][T28687] ? __virt_addr_valid+0x183/0x530 [ 667.424757][T28687] ? __virt_addr_valid+0x183/0x530 [ 667.429887][T28687] print_report+0x169/0x550 [ 667.434409][T28687] ? __virt_addr_valid+0x183/0x530 [ 667.439527][T28687] ? __virt_addr_valid+0x183/0x530 [ 667.444646][T28687] ? __virt_addr_valid+0x45f/0x530 [ 667.449777][T28687] ? __phys_addr+0xba/0x170 [ 667.454312][T28687] ? uprobe_mmap+0xb9a/0x11a0 [ 667.459000][T28687] kasan_report+0x143/0x180 [ 667.463516][T28687] ? uprobe_mmap+0xb9a/0x11a0 [ 667.468221][T28687] uprobe_mmap+0xb9a/0x11a0 [ 667.472780][T28687] ? __pfx_uprobe_mmap+0x10/0x10 [ 667.477746][T28687] mmap_region+0x1891/0x2090 [ 667.482346][T28687] ? mark_lock+0x9a/0x350 [ 667.486697][T28687] ? __pfx_mmap_region+0x10/0x10 [ 667.491641][T28687] ? mm_get_unmapped_area+0xa5/0xd0 [ 667.496847][T28687] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 667.502500][T28687] ? cap_mmap_addr+0x163/0x2c0 [ 667.507286][T28687] ? __get_unmapped_area+0x2f0/0x360 [ 667.512585][T28687] do_mmap+0x8f9/0x1010 [ 667.516753][T28687] ? __pfx_do_mmap+0x10/0x10 [ 667.521347][T28687] ? __pfx_down_write_killable+0x10/0x10 [ 667.527006][T28687] ? __pfx_ima_file_mmap+0x10/0x10 [ 667.532151][T28687] ? security_mmap_file+0x178/0x1a0 [ 667.537382][T28687] vm_mmap_pgoff+0x1dd/0x3d0 [ 667.542014][T28687] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 667.547138][T28687] ? __fget_files+0x29/0x470 [ 667.551759][T28687] ? __fget_files+0x3f6/0x470 [ 667.556572][T28687] ksys_mmap_pgoff+0x4f1/0x720 [ 667.561359][T28687] ? __x64_sys_mmap+0x7f/0x140 [ 667.566144][T28687] do_syscall_64+0xf3/0x230 [ 667.570662][T28687] ? clear_bhb_loop+0x35/0x90 [ 667.575356][T28687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.581256][T28687] RIP: 0033:0x7f90fa979e79 [ 667.585682][T28687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.605311][T28687] RSP: 002b:00007f90fb725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 667.613738][T28687] RAX: ffffffffffffffda RBX: 00007f90fab15f80 RCX: 00007f90fa979e79 [ 667.621723][T28687] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 667.629790][T28687] RBP: 00007f90fa9e7916 R08: 0000000000000005 R09: 0000000000000000 [ 667.637768][T28687] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 667.645838][T28687] R13: 0000000000000000 R14: 00007f90fab15f80 R15: 00007ffef903e4c8 [ 667.653834][T28687] [ 667.656856][T28687] [ 667.659182][T28687] Allocated by task 1065: [ 667.663519][T28687] kasan_save_track+0x3f/0x80 [ 667.668388][T28687] __kasan_kmalloc+0x98/0xb0 [ 667.672997][T28687] __kmalloc_cache_node_noprof+0x1d3/0x300 [ 667.679512][T28687] __get_vm_area_node+0x113/0x270 [ 667.684539][T28687] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 667.690480][T28687] dup_task_struct+0x444/0x8c0 [ 667.695247][T28687] copy_process+0x5d1/0x3e10 [ 667.699845][T28687] kernel_clone+0x223/0x880 [ 667.704510][T28687] user_mode_thread+0x132/0x1a0 [ 667.709373][T28687] call_usermodehelper_exec_work+0x5c/0x230 [ 667.715280][T28687] process_scheduled_works+0xa2c/0x1830 [ 667.721008][T28687] worker_thread+0x86d/0xd40 [ 667.725608][T28687] kthread+0x2f0/0x390 [ 667.729682][T28687] ret_from_fork+0x4b/0x80 [ 667.734101][T28687] ret_from_fork_asm+0x1a/0x30 [ 667.738869][T28687] [ 667.741187][T28687] Freed by task 46: [ 667.744996][T28687] kasan_save_track+0x3f/0x80 [ 667.749783][T28687] kasan_save_free_info+0x40/0x50 [ 667.754824][T28687] poison_slab_object+0xe0/0x150 [ 667.759770][T28687] __kasan_slab_free+0x37/0x60 [ 667.764535][T28687] kfree+0x149/0x360 [ 667.768439][T28687] delayed_vfree_work+0x56/0x80 [ 667.773297][T28687] process_scheduled_works+0xa2c/0x1830 [ 667.778847][T28687] worker_thread+0x86d/0xd40 [ 667.783479][T28687] kthread+0x2f0/0x390 [ 667.787552][T28687] ret_from_fork+0x4b/0x80 [ 667.791984][T28687] ret_from_fork_asm+0x1a/0x30 [ 667.796930][T28687] [ 667.799250][T28687] The buggy address belongs to the object at ffff888023451000 [ 667.799250][T28687] which belongs to the cache kmalloc-64 of size 64 [ 667.813144][T28687] The buggy address is located 48 bytes inside of [ 667.813144][T28687] freed 64-byte region [ffff888023451000, ffff888023451040) [ 667.826779][T28687] [ 667.829106][T28687] The buggy address belongs to the physical page: [ 667.835526][T28687] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23451 [ 667.844285][T28687] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 667.851434][T28687] page_type: 0xfdffffff(slab) [ 667.856123][T28687] raw: 00fff00000000000 ffff8880154418c0 ffffea00007eaa40 dead000000000002 [ 667.864708][T28687] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 667.873282][T28687] page dumped because: kasan: bad access detected [ 667.879699][T28687] page_owner tracks the page as allocated [ 667.885407][T28687] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6763, tgid 6762 (syz.1.648), ts 110923825566, free_ts 110900333612 [ 667.906000][T28687] post_alloc_hook+0x1f3/0x230 [ 667.910778][T28687] get_page_from_freelist+0x2e4c/0x2f10 [ 667.916331][T28687] __alloc_pages_noprof+0x256/0x6c0 [ 667.921530][T28687] alloc_slab_page+0x5f/0x120 [ 667.926207][T28687] allocate_slab+0x5a/0x2f0 [ 667.930709][T28687] ___slab_alloc+0xcd1/0x14b0 [ 667.935391][T28687] __slab_alloc+0x58/0xa0 [ 667.939732][T28687] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 667.945106][T28687] sctp_add_bind_addr+0x89/0x3a0 [ 667.950050][T28687] sctp_copy_local_addr_list+0x311/0x500 [ 667.955693][T28687] sctp_bind_addr_copy+0xad/0x3b0 [ 667.960721][T28687] sctp_connect_new_asoc+0x2f3/0x6c0 [ 667.966020][T28687] __sctp_connect+0x66d/0xe30 [ 667.970706][T28687] sctp_inet_connect+0x149/0x1f0 [ 667.975651][T28687] io_connect+0xa4/0x4f0 [ 667.979898][T28687] io_issue_sqe+0x3cf/0x1570 [ 667.984490][T28687] page last free pid 4668 tgid 4668 stack trace: [ 667.990813][T28687] free_unref_page+0xd19/0xea0 [ 667.995576][T28687] __slab_free+0x31b/0x3d0 [ 667.999995][T28687] qlist_free_all+0x9e/0x140 [ 668.004592][T28687] kasan_quarantine_reduce+0x14f/0x170 [ 668.010062][T28687] __kasan_slab_alloc+0x23/0x80 [ 668.014930][T28687] __kmalloc_noprof+0x1a6/0x400 [ 668.019792][T28687] tomoyo_realpath_from_path+0xcf/0x5e0 [ 668.025345][T28687] tomoyo_path_perm+0x2b7/0x740 [ 668.030199][T28687] security_inode_getattr+0xd8/0x130 [ 668.035573][T28687] vfs_getattr+0x45/0x430 [ 668.039906][T28687] vfs_fstatat+0xe4/0x190 [ 668.044238][T28687] __x64_sys_newfstatat+0x11d/0x1a0 [ 668.049445][T28687] do_syscall_64+0xf3/0x230 [ 668.053953][T28687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.059852][T28687] [ 668.062169][T28687] Memory state around the buggy address: [ 668.067799][T28687] ffff888023450f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 668.075855][T28687] ffff888023450f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 668.083913][T28687] >ffff888023451000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 668.092055][T28687] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 668.097688][T28687] ffff888023451080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 668.105755][T28687] ffff888023451100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 668.113814][T28687] ================================================================== [ 668.133541][T28687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 668.140775][T28687] CPU: 1 UID: 0 PID: 28687 Comm: syz.4.7638 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 668.151553][T28687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 668.161629][T28687] Call Trace: [ 668.164917][T28687] [ 668.167857][T28687] dump_stack_lvl+0x241/0x360 [ 668.172545][T28687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.177748][T28687] ? __pfx__printk+0x10/0x10 [ 668.182362][T28687] ? preempt_schedule+0xe1/0xf0 [ 668.187246][T28687] ? vscnprintf+0x5d/0x90 [ 668.191592][T28687] panic+0x349/0x860 [ 668.195557][T28687] ? check_panic_on_warn+0x21/0xb0 [ 668.200684][T28687] ? __pfx_panic+0x10/0x10 [ 668.205135][T28687] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 668.211149][T28687] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 668.217491][T28687] ? print_report+0x502/0x550 [ 668.222193][T28687] check_panic_on_warn+0x86/0xb0 [ 668.227325][T28687] ? uprobe_mmap+0xb9a/0x11a0 [ 668.232013][T28687] end_report+0x77/0x160 [ 668.236265][T28687] kasan_report+0x154/0x180 [ 668.240816][T28687] ? uprobe_mmap+0xb9a/0x11a0 [ 668.245535][T28687] uprobe_mmap+0xb9a/0x11a0 [ 668.250086][T28687] ? __pfx_uprobe_mmap+0x10/0x10 [ 668.255060][T28687] mmap_region+0x1891/0x2090 [ 668.259668][T28687] ? mark_lock+0x9a/0x350 [ 668.264025][T28687] ? __pfx_mmap_region+0x10/0x10 [ 668.268969][T28687] ? mm_get_unmapped_area+0xa5/0xd0 [ 668.274181][T28687] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 668.279826][T28687] ? cap_mmap_addr+0x163/0x2c0 [ 668.284609][T28687] ? __get_unmapped_area+0x2f0/0x360 [ 668.289911][T28687] do_mmap+0x8f9/0x1010 [ 668.294086][T28687] ? __pfx_do_mmap+0x10/0x10 [ 668.298701][T28687] ? __pfx_down_write_killable+0x10/0x10 [ 668.304387][T28687] ? __pfx_ima_file_mmap+0x10/0x10 [ 668.309548][T28687] ? security_mmap_file+0x178/0x1a0 [ 668.314773][T28687] vm_mmap_pgoff+0x1dd/0x3d0 [ 668.319387][T28687] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 668.324517][T28687] ? __fget_files+0x29/0x470 [ 668.329136][T28687] ? __fget_files+0x3f6/0x470 [ 668.333831][T28687] ksys_mmap_pgoff+0x4f1/0x720 [ 668.338618][T28687] ? __x64_sys_mmap+0x7f/0x140 [ 668.343401][T28687] do_syscall_64+0xf3/0x230 [ 668.347915][T28687] ? clear_bhb_loop+0x35/0x90 [ 668.352608][T28687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.358517][T28687] RIP: 0033:0x7f90fa979e79 [ 668.362957][T28687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.382859][T28687] RSP: 002b:00007f90fb725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 668.391302][T28687] RAX: ffffffffffffffda RBX: 00007f90fab15f80 RCX: 00007f90fa979e79 [ 668.399288][T28687] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 668.407262][T28687] RBP: 00007f90fa9e7916 R08: 0000000000000005 R09: 0000000000000000 [ 668.415245][T28687] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 668.423223][T28687] R13: 0000000000000000 R14: 00007f90fab15f80 R15: 00007ffef903e4c8 [ 668.431226][T28687] [ 668.434486][T28687] Kernel Offset: disabled [ 668.438802][T28687] Rebooting in 86400 seconds..