last executing test programs: 2m43.319565142s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 2m20.10922671s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 1m48.198896965s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 1m24.325527555s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 1m5.899879733s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 26.315673394s ago: executing program 1 (id=684): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x160, 0xf8010000, 0x278, 0x238, 0x238, 0x278, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'wg2\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3045eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) 14.230371755s ago: executing program 3 (id=2345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x87, 0x0, &(0x7f0000000000)) 13.277333553s ago: executing program 3 (id=2348): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000002a80)="3be09b0f45807bebb9e7942ed680d56db36e8954ad985811972a4f2b3c6ecb92d53d1da707dc502317db47eb1dca27ff40edb82a12ef79e0465d242ecb093145e26e83026d", 0x45, 0x404c000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.080607754s ago: executing program 3 (id=2350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './bus\x00'}) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0xffffffffffffffff, 0x0, r2}, 0xc) lchown(&(0x7f0000000300)='./file1/file0\x00', 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) chdir(&(0x7f0000002340)='./bus\x00') link(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='./file1/file0\x00') 4.801810738s ago: executing program 2 (id=2358): syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) 4.705878819s ago: executing program 2 (id=2359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x87, 0x0, &(0x7f0000000000)) 4.620165527s ago: executing program 2 (id=2360): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xea, 0xc2, 0x74, 0x40, 0xfd9, 0x2c, 0x518f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0xea, 0xa4}}]}}]}}, 0x0) 3.674331481s ago: executing program 3 (id=2362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/64, 0x40}, {0x0}], 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r3 = semget(0x1, 0x5, 0x100) semop(r3, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = socket(0x1e, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f00000012c0)=ANY=[], 0x2000011a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 3.137261842s ago: executing program 2 (id=2366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @remote, @mcast2}}}}, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) 2.912190084s ago: executing program 4 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 2.58077403s ago: executing program 4 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x28, 0x11, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_GROUP={0x8, 0x1b, 0x80000000}]}, 0x28}}, 0x0) 1.633925405s ago: executing program 0 (id=2374): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 1.534620748s ago: executing program 2 (id=2375): socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x38, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000280)=0x98e1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="f5"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.265801578s ago: executing program 0 (id=2376): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) close(r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000100)={0x0, "582c76974278411817e88322330d62d005c630353df73251ba9cca7470a90dee5f"}}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x3d15, 0x8000001, 0x0, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)='5', 0x1}], 0x1}}], 0x1, 0x0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='_', 0x1, 0x20012100}) io_uring_enter(r6, 0xe85, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200010062697477697365001c0002800800034000000004080001400000000008000240000000000900010073797a30000000000900020073797a32000000000500074074000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@my=0x0, 0xfffffffc}, 0x1, 0x1, 0x8c}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x30}, 0x1}) r11 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB="346aefe14aad38b3", @ANYRESHEX=r11, @ANYRES8=r2]) 1.10730201s ago: executing program 4 (id=2377): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2283, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000200)={'@+{/', 0x20, ',', 0x20, 'rwab', 0x20, 'rxb'}, 0x10) chdir(0x0) creat(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 792.526134ms ago: executing program 0 (id=2378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2}}]}, 0x144}}, 0x0) 714.742336ms ago: executing program 4 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}}, 0x0) 475.929988ms ago: executing program 0 (id=2380): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32], 0x5c, 0x0) 467.058205ms ago: executing program 3 (id=2381): syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) 416.625427ms ago: executing program 4 (id=2382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="66ba4200ecb9800000c00f3235000400000f300f20d835080000000f22d8b9f8080000b812e31559ba000000000f3048b84cc8680d000000000f23d80e21f835400000000f23f845f4470fc7b70500000066bad104ec3e0fc72cf2c4627d239700000000", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 281.890287ms ago: executing program 0 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x2c, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x0) 264.2978ms ago: executing program 2 (id=2384): openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x400a01) io_setup(0x2, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x10b, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xdf, 0x21, 0xf5, 0x8, 0x413c, 0x81d1, 0xfb93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x20, 0x88, 0xf4, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x40}}, {{0x9, 0x5, 0x83, 0x10, 0x8, 0x3f, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x89e5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x0, 0x0, [@generic={0xb7, 0x0, "ea6b2651e69a0f528840bec2949d74831f5305bf3c4f8fd45c91947b257a88735ce0eadfe106c719a80e4656ec294053890db74be074bd1784254bb204a50b166d7f5de5aca4e37649633493eeca170255921044cd6cd809da3da291de872a0845a6f9f85c817b60813171547c4ab72a1c6fccdbc90bd93ee46f157598f2cf91290779ce6cd292e89f3b5738989335c88d3d96005bd9afcb5203700e12f95c48d02378fbe5db7b059b994a3660dc2bc50709b8d8e7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x5, 0x5, "9a0ac4"}]}}]}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="660f0092ea503b32b85b0000000f23c80f21f8350000b0000f23f80f013bb9800000c00f3235000100000f30650f01cb0f00d866baf80cb852d54585ef66bafc0cec2626660f388047d065ea2000000000009a00000000630065f4", 0x5b}], 0x1, 0xa, 0x0, 0x0) 190.525784ms ago: executing program 3 (id=2385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @remote, @mcast2}}}}, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) 5.862588ms ago: executing program 0 (id=2386): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000140)=0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 0s ago: executing program 4 (id=2387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x87, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.002874][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.053707][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.119809][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.130615][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.146946][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.158024][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.184216][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.219559][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.248512][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.285761][T12738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.309283][T12738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.320555][T12738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.330261][T12738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.734867][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.804390][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.853194][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.944062][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.983356][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.990412][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.056649][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.063881][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.132331][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.139641][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.010559][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.173263][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.337236][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.386662][T12815] veth0_vlan: entered promiscuous mode [ 643.409254][T12815] veth1_vlan: entered promiscuous mode [ 643.441611][T12815] veth0_macvtap: entered promiscuous mode [ 643.479920][T12815] veth1_macvtap: entered promiscuous mode [ 643.515870][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.551739][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.568281][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.579132][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.590323][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.601260][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.612050][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.622218][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.633703][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.647499][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.690853][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.719951][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.737743][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.750434][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.767455][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.778402][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.797276][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.809860][T12815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.826938][T12815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.841499][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.886446][T12815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.901468][T12815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.911577][T12815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.920733][T12815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.092779][ T51] bridge_slave_1: left allmulticast mode [ 644.099659][ T51] bridge_slave_1: left promiscuous mode [ 644.110056][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.130212][ T51] bridge_slave_0: left allmulticast mode [ 644.136166][ T51] bridge_slave_0: left promiscuous mode [ 644.141981][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.154665][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.198214][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.245411][ T51] bond0 (unregistering): Released all slaves [ 645.447746][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.487126][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.634629][T10386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.647472][T10386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.663343][T10386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.671546][T10386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.706551][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 645.716177][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.726239][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.752943][T10381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.766834][T10381] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.816212][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.828383][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 645.841074][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.140919][ T6456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.381980][ T6456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.862478][ C1] eth0: bad gso: type: 1, size: 1408 [ 647.088251][ T51] hsr_slave_0: left promiscuous mode [ 647.101404][T13151] hpfs: bad mount options. [ 647.130414][ T51] hsr_slave_1: left promiscuous mode [ 647.151002][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.176400][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.379658][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.407677][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.804493][ T5232] Bluetooth: hci2: command tx timeout [ 648.084126][ T5232] Bluetooth: hci4: command tx timeout [ 648.322605][ T51] veth1_macvtap: left promiscuous mode [ 648.329829][ T51] veth0_macvtap: left promiscuous mode [ 648.341676][ T51] veth1_vlan: left promiscuous mode [ 648.352965][T13164] nbd3: detected capacity change from 0 to 12 [ 648.387263][T13164] block nbd3: Send control failed (result -89) [ 648.398465][ T51] veth0_vlan: left promiscuous mode [ 648.424273][T13164] block nbd3: Request send failed, requeueing [ 648.447165][T10386] block nbd3: Receive control failed (result -32) [ 648.471221][ T26] block nbd3: Dead connection, failed to find a fallback [ 648.478940][ T26] block nbd3: shutting down sockets [ 648.484878][ T26] blk_print_req_error: 7 callbacks suppressed [ 648.484891][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.502074][ T26] buffer_io_error: 7 callbacks suppressed [ 648.502088][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.526791][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.543177][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.555454][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.583214][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.591310][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.602055][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.611708][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.621012][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.631219][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.641314][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.652046][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.661609][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.669729][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.692073][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.717841][T13164] ldm_validate_partition_table(): Disk read failed. [ 648.793322][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.828054][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.865729][T13164] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.893368][T13164] Buffer I/O error on dev nbd3, logical block 0, async page read [ 648.916487][T13164] Dev nbd3: unable to read RDB block 0 [ 648.937744][T13164] nbd3: unable to read partition table [ 648.961939][T13164] nbd3: partition table beyond EOD, truncated [ 648.998471][T13182] netlink: 'syz.0.1972': attribute type 9 has an invalid length. [ 649.017200][T11268] ldm_validate_partition_table(): Disk read failed. [ 649.027694][T11268] Dev nbd3: unable to read RDB block 0 [ 649.034826][T11268] nbd3: unable to read partition table [ 649.053209][T11268] nbd3: partition table beyond EOD, truncated [ 649.065821][T11268] ldm_validate_partition_table(): Disk read failed. [ 649.083901][T11268] Dev nbd3: unable to read RDB block 0 [ 649.089641][T11268] nbd3: unable to read partition table [ 649.130527][T11268] nbd3: partition table beyond EOD, truncated [ 649.963129][T10386] Bluetooth: hci2: command tx timeout [ 650.124087][T10386] Bluetooth: hci4: command tx timeout [ 650.407743][T10386] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 650.777629][ T51] team0 (unregistering): Port device team_slave_1 removed [ 650.965454][ T51] team0 (unregistering): Port device team_slave_0 removed [ 651.747567][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bee1400: rx timeout, send abort [ 652.040543][T10386] Bluetooth: hci2: command tx timeout [ 652.192957][T10386] Bluetooth: hci4: command tx timeout [ 652.257801][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bee1400: abort rx timeout. Force session deactivation [ 652.921526][T13119] chnl_net:caif_netlink_parms(): no params data found [ 653.668407][T13235] sctp: [Deprecated]: syz.2.1981 (pid 13235) Use of int in maxseg socket option. [ 653.668407][T13235] Use struct sctp_assoc_value instead [ 653.719329][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.729834][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.751832][T13119] bridge_slave_0: entered allmulticast mode [ 653.791487][T13119] bridge_slave_0: entered promiscuous mode [ 653.825661][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.839157][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.859277][T13119] bridge_slave_1: entered allmulticast mode [ 653.891338][T13119] bridge_slave_1: entered promiscuous mode [ 653.914324][T13123] chnl_net:caif_netlink_parms(): no params data found [ 654.113065][T10386] Bluetooth: hci2: command tx timeout [ 654.209960][T13119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.251993][T13119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.272928][T10386] Bluetooth: hci4: command tx timeout [ 654.434195][T10386] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 654.444565][T10386] Bluetooth: hci1: Injecting HCI hardware error event [ 654.457392][T10381] Bluetooth: hci1: hardware error 0x00 [ 654.698297][T13231] delete_channel: no stack [ 655.016310][T13257] xt_CONNSECMARK: invalid mode: 0 [ 655.712103][T13119] team0: Port device team_slave_0 added [ 655.816589][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.857279][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.875930][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.889512][T13123] bridge_slave_0: entered allmulticast mode [ 655.917839][T13123] bridge_slave_0: entered promiscuous mode [ 655.927649][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.937089][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.945820][T13123] bridge_slave_1: entered allmulticast mode [ 655.953506][T13123] bridge_slave_1: entered promiscuous mode [ 655.967894][T13119] team0: Port device team_slave_1 added [ 656.034775][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.216092][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.248402][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.274004][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.334386][T13119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.341395][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.409692][T13119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.438990][T13119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.451080][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.477987][T13119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.523701][T10381] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 656.561588][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.604487][T13123] team0: Port device team_slave_0 added [ 656.654125][T13123] team0: Port device team_slave_1 added [ 656.825615][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.832602][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.893911][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.130393][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.165177][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.176490][T13298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 657.241010][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.263064][T13119] hsr_slave_0: entered promiscuous mode [ 657.272705][T13119] hsr_slave_1: entered promiscuous mode [ 657.291501][T13119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.299207][T13119] Cannot create hsr debugfs directory [ 657.601242][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.689279][T13123] hsr_slave_0: entered promiscuous mode [ 657.707962][T13123] hsr_slave_1: entered promiscuous mode [ 657.718586][T13123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.742909][T13123] Cannot create hsr debugfs directory [ 657.802226][ T51] bridge_slave_1: left allmulticast mode [ 657.815409][ T51] bridge_slave_1: left promiscuous mode [ 657.834025][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.862421][ T51] bridge_slave_0: left allmulticast mode [ 657.882477][ T51] bridge_slave_0: left promiscuous mode [ 657.895663][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.494519][ C1] eth0: bad gso: type: 1, size: 1408 [ 659.193451][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.216323][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.282089][T13333] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 659.290191][T13333] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2004'. [ 659.451388][ T51] bond0 (unregistering): Released all slaves [ 660.254460][T13343] nbd0: detected capacity change from 0 to 12 [ 660.266978][T13201] block nbd0: Send control failed (result -89) [ 660.290556][T13201] block nbd0: Request send failed, requeueing [ 660.322048][T10381] block nbd0: Receive control failed (result -32) [ 660.404868][ T26] block nbd0: Dead connection, failed to find a fallback [ 660.414310][ T26] block nbd0: shutting down sockets [ 660.419647][ T26] blk_print_req_error: 40 callbacks suppressed [ 660.419660][ T26] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.436965][ T26] buffer_io_error: 40 callbacks suppressed [ 660.436988][ T26] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.453598][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.471578][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.480164][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.500744][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.517481][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.529020][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.538044][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.550061][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.558766][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.569027][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.577601][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.593137][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.601600][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.611461][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.619687][T13201] ldm_validate_partition_table(): Disk read failed. [ 660.626899][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.637688][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.648068][T13201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.672179][T13201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 660.693653][T13201] Dev nbd0: unable to read RDB block 0 [ 660.900977][T13201] nbd0: unable to read partition table [ 660.907103][T13201] nbd0: partition table beyond EOD, truncated [ 660.920030][T13343] ldm_validate_partition_table(): Disk read failed. [ 664.164773][T13343] Dev nbd0: unable to read RDB block 0 [ 664.170673][T13343] nbd0: unable to read partition table [ 664.303053][T13343] nbd0: partition table beyond EOD, truncated [ 664.317121][T13201] ldm_validate_partition_table(): Disk read failed. [ 664.336316][T13201] Dev nbd0: unable to read RDB block 0 [ 664.342117][T13201] nbd0: unable to read partition table [ 664.379591][T13201] nbd0: partition table beyond EOD, truncated [ 664.422497][ T51] hsr_slave_0: left promiscuous mode [ 664.508948][ T51] hsr_slave_1: left promiscuous mode [ 664.520905][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.548724][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.561492][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.756465][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.001403][ T51] veth1_macvtap: left promiscuous mode [ 665.049207][ T51] veth0_macvtap: left promiscuous mode [ 665.117128][ T51] veth1_vlan: left promiscuous mode [ 665.133381][ T51] veth0_vlan: left promiscuous mode [ 666.535312][ T51] team0 (unregistering): Port device team_slave_1 removed [ 666.616187][ T51] team0 (unregistering): Port device team_slave_0 removed [ 666.764930][ C1] eth0: bad gso: type: 1, size: 1408 [ 667.328762][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 667.348145][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 667.390226][T13363] vlan2: entered promiscuous mode [ 667.413085][T13363] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 667.488061][T13363] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 668.456068][T13119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 668.697834][T13119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 668.840799][T13119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 668.933568][T13119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 669.117105][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 670.554806][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.567096][T13413] netlink: 'syz.2.2026': attribute type 4 has an invalid length. [ 670.578968][T13413] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2026'. [ 670.630884][T13123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 670.702084][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.764643][T13123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 670.826280][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.826436][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.988396][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.995586][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.017851][T13123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.069940][T13123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.299175][T13458] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2038'. [ 671.583023][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 671.740077][T13123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.781475][T13123] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.821619][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 671.851557][T13468] vlan0: entered promiscuous mode [ 671.861511][T13468] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 671.881249][T13468] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 671.929966][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 671.964157][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.971401][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.048101][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.055508][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.245617][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.311506][T13123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.562234][T13119] veth0_vlan: entered promiscuous mode [ 672.619245][T13119] veth1_vlan: entered promiscuous mode [ 672.791552][T13119] veth0_macvtap: entered promiscuous mode [ 672.827767][T13119] veth1_macvtap: entered promiscuous mode [ 672.891949][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.932635][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.967668][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.011511][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.058019][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.083055][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.108682][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.189694][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.209580][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.263027][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.293862][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.329296][ C1] eth0: bad gso: type: 1, size: 1408 [ 673.332879][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.355372][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.380809][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.432025][T13119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.453886][T13119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.475867][T13119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.486665][T13119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.512020][T13123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.717207][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.759762][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.860425][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.903118][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.254582][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 674.477310][T13123] veth0_vlan: entered promiscuous mode [ 674.507735][T13123] veth1_vlan: entered promiscuous mode [ 674.667580][T13123] veth0_macvtap: entered promiscuous mode [ 674.700878][T13123] veth1_macvtap: entered promiscuous mode [ 674.753822][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.781217][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.821295][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.837776][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.863233][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.903470][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.922877][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.946864][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.975242][T13123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.016627][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.048890][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.088332][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.123440][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.133739][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.162852][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.172726][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.202808][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.224398][T13123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.301498][ T965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.343399][T13123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.352163][T13123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.363239][T13123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.371970][T13123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.434782][ T965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.499757][ T6456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.514617][ T6456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.545951][ T6456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.554773][ T6456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.738478][ T965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.872087][ T965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.019913][ T965] bridge_slave_1: left allmulticast mode [ 676.029891][ T965] bridge_slave_1: left promiscuous mode [ 676.041258][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.059958][ T965] bridge_slave_0: left allmulticast mode [ 676.068965][ T965] bridge_slave_0: left promiscuous mode [ 676.079260][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.639112][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.650906][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.679295][ T965] bond0 (unregistering): Released all slaves [ 677.360685][T13595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 677.495953][ T965] hsr_slave_0: left promiscuous mode [ 677.523434][T10386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.545786][T10386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.563604][T10386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.583220][T10386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.595719][T10386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 677.611715][T10386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.657027][ T965] hsr_slave_1: left promiscuous mode [ 677.699370][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.832209][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.976031][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.115661][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.452081][ T965] veth1_macvtap: left promiscuous mode [ 678.458228][ T965] veth0_macvtap: left promiscuous mode [ 678.474086][ T965] veth1_vlan: left promiscuous mode [ 678.479452][ T965] veth0_vlan: left promiscuous mode [ 678.550642][ C1] eth0: bad gso: type: 1, size: 1408 [ 678.788092][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 679.012184][T13633] binder: BINDER_SET_CONTEXT_MGR already set [ 679.021561][T13633] binder: 13630:13633 ioctl 4018620d 20000100 returned -16 [ 679.084432][ T30] audit: type=1326 audit(1721922080.502:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 679.143885][ T30] audit: type=1326 audit(1721922080.502:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 679.175714][ T30] audit: type=1326 audit(1721922080.512:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 679.202514][ T30] audit: type=1326 audit(1721922080.512:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 679.230001][ T30] audit: type=1326 audit(1721922080.542:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec28774950 code=0x7ffc0000 [ 679.259641][ T30] audit: type=1326 audit(1721922080.552:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 679.301606][ T30] audit: type=1326 audit(1721922080.552:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 679.384015][ T30] audit: type=1326 audit(1721922080.562:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 679.405918][ T25] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 679.434680][ T30] audit: type=1326 audit(1721922080.562:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 679.461569][ T30] audit: type=1326 audit(1721922080.722:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.3.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 679.613533][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 679.638955][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 679.654538][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 679.668578][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 679.694819][ T25] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 679.707522][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.718243][T10386] Bluetooth: hci2: command tx timeout [ 679.732639][ T25] usb 4-1: Product: syz [ 679.737003][ T25] usb 4-1: Manufacturer: syz [ 679.741951][ T25] usb 4-1: SerialNumber: syz [ 679.767110][ T25] usb 4-1: config 0 descriptor?? [ 679.790138][T13633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 679.959208][ T965] team0 (unregistering): Port device team_slave_1 removed [ 680.091415][ T965] team0 (unregistering): Port device team_slave_0 removed [ 681.131991][T13647] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 681.793310][T10386] Bluetooth: hci2: command tx timeout [ 682.106851][ T5231] usb 4-1: USB disconnect, device number 33 [ 682.439144][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'. [ 682.512342][T13598] chnl_net:caif_netlink_parms(): no params data found [ 682.607686][T10386] Bluetooth: hci3: ISO packet for unknown connection handle 3840 [ 683.386696][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.426215][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.486695][T13598] bridge_slave_0: entered allmulticast mode [ 683.513809][T13598] bridge_slave_0: entered promiscuous mode [ 683.536055][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.623281][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.663058][T13598] bridge_slave_1: entered allmulticast mode [ 683.678926][T13598] bridge_slave_1: entered promiscuous mode [ 683.885064][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.903135][T10386] Bluetooth: hci2: command tx timeout [ 683.956156][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.768678][T13598] team0: Port device team_slave_0 added [ 685.796608][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.803325][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.820629][T13598] team0: Port device team_slave_1 added [ 685.904401][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.911363][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.958951][ T5232] Bluetooth: hci2: command tx timeout [ 685.965586][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.178595][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.208151][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.293036][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.534497][T13598] hsr_slave_0: entered promiscuous mode [ 686.548980][T13598] hsr_slave_1: entered promiscuous mode [ 686.574804][T13598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.582542][T13598] Cannot create hsr debugfs directory [ 686.681504][T13732] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 686.753033][T10386] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 686.944463][T13737] binder: BINDER_SET_CONTEXT_MGR already set [ 686.953230][T13737] binder: 13735:13737 ioctl 4018620d 20000100 returned -16 [ 687.000289][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 687.000307][ T30] audit: type=1326 audit(1721922088.432:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 687.100323][ T30] audit: type=1326 audit(1721922088.472:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 687.155514][ T30] audit: type=1326 audit(1721922088.472:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 687.194413][ T30] audit: type=1326 audit(1721922088.472:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 687.309367][ T30] audit: type=1326 audit(1721922088.482:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec28774950 code=0x7ffc0000 [ 687.333026][ T25] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 687.423008][ T30] audit: type=1326 audit(1721922088.482:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 687.525733][ T30] audit: type=1326 audit(1721922088.482:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 687.594363][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 687.628496][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 687.639498][ T30] audit: type=1326 audit(1721922088.502:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 687.672017][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 687.742138][ T30] audit: type=1326 audit(1721922088.502:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 687.743572][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 687.823655][ T25] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 687.854753][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.873042][ T5266] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 687.885940][ T25] usb 4-1: Product: syz [ 687.890144][ T25] usb 4-1: Manufacturer: syz [ 687.893003][ T30] audit: type=1326 audit(1721922088.622:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 687.929123][ T25] usb 4-1: SerialNumber: syz [ 687.968860][ T25] usb 4-1: config 0 descriptor?? [ 688.009140][T13737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.128441][ T5266] usb 3-1: Using ep0 maxpacket: 32 [ 688.278123][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.290015][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.312076][ T5266] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 688.335425][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.548981][T13762] xt_CONNSECMARK: invalid mode: 0 [ 689.011970][ T5266] usb 3-1: config 0 descriptor?? [ 689.470989][ T5266] lua 0003:1E7D:2C2E.0010: global environment stack underflow [ 689.502034][ T5266] lua 0003:1E7D:2C2E.0010: item 0 0 1 11 parsing failed [ 689.540345][ T5266] lua 0003:1E7D:2C2E.0010: parse failed [ 689.570964][ T5266] lua 0003:1E7D:2C2E.0010: probe with driver lua failed with error -22 [ 689.732348][ T5266] usb 3-1: USB disconnect, device number 30 [ 690.021787][T13598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 690.059059][T13598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 690.087525][T13598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.138279][T13598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 690.285547][ T5231] usb 4-1: USB disconnect, device number 34 [ 690.440579][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.507466][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.563419][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.570663][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.595763][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.602952][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.846325][ T5231] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 691.096476][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.137190][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.184164][ T5231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.262185][ T5231] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 691.279504][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.288782][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.350147][ T5231] usb 4-1: config 0 descriptor?? [ 691.426977][T13811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 691.904935][T13598] veth0_vlan: entered promiscuous mode [ 691.964481][T13598] veth1_vlan: entered promiscuous mode [ 691.975686][ T5231] kye 0003:0458:0153.0011: item fetching failed at offset 2/5 [ 692.027957][ T5231] kye 0003:0458:0153.0011: parse failed [ 692.069044][ T5231] kye 0003:0458:0153.0011: probe with driver kye failed with error -22 [ 692.167985][T13598] veth0_macvtap: entered promiscuous mode [ 692.216504][T13598] veth1_macvtap: entered promiscuous mode [ 692.279431][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.304570][ T25] usb 4-1: USB disconnect, device number 35 [ 692.319415][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.353007][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.365306][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.375976][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.387220][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.402128][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.419834][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.441111][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.463064][ T58] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 692.466936][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.487830][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.499315][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.513536][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.548460][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.559365][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.577378][T13598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.589624][T13598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.604663][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.650342][T13598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.676445][T13598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.683629][ T58] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 692.691294][T13598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.716616][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.722819][T13598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.742873][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.765562][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 692.779238][ T58] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 692.792099][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.832652][ T58] usb 3-1: config 0 descriptor?? [ 693.002237][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.040141][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.147726][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.176423][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.178859][T13843] binder: BINDER_SET_CONTEXT_MGR already set [ 693.193468][T13843] binder: 13837:13843 ioctl 4018620d 20000100 returned -16 [ 693.326207][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.353375][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 693.353395][ T30] audit: type=1326 audit(1721922094.772:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 693.418133][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.463862][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.486669][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.515023][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.516646][ T30] audit: type=1326 audit(1721922094.772:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 693.533434][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.557682][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.576462][ T58] thrustmaster 0003:044F:B653.0012: unknown main item tag 0x0 [ 693.594468][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.626009][ T58] thrustmaster 0003:044F:B653.0012: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.2-1/input0 [ 693.657833][ T30] audit: type=1326 audit(1721922094.822:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 693.684137][ T25] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 693.890940][ T58] thrustmaster 0003:044F:B653.0012: no inputs found [ 693.935149][ T30] audit: type=1326 audit(1721922094.822:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 694.775472][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.806518][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.817492][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 694.828699][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 694.844739][ T30] audit: type=1326 audit(1721922094.842:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec28774950 code=0x7ffc0000 [ 694.876503][ T25] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 694.896139][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.907892][ T25] usb 4-1: Product: syz [ 694.913253][ T25] usb 4-1: Manufacturer: syz [ 694.918093][ T25] usb 4-1: SerialNumber: syz [ 694.926644][ T25] usb 4-1: config 0 descriptor?? [ 694.940347][T13843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 694.963559][ T30] audit: type=1326 audit(1721922094.842:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 694.998524][ T30] audit: type=1326 audit(1721922094.842:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 695.051621][ T30] audit: type=1326 audit(1721922094.872:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 695.110176][ T30] audit: type=1326 audit(1721922094.872:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 695.204570][ T30] audit: type=1326 audit(1721922094.992:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13837 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 695.261909][T13868] libceph: resolve '0.0' (ret=-3): failed [ 695.870102][ T25] usb 3-1: USB disconnect, device number 31 [ 697.223972][ T5269] usb 4-1: USB disconnect, device number 36 [ 698.964329][T13925] xt_CONNSECMARK: invalid mode: 0 [ 699.601351][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.725141][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.829033][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.911285][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.086472][ T29] bridge_slave_1: left allmulticast mode [ 700.092195][ T29] bridge_slave_1: left promiscuous mode [ 700.101605][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.119983][ T29] bridge_slave_0: left allmulticast mode [ 700.126994][ T29] bridge_slave_0: left promiscuous mode [ 700.132820][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.636901][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.650087][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.661536][ T29] bond0 (unregistering): Released all slaves [ 701.012189][ T29] hsr_slave_0: left promiscuous mode [ 701.019684][ T29] hsr_slave_1: left promiscuous mode [ 701.029150][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.041455][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.054298][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.061838][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.105810][ T29] veth1_macvtap: left promiscuous mode [ 701.111437][ T29] veth0_macvtap: left promiscuous mode [ 701.117916][ T29] veth1_vlan: left promiscuous mode [ 701.123502][ T29] veth0_vlan: left promiscuous mode [ 701.294588][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 701.487733][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 701.487753][ T30] audit: type=1326 audit(1721922102.922:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13986 comm="syz.3.2137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x0 [ 701.735827][ C1] eth0: bad gso: type: 1, size: 1408 [ 701.809903][T13988] kvm: kvm [13985]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 701.857324][T13988] kvm: kvm [13985]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 702.103325][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 702.124512][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 702.137208][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 702.145820][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 702.159861][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 702.169274][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 702.955696][T14013] xt_CONNSECMARK: invalid mode: 0 [ 703.194409][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 704.288919][T10386] Bluetooth: hci2: command tx timeout [ 704.395075][T14038] input: syz0 as /devices/virtual/input/input39 [ 704.446767][ T29] team0 (unregistering): Port device team_slave_1 removed [ 704.528850][ T29] team0 (unregistering): Port device team_slave_0 removed [ 704.591511][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 705.661078][T14034] tap0: tun_chr_ioctl cmd 1074025677 [ 705.667625][T14034] tap0: linktype set to 774 [ 706.208038][T14053] kvm: kvm [14052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 706.327251][T14053] kvm: kvm [14052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 706.356951][T10386] Bluetooth: hci2: command tx timeout [ 707.467780][T14005] chnl_net:caif_netlink_parms(): no params data found [ 707.724906][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 708.199155][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.239846][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.262994][T14005] bridge_slave_0: entered allmulticast mode [ 708.274437][T14005] bridge_slave_0: entered promiscuous mode [ 708.282981][T10386] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 708.293318][T10386] Bluetooth: hci3: Injecting HCI hardware error event [ 708.303067][ T5232] Bluetooth: hci3: hardware error 0x00 [ 708.359785][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.386747][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.412993][T14005] bridge_slave_1: entered allmulticast mode [ 708.420173][T14005] bridge_slave_1: entered promiscuous mode [ 708.433155][T10386] Bluetooth: hci2: command tx timeout [ 708.502936][ T5268] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 708.618449][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.641519][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.712989][ T5268] usb 5-1: Using ep0 maxpacket: 16 [ 708.726951][ T5268] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 708.753642][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.803042][ T5268] usb 5-1: Product: syz [ 708.807250][ T5268] usb 5-1: Manufacturer: syz [ 708.811873][ T5268] usb 5-1: SerialNumber: syz [ 708.855297][T14102] input: syz0 as /devices/virtual/input/input40 [ 708.859449][T14005] team0: Port device team_slave_0 added [ 708.883664][ T5268] usb 5-1: config 0 descriptor?? [ 708.906313][ T5268] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 708.920733][T14005] team0: Port device team_slave_1 added [ 709.064222][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.097396][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.130502][ T5268] usb 5-1: USB disconnect, device number 22 [ 709.178604][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.210620][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.238173][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.315856][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.392337][T14110] syz.2.2168: attempt to access beyond end of device [ 709.392337][T14110] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 709.408256][T14110] hfsplus: unable to find HFS+ superblock [ 709.485612][T14110] zonefs (nbd2) ERROR: Not a zoned block device [ 709.492743][T14005] hsr_slave_0: entered promiscuous mode [ 709.521036][T14005] hsr_slave_1: entered promiscuous mode [ 709.535637][T14005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.547412][T14095] input: syz0 as /devices/virtual/input/input41 [ 709.555875][T14005] Cannot create hsr debugfs directory [ 710.434125][ T5232] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 710.462993][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 710.513440][ T5232] Bluetooth: hci2: command tx timeout [ 710.696991][T14136] fuse: Bad value for 'fd' [ 710.706189][T14136] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 711.399259][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 711.410129][ T25] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=c3.4e [ 711.419699][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.428885][ T25] usb 4-1: Product: syz [ 711.433224][ T25] usb 4-1: Manufacturer: syz [ 711.437895][ T25] usb 4-1: SerialNumber: syz [ 711.448195][ T25] usb 4-1: config 0 descriptor?? [ 711.462005][ T25] usbtest 4-1:0.0: FX2 device [ 711.468446][ T25] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 711.735678][ T57] usb 4-1: USB disconnect, device number 37 [ 711.870499][T14005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 711.891986][T14005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 711.916747][T14005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 711.977372][T14005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.242125][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.299002][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.324071][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.331263][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.414466][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.421676][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.688960][ T5268] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 713.085230][ T5268] usb 5-1: Using ep0 maxpacket: 16 [ 713.231042][ T5268] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 713.333832][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.341896][ T5268] usb 5-1: Product: syz [ 713.382852][ T5268] usb 5-1: Manufacturer: syz [ 713.418145][ T5268] usb 5-1: SerialNumber: syz [ 713.457282][ T5268] usb 5-1: config 0 descriptor?? [ 713.486384][ T5268] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 713.508910][T14181] syz.2.2183: attempt to access beyond end of device [ 713.508910][T14181] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 713.538659][T14181] hfsplus: unable to find HFS+ superblock [ 713.581231][T14181] zonefs (nbd2) ERROR: Not a zoned block device [ 713.668985][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.718614][ T5266] usb 5-1: USB disconnect, device number 23 [ 713.866930][T14005] veth0_vlan: entered promiscuous mode [ 713.902637][T14005] veth1_vlan: entered promiscuous mode [ 713.982526][T14005] veth0_macvtap: entered promiscuous mode [ 714.022178][T14005] veth1_macvtap: entered promiscuous mode [ 714.080676][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.129141][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.141415][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.164581][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.178857][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.202330][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.228411][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.251558][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.297964][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.345825][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.367701][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.406685][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.452407][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.468151][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.489241][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.499479][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.534569][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.559397][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.591864][T14005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.620238][T14005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.629532][T14005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.644665][T14005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.712905][ T5266] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 714.842587][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.874523][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.917330][ T5266] usb 5-1: Using ep0 maxpacket: 32 [ 714.935266][ T8774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.938891][ T5266] usb 5-1: config 0 has an invalid interface number: 198 but max is 0 [ 714.951283][ T8774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.974812][ T5266] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 714.999898][ T5266] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 715.039596][ T5266] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 715.062912][ T5266] usb 5-1: config 0 has no interface number 0 [ 715.101980][ T5266] usb 5-1: config 0 interface 198 altsetting 0 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 715.122528][ T5266] usb 5-1: config 0 interface 198 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 715.156619][ T5266] usb 5-1: config 0 interface 198 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 715.185812][ T5266] usb 5-1: config 0 interface 198 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 715.228360][ T5266] usb 5-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 715.256480][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.265950][ T5266] usb 5-1: Product: syz [ 715.270156][ T5266] usb 5-1: Manufacturer: syz [ 715.289869][ T5266] usb 5-1: SerialNumber: syz [ 715.300281][ T5266] usb 5-1: config 0 descriptor?? [ 715.320014][ T5266] usb-storage 5-1:0.198: USB Mass Storage device detected [ 715.350083][ T5266] usb-storage 5-1:0.198: Quirks match for vid 066f pid 8000: 10 [ 715.567624][ T5266] usb 5-1: USB disconnect, device number 24 [ 716.493620][ T5268] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 716.781941][ T5268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.814704][ T5268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.846111][ T5268] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.855456][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.881141][ T5268] usb 3-1: Product: syz [ 716.895939][ T5268] usb 3-1: Manufacturer: syz [ 716.909457][ T5268] usb 3-1: SerialNumber: syz [ 716.933332][ T5268] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 716.946906][ T5268] cdc_ncm 3-1:1.0: bind() failure [ 717.147325][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.170698][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.194386][ T5231] usb 3-1: USB disconnect, device number 32 [ 717.252517][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.011872][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.102304][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.162417][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.722671][ T29] bridge_slave_1: left allmulticast mode [ 719.741774][ T29] bridge_slave_1: left promiscuous mode [ 719.765938][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.820674][T10386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.832114][T10386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.842501][T10386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.850994][ T29] bridge_slave_0: left allmulticast mode [ 719.857443][ T29] bridge_slave_0: left promiscuous mode [ 719.866934][T10386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.877790][T10386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 719.901605][T10386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.943842][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.082957][ T5268] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 720.313094][ T5268] usb 3-1: Using ep0 maxpacket: 32 [ 720.429899][ T5268] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 720.599128][ T5268] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 720.803042][ T5268] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 720.863242][ T5268] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 721.145032][ T5268] usb 3-1: config 0 has no interface number 0 [ 721.151245][ T5268] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 721.171293][ T5268] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 721.195687][ T5268] usb 3-1: config 0 interface 198 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 721.856932][ T5268] usb 3-1: config 0 interface 198 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 721.889550][ T5268] usb 3-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 721.912882][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.952891][ T5268] usb 3-1: Product: syz [ 721.957638][ T5232] Bluetooth: hci2: command tx timeout [ 721.985923][ T5268] usb 3-1: Manufacturer: syz [ 721.990594][ T5268] usb 3-1: SerialNumber: syz [ 722.002914][ T5268] usb 3-1: config 0 descriptor?? [ 722.011084][ T5268] usb-storage 3-1:0.198: USB Mass Storage device detected [ 722.061485][ T5268] usb-storage 3-1:0.198: Quirks match for vid 066f pid 8000: 10 [ 722.323709][ T5268] usb 3-1: USB disconnect, device number 33 [ 722.579018][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.598718][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.615734][ T29] bond0 (unregistering): Released all slaves [ 722.657140][T14337] binder: BINDER_SET_CONTEXT_MGR already set [ 722.677386][T14337] binder: 14335:14337 ioctl 4018620d 20000100 returned -16 [ 722.753893][ T30] audit: type=1326 audit(1721922124.192:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 722.808123][ T30] audit: type=1326 audit(1721922124.192:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 722.830790][ T30] audit: type=1326 audit(1721922124.192:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec28775f19 code=0x7ffc0000 [ 722.854630][ T30] audit: type=1326 audit(1721922124.192:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec28774950 code=0x7ffc0000 [ 722.887531][ T30] audit: type=1326 audit(1721922124.192:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 722.911333][ T30] audit: type=1326 audit(1721922124.192:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 722.933605][ T30] audit: type=1326 audit(1721922124.222:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 722.956835][ T30] audit: type=1326 audit(1721922124.222:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 723.025467][ T30] audit: type=1326 audit(1721922124.312:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 723.050382][ T5339] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 723.192435][ T30] audit: type=1326 audit(1721922124.422:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec28775b1b code=0x7ffc0000 [ 723.255648][ T5339] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 723.272817][ T5339] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 723.283871][ T5339] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 723.295418][ T5339] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 723.318181][ T5339] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 723.328879][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.337049][ T5339] usb 4-1: Product: syz [ 723.350429][ T5339] usb 4-1: Manufacturer: syz [ 723.357910][ T5339] usb 4-1: SerialNumber: syz [ 723.372155][ T5339] usb 4-1: config 0 descriptor?? [ 723.563107][T14337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 724.026459][ T29] hsr_slave_0: left promiscuous mode [ 724.033008][ T5232] Bluetooth: hci2: command tx timeout [ 724.033430][ T29] hsr_slave_1: left promiscuous mode [ 724.106398][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.309733][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.352687][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.390198][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.474234][ T29] veth1_macvtap: left promiscuous mode [ 724.495623][ T29] veth0_macvtap: left promiscuous mode [ 724.511323][ T29] veth1_vlan: left promiscuous mode [ 724.528995][ T29] veth0_vlan: left promiscuous mode [ 724.753323][T14372] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 725.083004][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 725.976454][ T5339] usb 4-1: USB disconnect, device number 38 [ 725.989185][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 726.045336][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.078613][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 726.110084][ T8] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 726.119413][ T5232] Bluetooth: hci2: command tx timeout [ 726.125597][ T8] usb 5-1: Manufacturer: syz [ 726.132674][ T8] usb 5-1: config 0 descriptor?? [ 726.423306][ T5269] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 726.672996][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 726.773725][ T5269] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 726.818198][ T5269] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 726.867953][ T5269] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 726.956973][ T5269] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 727.032991][ T5269] usb 3-1: config 0 has no interface number 0 [ 727.060819][ T5269] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 727.137052][ T5269] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 727.171404][ T5269] usb 3-1: config 0 interface 198 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 727.187726][ T8] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 727.201807][ T8] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 727.208002][ T5269] usb 3-1: config 0 interface 198 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 727.256673][ T5269] usb 3-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 727.266096][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.279496][ T5269] usb 3-1: Product: syz [ 727.299928][ T5269] usb 3-1: Manufacturer: syz [ 727.305835][ T5269] usb 3-1: SerialNumber: syz [ 727.317773][ T5269] usb 3-1: config 0 descriptor?? [ 727.332007][ T5269] usb-storage 3-1:0.198: USB Mass Storage device detected [ 727.374109][ T5269] usb-storage 3-1:0.198: Quirks match for vid 066f pid 8000: 10 [ 727.628670][ T8] usb 3-1: USB disconnect, device number 34 [ 727.658607][ T29] team0 (unregistering): Port device team_slave_1 removed [ 727.742622][ T29] team0 (unregistering): Port device team_slave_0 removed [ 728.193470][ T5232] Bluetooth: hci2: command tx timeout [ 728.607913][T14382] bridge0: port 3(gretap0) entered blocking state [ 728.634151][T14382] bridge0: port 3(gretap0) entered disabled state [ 728.656321][ T58] usb 5-1: USB disconnect, device number 25 [ 728.660349][T14382] gretap0: entered allmulticast mode [ 728.701873][T14382] gretap0: entered promiscuous mode [ 728.717462][T14382] bridge0: port 3(gretap0) entered blocking state [ 728.724125][T14382] bridge0: port 3(gretap0) entered forwarding state [ 728.881670][T14413] tipc: Started in network mode [ 728.897500][T14413] tipc: Node identity ac1414aa, cluster identity 4711 [ 728.908433][T14413] tipc: New replicast peer: 100.1.1.1 [ 728.925851][T14413] tipc: Enabled bearer , priority 10 [ 728.933612][T14293] chnl_net:caif_netlink_parms(): no params data found [ 729.291629][T14422] No such timeout policy "syz0" [ 730.118753][ T58] tipc: Node number set to 2886997162 [ 731.571503][T14293] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.581924][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.611419][T14293] bridge_slave_0: entered allmulticast mode [ 731.632197][T14293] bridge_slave_0: entered promiscuous mode [ 731.669205][T14293] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.680562][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.728678][T14293] bridge_slave_1: entered allmulticast mode [ 731.751240][T14293] bridge_slave_1: entered promiscuous mode [ 731.936880][T14293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.996365][T14293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.434653][T14457] 9pnet_virtio: no channels available for device [ 733.257111][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.349912][T14293] team0: Port device team_slave_0 added [ 733.379123][T14293] team0: Port device team_slave_1 added [ 733.467620][T10386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.481219][T10386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.489943][T10386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.498739][T10386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.514296][T10386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 733.521780][T10386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.975021][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.078310][T14293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.456314][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.934617][T14293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.979110][T14293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.999617][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.048092][T14293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.181422][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.342059][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.516590][T14293] hsr_slave_0: entered promiscuous mode [ 735.534743][T14293] hsr_slave_1: entered promiscuous mode [ 735.553443][T14293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.558624][T10386] Bluetooth: hci1: command tx timeout [ 735.573021][T14293] Cannot create hsr debugfs directory [ 735.944914][ T62] bridge_slave_1: left allmulticast mode [ 736.164065][ T62] bridge_slave_1: left promiscuous mode [ 736.261042][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.390627][ T62] bridge_slave_0: left allmulticast mode [ 736.491366][ T62] bridge_slave_0: left promiscuous mode [ 736.590089][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.948050][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.967414][T14498] binder: BINDER_SET_CONTEXT_MGR already set [ 736.974193][T14498] binder: 14490:14498 ioctl 4018620d 20000100 returned -16 [ 736.988240][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.015575][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.029950][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.039471][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 737.047976][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.108510][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 737.108529][ T30] audit: type=1326 audit(1721922138.532:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2375f19 code=0x7ffc0000 [ 737.164220][ T30] audit: type=1326 audit(1721922138.572:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7a2375f19 code=0x7ffc0000 [ 737.216446][ T30] audit: type=1326 audit(1721922138.572:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2375f19 code=0x7ffc0000 [ 737.260397][ T30] audit: type=1326 audit(1721922138.572:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2375f19 code=0x7ffc0000 [ 737.299571][ T30] audit: type=1326 audit(1721922138.592:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7a2374950 code=0x7ffc0000 [ 737.346473][ T30] audit: type=1326 audit(1721922138.592:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7a2375b1b code=0x7ffc0000 [ 737.386046][ T30] audit: type=1326 audit(1721922138.602:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7a2375b1b code=0x7ffc0000 [ 737.444274][T10552] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 737.449310][ T30] audit: type=1326 audit(1721922138.602:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7a2375b1b code=0x7ffc0000 [ 737.511617][ T30] audit: type=1326 audit(1721922138.602:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7a2375b1b code=0x7ffc0000 [ 737.569059][ T30] audit: type=1326 audit(1721922138.722:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14490 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7a2375b1b code=0x7ffc0000 [ 737.643774][ T5232] Bluetooth: hci1: command tx timeout [ 737.697005][T10552] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.710619][T10552] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.722644][T10552] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 737.733801][T10552] usb 5-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 737.756213][T10552] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 737.766559][T10552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.774731][T10552] usb 5-1: Product: syz [ 737.779137][T10552] usb 5-1: Manufacturer: syz [ 737.783840][T10552] usb 5-1: SerialNumber: syz [ 737.809880][T10552] usb 5-1: config 0 descriptor?? [ 737.838946][T14498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 737.961139][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.976578][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.996815][ T62] bond0 (unregistering): Released all slaves [ 738.988445][T14519] Bluetooth: MGMT ver 1.23 [ 738.995174][T14519] Bluetooth: hci3: unsupported parameter 65535 [ 739.001419][T14519] Bluetooth: hci3: unsupported parameter 4096 [ 739.008798][T14519] Bluetooth: hci3: unsupported parameter 65535 [ 739.029444][T14519] Bluetooth: hci3: unsupported parameter 4096 [ 739.047538][T14461] chnl_net:caif_netlink_parms(): no params data found [ 739.153707][ T5232] Bluetooth: hci0: command tx timeout [ 739.712856][ T5232] Bluetooth: hci1: command tx timeout [ 739.726731][ T62] hsr_slave_0: left promiscuous mode [ 739.742247][ T62] hsr_slave_1: left promiscuous mode [ 739.761971][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.788380][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.808044][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.816971][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.865761][ T62] veth1_macvtap: left promiscuous mode [ 739.890576][ T62] veth0_macvtap: left promiscuous mode [ 739.905357][ T62] veth1_vlan: left promiscuous mode [ 739.911462][ T62] veth0_vlan: left promiscuous mode [ 739.955229][ T58] usb 5-1: USB disconnect, device number 26 [ 740.669151][ T62] team0 (unregistering): Port device team_slave_1 removed [ 740.720597][ T62] team0 (unregistering): Port device team_slave_0 removed [ 741.232980][ T5232] Bluetooth: hci0: command tx timeout [ 741.462396][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.477821][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.540264][T14461] bridge_slave_0: entered allmulticast mode [ 741.556914][T14461] bridge_slave_0: entered promiscuous mode [ 741.758505][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.766097][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.783167][T14461] bridge_slave_1: entered allmulticast mode [ 741.792988][ T5232] Bluetooth: hci1: command tx timeout [ 741.923844][T14461] bridge_slave_1: entered promiscuous mode [ 742.467798][T14461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.579443][T14494] chnl_net:caif_netlink_parms(): no params data found [ 742.621987][T14461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.885886][T14461] team0: Port device team_slave_0 added [ 742.968137][T14461] team0: Port device team_slave_1 added [ 743.051377][T14293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 743.068671][T14293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 743.191158][T14293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 743.313033][ T5232] Bluetooth: hci0: command tx timeout [ 743.314562][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.662975][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.695692][T14494] bridge_slave_0: entered allmulticast mode [ 744.141209][T14494] bridge_slave_0: entered promiscuous mode [ 744.151835][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.159165][T14494] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.166964][T14494] bridge_slave_1: entered allmulticast mode [ 744.175370][T14494] bridge_slave_1: entered promiscuous mode [ 744.266506][T14461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.291029][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.359072][T14461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.390079][T14293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 744.443433][T14461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.451354][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.535551][T14461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.667840][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.831345][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.941000][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.084159][T14461] hsr_slave_0: entered promiscuous mode [ 745.091505][T14461] hsr_slave_1: entered promiscuous mode [ 745.144032][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.200252][T14494] team0: Port device team_slave_0 added [ 745.261833][T14494] team0: Port device team_slave_1 added [ 745.325458][T10386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 745.327853][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.347550][T10386] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 745.357484][T10386] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 745.366880][T10386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 745.375193][T10386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 745.382847][T10386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.393137][T10386] Bluetooth: hci0: command tx timeout [ 745.461904][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.507642][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.520319][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.546260][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.554114][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.569135][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.576573][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.602669][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.087398][T14494] hsr_slave_0: entered promiscuous mode [ 746.105843][T14494] hsr_slave_1: entered promiscuous mode [ 746.124206][T14494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.131821][T14494] Cannot create hsr debugfs directory [ 746.198039][T14621] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 746.526729][T14293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.642423][ T29] bridge_slave_1: left allmulticast mode [ 746.651533][ T29] bridge_slave_1: left promiscuous mode [ 746.672112][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.692089][ T29] bridge_slave_0: left allmulticast mode [ 746.699141][ T29] bridge_slave_0: left promiscuous mode [ 746.715669][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.245618][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.252044][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.301377][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.312886][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.325102][ T29] bond0 (unregistering): Released all slaves [ 747.416210][T14293] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.471925][ T29] tipc: Disabling bearer [ 747.477660][ T5232] Bluetooth: hci3: command tx timeout [ 747.524249][ T29] tipc: Left network mode [ 747.664482][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.671773][T10552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.691528][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.698824][T10552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.072561][T14603] chnl_net:caif_netlink_parms(): no params data found [ 748.208515][ T29] hsr_slave_0: left promiscuous mode [ 748.224149][ T29] hsr_slave_1: left promiscuous mode [ 748.263145][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.293871][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.320202][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.323964][T14654] UBIFS error (pid: 14654): cannot open "/dev/sr0", error -22 [ 748.354735][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.426591][ T29] veth1_macvtap: left promiscuous mode [ 748.432301][ T29] veth1_vlan: left promiscuous mode [ 749.495158][ T29] team0 (unregistering): Port device team_slave_1 removed [ 749.558423][ T5232] Bluetooth: hci3: command tx timeout [ 749.598176][ T29] team0 (unregistering): Port device team_slave_0 removed [ 750.330431][T14461] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 750.421415][T14668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2288'. [ 750.439208][T14668] ip6gretap1: entered promiscuous mode [ 750.541397][T14461] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 750.586399][T14461] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 750.740352][T14461] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 751.144607][T14603] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.151811][T14603] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.174145][T14603] bridge_slave_0: entered allmulticast mode [ 751.181920][T14603] bridge_slave_0: entered promiscuous mode [ 751.192208][T14603] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.199748][T14603] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.208622][T14603] bridge_slave_1: entered allmulticast mode [ 751.216272][T14603] bridge_slave_1: entered promiscuous mode [ 751.339283][T14603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.392116][ T29] IPVS: stop unused estimator thread 0... [ 751.402616][T14603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.518095][T14603] team0: Port device team_slave_0 added [ 751.537369][T14603] team0: Port device team_slave_1 added [ 751.579007][T14293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.634068][ T5232] Bluetooth: hci3: command tx timeout [ 751.708228][T14603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.724096][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.783953][T14603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.853875][T14603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.861874][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.899136][T14603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.012699][T14461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.023650][T14494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 752.102202][T14494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 753.026813][T14603] hsr_slave_0: entered promiscuous mode [ 753.035185][T14603] hsr_slave_1: entered promiscuous mode [ 753.052884][T14603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.060484][T14603] Cannot create hsr debugfs directory [ 753.111627][T14494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 753.227115][T14494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 753.331330][T14461] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.385951][T14765] UBIFS error (pid: 14765): cannot open "/dev/sr0", error -22 [ 753.538029][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.552847][ T5231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.572068][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.579383][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.627810][T14293] veth0_vlan: entered promiscuous mode [ 753.723839][ T5232] Bluetooth: hci3: command tx timeout [ 753.732597][T14293] veth1_vlan: entered promiscuous mode [ 753.947616][T14461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.022087][T14603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.270150][T14603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.328844][T14293] veth0_macvtap: entered promiscuous mode [ 754.406974][T14603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.431112][T14293] veth1_macvtap: entered promiscuous mode [ 754.556534][T14603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.578999][T14461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.690233][T14293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.732561][T14293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.754114][T14293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.765050][T14293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.790960][T14293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.880261][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.929350][T14293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.959574][T14293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.989960][T14293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.015373][T14293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.041110][T14293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.106198][T14293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.121862][T14293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.132355][T14293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.148597][T14293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.276967][T14461] veth0_vlan: entered promiscuous mode [ 755.313079][T14603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 755.339043][T14603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 755.359183][T14805] Process accounting resumed [ 755.402676][T14603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 755.436399][T14461] veth1_vlan: entered promiscuous mode [ 755.470182][T14603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.490390][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.541046][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.548323][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.601547][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.608810][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.679440][T14808] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 755.781180][T14461] veth0_macvtap: entered promiscuous mode [ 755.844686][T14461] veth1_macvtap: entered promiscuous mode [ 755.868382][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.900404][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.996673][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.011258][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.026215][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.040842][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.060979][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.072396][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.090957][T14461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.110657][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.143929][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.162100][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.181686][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.191605][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.212786][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.231731][T14461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.260754][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.281553][T14494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.285657][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.312368][T14461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.322230][T14461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.340164][T14461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.349165][T14461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.620120][T14603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.692555][ T6456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.704519][ T6456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.765203][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.799501][T14603] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.829413][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.836718][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.890905][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.899174][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.923226][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.946449][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.953683][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.104083][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.151605][T14494] veth0_vlan: entered promiscuous mode [ 757.206208][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.233991][T14494] veth1_vlan: entered promiscuous mode [ 757.328968][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.362600][T14494] veth0_macvtap: entered promiscuous mode [ 757.379027][T14494] veth1_macvtap: entered promiscuous mode [ 757.436419][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.457852][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.468670][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.494771][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.517782][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.531133][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.544425][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.557289][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.570057][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.581673][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.592422][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.605429][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.616561][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.626871][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.641454][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.653914][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.667859][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.680313][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.769611][T14494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.782922][T14494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.791746][T14494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.801383][T14494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.849715][T14603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.903280][ T62] bridge_slave_1: left allmulticast mode [ 757.909002][ T62] bridge_slave_1: left promiscuous mode [ 757.919035][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.934422][ T62] bridge_slave_0: left allmulticast mode [ 757.940209][ T62] bridge_slave_0: left promiscuous mode [ 757.954728][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.515199][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.531917][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.543410][ T62] bond0 (unregistering): Released all slaves [ 758.874454][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.926161][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.984240][T14603] veth0_vlan: entered promiscuous mode [ 759.081077][T14603] veth1_vlan: entered promiscuous mode [ 759.125518][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.161952][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.299679][ T62] hsr_slave_0: left promiscuous mode [ 759.391481][ T62] hsr_slave_1: left promiscuous mode [ 759.406688][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.432892][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.457308][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.475490][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.524689][T10386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 759.553769][T10386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 759.568950][T10386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.579491][T10386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.588668][T10386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 759.596140][T10386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.672848][ T5270] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 759.682348][ T62] veth1_macvtap: left promiscuous mode [ 759.693239][ T62] veth0_macvtap: left promiscuous mode [ 759.698973][ T62] veth1_vlan: left promiscuous mode [ 759.704947][ T62] veth0_vlan: left promiscuous mode [ 759.890969][ T5270] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 759.914612][ T5270] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 759.932003][ T5270] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 759.949948][ T5270] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.960769][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.986160][T14857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 759.994171][T14857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 760.005283][ T5270] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.288388][ T5270] usb 5-1: USB disconnect, device number 27 [ 760.550971][ T62] team0 (unregistering): Port device team_slave_1 removed [ 760.607384][ T62] team0 (unregistering): Port device team_slave_0 removed [ 761.714991][T10386] Bluetooth: hci2: command tx timeout [ 761.891483][T14603] veth0_macvtap: entered promiscuous mode [ 761.909549][T14603] veth1_macvtap: entered promiscuous mode [ 761.981102][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.998872][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.009511][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.027463][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.053003][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.070964][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.082157][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.099396][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.111329][T14603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.138686][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.157547][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.180028][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.192182][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.209889][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.220867][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.237559][T14603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.249663][T14603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.277458][T14603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.087421][T14603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.107338][T14603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.125685][T14603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.149509][T14603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.803253][T10386] Bluetooth: hci2: command tx timeout [ 764.464265][T14908] netlink: 'syz.2.2317': attribute type 3 has an invalid length. [ 764.483981][T14908] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2317'. [ 764.559124][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.575179][T14908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.596011][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.718656][T14862] chnl_net:caif_netlink_parms(): no params data found [ 764.743485][ T6456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.761413][ T6456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.802342][ T62] gretap0: left allmulticast mode [ 764.822830][ T62] gretap0: left promiscuous mode [ 764.845996][ T62] bridge0: port 3(gretap0) entered disabled state [ 764.875025][ T62] bridge_slave_1: left allmulticast mode [ 764.881296][ T62] bridge_slave_1: left promiscuous mode [ 764.892668][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.985206][ T62] bridge_slave_0: left allmulticast mode [ 765.019349][ T62] bridge_slave_0: left promiscuous mode [ 765.043489][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.979832][T10386] Bluetooth: hci2: command tx timeout [ 766.602022][T14975] Cannot find set identified by id 0 to match [ 767.312521][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.331254][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.368442][ T62] bond0 (unregistering): Released all slaves [ 768.033171][ T5232] Bluetooth: hci2: command tx timeout [ 768.383371][T15014] syz.0.2341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 768.493745][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.500979][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.515712][T14862] bridge_slave_0: entered allmulticast mode [ 768.541045][T14862] bridge_slave_0: entered promiscuous mode [ 768.682992][ T5232] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 768.713397][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.776371][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.823065][T14862] bridge_slave_1: entered allmulticast mode [ 768.830665][T14862] bridge_slave_1: entered promiscuous mode [ 769.667871][ T62] hsr_slave_0: left promiscuous mode [ 769.683637][ T62] hsr_slave_1: left promiscuous mode [ 769.709567][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.744489][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.781832][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.802909][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 769.818538][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.025616][ T62] veth1_macvtap: left promiscuous mode [ 770.048656][T11277] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 770.152068][ T62] veth0_macvtap: left promiscuous mode [ 770.293108][ T62] veth1_vlan: left promiscuous mode [ 770.310672][ T62] veth0_vlan: left promiscuous mode [ 770.464256][T11277] usb 3-1: Using ep0 maxpacket: 16 [ 770.585640][T11277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.686959][T11277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.704354][T11277] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 770.714325][T11277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.009997][T11277] usb 3-1: config 0 descriptor?? [ 776.130065][T11277] uclogic 0003:5543:0004.0013: unknown main item tag 0x0 [ 776.184999][T11277] uclogic 0003:5543:0004.0013: unknown main item tag 0x0 [ 776.231282][T11277] uclogic 0003:5543:0004.0013: No inputs registered, leaving [ 776.303950][T11277] uclogic 0003:5543:0004.0013: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 776.358110][T11277] usb 3-1: USB disconnect, device number 35 [ 777.647904][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 777.647922][ T30] audit: type=1326 audit(1721922179.082:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15064 comm="syz.2.2353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891f75f19 code=0x0 [ 778.270861][T15088] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 778.386465][ T62] team0 (unregistering): Port device team_slave_1 removed [ 778.465385][ T62] team0 (unregistering): Port device team_slave_0 removed [ 778.722936][ T58] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 778.933429][ T58] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 778.947900][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.958000][ T58] usb 3-1: Product: syz [ 778.962608][ T58] usb 3-1: Manufacturer: syz [ 778.978394][ T58] usb 3-1: SerialNumber: syz [ 778.986171][ T58] usb 3-1: config 0 descriptor?? [ 779.005238][ T58] as10x_usb: device has been detected [ 779.012456][ T58] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 779.023153][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.096116][ T58] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 779.141115][T15083] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.150505][T15083] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.159266][T15083] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.168306][T15083] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.250602][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.269763][ T58] as10x_usb: error during firmware upload part1 [ 779.315506][ T58] Registered device Elgato EyeTV DTT Deluxe [ 779.331941][ T58] usb 3-1: USB disconnect, device number 36 [ 779.509263][ T58] Unregistered device Elgato EyeTV DTT Deluxe [ 779.518330][ T58] as10x_usb: device has been disconnected [ 779.562099][T14862] team0: Port device team_slave_0 added [ 779.581693][T15098] input: syz1 as /devices/virtual/input/input43 [ 779.615239][T14862] team0: Port device team_slave_1 added [ 779.825642][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.827279][T15100] use of bytesused == 0 is deprecated and will be removed in the future, [ 779.852895][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.902752][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.914849][T15100] use the actual size instead. [ 779.925685][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.958888][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.994941][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.305133][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 780.347818][T14862] hsr_slave_0: entered promiscuous mode [ 780.355584][T15117] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 780.385013][T14862] hsr_slave_1: entered promiscuous mode [ 780.411062][T14862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.449939][T14862] Cannot create hsr debugfs directory [ 780.534329][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.551659][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 780.591389][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.639225][ T25] usb 3-1: config 0 descriptor?? [ 780.690730][ T25] usb 3-1: interface 1 not found [ 780.878967][ T25] usb 3-1: USB disconnect, device number 37 [ 781.852418][T15146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.861276][T15146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.870110][T15146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.879204][T15146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.056028][T15153] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2376'. [ 782.366309][T15157] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 782.663678][T15169] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 782.848402][T14862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 782.887598][T14862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 782.919806][T14862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 782.973260][T14862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.033327][T15182] binder: BINDER_SET_CONTEXT_MGR already set [ 783.068941][T15182] binder: 15174:15182 ioctl 4018620d 20000100 returned -16 [ 783.199126][T15188] ================================================================== [ 783.207245][T15188] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 783.214751][T15188] Read of size 8 at addr ffff8880246172b0 by task syz.4.2387/15188 [ 783.222676][T15188] [ 783.225022][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.4.2387 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 783.235453][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 783.245533][T15188] Call Trace: [ 783.248843][T15188] [ 783.249215][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.252125][T15188] dump_stack_lvl+0x241/0x360 [ 783.252164][T15188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.252192][T15188] ? __pfx__printk+0x10/0x10 [ 783.252224][T15188] ? _printk+0xd5/0x120 [ 783.252260][T15188] ? __virt_addr_valid+0x183/0x530 [ 783.252282][T15188] ? __virt_addr_valid+0x183/0x530 [ 783.252305][T15188] print_report+0x169/0x550 [ 783.252333][T15188] ? __virt_addr_valid+0x183/0x530 [ 783.272887][ T58] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 783.273707][T15188] ? __virt_addr_valid+0x183/0x530 [ 783.291031][ T30] audit: type=1326 audit(1721922184.702:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f75f19 code=0x7ffc0000 [ 783.292545][T15188] ? __virt_addr_valid+0x45f/0x530 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 783.311504][ T30] audit: type=1326 audit(1721922184.702:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3891f75f19 code=0x7ffc0000 [ 783.331884][T15188] ? __phys_addr+0xba/0x170 [ 783.331914][T15188] ? uprobe_mmap+0xb9a/0x11a0 [ 783.331935][T15188] kasan_report+0x143/0x180 [ 783.372433][T15188] ? uprobe_mmap+0xb9a/0x11a0 [ 783.377152][T15188] uprobe_mmap+0xb9a/0x11a0 [ 783.381694][T15188] ? __pfx_uprobe_mmap+0x10/0x10 [ 783.386748][T15188] mmap_region+0x1891/0x2090 [ 783.391361][T15188] ? mark_lock+0x9a/0x350 [ 783.395741][T15188] ? __pfx_mmap_region+0x10/0x10 [ 783.400719][T15188] ? mm_get_unmapped_area+0xa5/0xd0 [ 783.406048][T15188] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 783.411773][T15188] ? cap_mmap_addr+0x163/0x2c0 [ 783.416573][T15188] ? __get_unmapped_area+0x2f0/0x360 [ 783.421916][T15188] do_mmap+0x8f9/0x1010 [ 783.426099][T15188] ? __pfx_do_mmap+0x10/0x10 [ 783.430712][T15188] ? __pfx_down_write_killable+0x10/0x10 [ 783.436378][T15188] ? __pfx_ima_file_mmap+0x10/0x10 [ 783.441519][T15188] ? security_mmap_file+0x178/0x1a0 [ 783.446750][T15188] vm_mmap_pgoff+0x1dd/0x3d0 [ 783.451380][T15188] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 783.456527][T15188] ? __fget_files+0x29/0x470 [ 783.461150][T15188] ? __fget_files+0x3f6/0x470 [ 783.465870][T15188] ksys_mmap_pgoff+0x4f1/0x720 [ 783.467478][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.470652][T15188] ? __x64_sys_mmap+0x7f/0x140 [ 783.482030][T15188] do_syscall_64+0xf3/0x230 [ 783.486565][T15188] ? clear_bhb_loop+0x35/0x90 [ 783.491269][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.497172][T15188] RIP: 0033:0x7fc7a2375f19 [ 783.501585][T15188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.521211][T15188] RSP: 002b:00007fc7a3228048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 783.529646][T15188] RAX: ffffffffffffffda RBX: 00007fc7a2505f60 RCX: 00007fc7a2375f19 [ 783.537621][T15188] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 783.545600][T15188] RBP: 00007fc7a23e4e68 R08: 0000000000000003 R09: 0000000000000000 [ 783.553588][T15188] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 783.561567][T15188] R13: 000000000000000b R14: 00007fc7a2505f60 R15: 00007ffc2218a7d8 [ 783.569562][T15188] [ 783.572600][T15188] [ 783.574927][T15188] Allocated by task 12815: [ 783.579378][T15188] kasan_save_track+0x3f/0x80 [ 783.584073][T15188] __kasan_kmalloc+0x98/0xb0 [ 783.588683][T15188] __kmalloc_cache_noprof+0x19c/0x2c0 [ 783.594092][T15188] sctp_inetaddr_event+0x279/0x600 [ 783.599246][T15188] notifier_call_chain+0x19f/0x3e0 [ 783.604421][T15188] blocking_notifier_call_chain+0x69/0x90 [ 783.610346][T15188] __inet_insert_ifa+0x9d4/0xc30 [ 783.615314][T15188] inet_rtm_newaddr+0xbda/0x1af0 [ 783.620286][T15188] rtnetlink_rcv_msg+0x73f/0xcf0 [ 783.625322][T15188] netlink_rcv_skb+0x1e3/0x430 [ 783.630095][T15188] netlink_unicast+0x7f0/0x990 [ 783.634865][T15188] netlink_sendmsg+0x8e4/0xcb0 [ 783.639663][T15188] __sock_sendmsg+0x221/0x270 [ 783.644364][T15188] __sys_sendto+0x3a4/0x4f0 [ 783.648886][T15188] __x64_sys_sendto+0xde/0x100 [ 783.653661][T15188] do_syscall_64+0xf3/0x230 [ 783.658222][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.664138][T15188] [ 783.666482][T15188] Freed by task 25: [ 783.670301][T15188] kasan_save_track+0x3f/0x80 [ 783.674991][T15188] kasan_save_free_info+0x40/0x50 [ 783.680071][T15188] poison_slab_object+0xe0/0x150 [ 783.685045][T15188] __kasan_slab_free+0x37/0x60 [ 783.689829][T15188] kmem_cache_free_bulk+0x1f8/0x370 [ 783.695062][T15188] kvfree_rcu_bulk+0x24b/0x4e0 [ 783.699927][T15188] kfree_rcu_monitor+0x8a4/0x1020 [ 783.704973][T15188] process_scheduled_works+0xa2c/0x1830 [ 783.710549][T15188] worker_thread+0x86d/0xd40 [ 783.715177][T15188] kthread+0x2f0/0x390 [ 783.719277][T15188] ret_from_fork+0x4b/0x80 [ 783.723707][T15188] ret_from_fork_asm+0x1a/0x30 [ 783.728503][T15188] [ 783.730829][T15188] Last potentially related work creation: [ 783.736546][T15188] kasan_save_stack+0x3f/0x60 [ 783.741256][T15188] __kasan_record_aux_stack+0xac/0xc0 [ 783.746744][T15188] kvfree_call_rcu+0xfc/0x790 [ 783.751445][T15188] sctp_inetaddr_event+0x55e/0x600 [ 783.756595][T15188] notifier_call_chain+0x19f/0x3e0 [ 783.761733][T15188] blocking_notifier_call_chain+0x69/0x90 [ 783.767480][T15188] __inet_del_ifa+0x884/0x1040 [ 783.772284][T15188] inetdev_event+0x663/0x15c0 [ 783.776994][T15188] notifier_call_chain+0x19f/0x3e0 [ 783.782123][T15188] unregister_netdevice_many_notify+0xd81/0x1c40 [ 783.788474][T15188] default_device_exit_batch+0xa0f/0xa90 [ 783.794136][T15188] cleanup_net+0x89d/0xcc0 [ 783.798579][T15188] process_scheduled_works+0xa2c/0x1830 [ 783.804134][T15188] worker_thread+0x86d/0xd40 [ 783.808764][T15188] kthread+0x2f0/0x390 [ 783.812850][T15188] ret_from_fork+0x4b/0x80 [ 783.817294][T15188] ret_from_fork_asm+0x1a/0x30 [ 783.822088][T15188] [ 783.824418][T15188] The buggy address belongs to the object at ffff888024617280 [ 783.824418][T15188] which belongs to the cache kmalloc-64 of size 64 [ 783.838309][T15188] The buggy address is located 48 bytes inside of [ 783.838309][T15188] freed 64-byte region [ffff888024617280, ffff8880246172c0) [ 783.851946][T15188] [ 783.854290][T15188] The buggy address belongs to the physical page: [ 783.860754][T15188] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24617 [ 783.869535][T15188] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 783.876655][T15188] page_type: 0xfdffffff(slab) [ 783.881337][T15188] raw: 00fff00000000000 ffff8880154418c0 ffffea0001870380 dead000000000002 [ 783.889950][T15188] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 783.898550][T15188] page dumped because: kasan: bad access detected [ 783.904992][T15188] page_owner tracks the page as allocated [ 783.910721][T15188] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5214, tgid 5214 (syz-executor), ts 80608777744, free_ts 80542040946 [ 783.930039][T15188] post_alloc_hook+0x1f3/0x230 [ 783.934840][T15188] get_page_from_freelist+0x2e4c/0x2f10 [ 783.940413][T15188] __alloc_pages_noprof+0x256/0x6c0 [ 783.945658][T15188] alloc_slab_page+0x5f/0x120 [ 783.950348][T15188] allocate_slab+0x5a/0x2f0 [ 783.954868][T15188] ___slab_alloc+0xcd1/0x14b0 [ 783.959573][T15188] __slab_alloc+0x58/0xa0 [ 783.963933][T15188] __kmalloc_noprof+0x25a/0x400 [ 783.968884][T15188] kobject_get_path+0xb8/0x230 [ 783.973690][T15188] kobject_uevent_env+0x2a5/0x8e0 [ 783.978736][T15188] net_rx_queue_update_kobjects+0x304/0x5b0 [ 783.984663][T15188] netdev_register_kobject+0x224/0x320 [ 783.990171][T15188] register_netdevice+0x12c5/0x1b00 [ 783.995402][T15188] veth_newlink+0x84f/0xcd0 [ 783.999929][T15188] rtnl_newlink+0x1591/0x20a0 [ 784.004629][T15188] rtnetlink_rcv_msg+0x73f/0xcf0 [ 784.009572][T15188] page last free pid 5221 tgid 5221 stack trace: [ 784.015938][T15188] free_unref_page+0xd19/0xea0 [ 784.020712][T15188] __put_partials+0xeb/0x130 [ 784.025311][T15188] put_cpu_partial+0x17c/0x250 [ 784.030084][T15188] __slab_free+0x2ea/0x3d0 [ 784.034517][T15188] qlist_free_all+0x9e/0x140 [ 784.039214][T15188] kasan_quarantine_reduce+0x14f/0x170 [ 784.044756][T15188] __kasan_slab_alloc+0x23/0x80 [ 784.049652][T15188] __kmalloc_cache_noprof+0x132/0x2c0 [ 784.055061][T15188] ref_tracker_alloc+0x14b/0x490 [ 784.060023][T15188] macsec_dev_init+0x4e2/0x6c0 [ 784.064809][T15188] register_netdevice+0x6d7/0x1b00 [ 784.070092][T15188] macsec_newlink+0x5f9/0x1100 [ 784.074887][T15188] rtnl_newlink+0x1591/0x20a0 [ 784.079583][T15188] rtnetlink_rcv_msg+0x73f/0xcf0 [ 784.084537][T15188] netlink_rcv_skb+0x1e3/0x430 [ 784.089411][T15188] netlink_unicast+0x7f0/0x990 [ 784.094193][T15188] [ 784.096542][T15188] Memory state around the buggy address: [ 784.102164][T15188] ffff888024617180: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 784.110235][T15188] ffff888024617200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 784.118402][T15188] >ffff888024617280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 784.126467][T15188] ^ [ 784.132093][T15188] ffff888024617300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 784.140160][T15188] ffff888024617380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 784.148217][T15188] ================================================================== [ 784.187824][ T30] audit: type=1326 audit(1721922184.702:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891f75f19 code=0x7ffc0000 [ 784.189397][T15188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 784.189420][T15188] CPU: 1 UID: 0 PID: 15188 Comm: syz.4.2387 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 784.189449][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 784.189464][T15188] Call Trace: [ 784.189474][T15188] [ 784.189484][T15188] dump_stack_lvl+0x241/0x360 [ 784.189521][T15188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.189551][T15188] ? __pfx__printk+0x10/0x10 [ 784.189577][T15188] ? preempt_schedule+0xe1/0xf0 [ 784.189603][T15188] ? vscnprintf+0x5d/0x90 [ 784.189637][T15188] panic+0x349/0x860 [ 784.189662][T15188] ? check_panic_on_warn+0x21/0xb0 [ 784.189688][T15188] ? __pfx_panic+0x10/0x10 [ 784.189716][T15188] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 784.189754][T15188] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 784.189791][T15188] ? print_report+0x502/0x550 [ 784.189823][T15188] check_panic_on_warn+0x86/0xb0 [ 784.189848][T15188] ? uprobe_mmap+0xb9a/0x11a0 [ 784.189872][T15188] end_report+0x77/0x160 [ 784.189900][T15188] kasan_report+0x154/0x180 [ 784.189930][T15188] ? uprobe_mmap+0xb9a/0x11a0 [ 784.189959][T15188] uprobe_mmap+0xb9a/0x11a0 [ 784.189993][T15188] ? __pfx_uprobe_mmap+0x10/0x10 [ 784.190024][T15188] mmap_region+0x1891/0x2090 [ 784.190051][T15188] ? mark_lock+0x9a/0x350 [ 784.190098][T15188] ? __pfx_mmap_region+0x10/0x10 [ 784.190122][T15188] ? mm_get_unmapped_area+0xa5/0xd0 [ 784.190152][T15188] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 784.190182][T15188] ? cap_mmap_addr+0x163/0x2c0 [ 784.190216][T15188] ? __get_unmapped_area+0x2f0/0x360 [ 784.190247][T15188] do_mmap+0x8f9/0x1010 [ 784.190281][T15188] ? __pfx_do_mmap+0x10/0x10 [ 784.190306][T15188] ? __pfx_down_write_killable+0x10/0x10 [ 784.190334][T15188] ? __pfx_ima_file_mmap+0x10/0x10 [ 784.190360][T15188] ? security_mmap_file+0x178/0x1a0 [ 784.190396][T15188] vm_mmap_pgoff+0x1dd/0x3d0 [ 784.190429][T15188] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 784.190456][T15188] ? __fget_files+0x29/0x470 [ 784.190485][T15188] ? __fget_files+0x3f6/0x470 [ 784.190515][T15188] ksys_mmap_pgoff+0x4f1/0x720 [ 784.190543][T15188] ? __x64_sys_mmap+0x7f/0x140 [ 784.190581][T15188] do_syscall_64+0xf3/0x230 [ 784.190608][T15188] ? clear_bhb_loop+0x35/0x90 [ 784.190640][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.190671][T15188] RIP: 0033:0x7fc7a2375f19 [ 784.190691][T15188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.190711][T15188] RSP: 002b:00007fc7a3228048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 784.190739][T15188] RAX: ffffffffffffffda RBX: 00007fc7a2505f60 RCX: 00007fc7a2375f19 [ 784.190757][T15188] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 784.190774][T15188] RBP: 00007fc7a23e4e68 R08: 0000000000000003 R09: 0000000000000000 [ 784.190791][T15188] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 784.190807][T15188] R13: 000000000000000b R14: 00007fc7a2505f60 R15: 00007ffc2218a7d8 [ 784.190834][T15188] [ 784.209840][T15188] Kernel Offset: disabled