last executing test programs: 2m0.157139444s ago: executing program 3 (id=1701): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xffffffff}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1m59.321093663s ago: executing program 3 (id=1703): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1m34.697735982s ago: executing program 3 (id=1703): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1m4.123989627s ago: executing program 3 (id=1703): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 39.472714009s ago: executing program 3 (id=1703): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 24.374682431s ago: executing program 1 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, r0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="cdebce4f4e740b9b932b52fe8207323394811ec7517d3db13ae28348ba9bbadc2cc6bf1773883bd87752c113001d44883cb95540738a517dd5068ef449d477ff47d3f647fac8ea240235466461496fce07140f8adb99d843ca86a890f6e1f8341530ac3a3b0d18266c314fe1f24626a1358f5e0e9e68e0e19baa42adab2bec0b5b17abf89cd55770dee4c5f6692840f98577d9c8231b2090a7f20a0ec5f2897227185e397ffaa4ac36a1a9a68a42b80477e66545540ccf0a1513014a76d1d208e53ab806a4c06fbc4c8732591435c2c817d122a6a12713fdea7b8a479773cc90ceda7147fc24453090a16d3a6667bbef06d0bad2595cdbb78e16d47ef55b24278041e39e421f7aa02ca8106383aabf360ec5df8cc163f51bc0c85b2b1f394bb7c7a5a679983a1c23be4c801483040d38357904b1daf2b292d2fbbecf23deec4e9a77ba80f4cc2876581638510e3fc2321688661b4a729afa9b0ee0723c4ca6dc1569c055d5b00961d2188fe201a61fe69c5bb2584e74890d31228754c8144a8550251d8eeb8b6c53a4b38691af9aa31fac72d7fd71e8f7e9298bef6255be7666571c9e7512d819f67dddeb62705e428dd00040954197ddbad9237aa9a2c414c11d24c8cba1461c59e7c42203580e90d3b30ed98081802359fe8a950fb1bfabac8e3fe89ef139c0bbee11f8924d3226e6ea2e90bfd286e77c2a3501bf45c81660bed7c040d8d25f35802f2f27d3be5d18b44d429e6bd8b15f46b6fa877777d766e91cee348cc762549c5c516f3248d8783e7a2f68f4adca16a639c042f8fda37a555636a5bc9440b583d5c9e2b435d56a7398c0caf620a12f1c8c32e2c50bdbcc408c9a1ae7b1fceba8d332119406ac1100c8f79c234d9594db972f24c80d4f4e14e088d3c0289d6f50ff8b8a972cf03fe7f00d2e702a48dd8b6531cc6129d2c2599db93f517b1fd3bb763963664be4ff72fa39dc6613cac63ed18dbeb30d38aa56dcff21d94490fa1b8338628088f9b16166acf9b495a983c22e2c4e450ae5acbba95b8004fe1dcd63e7a3e8fce797706c155641067ad582c9e14cda059c5d3b1d7f4810056a0d61ea7e5da1ed84a7168c19136ae7bf6256a0b54e82314e9b34407e1b97d6a6687566e5dc9817657323910464549a421ede9274d4fa36c317b3e9867754ad243d6b84e1a027fde704733527af92809f3382d5fd75f58bc498591532cece8fd6ad639311a8f2aa2137fb058c4361bf8d2a9525c4f6f05d141a30150d01", 0x383}], 0x1, 0x0, 0x18}, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) clock_gettime(0x3, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x24) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x1}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1274, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) 21.572948519s ago: executing program 1 (id=1998): syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='xfs\x00', 0x2008080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x2d, 0x0, "000000000000000000000000000000000000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xd8) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000200001"], 0x34}}, 0x0) setfsuid(r2) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x6, 0x3, 0x8b66, 0x6, 0xa7, 0x8001, 0x3}, 0x20) utimensat(r6, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x100) socket$netlink(0x10, 0x3, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f00000000c0)=0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d20085000000a000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000a500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 21.288741143s ago: executing program 1 (id=2000): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000bc0)=""/116, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x76, &(0x7f0000000000)=""/118}]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=0x0) 20.669104563s ago: executing program 1 (id=2001): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 20.488808498s ago: executing program 1 (id=2003): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200020, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 20.206081791s ago: executing program 1 (id=2005): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x5c71, 0x0, 0x0, 0x8c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000160) pipe2$9p(&(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f00000003c0)={0x3ff, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000480)=""/222, 0xde}], &(0x7f0000000380)=[0x2, 0x3, 0x3ff, 0x9783], 0x2}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 19.010875058s ago: executing program 3 (id=1703): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 4.336934686s ago: executing program 2 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0xa756, 0xe, 0x7, 0x2004, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000002c6d8000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f0000000700)={0xcc, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35}, {}, {0x6}]}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.369835485s ago: executing program 2 (id=2028): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {&(0x7f00000015c0)=""/150, 0x96}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001840)=""/122, 0x7a}, {0x0}, {&(0x7f00000018c0)=""/259, 0x103}], 0x8, &(0x7f0000001b40)=""/129, 0x81}, 0x40000120) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0}, 0x1, 0x0, 0x0, 0x4805}, 0x4008800) recvmmsg(r1, &(0x7f000000a0c0)=[{{&(0x7f0000001280)=@nfc_llcp, 0x80, 0x0}, 0x6f}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}, 0x8}, {{&(0x7f0000001e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x10}, {{&(0x7f0000003ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003b40)=""/212, 0xd4}, {&(0x7f0000003c40)=""/128, 0x80}, {0x0}, {&(0x7f0000001440)=""/189, 0xbd}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x5, &(0x7f0000004e00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000005e80)=""/55, 0x37}, {&(0x7f0000005ec0)=""/30, 0x1e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000008480)=@qipcrtr, 0x80, &(0x7f0000009880)=[{0x0}, {0x0}, {&(0x7f0000001740)=""/129, 0x81}, {&(0x7f0000008740)=""/4096, 0x1000}, {&(0x7f0000009740)=""/214, 0xd6}, {&(0x7f0000009840)=""/25, 0x19}], 0x6, &(0x7f0000009900)=""/217, 0xd9}}], 0x7, 0x1a1, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000001cc0)={0x1d, r5}, 0x10, &(0x7f0000001c40)={&(0x7f0000001dc0)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="040000a00100000004000000010000001b8d"], 0x48}}, 0x4002800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @empty}], 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) dup3(r4, r1, 0x80000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000001140)=0x93, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000001100), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000001340)={0x0, @in6={{0xa, 0x4e24, 0xff, @empty, 0x1ff}}, 0x70, 0x3a8, 0x7fffffff, 0x33c1, 0x4}, &(0x7f0000001400)=0x98) sendto$inet6(r1, &(0x7f0000000200)="f17f05db7271c4dab2fba974484897d76b102890f921345db4713e49ce48fef0f653ff82748f8de7727dbbb5dcd7c11a197be14ebee2e8a43057a5c26d463bb2e06a1099582147b86a1abf9e8e31fe07eb2fa0f7354cd7badd597daa82878b647a1538e6f20a7fcf5db321bfba32657f6bc25290836457364639c1a988e6a84322a896ee38c49777c0c5dc2cba0785c1845296a3d02e4fd07a16f1177ebca045de33a9adb9f057924838a84aeda7935a9673e4cb3dbe4e06f9761a53bba39db44b055bf476c521959c7fef8a7a3aaa7673eba0417379eedf20fda2020b8d87215959554e9da3ccb08950047dc43d052f6c08cb0272d60685d037f764287fb56eec89254e7fceb530def58892624cd47951e4aa94b0a96c6927ddf8f4d7000d95ee7effe585b7ca3cf64745b85d949df140fad5e3b65822407951f8d5c5ba4f3616c02dc30edbc65fe9354f4db4f1ca885e432cb0aa2b6146d0812ef0ecce0ef8c5b795f4f5af3da583f73fc183c5d1b89f4fe495169fa64cc479d2396c185beb1a5667328fcb867a4209e92afaef1488944f87acc34f8bc52c9b8a586f35a2a616234bd7ecf5afd616bd2d847bb87f79142c14c744fa78086c65387a556d9ce251411d401d8b32c896e1a8bf3c7793f2d080c1ad78614d6ec75b09c48910e6f21265e9658901b2cb5f31ed6975740e64287a691825a413aad459d504c8f3440843acce278ffd05ab94b1471255d568ca6780311a11a2383d404203c3a0b54e8777e6ade2a8d24228df198a695c457a15dcfa286761f68364dd071bcb51ba50048f452c787b56f1edbaf624ced89f8561e8566f5339918c4d3252c844b030e8bb08631f9f216e06144279f5773984a57908ee488e15290df216c2400e0981b6c80b9ed25925a38718c9802fae102e327466fba42514786fb7d1e8cc577136a2f5f3a4e8e0cd0b08f5dfeb39188a6e3c8dd5b61b8123c3af8c2f9468b00b071cf98e4c1206d2c3c9d6bc8d25f2acbaed08a4a3d1a0a575c27902578a30a6e5bab69b666ffa7110d80e34a388c4cc0fd16b44a809b994d9d22ce250496b2616baec97d22722087d365ce37ca4c3ab5b4ddb7c28770be6de03fe22ae0503b5f389b3d0c374a8e03238d4bc2fcc7efd4b2cc2721727205c96b16325811c95f6e467d36f3148c50b2da70db4e185e00856eabd0c5a489e4f81dbc125b25a4c4d8d0d71eb0da5ee22efc16b43bae42b9084a93aa0b2f8cf488ed72df13b6ecd78461a94f808d3cd46e06503395b7a9ea2a773f6c3e08288b148e4006ac155f4685f65483493beb200dbd758ed203680493bbf00381f54930c2f52d8760edc26e7996602456aab1031616833836f55ec76ddbfbc4872e229a678108e4f8ec7920b07a5075e0bd5616c2cef0582ec828520bb6d4e052313324afcd505a9befcf7fa6fb5e88f9080f5af43afe8ea10d4c523a58fce19ac996b1d8186a3c21bf7f931483e9f1d9969959719a79ae0ca6e417a49e65a349270ed0a2ea1ff2fc6f3568ee33d3e275b7db1220e62109512eb920a0448904dd84a6e6a1fd77b668ae54dd44c5f2e69da82d89c542d70736dc4af22b65775f11d27b6915a2c01ad467d85e1de0c21204d95a0a18bb6b7477ba4cb12f25bf68e206f35c4ca45420b5526cc59f3ab023cef59fddea3359ef78f902d94eec04d9fa3e7f8438d2909aab565e7b131f7c76358bf7601124394526c8615aa8d126ff08df9c1393e537ff6c47e5e6d2ca5cb5a1bcc08cd2e91d90e7f3dd7c13d7c0b030331ead9dbe3c0ed4e43f3bcc2b060f3ee03e03e52f2b4f1e3d7876536fc8b9faa12a3b85fd0df7c53c0dfcd409e1d1b2cb36c2fe6574231e70ea3b31e50e242ee3a0f0a5a92a9f26bfa1526350081c0a38ce2fde33cd5a3b78bc065604f81e73115118af43b4461df7d11a8c4f1e06275fa53eba07bbbf80b4d91a92128db57e0e669b69f534f1f787079a2ac69283866c507e9c92ee9307ac57ad00da07e38476ef13753efdc3964109baf7ac6cb28d7e67b626bd7f92490352e2244b0b75d848da87fba655a5051dbdebaa15fab5a449209e705f86cc48fe1f56c5b6c98795b270704d94035cfc039fe5bc4210b77c45a40a29f428cda71632106e12368abdda37d50b12ffc9b6474a6372685b09fc1b531c6b133d1e124cf8d2e7bc3e98047810f10902b69c2cd0abe20cb3942f64aba44052193544fd23f36bc8cfce790fe5559e43f75a7d1f87a19ab5926afed1850a63bf95f159574f01bd0948405a4d3d6d7ded2e8e593a0af852f1b48de126726c5553add265535a4a1b738930a8cfce118d471433dd7ef047fd9e7c04575c0767e825d3a341a8ebaebc388069ebaa853cf358bc95eb024d0535e0d4cc8dab6f990ff996385ef24f61b9ff70b14a37246519a3ae63d840ade097b82721a92e05c29fdad2ad8c81501fe94121751c882fb24631406a6b34214c2d4787c8ce60efbc993ba9187b1738b4cf1b7bbaf2ce7f91e0ae7e24de1013ebd14b2e35f5704da82218550268b2b910894f874255486b9f9bfefbbde87460b80be264226413fbd832153247ed549e2b54b333b29cfef0cf48358a08919cd31ad62625857025d062388761984260ecf3b57276529b21e032a811fba4d63d967acde80f577f4a8b4142ad187d9c96a2715bb2ca6e788250bdf2425195a7a151571e15556ae363f6810fe2bb47425e593b89e2ac90334afcf80d815072c9f15a3e121c30ac642478a50b272606c163be436b4ae8f34f9efc883853bdec5646d369fdf90d86d899ec531f115f5df49d29b872ba45ec9fa794913c951fd4a51398fa4aafe3b4fb78e8ae4ed91fd372078bde5d075f6b5d454ff321d8396caecc20e3bc7b882e38713625c89e1e106de17306001c46a41e4e5ad5a3c86e0a17767094ca9f4a3ce69e690a0ffb85c806d683c78db2bbebc826947c25d6289f43f0f473e7a6c3eb2ee2a2fae93c5e57bfb7cee378e86cb0334a6da57d5b772b5e89ab50661dcd805eb6850c9dcb5f09b7233669628a16976bf75b8c4a4553a4aa6d32947e1f46e9c3243691000b779692cba4cd2fede3de7ad8c994d5074d3856c9fff3f12c4dab71c85560b79382a9da08f307376a5c9af9a181e69239b58f40dc5c01451fc8ca29c20b51dbd636133fa090eedd7729b646a6ab69aa33553ccce4e51756fecead38a71f7cc71038517d80c24522cb09cf5f80b5ec070b7f0ae5cf1cc1cf31c3dd16bcde5ffcc810886eee3ddae33d2cc2656cd64fd96701f6510bc20ace373defd21410faa07675ea9b678659e5ec0456c51640af3b5055e0fc2822b10f057b7a4cb7e33db7ceeea3a67ca5b39f6351c6b9ae84939957613c77c393903ea72e623080f28fbdc25ddfee179a24afed5022c8ba46210b9979477e27db325bc6bc8aab57df9da18c9d40f938988747a1c1e3d8c3e38ec69a14192365d67af3556354044b4af21c36af8f9943cda566777ee8dd620afd82a34868d77083c0ef36b1cbd574e2d493aaa74215f34da7c40f8e415c7a7ffd942d7bedc49107bf0432e21d2a4d37bb5c557a978b26207ef9f39f01e8359f1d0e1782f242c7bed45163777de3d835c1032d02406e9412780ca835037c133516a3bab466df32483bc3f0b4055c51bff56128c4f6837ac444c50423cd9766b55d9fb04b1b0e2451d109c9910fdfbdc49f885b23d7f887f68fb85e70c8cf8cbb1505e13b8d6fc760622f17919a37ffd44d31b777cf1deac9a3ac755b4ca09b5696582bdc65465ebc54c3ea2a46b131b4561c9151702e01ef58f517a274a14fd3f563ca1bd131fdac702e1b9cf0d68bbedccb14f1c3d0f2595f635005a69e61f0b85d83620e09449433c333f7cd9f527e98b8d1bcff8c0de9e65af5de1db331013d29e75f41bf5887bbc70ae94165930b80091bc40ea9695e27ace8015cf5e3d20cc2a99dd1617b1a119b47af10ca4d9656b090b16d0b45cef63ebdfe612f75ced80ac8ac531cca955787d5625ec5876500ece9dde407701115b2fda70aac07cb5a28b65581eb68921b4383a15c64a6e37c6dd801b89bc07984ac1388f0809599cb9b075619970549b5b18c3b87859ddca7dd16799a6b9d92539f5bda06f70e4fadb433adc8daeff597eada652d60c185f71cce0677dcdcb89240d840ff6d01e0ffa672725d9840b2fe6e7081ef3c847d9bb4526db25de7a14be38fd2469f5b1f58342c5169977482880691b2362780f1be8aab534015a36944211356c087d5838a3232293b27674045ad0770897582cea2b9b738588a57dfdf5d88fec2155911d22a2d34e7748fd4417d103c059830e5fe43722927152f2080891a207c82c53b18f9f8f998dd8f16ae3cf079c3e6024a5282a20ac2465a7259571626cec94584f93e68c792751f3f2548951ad147d3c327bfa35dd0a80bd78c1ed285999203c3f183f0ca54805a94cae813917cd8c666acf8ad47c4ada97d565de68fb79acaa48062817d58dcb3c9664443513658a6f3a0d6793a2143af24ba9c0ea80c94161f25a757d9149c2ebdb25be1d820ad21a1794ada4a6ad59ed07b4cdf49416be7a9738cffdfcd89ce49d053751a0a4663a8410fabfb7f5451283f0d51de62c17e2749da6710a9aec2083d2e5b6a18024c3ba01b93b2473d06c0455d5f8c21c95978326cc5886a4636d80deafa79c54dd425dcf71be105e9cdef479172b6da7788e93381b570326bb952e3c480d7bfdef16df3fab6f88596c76561a40b0e3cf4e73f7449d1f3ca1ace06396440679c51d4d59e14f26760fbd336dc0d59e200c529e085c14d74bf5bc21d62c3bdf35fd7386a7492355dd59a4f40d388d684b0f2979e616594f0548f42f1053bc045553f0fcb916a307584c8fdd97c53fb4dfd4e24012c672bfb2589d5ca784e4d6b1cb387927cfdb91074d505a359d5e4d268b646fd4c70a0e3d1602f5481f78866ceef489f7689f69a4b6b1c11d92c3d7c011886115c84bd64c65f59f90319628f3f3457653417e0deed86575449056f4ac729e33bd2128de15a97f0052eb5ef3eb8b636e53c84ca87e641f772bb8dbd3119205d2c69f94885787a6c45e5d953b8ee6b794773eed4f595e5d4fd83f72b416f85527b903613e21fece70d1279248473cfc399f92b722a7e11ea9d63b263027ce573a6ffbb49e9dbf0d014b3fc496f8a31ab182407fa7499ee7c52a67cf43a76151241546d8bce3b54b0fd7dc402aa6ab34cfa1103706746aef1ac481b528f1e9ac4090a0", 0xe94, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40040e4) 2.871412086s ago: executing program 4 (id=2030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000280050800800030004ac0f0011000100cabee339084eeef16f162471f40000800500020003"], 0x50}}, 0x0) 2.870132895s ago: executing program 2 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="00000000000000009000128009000100766c616e0000000080000280580003800c000100070000000c0000000c00010003000000020000000c00010000000100050000000c000100acffffff080000000c00010004000000a90200000c00010000000000060000000c000100c5080000080000000600010000000000100004800c000100ff030000050000000c000200110000000800000008000500", @ANYRES32=r3], 0xb8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.501401426s ago: executing program 0 (id=2034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x32}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 2.333101959s ago: executing program 4 (id=2035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.33263351s ago: executing program 2 (id=2036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='W', 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000e40)=ANY=[], 0x7f9e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) r5 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000500)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 2.3319112s ago: executing program 0 (id=2037): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8c, 0x10}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000082000040"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="dc0000001e00010a0000000000003f0000020000c70032000115f9b158ff052bb707c9351ace3f524a8973d1b8bbd09e972cf4642c57a1d79fd15644925376124983201eb7c82bfc0444d3bfd4079ff226b54c86d98ec2fd6b8f97ecca2def8efca10d139b914742df7183ec41220d02946c16439157efe88e94e402f7e7596671f60d5231fb183e72ea4466df81b3b4c77fba3cfbff4d93d8f6787f16bdcafe37893fe59a756322f4fa746b028251295ed4348d96b6019629bda93a6dba736e27dba14fcf5290e706b7af2c5fcf49999e1e5594616d3504a288da00"], 0xdc}, 0x1, 0x0, 0x0, 0x40804}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000b40)="020000004806a6234ab19e3793", &(0x7f0000000b80)=@tcp6=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x100000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000005c0)={r8, &(0x7f0000000400)='P', 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000dc0)='/', &(0x7f0000000e00)=@udp6=r7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r10 = dup(r9) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r13, 0x4, 0x8, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x1, 0xaf, 0x4}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001300)={0x190, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="31454c1b3d82f64ad3f547d0f55df6d2"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="85a983ca2d793f5d4eab8ab92b16d586188760c5f3982ad9a1f502aed527c018"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x48e}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="32c0a621c3128a175cb21c1aef2a2503e73d16bd12cd0772"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="68aad5086bb9aeee60f95dcf15f189b3f4f848f08f21504b"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b5297d010e3ce3ca23a3b5360246f96246633c579fe3015e12c6d3e10e962c92"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7825ad202632f0c53a245d43d370a0d5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="40d599ed4af6f6ccbf3798935f95b8694eb573e1a9368d0d"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4d2b321f853091b6a63835dd228d673f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88e764f7c216861235ed1f93d65e82b8ae242dfd29fafac1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="05ce67efa27ef7146e17eceb88a45ee5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "684bccbebf738c80"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d1cd7df39e5905655ba54d8153260e78e3225f76e17a673b236291f4479c802c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "584b23682350fcc6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b00)={&(0x7f0000000ec0)="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", &(0x7f0000000900)=""/201, &(0x7f0000001840)="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", &(0x7f0000001b40)="9f65267003b593146c2d4a10fd3865e399cb8df336b8fcd0a86c7a23d4fba4a6473dad7d85066441ebb264c06356b81ecb4a91397f1ec0f68c89a601b56ae3581a0a575501b9e34e9f838f380980e92d07b2f2eed738e8375aa2024b2c5a7a091e0dab610679dbd1a000a81be877ee346ba6a16d1c784d502d18315acd5805ff7f00004ebe08d8ddbccde3dbede6e3d775b71e458aed622abc2060f4b44da7eb80d05d9247a2e7488516a56cac3fb8bb4de85376a2a17200000000000000", 0x67de, r10}, 0x38) sendmsg$nl_route(r10, &(0x7f0000000d00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r10], 0x54}}, 0x8004) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r15}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x50}, 0x1, 0x4c00000000000000}, 0x0) r16 = dup(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r15, r16, 0x3, 0x1, 0x1}, 0x48) 1.055389094s ago: executing program 4 (id=2038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000004000000", 0x30) 888.540437ms ago: executing program 2 (id=2039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 793.010985ms ago: executing program 4 (id=2040): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0', [{0x20, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}], 0xa, "15bf3158f3b4c5beaa8a9ea511953cef08b81dedc6989a86c441759f9143160456a26319d35748b0fa16e646523ab5bd24785a1acbae1d23a93b9e516d3c74821654"}, 0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 713.695172ms ago: executing program 0 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f000001ec00)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 417.168676ms ago: executing program 0 (id=2042): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) 345.150652ms ago: executing program 4 (id=2043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0xb, 0x0, &(0x7f0000001040)) 232.605441ms ago: executing program 0 (id=2044): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 104.325501ms ago: executing program 4 (id=2045): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b362f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000019c0)={0x1ff}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@barrier}, {@sysvgroups}, {@errors_continue}, {@init_itable}, {@bh}], [{@fowner_lt}, {@subj_role={'subj_role', 0x3d, '[!+@'}}, {@smackfsdef={'smackfsdef', 0x3d, 'sysvgroups'}}]}, 0x0, 0x4ac, &(0x7f0000000c40)="$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") ptrace$setregs(0xffffffffffffffff, r3, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv2(r2, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/149, 0x95}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) 103.429762ms ago: executing program 2 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 0s ago: executing program 0 (id=2046): socket$kcm(0x10, 0x0, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x102}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): link [ 507.675780][ T3635] Bluetooth: hci3: command tx timeout [ 507.702103][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.771813][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.054534][ T9322] team0: Port device team_slave_0 added [ 508.092908][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.104977][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.127960][ T9364] loop2: detected capacity change from 0 to 256 [ 508.137532][ T9329] device bridge_slave_0 entered promiscuous mode [ 508.145198][ T3635] Bluetooth: hci8: command tx timeout [ 508.178798][ T9364] FAT-fs (loop2): Unrecognized mount option "ch˜Crelaxed" or missing value [ 508.192996][ T9322] team0: Port device team_slave_1 added [ 508.207623][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.238055][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.270679][ T9329] device bridge_slave_1 entered promiscuous mode [ 508.525441][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.532415][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.596964][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.618126][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.640854][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.448900][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.473328][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.560538][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.745209][ T3635] Bluetooth: hci3: command tx timeout [ 509.791644][ T9329] team0: Port device team_slave_0 added [ 509.948888][ T9329] team0: Port device team_slave_1 added [ 510.083983][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.106122][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.186062][ T9322] device hsr_slave_0 entered promiscuous mode [ 510.203322][ T9322] device hsr_slave_1 entered promiscuous mode [ 510.225051][ T3635] Bluetooth: hci8: command tx timeout [ 510.234359][ T9322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.250482][ T9322] Cannot create hsr debugfs directory [ 510.329881][ T26] audit: type=1326 audit(2000000294.773:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.4.1720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22db7779f9 code=0x0 [ 510.364605][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.394821][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.474892][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.626501][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.633577][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.735246][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.990291][ T9329] device hsr_slave_0 entered promiscuous mode [ 511.010407][ T9329] device hsr_slave_1 entered promiscuous mode [ 511.032817][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.069172][ T9329] Cannot create hsr debugfs directory [ 511.088769][ T9388] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1723'. [ 511.274982][ T9392] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1722'. [ 511.319179][ T9392] netlink: zone id is out of range [ 511.342307][ T9392] netlink: zone id is out of range [ 511.363386][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.382382][ T9392] netlink: zone id is out of range [ 511.417501][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.435990][ T9392] netlink: zone id is out of range [ 511.462372][ T9392] netlink: zone id is out of range [ 511.483694][ T9392] netlink: zone id is out of range [ 511.517629][ T9392] netlink: zone id is out of range [ 511.539258][ T9392] netlink: zone id is out of range [ 511.561905][ T9392] netlink: zone id is out of range [ 511.753072][ T9322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.768591][ T9399] netlink: 'syz.4.1726': attribute type 11 has an invalid length. [ 511.831403][ T3635] Bluetooth: hci3: command tx timeout [ 512.057232][ T9322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.129665][ T11] device hsr_slave_0 left promiscuous mode [ 512.145667][ T11] device hsr_slave_1 left promiscuous mode [ 512.155974][ T11] batman_adv: batadv0: Removing interface: team0 [ 512.175578][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.204895][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.214538][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.222546][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.233526][ T11] device bridge_slave_1 left promiscuous mode [ 512.245092][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.256485][ T11] device bridge_slave_0 left promiscuous mode [ 512.262740][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.305517][ T3635] Bluetooth: hci8: command tx timeout [ 512.321494][ T11] device veth1_macvtap left promiscuous mode [ 512.340974][ T11] device veth0_macvtap left promiscuous mode [ 512.359559][ T11] device veth1_vlan left promiscuous mode [ 512.397272][ T11] device veth0_vlan left promiscuous mode [ 512.665229][ T5580] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 512.964857][ T5580] usb 2-1: Using ep0 maxpacket: 32 [ 513.555129][ T5580] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 513.574542][ T5580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.594843][ T5580] usb 2-1: Product: syz [ 513.599047][ T5580] usb 2-1: Manufacturer: syz [ 513.603728][ T5580] usb 2-1: SerialNumber: syz [ 513.643477][ T5580] usb 2-1: config 0 descriptor?? [ 513.687152][ T5580] go7007: probe of 2-1:0.0 failed with error -12 [ 513.905463][ T3635] Bluetooth: hci3: command tx timeout [ 513.988903][ T14] usb 2-1: USB disconnect, device number 16 [ 514.387915][ T3635] Bluetooth: hci4: command tx timeout [ 514.393365][ T3635] Bluetooth: hci8: command tx timeout [ 514.876116][ T11] team0 (unregistering): Port device team_slave_1 removed [ 515.046685][ T11] team0 (unregistering): Port device team_slave_0 removed [ 515.240305][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.820840][ T9431] "syz.1.1738" (9431) uses obsolete ecb(arc4) skcipher [ 515.995024][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.540851][ T9444] xt_l2tp: v2 tid > 0xffff: 262144 [ 519.584514][ T9452] loop2: detected capacity change from 0 to 1024 [ 519.596886][ T11] bond0 (unregistering): Released all slaves [ 519.670394][ T9452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.816069][ T9452] loop2: detected capacity change from 1024 to 0 [ 519.857033][ T9322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.897473][ T9412] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1730'. [ 519.942477][ T9412] device gretap0 entered promiscuous mode [ 519.997521][ T9415] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1730'. [ 520.025372][ T9415] 0ªX¹¦D: renamed from gretap0 [ 520.041494][ T9415] device 40ªX¹¦D left promiscuous mode [ 520.099235][ T9415] net_ratelimit: 1 callbacks suppressed [ 520.099255][ T9415] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 520.317433][ T9322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.547848][ T5579] usb 3-1: USB disconnect, device number 10 [ 520.865475][ T5580] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 521.320867][ T9322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.357903][ T9322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.378235][ T3649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 521.391251][ T3649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 521.401521][ T3649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 521.412122][ T3649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 521.422523][ T3649] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 521.430873][ T3649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 521.456549][ T5580] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 521.495165][ T5580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.503413][ T5580] usb 2-1: Product: syz [ 521.565438][ T9322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.572652][ T5580] usb 2-1: Manufacturer: syz [ 521.588093][ T9322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.614980][ T5580] usb 2-1: SerialNumber: syz [ 521.625584][ T5580] usb 2-1: config 0 descriptor?? [ 521.689595][ T5580] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 521.724990][ T5580] usb 2-1: No valid video chain found. [ 521.767567][ T9329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.807767][ T9329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.850643][ T9329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.908016][ T9329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.942567][ T3625] usb 2-1: USB disconnect, device number 17 [ 522.191855][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.299150][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.308016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.342175][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.396219][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.428720][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.455721][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.464304][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.471463][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.579765][ T9464] chnl_net:caif_netlink_parms(): no params data found [ 522.644403][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.656232][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.675409][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.684443][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.691938][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.715217][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.735219][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.743279][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.770996][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.774548][ T9474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1752'. [ 522.817789][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.886589][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.907217][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.936730][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.964642][ T9322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.994880][ T9322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.030183][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.039751][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.056539][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.075708][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.084615][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.103745][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.117032][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.125349][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.134117][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.143193][ T946] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.150352][ T946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.190136][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.255653][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.288157][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.325365][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.332509][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.375925][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.385452][ T26] audit: type=1326 audit(2000000307.833:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a093779f9 code=0x0 [ 523.446699][ T26] audit: type=1326 audit(2000000307.873:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f7a093779f9 code=0x0 [ 523.496975][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.504146][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.511440][ T3635] Bluetooth: hci7: command tx timeout [ 523.552189][ T9464] device bridge_slave_0 entered promiscuous mode [ 523.578337][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.615046][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.623297][ T9464] device bridge_slave_1 entered promiscuous mode [ 523.779517][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.808742][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.825920][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.849501][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.866170][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.895355][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.921860][ T9329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.963498][ T9329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.998914][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.071870][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.100765][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.115825][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.124623][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.159714][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.190911][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.210617][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.249335][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.358838][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.397538][ T9464] team0: Port device team_slave_0 added [ 524.439330][ T9464] team0: Port device team_slave_1 added [ 524.554486][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.574866][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.634830][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.708238][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.745243][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.845112][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.876006][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.901916][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.945646][ T9322] device veth0_vlan entered promiscuous mode [ 524.995476][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.006328][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.026385][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.034513][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.095166][ T9322] device veth1_vlan entered promiscuous mode [ 525.153892][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.251300][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.290921][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.304222][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.325192][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.351124][ T9464] device hsr_slave_0 entered promiscuous mode [ 525.384903][ T9464] device hsr_slave_1 entered promiscuous mode [ 525.415015][ T9464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.425489][ T9464] Cannot create hsr debugfs directory [ 525.492800][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.519307][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.576842][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1756'. [ 525.586479][ T3635] Bluetooth: hci7: command tx timeout [ 525.697821][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.720799][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.745945][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.765160][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.825411][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.862180][ T9322] device veth0_macvtap entered promiscuous mode [ 525.989069][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.029449][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.040171][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.060893][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.083488][ T9329] device veth0_vlan entered promiscuous mode [ 526.115723][ T9322] device veth1_macvtap entered promiscuous mode [ 526.130293][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.145989][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.166194][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.210345][ T9329] device veth1_vlan entered promiscuous mode [ 526.247929][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.275500][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.305263][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.334738][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.345099][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.364976][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.396230][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.408267][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.434865][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.454835][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.464697][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.494926][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.516356][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.534898][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.546183][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.568198][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.595382][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.645375][ C1] eth0: bad gso: type: 1, size: 1408 [ 526.654924][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 526.663249][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 526.690503][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.713216][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.740347][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.774876][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.798043][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.824863][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.834735][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.865635][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.884871][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.904871][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.914719][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.948847][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.964886][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.984863][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.994698][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.018066][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.034844][ T9322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.061151][ T9322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.094139][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.126245][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.140047][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.156264][ T9322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.173543][ T9322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.204855][ T9322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.213621][ T9322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.323679][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.335848][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.369614][ T9329] device veth0_macvtap entered promiscuous mode [ 527.406428][ T9329] device veth1_macvtap entered promiscuous mode [ 527.562358][ T11] tipc: Disabling bearer [ 527.568987][ T11] tipc: Left network mode [ 527.574080][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.591928][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.607746][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.644805][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.654680][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.666047][ T3635] Bluetooth: hci7: command tx timeout [ 527.703407][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.713892][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.724508][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.734434][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.745318][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.755170][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.765713][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.776736][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.787637][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.797525][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.808218][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.818253][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.829185][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.844878][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.864919][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.888844][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.965023][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.973624][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.982920][ T8641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.007867][ T8641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.015638][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.023770][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.052330][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.062450][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.116270][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.127682][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.142827][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.155054][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.165624][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.185091][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.205444][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.216209][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.244944][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.255749][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.279181][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.301625][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.322552][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.343439][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.353831][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.364669][ T3625] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 528.381537][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.404942][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.425158][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.446447][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.595221][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.604048][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.725259][ T9329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.734002][ T9329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.792882][ T9329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.804841][ T9329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.825138][ T3625] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 528.855573][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.962858][ T3625] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 528.984976][ T3625] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 528.993038][ T3625] usb 5-1: Manufacturer: syz [ 529.036998][ T3625] usb 5-1: config 0 descriptor?? [ 529.275463][ T3625] rc_core: IR keymap rc-hauppauge not found [ 529.281417][ T3625] Registered IR keymap rc-empty [ 529.299355][ T9464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.315987][ T3625] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 529.335891][ T3625] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 529.363472][ T9464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.471891][ T9464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.489041][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.517590][ T9464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.526172][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.659300][ T3837] usb 5-1: USB disconnect, device number 18 [ 529.666689][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.683785][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.696944][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.755105][ T3635] Bluetooth: hci7: command tx timeout [ 529.815055][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.896393][ T3635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 529.911634][ T3635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 529.925155][ T3635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 529.938125][ T3635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 529.947833][ T3635] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 529.956737][ T3635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.320640][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.382639][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.402036][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.462282][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.750790][ T9539] hub 9-0:1.0: USB hub found [ 530.758119][ T9539] hub 9-0:1.0: 8 ports detected [ 532.189196][ T26] audit: type=1326 audit(2000000316.633:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.4.1770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22db7779f9 code=0x0 [ 532.220170][ T3649] Bluetooth: hci3: command tx timeout [ 532.669065][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.688369][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.715553][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.722708][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.755310][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.778576][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.804089][ T4930] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.811315][ T4930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.821617][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.873205][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.881873][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.901727][ T11] device hsr_slave_0 left promiscuous mode [ 532.949500][ T11] device hsr_slave_1 left promiscuous mode [ 532.967333][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.015072][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.055747][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.063208][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.116320][ T11] device bridge_slave_1 left promiscuous mode [ 533.122570][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.135135][ T5580] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 533.164661][ T11] device bridge_slave_0 left promiscuous mode [ 533.183395][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.289730][ T11] device veth1_macvtap left promiscuous mode [ 533.298455][ T11] device veth0_macvtap left promiscuous mode [ 533.304590][ T11] device veth1_vlan left promiscuous mode [ 533.321484][ T11] device veth0_vlan left promiscuous mode [ 533.405703][ T5580] usb 5-1: Using ep0 maxpacket: 32 [ 533.555335][ T5580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 533.584909][ T5580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 533.614876][ T5580] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 533.633893][ T5580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.664571][ T5580] usb 5-1: config 0 descriptor?? [ 533.695218][ T9552] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 533.735862][ T5580] hub 5-1:0.0: USB hub found [ 534.034906][ T5580] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 534.354894][ T3649] Bluetooth: hci3: command tx timeout [ 534.576577][ T5580] hid-generic 0003:046D:C314.001A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 534.748517][ T5580] usb 5-1: USB disconnect, device number 19 [ 535.650221][ T11] team0 (unregistering): Port device team_slave_1 removed [ 535.846548][ T11] team0 (unregistering): Port device team_slave_0 removed [ 535.987276][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.119723][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.390226][ T3642] Bluetooth: hci3: command tx timeout [ 537.832550][ T11] bond0 (unregistering): Released all slaves [ 538.075519][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.108320][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.146168][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.165565][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.185441][ T9568] netlink: 'syz.0.1779': attribute type 21 has an invalid length. [ 538.197260][ T9571] device pim6reg1 entered promiscuous mode [ 538.204446][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.233258][ T9464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.274887][ T9464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.316592][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.335506][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.375690][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.395541][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.479661][ T3642] Bluetooth: hci3: command tx timeout [ 538.515609][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.526338][ T9528] chnl_net:caif_netlink_parms(): no params data found [ 538.748968][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.793075][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.816966][ T9528] device bridge_slave_0 entered promiscuous mode [ 538.877075][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.884292][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.936123][ T9528] device bridge_slave_1 entered promiscuous mode [ 539.241476][ T9528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.687562][ T9528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.870963][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 539.907287][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.932550][ T9528] team0: Port device team_slave_0 added [ 539.948039][ T9464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.962281][ T9528] team0: Port device team_slave_1 added [ 540.251062][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.284355][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.006158][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.026090][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.105273][ T9528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.206993][ T9464] device veth0_vlan entered promiscuous mode [ 541.250367][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.266137][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.306255][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.313234][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.401804][ T9528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.456936][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.485760][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.576770][ T9464] device veth1_vlan entered promiscuous mode [ 541.602527][ T9528] device hsr_slave_0 entered promiscuous mode [ 541.622930][ T9528] device hsr_slave_1 entered promiscuous mode [ 541.640700][ T9528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.660280][ T9626] devtmpfs: Too few inodes for current use [ 541.664857][ T9528] Cannot create hsr debugfs directory [ 542.580764][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.600378][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.651157][ T9464] device veth0_macvtap entered promiscuous mode [ 542.695729][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 542.706123][ T9464] device veth1_macvtap entered promiscuous mode [ 543.018695][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.037400][ T9642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.051499][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.125453][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.167379][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.197965][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.230870][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.254828][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.294859][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.317230][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.352308][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.382953][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.414825][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.424722][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.474542][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.495530][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.529335][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.558156][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.585490][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.614537][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.669675][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.685737][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.715818][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 543.746142][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 543.766979][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.792114][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.814866][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.845083][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.874862][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.905282][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.932188][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.965192][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.982931][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.009374][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.034886][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.063305][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.090067][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.125265][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.176256][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.214041][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.224606][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.235702][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.248023][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.260623][ T9464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.269895][ T9464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.365584][ T9464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.504246][ T9464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.988222][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.091625][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.329325][ T9528] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.567327][ T9528] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.615734][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.652742][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.766267][ T9528] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.827513][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.862347][ T3918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.885264][ T3918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.987156][ T9528] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.045543][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.119136][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1816'. [ 546.170346][ T9677] device vlan2 entered promiscuous mode [ 546.211794][ T9677] device netdevsim0 entered promiscuous mode [ 546.235620][ T9677] device netdevsim0 left promiscuous mode [ 546.484899][ T5579] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 546.676796][ T9528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.696215][ T9685] netlink: 4564 bytes leftover after parsing attributes in process `syz.0.1819'. [ 546.732857][ T9685] netlink: set zone limit has 8 unknown bytes [ 546.744941][ T5579] usb 3-1: Using ep0 maxpacket: 16 [ 546.759894][ T9528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.778818][ T9528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.844147][ T9528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.861861][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 546.876406][ T5579] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 546.895172][ T5579] usb 3-1: config 0 has no interface number 0 [ 546.901376][ T5579] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 546.904270][ T9688] netlink: 'syz.4.1820': attribute type 14 has an invalid length. [ 546.924951][ T5579] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 546.976036][ T9688] netlink: 'syz.4.1820': attribute type 12 has an invalid length. [ 547.036223][ T9688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.045902][ T9688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.054642][ T9688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.063453][ T9688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.075107][ T5579] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 547.089208][ T9688] device vxlan0 entered promiscuous mode [ 547.094490][ T5579] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 547.103698][ T5579] usb 3-1: Product: syz [ 547.120752][ T5579] usb 3-1: SerialNumber: syz [ 547.135725][ T5579] usb 3-1: config 0 descriptor?? [ 547.197061][ T5579] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 547.214787][ T5579] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input27 [ 547.469457][ T5580] usb 3-1: USB disconnect, device number 11 [ 547.479062][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.486113][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.486421][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 547.504175][ T5580] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 547.577460][ T9528] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.596716][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.605684][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.684917][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.695705][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.715813][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.722986][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.765957][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.774213][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.823648][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.984655][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.991966][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.115970][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 548.655217][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 549.977590][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 549.996028][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.036504][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.063444][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.091893][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.115746][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.165557][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.175880][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.196461][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.225294][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.263234][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.434581][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 550.719031][ T11] device hsr_slave_0 left promiscuous mode [ 550.745196][ T11] device hsr_slave_1 left promiscuous mode [ 550.759174][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.787380][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.835909][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.853942][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.895034][ T11] device bridge_slave_1 left promiscuous mode [ 550.902973][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.934334][ T11] device bridge_slave_0 left promiscuous mode [ 550.952369][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.060513][ T11] device veth1_macvtap left promiscuous mode [ 551.077037][ T11] device veth0_macvtap left promiscuous mode [ 551.089203][ T9725] loop2: detected capacity change from 0 to 32768 [ 551.097369][ T11] device veth1_vlan left promiscuous mode [ 551.103252][ T11] device veth0_vlan left promiscuous mode [ 551.108295][ T9725] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1835 (9725) [ 551.148070][ T9725] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 551.176025][ T9725] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 551.200353][ T9725] BTRFS error (device loop2): superblock checksum mismatch [ 551.225866][ T9725] BTRFS error (device loop2): open_ctree failed [ 552.604999][ T5580] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 552.681316][ T11] team0 (unregistering): Port device team_slave_1 removed [ 552.850145][ T11] team0 (unregistering): Port device team_slave_0 removed [ 552.868841][ T5580] usb 5-1: Using ep0 maxpacket: 8 [ 553.015858][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.025380][ T5580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 553.207292][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.235464][ T5580] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=83.d9 [ 553.255530][ T5580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.263657][ T5580] usb 5-1: Product: syz [ 553.279666][ T5580] usb 5-1: Manufacturer: syz [ 553.284439][ T5580] usb 5-1: SerialNumber: syz [ 553.301524][ T5580] usb 5-1: config 0 descriptor?? [ 553.350002][ T5580] HFC-S_USB: probe of 5-1:0.0 failed with error -5 [ 553.514550][ T9752] loop2: detected capacity change from 0 to 40427 [ 553.559492][ T9752] F2FS-fs (loop2): invalid crc value [ 553.616467][ T9752] F2FS-fs (loop2): Found nat_bits in checkpoint [ 553.686525][ T3727] usb 5-1: USB disconnect, device number 20 [ 553.758623][ T9752] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 553.839360][ T9752] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 553.956984][ T9464] syz-executor: attempt to access beyond end of device [ 553.956984][ T9464] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 555.649938][ T11] bond0 (unregistering): Released all slaves [ 555.804918][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 555.894415][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.266947][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 556.267109][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.300628][ T9528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.345765][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.346426][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.405512][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.406243][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.407016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.407552][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.422479][ T9528] device veth0_vlan entered promiscuous mode [ 556.456924][ T9528] device veth1_vlan entered promiscuous mode [ 556.525427][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.597629][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.626151][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 556.661371][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.700821][ T9528] device veth0_macvtap entered promiscuous mode [ 556.745186][ T9528] device veth1_macvtap entered promiscuous mode [ 556.805425][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.855321][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.885174][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.912067][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.964439][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.994561][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.050936][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.094897][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.105831][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.147748][ T9808] afs: Unexpected value for 'dyn' [ 557.152911][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.204971][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.235121][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.285299][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.312206][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.339436][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.392884][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.415462][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.465260][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.516441][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.527305][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 557.538028][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 557.569791][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 557.595735][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 557.624308][ T9813] block nbd2: Device being setup by another task [ 557.671015][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.705171][ T9818] block nbd2: shutting down sockets [ 557.747231][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.762827][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.798416][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.830963][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.864905][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.898266][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.939189][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.975021][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.033965][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.075118][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.124065][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.166185][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.211718][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.257656][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.297787][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.334177][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.372432][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.406301][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.428340][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.443011][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.478868][ T9528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.510512][ T9528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.540380][ T9528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.572995][ T9528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.821526][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.840294][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.923832][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 558.969925][ T8641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.991582][ T8641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.041256][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.554886][ T3625] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 559.814938][ T3625] usb 5-1: Using ep0 maxpacket: 16 [ 559.955219][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.983861][ T3625] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.047816][ T3625] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.087677][ T3625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.108198][ T3625] usb 5-1: config 0 descriptor?? [ 560.547840][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.561006][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.572505][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.580556][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.598379][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.608049][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.627317][ T3625] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 560.655864][ T3625] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 560.753234][ T3625] microsoft 0003:045E:07DA.001B: no inputs found [ 560.800191][ T3625] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 560.929918][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.009100][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.114236][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.134891][ C1] usb 5-1: input irq status -75 received [ 561.317495][ T3625] usb 5-1: USB disconnect, device number 21 [ 561.335776][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.381063][ T9853] chnl_net:caif_netlink_parms(): no params data found [ 561.504495][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.717314][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.794102][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.825998][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.834335][ T9853] device bridge_slave_0 entered promiscuous mode [ 561.874523][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.893759][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.916080][ T9853] device bridge_slave_1 entered promiscuous mode [ 561.998805][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.052858][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.201248][ T9853] team0: Port device team_slave_0 added [ 562.223961][ T9853] team0: Port device team_slave_1 added [ 562.727788][ T3649] Bluetooth: hci3: command tx timeout [ 562.786369][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.807260][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.194952][ T3625] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 563.487817][ T9881] loop2: detected capacity change from 0 to 32768 [ 564.137301][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.150554][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.185597][ T3625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.222308][ T3625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.258830][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.275144][ T3625] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 564.305170][ T3625] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 564.364834][ T3625] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 564.369210][ T9895] device vlan2 entered promiscuous mode [ 564.374542][ T3625] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 564.410654][ T9895] device batadv0 entered promiscuous mode [ 564.445639][ T9895] device batadv0 left promiscuous mode [ 564.635050][ T3625] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.647181][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.652461][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.664905][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.683155][ T3625] usb 5-1: Product: syz [ 564.724949][ T3625] usb 5-1: Manufacturer: syz [ 564.729615][ T3625] usb 5-1: SerialNumber: syz [ 564.767183][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.785032][ T3642] Bluetooth: hci3: command tx timeout [ 564.870307][ T9905] loop2: detected capacity change from 0 to 256 [ 565.041970][ T9853] device hsr_slave_0 entered promiscuous mode [ 565.065682][ T9853] device hsr_slave_1 entered promiscuous mode [ 565.072688][ T9853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.092036][ T9853] Cannot create hsr debugfs directory [ 565.105989][ T3625] cdc_ncm 5-1:1.0: bind() failure [ 565.135499][ T3625] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 565.165103][ T3625] cdc_ncm 5-1:1.1: bind() failure [ 565.196102][ T3625] usb 5-1: USB disconnect, device number 22 [ 566.441968][ T26] audit: type=1326 audit(2000000350.883:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9923 comm="syz.0.1904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7d87779f9 code=0x0 [ 566.864972][ T3642] Bluetooth: hci3: command tx timeout [ 567.131565][ T9938] loop2: detected capacity change from 0 to 256 [ 568.039346][ T9940] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 568.049231][ T9940] overlayfs: bad mount option "redirect_dir=./file1" [ 568.404159][ T9952] 9pnet_fd: p9_fd_create_tcp (9952): problem connecting socket to 127.0.0.1 [ 568.437520][ T9950] netlink: 'syz.2.1912': attribute type 5 has an invalid length. [ 568.474855][ T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 568.506212][ T11] device hsr_slave_0 left promiscuous mode [ 568.526106][ T11] device hsr_slave_1 left promiscuous mode [ 568.536150][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.543615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.601028][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.619019][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.635666][ T11] device bridge_slave_1 left promiscuous mode [ 568.655573][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.699465][ T11] device bridge_slave_0 left promiscuous mode [ 568.710501][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.734991][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 568.772114][ T11] device veth1_macvtap left promiscuous mode [ 568.782184][ T11] device veth0_macvtap left promiscuous mode [ 568.792452][ T11] device veth1_vlan left promiscuous mode [ 568.802144][ T11] device veth0_vlan left promiscuous mode [ 568.855169][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.884173][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.933908][ T14] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 568.944919][ T3642] Bluetooth: hci3: command tx timeout [ 568.979697][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.025744][ T14] usb 1-1: config 0 descriptor?? [ 569.223339][ T3625] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 569.568128][ T14] lua 0003:1E7D:2C2E.001C: item fetching failed at offset 5/7 [ 569.586542][ T14] lua 0003:1E7D:2C2E.001C: parse failed [ 569.592161][ T14] lua: probe of 0003:1E7D:2C2E.001C failed with error -22 [ 569.645150][ T3625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 569.690365][ T3625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 569.787847][ T9766] usb 1-1: USB disconnect, device number 19 [ 569.895355][ T3625] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 569.931159][ T3625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.941260][ T3625] usb 3-1: Product: syz [ 569.951390][ T3625] usb 3-1: Manufacturer: syz [ 569.961529][ T3625] usb 3-1: SerialNumber: syz [ 569.973432][ T3625] usb 3-1: config 0 descriptor?? [ 570.295977][ T3625] usb 3-1: USB disconnect, device number 12 [ 570.898463][ T11] team0 (unregistering): Port device team_slave_1 removed [ 571.012863][ T11] team0 (unregistering): Port device team_slave_0 removed [ 571.089069][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.215417][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.659900][ T11] bond0 (unregistering): Released all slaves [ 572.819921][ T9956] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 572.866813][ T9956] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 572.977121][ T9968] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 573.245003][ T26] audit: type=1326 audit(2000000357.683:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.4.1921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22db7779f9 code=0x0 [ 573.282255][ T9853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.316227][ T9853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.378301][ T9853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.435559][ T9853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.302789][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.363800][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.373485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.411281][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.479688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.489267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.525703][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.532850][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.542715][ T9994] 9pnet_fd: p9_fd_create_tcp (9994): problem connecting socket to 127.0.0.1 [ 574.576164][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.637266][ T9992] netlink: 'syz.4.1926': attribute type 5 has an invalid length. [ 574.695081][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.714285][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.764434][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.771675][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.847752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 574.902023][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.917007][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 574.968510][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.999454][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 575.030625][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.067729][ T9853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.110324][ T9853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.178117][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.195657][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 575.224646][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.265472][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.274093][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.321750][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 575.664727][ T9995] loop2: detected capacity change from 0 to 40427 [ 575.735711][ T9995] F2FS-fs (loop2): Found nat_bits in checkpoint [ 575.825415][T10014] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 575.897475][ T9995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 575.929910][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.945613][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.973616][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.066889][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 576.083370][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 576.142444][T10020] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1935'. [ 576.158254][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.176188][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.217846][ T9853] device veth0_vlan entered promiscuous mode [ 576.227160][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.255333][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 576.283065][ T9853] device veth1_vlan entered promiscuous mode [ 576.302030][ T9464] syz-executor: attempt to access beyond end of device [ 576.302030][ T9464] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 576.368091][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 576.396055][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 576.433431][ T9853] device veth0_macvtap entered promiscuous mode [ 576.481459][ T9853] device veth1_macvtap entered promiscuous mode [ 576.525402][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.549134][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.587724][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.622234][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.699104][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.709756][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.722363][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.733507][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.743875][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.754374][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.764356][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.932835][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.108336][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.312198][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.366804][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.444809][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.514017][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.556598][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.586933][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.666672][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 577.676051][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 577.705007][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 577.713472][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.743008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 577.765173][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.802671][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.832965][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.867551][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.908225][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.949811][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.015000][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.130157][T10040] 9pnet_fd: p9_fd_create_tcp (10040): problem connecting socket to 127.0.0.1 [ 578.817155][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.827089][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.844815][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.854665][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.904724][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.944938][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.014863][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.030481][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.060118][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.094947][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.121716][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.175248][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.182753][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.205537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.245709][T10039] netlink: 'syz.0.1940': attribute type 5 has an invalid length. [ 579.257017][ T9853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.295492][ T9853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.332559][ T9853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.378003][ T9853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.603827][ T8641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.625570][ T8641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.649566][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.719734][ T3990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.924912][ T3990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.037721][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 581.877806][ C1] eth0: bad gso: type: 1, size: 1408 [ 582.045500][T10059] loop2: detected capacity change from 0 to 32768 [ 582.131038][T10059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1947 (10059) [ 582.873887][T10059] BTRFS error (device loop2): open_ctree failed [ 583.863667][T10088] tty tty21: ldisc open failed (-12), clearing slot 20 [ 583.871446][T10089] tty tty1: ldisc open failed (-12), clearing slot 0 [ 585.330844][T10070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.491669][T10070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.770410][T10070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.926823][T10070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.133492][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 586.147914][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 586.167676][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 586.178633][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 586.188190][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 586.198333][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 586.840621][T10105] chnl_net:caif_netlink_parms(): no params data found [ 587.218779][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.234214][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.276907][T10105] device bridge_slave_0 entered promiscuous mode [ 587.349519][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.365552][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.392367][T10105] device bridge_slave_1 entered promiscuous mode [ 587.747520][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.769512][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.157830][T10125] tmpfs: Unknown parameter 'usrquota' [ 588.165316][T10105] team0: Port device team_slave_0 added [ 588.225059][T10070] device hsr_slave_0 left promiscuous mode [ 588.236264][T10070] device hsr_slave_1 left promiscuous mode [ 588.275929][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.283503][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.300535][T10127] 9pnet_fd: p9_fd_create_tcp (10127): problem connecting socket to 127.0.0.1 [ 588.311872][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.319535][ T3649] Bluetooth: hci3: command tx timeout [ 588.342975][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.407851][T10070] device bridge_slave_1 left promiscuous mode [ 588.435181][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.460460][T10070] device bridge_slave_0 left promiscuous mode [ 588.472863][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.583471][T10070] device veth1_macvtap left promiscuous mode [ 588.600109][T10070] device veth0_macvtap left promiscuous mode [ 588.615543][T10070] device veth1_vlan left promiscuous mode [ 588.635080][T10070] device veth0_vlan left promiscuous mode [ 590.384983][ T3649] Bluetooth: hci3: command tx timeout [ 590.476006][T10070] team0 (unregistering): Port device team_slave_1 removed [ 590.598792][T10070] team0 (unregistering): Port device team_slave_0 removed [ 590.755976][T10070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.896723][T10070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.466990][ T3649] Bluetooth: hci3: command tx timeout [ 592.626909][T10070] bond0 (unregistering): Released all slaves [ 592.816910][T10105] team0: Port device team_slave_1 added [ 592.831639][T10126] netlink: 'syz.1.1957': attribute type 5 has an invalid length. [ 592.916416][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.923431][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.038426][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.087303][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.094331][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.253892][T10140] loop2: detected capacity change from 0 to 4096 [ 593.276831][T10140] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 593.309877][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.020949][T10140] ntfs3: loop2: failed to convert "c46c" to cp950 [ 594.078451][T10105] device hsr_slave_0 entered promiscuous mode [ 594.147184][T10105] device hsr_slave_1 entered promiscuous mode [ 594.175428][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.183039][T10105] Cannot create hsr debugfs directory [ 594.578890][ T3649] Bluetooth: hci3: command tx timeout [ 595.612308][T10172] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 595.904846][ T5579] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 596.287030][ T5579] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 596.325116][ T5579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.357037][T10105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.366430][ T5579] usb 3-1: config 0 descriptor?? [ 596.405196][T10105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 596.452160][T10105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.485737][T10105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.674974][ T5579] kaweth 3-1:0.0: Firmware present in device. [ 596.755397][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.806486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.815321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.829558][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.845022][ T5579] kaweth 3-1:0.0: Statistics collection: 0 [ 596.850882][ T5579] kaweth 3-1:0.0: Multicast filter limit: 0 [ 596.878197][ T5579] kaweth 3-1:0.0: MTU: 0 [ 596.882702][ T5579] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 597.294424][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.388123][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.530668][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.537885][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.675213][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.684211][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.735563][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.742705][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.794968][ T5579] kaweth 3-1:0.0: Error setting receive filter [ 597.801412][ T5579] kaweth: probe of 3-1:0.0 failed with error -5 [ 597.808435][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.830495][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.844086][ T5579] usb 3-1: USB disconnect, device number 13 [ 597.858022][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.860126][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.879741][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.890374][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.891315][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.895935][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.902353][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.028473][ T3649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 598.040403][ T3649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 598.050050][ T3649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 598.058006][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.066704][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.075555][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.091327][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.106973][ T3649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 598.130168][ T3649] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 598.139866][ T3649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 598.605903][T10192] chnl_net:caif_netlink_parms(): no params data found [ 598.714892][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 598.716602][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.746074][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 598.770846][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.945963][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.965548][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.994407][T10192] device bridge_slave_0 entered promiscuous mode [ 599.017778][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 599.027806][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.050364][T10192] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.060801][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.075149][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.079311][T10192] device bridge_slave_1 entered promiscuous mode [ 599.100564][T10105] device veth0_vlan entered promiscuous mode [ 599.114864][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.129055][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 599.145518][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.153791][ T14] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 599.184937][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.216300][ T14] usb 3-1: config 0 descriptor?? [ 599.225084][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 599.233200][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.269559][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.295806][T10105] device veth1_vlan entered promiscuous mode [ 599.309100][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.421436][T10192] team0: Port device team_slave_0 added [ 599.456240][T10105] device veth0_macvtap entered promiscuous mode [ 599.457251][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.471343][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 599.472076][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 599.505187][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.570156][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.590337][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.612431][T10192] team0: Port device team_slave_1 added [ 599.631575][T10105] device veth1_macvtap entered promiscuous mode [ 599.645548][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 599.666033][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 599.786909][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.793942][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.851153][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.875836][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.887878][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.913726][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.935611][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.950654][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.964862][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.985260][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.995145][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 599.996484][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.002073][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 600.022492][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.043982][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.052623][ T14] usb 3-1: USB disconnect, device number 14 [ 600.069465][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.094899][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.259351][ T3642] Bluetooth: hci8: command tx timeout [ 600.266834][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.307376][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.319308][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.330421][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.340907][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.352321][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.696301][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.933483][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 601.070827][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 601.332317][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.362654][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.389573][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.526934][T10192] device hsr_slave_0 entered promiscuous mode [ 601.564932][T10192] device hsr_slave_1 entered promiscuous mode [ 601.585177][T10192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.604898][T10192] Cannot create hsr debugfs directory [ 601.748879][T10070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.770598][T10231] loop2: detected capacity change from 0 to 4096 [ 601.782613][T10231] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 601.811947][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.849801][T10231] ntfs: volume version 3.1. [ 601.854729][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.894272][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.934447][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.955110][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.994909][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.024173][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.049848][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.071757][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.094987][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.114568][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.126591][T10234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 602.144930][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.157870][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.174839][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.194825][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.214859][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.244981][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.264946][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.301604][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.309152][ T3642] Bluetooth: hci8: command tx timeout [ 602.377511][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.395747][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.468186][T10105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.495028][T10105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.507505][T10237] loop2: detected capacity change from 0 to 512 [ 602.514191][T10105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.534928][T10105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.596419][T10237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 602.640018][T10070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.655069][T10237] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 602.869906][T10070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.057719][ T9464] EXT4-fs (loop2): unmounting filesystem. [ 603.082671][T10070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.282059][ T3967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.311948][ T3967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.409866][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.433467][ T3990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.463515][ T3990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.645913][ T946] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 603.742546][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.865396][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.025109][ T946] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 604.040773][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.066159][ T946] usb 3-1: config 0 descriptor?? [ 604.116075][ T946] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 604.385503][ T3642] Bluetooth: hci8: command tx timeout [ 604.775581][ T946] gspca_cpia1: usb_control_msg 01, error -32 [ 605.035116][ T946] gspca_cpia1: usb_control_msg 02, error -71 [ 605.041188][ T946] cpia1 3-1:0.0: only firmware version 1 is supported (got: 4) [ 605.081451][ T946] usb 3-1: USB disconnect, device number 15 [ 605.111246][T10192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 605.136832][T10192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 605.181139][T10192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 605.444928][T10192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 606.122001][T10192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.142531][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.162591][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.172091][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.201595][T10070] device hsr_slave_0 left promiscuous mode [ 606.212347][T10070] device hsr_slave_1 left promiscuous mode [ 606.219506][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.227261][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.236256][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.243680][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.252034][T10070] device bridge_slave_1 left promiscuous mode [ 606.258429][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.267157][T10070] device bridge_slave_0 left promiscuous mode [ 606.273346][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.299951][T10070] device veth1_macvtap left promiscuous mode [ 606.306993][T10070] device veth0_macvtap left promiscuous mode [ 606.317155][T10070] device veth1_vlan left promiscuous mode [ 606.323013][T10070] device veth0_vlan left promiscuous mode [ 606.357959][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.366170][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 606.373448][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 606.464915][ T3649] Bluetooth: hci8: command tx timeout [ 608.258287][T10070] team0 (unregistering): Port device team_slave_1 removed [ 608.419705][T10070] team0 (unregistering): Port device team_slave_0 removed [ 608.464984][ T3642] Bluetooth: hci3: command tx timeout [ 608.823322][T10070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.155821][T10070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.557963][ T3642] Bluetooth: hci3: command tx timeout [ 610.947357][ T3649] Bluetooth: hci4: command 0x0406 tx timeout [ 611.130265][T10070] bond0 (unregistering): Released all slaves [ 611.274212][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.298178][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.320560][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.352574][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.369358][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.397974][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.405186][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.467228][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.485418][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 611.493990][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.515352][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.522444][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.545331][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.553874][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.585897][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.606081][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.614555][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.636039][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.648462][T10192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 611.674849][T10192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.706286][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.714115][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.736604][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.755434][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.763750][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.810423][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.625033][ T3642] Bluetooth: hci3: command tx timeout [ 612.638566][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.800906][T10256] chnl_net:caif_netlink_parms(): no params data found [ 612.875366][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.882842][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.137345][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.156101][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.296482][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.303622][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.317324][T10256] device bridge_slave_0 entered promiscuous mode [ 613.340781][T10192] device veth0_vlan entered promiscuous mode [ 613.349290][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.359010][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.370756][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.380854][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.391671][T10256] device bridge_slave_1 entered promiscuous mode [ 613.412789][T10192] device veth1_vlan entered promiscuous mode [ 613.424637][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.434699][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.582760][T10256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.646301][T10256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.670593][T10269] dccp_xmit_packet: Payload too large (65475) for featneg. [ 613.734242][T10192] device veth0_macvtap entered promiscuous mode [ 613.856804][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 613.891033][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.947605][T10192] device veth1_macvtap entered promiscuous mode [ 613.977115][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.005591][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 614.022535][T10256] team0: Port device team_slave_0 added [ 614.065306][T10256] team0: Port device team_slave_1 added [ 614.205437][T10256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.212436][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.286317][ T3649] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 614.307856][ T3649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 614.318950][ T3649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 614.327368][ T3649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 614.334684][T10256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.346007][ T3649] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 614.353574][ T3649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 614.385390][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.399559][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.420642][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.434844][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.454862][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.474927][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.494948][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.524832][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.539327][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.562232][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.583341][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.594839][ T9333] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 614.634963][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.665002][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.705199][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.705560][ T3642] Bluetooth: hci3: command tx timeout [ 614.736323][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.785071][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.825201][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.874896][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.887146][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.902420][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 614.926424][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.946149][T10256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.956380][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.970528][ T9333] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.074291][ T9333] usb 3-1: config 0 has no interface number 0 [ 615.153285][ T9333] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.164479][T10256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.318527][T10285] binder: 10283:10285 ioctl 4018620d 0 returned -22 [ 615.523741][ T9333] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.549096][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.569123][ T9333] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 615.578641][ T9333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.588192][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.602044][ T9333] usb 3-1: config 0 descriptor?? [ 615.634839][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.664884][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.708273][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.729721][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.760092][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.804989][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.844879][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.861042][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.894877][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.916537][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.947523][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.974876][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.984746][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.014866][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.043118][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.071918][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.085522][ T9333] hid (null): global environment stack underflow [ 616.094442][ T9333] uclogic 0003:5543:0522.001D: global environment stack underflow [ 616.116613][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.126429][ T9333] uclogic 0003:5543:0522.001D: item 0 1 1 11 parsing failed [ 616.144408][ T9333] uclogic 0003:5543:0522.001D: parse failed [ 616.160085][ T9333] uclogic: probe of 0003:5543:0522.001D failed with error -22 [ 616.316677][ T3837] usb 3-1: USB disconnect, device number 16 [ 616.368965][T10192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.385164][ T3649] Bluetooth: hci9: command tx timeout [ 616.394149][T10192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.460550][T10192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.516715][T10192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.550788][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.565511][ T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 616.660873][T10256] device hsr_slave_0 entered promiscuous mode [ 616.686859][T10256] device hsr_slave_1 entered promiscuous mode [ 616.722478][T10256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.782641][T10256] Cannot create hsr debugfs directory [ 617.656246][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.664742][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.786238][T10302] loop2: detected capacity change from 0 to 256 [ 617.793055][T10302] exfat: Deprecated parameter 'utf8' [ 617.819548][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.855795][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.864433][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.874670][T10302] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 617.916187][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.942575][T10278] chnl_net:caif_netlink_parms(): no params data found [ 618.055224][T10305] SET target dimension over the limit! [ 618.153317][T10256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.464723][T10256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.465107][ T3649] Bluetooth: hci9: command tx timeout [ 618.705645][ T946] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 618.710324][T10070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.861039][T10256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.924963][ T5579] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 618.950747][ T946] usb 5-1: Using ep0 maxpacket: 8 [ 619.059469][T10256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.125966][ T946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.178248][ T5579] usb 1-1: Using ep0 maxpacket: 16 [ 619.207646][T10070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.235266][ T946] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 619.258573][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 619.269803][T10278] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.283492][ T946] usb 5-1: SerialNumber: syz [ 619.295162][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.309799][ T946] usb 5-1: config 0 descriptor?? [ 619.315014][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.316204][T10278] device bridge_slave_0 entered promiscuous mode [ 619.329431][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.367301][ T5579] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 619.400418][ T946] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 619.404841][ T5579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.434361][ T946] usb 5-1: No valid video chain found. [ 619.436096][ T5579] usb 1-1: config 0 descriptor?? [ 619.468976][ T26] audit: type=1326 audit(2000000403.913:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10327 comm="syz.2.2027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94565779f9 code=0x0 [ 619.507578][T10070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.545633][T10278] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.552766][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.586439][T10278] device bridge_slave_1 entered promiscuous mode [ 619.664028][ T946] usb 5-1: USB disconnect, device number 23 [ 619.727595][T10070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.770242][T10278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.791637][T10278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.960367][T10278] team0: Port device team_slave_0 added [ 619.968288][ T5579] chicony 0003:04F2:1421.001E: unbalanced collection at end of report description [ 619.984179][ T5579] chicony 0003:04F2:1421.001E: Chicony hid parse failed: -22 [ 619.999206][ T5579] chicony: probe of 0003:04F2:1421.001E failed with error -22 [ 620.048364][T10278] team0: Port device team_slave_1 added [ 620.172920][ T6040] usb 1-1: USB disconnect, device number 20 [ 620.185519][T10256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 620.253790][T10256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 620.272103][T10278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.289589][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.375816][T10278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.405880][T10256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 620.449276][T10278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.465737][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.540394][T10278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.551267][ T3642] Bluetooth: hci9: command tx timeout [ 620.620019][T10256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 620.621253][T10331] dccp_close: ABORT with 3732 bytes unread [ 620.975969][T10278] device hsr_slave_0 entered promiscuous mode [ 621.016278][T10278] device hsr_slave_1 entered promiscuous mode [ 621.032886][T10278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.058494][T10278] Cannot create hsr debugfs directory [ 621.082394][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 622.193994][T10356] loop2: detected capacity change from 0 to 32768 [ 622.203191][T10356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2036 (10356) [ 622.236675][T10356] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.247648][T10356] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 622.256400][T10356] BTRFS info (device loop2): using free space tree [ 622.405268][T10354] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2037'. [ 622.515454][T10356] BTRFS info (device loop2): enabling ssd optimizations [ 622.624896][ T3649] Bluetooth: hci9: command tx timeout [ 622.685248][ T9464] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 623.395831][T10256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.554172][T10256] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.585981][ T27] INFO: task syz.2.1279:7964 blocked for more than 143 seconds. [ 623.593682][ T27] Not tainted 6.1.103-syzkaller #0 [ 623.610797][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.636773][ T27] task:syz.2.1279 state:D stack:24608 pid:7964 ppid:6413 flags:0x00004004 [ 623.666595][ T27] Call Trace: [ 623.669950][ T27] [ 623.672895][ T27] __schedule+0x143f/0x4570 [ 623.685232][ T27] ? release_firmware_map_entry+0x186/0x186 [ 623.713186][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 623.747075][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 623.770194][ T27] schedule+0xbf/0x180 [ 623.788893][ T27] schedule_preempt_disabled+0xf/0x20 [ 623.804672][ T27] __mutex_lock+0x6b9/0xd80 [ 623.809406][ T27] ? __mutex_lock+0x53c/0xd80 [ 623.814595][ T27] ? exfat_sync_fs+0x67/0x100 [ 623.819808][ T27] ? mutex_lock_nested+0x10/0x10 [ 623.825198][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 623.830514][ T27] exfat_sync_fs+0x67/0x100 [ 623.835092][ T27] iterate_supers+0x127/0x1e0 [ 623.839786][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 623.844934][ T27] ksys_sync+0xd7/0x1c0 [ 623.849112][ T27] ? sync_filesystem+0x220/0x220 [ 623.854079][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 623.995456][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 624.094154][ T27] __do_sys_sync+0xa/0x10 [ 624.165038][ T27] do_syscall_64+0x3b/0xb0 [ 624.285639][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.292405][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.344399][ T27] ? clear_bhb_loop+0x45/0xa0 [ 624.473041][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.496648][ T27] RIP: 0033:0x7ff187d779f9 [ 624.501126][ T27] RSP: 002b:00007ff188b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 624.510091][ T27] RAX: ffffffffffffffda RBX: 00007ff187f05f80 RCX: 00007ff187d779f9 [ 624.534806][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.543242][ T27] RBP: 00007ff187de58ee R08: 0000000000000000 R09: 0000000000000000 [ 624.564878][ T3625] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 624.593491][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.621964][ T27] R13: 0000000000000000 R14: 00007ff187f05f80 R15: 00007fff42840168 [ 624.642242][ T27] [ 624.654989][ T27] INFO: task syz.0.1393:8371 blocked for more than 144 seconds. [ 624.657399][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.683030][ T27] Not tainted 6.1.103-syzkaller #0 [ 624.691974][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.693154][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.749048][ T27] task:syz.0.1393 state:D stack:23592 pid:8371 ppid:7887 flags:0x00004004 [ 624.779374][ T27] Call Trace: [ 624.782705][ T27] [ 624.799604][ T27] __schedule+0x143f/0x4570 [ 624.804211][ T27] ? release_firmware_map_entry+0x186/0x186 [ 624.834902][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 624.840443][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 624.885661][ T27] schedule+0xbf/0x180 [ 624.898683][ T27] schedule_preempt_disabled+0xf/0x20 [ 624.914902][ T27] __mutex_lock+0x6b9/0xd80 [ 624.929443][ T27] ? __mutex_lock+0x53c/0xd80 [ 624.939766][ T27] ? exfat_sync_fs+0x67/0x100 [ 624.953500][ T27] ? mutex_lock_nested+0x10/0x10 [ 624.964128][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 624.974851][ T27] exfat_sync_fs+0x67/0x100 [ 624.984945][ T27] iterate_supers+0x127/0x1e0 [ 624.994118][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 624.999624][ T3625] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 625.016343][ T3625] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.025969][ T27] ksys_sync+0xd7/0x1c0 [ 625.034717][ T27] ? sync_filesystem+0x220/0x220 [ 625.045543][ T3625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.055481][ T27] ? syscall_enter_from_user_mode+0xcf/0x230 [ 625.068296][ T27] __do_sys_sync+0xa/0x10 [ 625.080502][ T27] do_syscall_64+0x3b/0xb0 [ 625.089499][ T27] ? clear_bhb_loop+0x45/0xa0 [ 625.095287][T10395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.107512][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.120293][T10395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.128305][ T27] RIP: 0033:0x7f23f37779f9 [ 625.138339][ T27] RSP: 002b:00007f23f4524038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 625.157803][ T27] RAX: ffffffffffffffda RBX: 00007f23f3905f80 RCX: 00007f23f37779f9 [ 625.174861][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.208351][ T27] RBP: 00007f23f37e58ee R08: 0000000000000000 R09: 0000000000000000 [ 625.230894][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.246727][ T27] R13: 0000000000000000 R14: 00007f23f3905f80 R15: 00007fff9f7a8258 [ 625.281619][ T27] [ 625.291396][ T27] [ 625.291396][ T27] Showing all locks held in the system: [ 625.316251][ T27] 1 lock held by rcu_tasks_kthre/12: [ 625.333444][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 625.374140][ T27] 1 lock held by rcu_tasks_trace/13: [ 625.403773][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 625.439358][ T27] 1 lock held by khungtaskd/27: [ 625.454231][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 625.494859][ T27] 2 locks held by getty/3388: [ 625.499593][ T27] #0: ffff88814b8af098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 625.542677][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 625.581747][ T27] 3 locks held by kworker/0:5/3682: [ 625.598961][ T27] #0: ffff888028abbd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.629082][ T27] #1: ffffc90003f8fd20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.666730][ T27] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 625.692835][ T27] 3 locks held by kworker/1:10/3837: [ 625.707905][ T27] #0: ffff888028abbd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.734485][ T27] #1: ffffc90004877d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.754955][ T27] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 625.782421][ T27] 3 locks held by syz-executor/4585: [ 625.796282][ T27] 3 locks held by syz-executor/5053: [ 625.805260][ T27] 3 locks held by kworker/1:17/6040: [ 625.810599][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.837387][ T27] #1: ffffc90005ee7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.861436][ T27] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 625.873211][ T27] 2 locks held by syz.2.1279/7964: [ 625.878864][ T27] #0: ffff8880757fc0e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 625.889708][ T27] #1: ffff8880757fa0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 625.899288][ T27] 2 locks held by syz.0.1393/8371: [ 625.904538][ T27] #0: ffff8880757fc0e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 625.916541][ T27] #1: ffff8880757fa0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 625.926831][ T27] 3 locks held by kworker/u4:15/8641: [ 625.932223][ T27] 2 locks held by kworker/0:4/9333: [ 625.937965][ T27] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.948987][ T27] #1: ffffc900031c7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 625.970199][ T27] 5 locks held by kworker/u4:19/10070: [ 625.984892][ T27] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 626.004818][ T27] #1: ffffc90004827d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 626.026292][ T27] #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 626.048872][ T27] #3: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc9/0x330 [ 626.069191][ T27] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 626.092125][ T27] 1 lock held by syz-executor/10256: [ 626.112367][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 626.122216][ T27] 1 lock held by syz-executor/10278: [ 626.136119][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 626.164841][ T27] 1 lock held by syz.0.2046/10400: [ 626.170115][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 626.204857][ T27] [ 626.207229][ T27] ============================================= [ 626.207229][ T27] [ 626.246140][ T27] NMI backtrace for cpu 0 [ 626.250513][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 626.258421][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 626.268577][ T27] Call Trace: [ 626.271875][ T27] [ 626.274809][ T27] dump_stack_lvl+0x1e3/0x2cb [ 626.279524][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 626.285011][ T27] ? panic+0x764/0x764 [ 626.289085][ T27] ? vprintk_emit+0x622/0x740 [ 626.293777][ T27] ? printk_sprint+0x490/0x490 [ 626.298549][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 626.303767][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 626.308727][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 626.314891][ T27] ? _printk+0xd1/0x111 [ 626.319060][ T27] ? panic+0x764/0x764 [ 626.323134][ T27] ? __wake_up_klogd+0xcc/0x100 [ 626.327991][ T27] ? panic+0x764/0x764 [ 626.332090][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 626.338173][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 626.344253][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 626.350522][ T27] watchdog+0xf88/0xfd0 [ 626.354695][ T27] ? watchdog+0x1f8/0xfd0 [ 626.359034][ T27] kthread+0x28d/0x320 [ 626.363139][ T27] ? hungtask_pm_notify+0x50/0x50 [ 626.368154][ T27] ? kthread_blkcg+0xd0/0xd0 [ 626.372743][ T27] ret_from_fork+0x1f/0x30 [ 626.377164][ T27] [ 626.381703][ T27] Sending NMI from CPU 0 to CPUs 1: [ 626.387408][ C1] NMI backtrace for cpu 1 [ 626.387419][ C1] CPU: 1 PID: 3864 Comm: kworker/u4:8 Not tainted 6.1.103-syzkaller #0 [ 626.387435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 626.387444][ C1] Workqueue: phy24 ieee80211_iface_work [ 626.387466][ C1] RIP: 0010:validate_chain+0x199/0x5950 [ 626.387482][ C1] Code: 89 df e8 4a f0 76 00 48 89 5c 24 28 48 8b 1b 48 85 db 74 48 48 83 c3 f8 74 42 4c 8d 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 1d f0 76 00 49 8b 07 4c 39 f0 0f 84 dc 03 00 00 [ 626.387495][ C1] RSP: 0018:ffffc90004a27760 EFLAGS: 00000046 [ 626.387508][ C1] RAX: 1ffffffff212c34b RBX: ffffffff90961a40 RCX: ffffffff816b2c12 [ 626.387519][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff907393f0 [ 626.387529][ C1] RBP: ffffc90004a27a10 R08: dffffc0000000000 R09: fffffbfff20e727f [ 626.387540][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 626.387551][ C1] R13: ffff888020a5a8c0 R14: e8f65512fd6eb16e R15: ffffffff90961a58 [ 626.387562][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 626.387575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.387586][ C1] CR2: 0000000020b63fe4 CR3: 00000000766f4000 CR4: 00000000003506e0 [ 626.387599][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.387608][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 626.387617][ C1] Call Trace: [ 626.387622][ C1] [ 626.387628][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 626.387649][ C1] ? read_lock_is_recursive+0x10/0x10 [ 626.387672][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 626.387700][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 626.387722][ C1] ? nmi_handle+0x12e/0x440 [ 626.387743][ C1] ? nmi_handle+0x25/0x440 [ 626.387763][ C1] ? validate_chain+0x199/0x5950 [ 626.387777][ C1] ? default_do_nmi+0x62/0x150 [ 626.387798][ C1] ? exc_nmi+0xa8/0x100 [ 626.387818][ C1] ? end_repeat_nmi+0x16/0x31 [ 626.387840][ C1] ? validate_chain+0x112/0x5950 [ 626.387854][ C1] ? validate_chain+0x199/0x5950 [ 626.387867][ C1] ? validate_chain+0x199/0x5950 [ 626.387881][ C1] ? validate_chain+0x199/0x5950 [ 626.387895][ C1] [ 626.387899][ C1] [ 626.387904][ C1] ? reacquire_held_locks+0x660/0x660 [ 626.387929][ C1] ? reacquire_held_locks+0x660/0x660 [ 626.387955][ C1] ? __lock_acquire+0x125b/0x1f80 [ 626.387975][ C1] ? reacquire_held_locks+0x660/0x660 [ 626.388007][ C1] ? try_to_wake_up+0x6a4/0x12e0 [ 626.388026][ C1] ? mark_lock+0x9a/0x340 [ 626.388069][ C1] __lock_acquire+0x125b/0x1f80 [ 626.388095][ C1] lock_acquire+0x1f8/0x5a0 [ 626.388115][ C1] ? process_one_work+0x7a9/0x11d0 [ 626.388138][ C1] ? read_lock_is_recursive+0x10/0x10 [ 626.388159][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 626.388186][ C1] ? print_irqtrace_events+0x210/0x210 [ 626.388206][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 626.388223][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 626.388238][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 626.388255][ C1] ? process_one_work+0x7a9/0x11d0 [ 626.388271][ C1] process_one_work+0x7bf/0x11d0 [ 626.388286][ C1] ? process_one_work+0x7a9/0x11d0 [ 626.388308][ C1] ? worker_detach_from_pool+0x260/0x260 [ 626.388327][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 626.388342][ C1] ? kthread_data+0x4e/0xc0 [ 626.388364][ C1] ? wq_worker_running+0x97/0x190 [ 626.388387][ C1] worker_thread+0xa47/0x1200 [ 626.388407][ C1] ? _raw_spin_unlock+0x40/0x40 [ 626.388428][ C1] kthread+0x28d/0x320 [ 626.388439][ C1] ? worker_clr_flags+0x190/0x190 [ 626.388454][ C1] ? kthread_blkcg+0xd0/0xd0 [ 626.388468][ C1] ret_from_fork+0x1f/0x30 [ 626.388493][ C1] [ 626.776782][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 626.783765][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 626.791772][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 626.801844][ T27] Call Trace: [ 626.805130][ T27] [ 626.808091][ T27] dump_stack_lvl+0x1e3/0x2cb [ 626.812892][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 626.818465][ T27] ? panic+0x764/0x764 [ 626.822545][ T27] ? llist_add_batch+0x160/0x1d0 [ 626.827676][ T27] ? vscnprintf+0x59/0x80 [ 626.832024][ T27] panic+0x318/0x764 [ 626.835936][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 626.842102][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 626.847489][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 626.853825][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 626.859998][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 626.866176][ T27] watchdog+0xfc7/0xfd0 [ 626.870358][ T27] ? watchdog+0x1f8/0xfd0 [ 626.874713][ T27] kthread+0x28d/0x320 [ 626.878797][ T27] ? hungtask_pm_notify+0x50/0x50 [ 626.883840][ T27] ? kthread_blkcg+0xd0/0xd0 [ 626.888458][ T27] ret_from_fork+0x1f/0x30 [ 626.892905][ T27] [ 626.896312][ T27] Kernel Offset: disabled [ 626.900635][ T27] Rebooting in 86400 seconds..