last executing test programs: 2m34.07596169s ago: executing program 1 (id=2277): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r0) r1 = memfd_create(&(0x7f0000000f80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%o\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aOg\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x01\x80\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3Wt`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\bx\xd2x\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb0\xbd\xd8,\xea\xeaT\xa6\x12\x1d\x1b6\xcf\xd3\x84-Z\xb4\xc1hh\x81*\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="e502", 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m34.001589577s ago: executing program 1 (id=2366): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @random, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x38, 0x3a, 0xfe, @private2, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'T\x00', 0x0, 0x2b, 0x0, @loopback, @rand_addr=' \x01\x00', [@routing={0x33, 0x0, 0x2, 0x7}]}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m33.786854463s ago: executing program 1 (id=2371): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 2m33.595808324s ago: executing program 1 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m33.403719554s ago: executing program 1 (id=2378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/203, 0xcb}], 0x1, 0x0, 0x401) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) 2m32.444362899s ago: executing program 1 (id=2391): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="40050201f8b602"], 0x7) 2m32.170068053s ago: executing program 32 (id=2391): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="40050201f8b602"], 0x7) 1m51.4142012s ago: executing program 2 (id=2782): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1m51.335109285s ago: executing program 2 (id=2783): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/45, 0x2d}, {&(0x7f0000000400)="970000", 0x3}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8", 0x10}], 0x3) 1m50.199430185s ago: executing program 2 (id=2787): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m49.892830141s ago: executing program 2 (id=2790): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x14) 1m49.744452774s ago: executing program 2 (id=2793): unshare(0xa000200) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m47.444287102s ago: executing program 2 (id=2807): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) sendto$inet(r1, &(0x7f0000000400)='z', 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1m47.029310221s ago: executing program 33 (id=2807): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) sendto$inet(r1, &(0x7f0000000400)='z', 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1m8.664972639s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 57.406976806s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 45.209927724s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 32.456758581s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 21.346130852s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 10.278065719s ago: executing program 4 (id=2567): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) 4.048132254s ago: executing program 0 (id=3670): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x2) accept(r0, &(0x7f0000000880)=@x25, &(0x7f0000000900)=0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 3.88121984s ago: executing program 0 (id=3672): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) 3.696341316s ago: executing program 0 (id=3674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 3.464064188s ago: executing program 0 (id=3677): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[@ANYBLOB="0415"], 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x2) 3.269125117s ago: executing program 0 (id=3681): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 1.667350994s ago: executing program 5 (id=3704): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) dup(r0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[{0x10, 0x1}], 0x10}}], 0x1, 0x4004804) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 1.51959304s ago: executing program 6 (id=3705): r0 = fanotify_init(0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x48001012, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close(r0) getdents(r2, &(0x7f0000000080)=""/49, 0x31) 1.518682566s ago: executing program 5 (id=3706): socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 1.437580807s ago: executing program 6 (id=3707): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000002}, 0x10) 1.356878581s ago: executing program 6 (id=3708): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x200000}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.279367891s ago: executing program 5 (id=3709): fsopen(0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x7fffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_usb_connect$cdc_ncm(0x3, 0xee, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x2, 0x1, 0x2, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x6, 0x7, 0xb8}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@mdlm_detail={0x56, 0x24, 0x13, 0x1, "12617a37d69d6e1082be915d6ab69c0d6d8a2a2f18eef738bb4fb47b70a59cd2df2c57fd61f09db66fd4b13ec0145ee3b9e64afe54803035a5b833c761d0c66010e0af8316694c3578bdb8a9bfaeaded2449"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x88, 0x59}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x79, 0x81, 0x3}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x7a, 0x0, 0x0, 0x0, 0x7}, 0x1a, &(0x7f0000000440)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x9, 0xd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x1, 0x1, 0x5, 0x95}]}, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc01}}]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) mount(0x0, &(0x7f0000001540)='./file0\x00', 0x0, 0x912460, 0x0) 955.129264ms ago: executing program 6 (id=3710): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 954.917816ms ago: executing program 3 (id=3711): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x40045304, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) 819.730066ms ago: executing program 6 (id=3712): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 675.422966ms ago: executing program 3 (id=3713): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xfff1, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 606.690072ms ago: executing program 5 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r4, &(0x7f0000000dc0), 0x0}, 0x20) 488.455025ms ago: executing program 3 (id=3715): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000313000/0x2000)=nil, 0x800000}) 359.779278ms ago: executing program 3 (id=3716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 353.346268ms ago: executing program 5 (id=3726): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x3, "bebda6"}, 0x4) 280.423288ms ago: executing program 5 (id=3717): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) 116.249378ms ago: executing program 0 (id=3718): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0x6, "20fc94453a41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000c40)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x20, 0xf, 0x41, "4ac25d930ad7388a3b7ac43d200e1ffbbe0c23a1df9360b2322deb4face894e297b3821da2bd0aebef37b834ed275b9df6c7b0ac99c6d7e4750030b890d6cfeb80"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 102.69752ms ago: executing program 3 (id=3719): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 16.37121ms ago: executing program 3 (id=3720): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x24000059) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x800000, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 0s ago: executing program 6 (id=3721): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x2, 0x7e, 0x4, 0xaf79, 0x73d0, 0x4972, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 327.615444][ T4499] veth0_vlan: left promiscuous mode [ 327.625535][T13373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.739459][ T6033] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 327.896052][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.936201][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.948651][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.963518][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.977280][ T6033] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.991598][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.029008][ T6033] usb 4-1: config 0 descriptor?? [ 328.422854][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 328.476983][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 328.478431][ T6033] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 328.513246][ T6033] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 329.137827][T13304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.168690][T13304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.273055][T13304] team0: Port device team_slave_0 added [ 329.288485][ T51] Bluetooth: hci2: command tx timeout [ 329.296884][T13304] team0: Port device team_slave_1 added [ 329.442655][T13304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.459344][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.508960][T13304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.543036][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.559820][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.636400][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.762490][T13304] hsr_slave_0: entered promiscuous mode [ 329.769705][T13304] hsr_slave_1: entered promiscuous mode [ 329.776388][T13304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.784327][T13304] Cannot create hsr debugfs directory [ 330.082234][T13410] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2709'. [ 330.403367][T13304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.434974][T13304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.442070][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 330.459999][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 330.478702][T13304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.493548][T13304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.581665][ T5964] usb 4-1: USB disconnect, device number 28 [ 330.707491][T13435] input: syz1 as /devices/virtual/input/input50 [ 330.746757][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.821963][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.857705][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.864991][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.881685][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.888983][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.065968][T13304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.167439][ T30] audit: type=1326 audit(1886407067.146:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.209009][ T30] audit: type=1326 audit(1886407067.146:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.293384][ T30] audit: type=1326 audit(1886407067.156:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.328732][ T30] audit: type=1326 audit(1886407067.156:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.356105][ T30] audit: type=1326 audit(1886407067.156:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.367977][ T51] Bluetooth: hci2: command tx timeout [ 331.388751][ T30] audit: type=1326 audit(1886407067.166:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.464990][ T30] audit: type=1326 audit(1886407067.166:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.552984][T13304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.571272][ T30] audit: type=1326 audit(1886407067.166:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.596661][ T30] audit: type=1326 audit(1886407067.166:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 331.669819][ T30] audit: type=1326 audit(1886407067.166:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6178e929 code=0x7ffc0000 [ 332.391395][T13477] netlink: 'syz.2.2732': attribute type 2 has an invalid length. [ 332.407124][T13304] veth0_vlan: entered promiscuous mode [ 332.415522][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 332.446743][T13304] veth1_vlan: entered promiscuous mode [ 332.531125][T13304] veth0_macvtap: entered promiscuous mode [ 332.582008][T13304] veth1_macvtap: entered promiscuous mode [ 332.646372][T13304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.664611][T13485] netlink: 'syz.2.2735': attribute type 1 has an invalid length. [ 332.706480][T13304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.802438][T13485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.873430][T13488] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.918575][T13304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.937858][T13304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.960420][T13304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.979401][T13304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.172018][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.194009][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.250875][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.262763][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.903224][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.071577][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.174693][T13518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.271373][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.446566][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.983581][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.996915][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.005678][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.022809][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.041508][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.235194][ T5995] bridge_slave_1: left allmulticast mode [ 335.244151][ T5995] bridge_slave_1: left promiscuous mode [ 335.255580][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.317158][ T5995] bridge_slave_0: left allmulticast mode [ 335.324355][ T5995] bridge_slave_0: left promiscuous mode [ 335.339617][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.662570][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.679955][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.701639][ T5995] bond0 (unregistering): Released all slaves [ 336.980877][T13573] input: syz0 as /devices/virtual/input/input51 [ 337.120351][ T51] Bluetooth: hci2: command tx timeout [ 337.295391][ T5995] hsr_slave_0: left promiscuous mode [ 337.339446][ T5995] hsr_slave_1: left promiscuous mode [ 337.345685][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.369059][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.383298][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.396764][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.457465][ T5995] veth1_macvtap: left promiscuous mode [ 337.465582][ T5995] veth0_macvtap: left promiscuous mode [ 337.472961][ T5995] veth1_vlan: left promiscuous mode [ 337.478443][ T5995] veth0_vlan: left promiscuous mode [ 337.547666][T13604] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 337.670306][T13605] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 338.355813][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 338.438722][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 339.109105][ T5921] kernel write not supported for file bpf-prog (pid: 5921 comm: kworker/1:5) [ 339.199593][ T51] Bluetooth: hci2: command tx timeout [ 339.376522][T13622] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2787'. [ 339.516991][T13542] chnl_net:caif_netlink_parms(): no params data found [ 339.526986][T13626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2788'. [ 339.563754][T13626] bridge0: port 3(macvlan2) entered disabled state [ 339.570741][T13626] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.580728][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.085092][T13636] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2792'. [ 340.129573][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.136798][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.179607][T13542] bridge_slave_0: entered allmulticast mode [ 340.187677][T13542] bridge_slave_0: entered promiscuous mode [ 340.236156][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.249178][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.276145][T13542] bridge_slave_1: entered allmulticast mode [ 340.305646][T13542] bridge_slave_1: entered promiscuous mode [ 340.539265][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.619385][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 340.649670][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.790210][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 340.808650][ T5928] usb 4-1: config index 0 descriptor too short (expected 59154, got 18) [ 340.838846][ T5928] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 340.858742][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 340.884674][ T5928] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 340.895851][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.914892][T13542] team0: Port device team_slave_0 added [ 340.936087][ T5928] usb 4-1: Product: syz [ 340.949416][T13542] team0: Port device team_slave_1 added [ 340.957465][ T5928] usb 4-1: Manufacturer: syz [ 340.967369][ T5928] usb 4-1: SerialNumber: syz [ 340.996755][ T5928] usb 4-1: config 0 descriptor?? [ 341.018581][ T5928] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 341.105835][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.128362][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.179543][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.207542][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.229472][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.282330][ T51] Bluetooth: hci2: command tx timeout [ 341.294343][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.462292][T13542] hsr_slave_0: entered promiscuous mode [ 341.477181][T13542] hsr_slave_1: entered promiscuous mode [ 341.498128][T13542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.523431][T13542] Cannot create hsr debugfs directory [ 341.841815][T13660] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2804'. [ 341.942748][T13662] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2805'. [ 342.243365][ T5928] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 342.254344][ T5928] usb 4-1: USB disconnect, device number 29 [ 342.956558][T13542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.018376][T13542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.046593][T13683] bridge: RTM_NEWNEIGH with invalid ether address [ 343.060872][T13542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.087250][T13683] bridge: RTM_NEWNEIGH with invalid ether address [ 343.104183][T13542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.122021][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.131641][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.142069][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.166816][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.176216][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.376927][ T51] Bluetooth: hci2: command tx timeout [ 343.417725][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.535862][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.579103][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.586385][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.626393][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.633654][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.925491][T13686] chnl_net:caif_netlink_parms(): no params data found [ 344.189713][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.197026][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.237649][T13686] bridge_slave_0: entered allmulticast mode [ 344.256459][T13686] bridge_slave_0: entered promiscuous mode [ 344.278035][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.299587][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.311541][T13686] bridge_slave_1: entered allmulticast mode [ 344.325780][T13686] bridge_slave_1: entered promiscuous mode [ 344.412509][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.443400][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.489761][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.562788][T13686] team0: Port device team_slave_0 added [ 344.591249][T13686] team0: Port device team_slave_1 added [ 344.684062][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.707408][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.740035][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.776014][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.789556][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.851702][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.033455][T13686] hsr_slave_0: entered promiscuous mode [ 345.056685][T13686] hsr_slave_1: entered promiscuous mode [ 345.079753][T13686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.087409][T13686] Cannot create hsr debugfs directory [ 345.280937][ T51] Bluetooth: hci1: command tx timeout [ 345.549674][T13542] veth0_vlan: entered promiscuous mode [ 345.588194][T13542] veth1_vlan: entered promiscuous mode [ 345.622331][T13686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.654130][T13686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.689153][T13686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.714885][T13686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.814728][T13542] veth0_macvtap: entered promiscuous mode [ 345.830499][T13542] veth1_macvtap: entered promiscuous mode [ 345.858719][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.893534][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.938222][T13542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.969389][T13542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.000919][T13542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.019443][T13542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.206355][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.217975][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.225946][T13686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.296792][ T121] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 346.318634][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.325432][T13686] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.333589][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.357114][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.364362][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.383912][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.391181][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.493494][ T121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.514290][ T121] usb 4-1: config 0 has no interfaces? [ 346.522664][ T121] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 346.543895][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.570631][ T121] usb 4-1: config 0 descriptor?? [ 346.812325][ T121] usb 4-1: USB disconnect, device number 30 [ 347.007994][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.114059][T13686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.183233][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.363477][ T51] Bluetooth: hci1: command tx timeout [ 347.375065][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.453720][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.489463][T13686] veth0_vlan: entered promiscuous mode [ 347.502900][T13686] veth1_vlan: entered promiscuous mode [ 347.535428][T13686] veth0_macvtap: entered promiscuous mode [ 347.547565][T13686] veth1_macvtap: entered promiscuous mode [ 347.613988][T13686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.687435][T13686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.793654][T13686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.829394][T13686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.859527][T13686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.868312][T13686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.945108][ T5995] bridge_slave_1: left allmulticast mode [ 347.968084][ T5995] bridge_slave_1: left promiscuous mode [ 347.979631][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.009087][ T5995] bridge_slave_0: left allmulticast mode [ 348.021720][ T5995] bridge_slave_0: left promiscuous mode [ 348.027750][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.229875][ T5964] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 348.298291][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.316174][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.327674][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.343850][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.368114][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.431805][ T5964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.450261][ T5964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.483735][ T5964] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.496276][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.513939][ T5964] usb 4-1: SerialNumber: syz [ 348.561831][T13795] netlink: 160720 bytes leftover after parsing attributes in process `syz.0.2847'. [ 348.762462][ T5964] usb 4-1: 0:2 : does not exist [ 348.765193][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.786675][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.798401][ T5995] bond0 (unregistering): Released all slaves [ 348.809878][ T5964] usb 4-1: USB disconnect, device number 31 [ 349.330682][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 349.330701][ T30] audit: type=1400 audit(1886407085.296:250): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=wpan0 [ 349.411938][ T30] audit: type=1400 audit(1886407085.396:251): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.431541][ T30] audit: type=1400 audit(1886407085.396:252): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.440695][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.471342][ T30] audit: type=1400 audit(1886407085.446:253): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.479539][ T51] Bluetooth: hci1: command tx timeout [ 349.501673][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.561914][ T30] audit: type=1400 audit(1886407085.456:254): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.692614][ T5995] hsr_slave_0: left promiscuous mode [ 349.699461][ T30] audit: type=1400 audit(1886407085.486:255): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.729621][ T5995] hsr_slave_1: left promiscuous mode [ 349.743238][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.780624][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.788395][ T30] audit: type=1400 audit(1886407085.496:256): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.824630][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.839106][ T30] audit: type=1400 audit(1886407085.496:257): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.857642][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.929383][ T30] audit: type=1400 audit(1886407085.496:258): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 349.975988][ T5995] veth1_macvtap: left promiscuous mode [ 349.984149][ T5995] veth0_macvtap: left promiscuous mode [ 349.996239][ T5995] veth1_vlan: left promiscuous mode [ 350.002851][ T5995] veth0_vlan: left promiscuous mode [ 350.019543][ T30] audit: type=1400 audit(1886407085.506:259): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13805 comm="syz.0.2852" daddr=224.0.0.1 dest=20000 netif=lo [ 350.479782][ T51] Bluetooth: hci2: command tx timeout [ 350.839772][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 351.013269][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 351.056590][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 351.069466][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.077522][ T9] usb 4-1: Product: syz [ 351.083238][ T9] usb 4-1: Manufacturer: syz [ 351.087886][ T9] usb 4-1: SerialNumber: syz [ 351.096053][ T9] usb 4-1: config 0 descriptor?? [ 351.295839][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 351.334136][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.393773][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 351.519979][ T51] Bluetooth: hci1: command tx timeout [ 352.390837][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.429755][ T9] usb 4-1: USB disconnect, device number 32 [ 352.559840][ T51] Bluetooth: hci2: command tx timeout [ 352.672657][ T9] IPVS: starting estimator thread 0... [ 352.732344][T13874] tipc: Started in network mode [ 352.737279][T13874] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.744430][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.757243][T13874] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.763320][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.769376][T13874] tipc: Enabled bearer , priority 10 [ 352.772134][T13875] IPVS: using max 30 ests per chain, 72000 per kthread [ 352.891186][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.029390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.066616][T13788] chnl_net:caif_netlink_parms(): no params data found [ 353.169486][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.309385][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.361454][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 353.449557][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.589379][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.729580][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.887911][ T1210] tipc: Node number set to 2886997162 [ 354.009524][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.037767][T13788] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.057106][T13788] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.068707][T13788] bridge_slave_0: entered allmulticast mode [ 354.089162][T13788] bridge_slave_0: entered promiscuous mode [ 354.098995][T13788] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.116394][T13788] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.149613][T13788] bridge_slave_1: entered allmulticast mode [ 354.157482][T13788] bridge_slave_1: entered promiscuous mode [ 354.279452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.397243][T13788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.422086][T13788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.600007][T13788] team0: Port device team_slave_0 added [ 354.620185][T13788] team0: Port device team_slave_1 added [ 354.647121][ T51] Bluetooth: hci2: command tx timeout [ 354.723389][T13788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.730702][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.782946][T13788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.811947][T13788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.818966][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.846205][T13788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.951870][T13788] hsr_slave_0: entered promiscuous mode [ 354.980174][T13788] hsr_slave_1: entered promiscuous mode [ 354.986584][T13788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.003896][T13788] Cannot create hsr debugfs directory [ 356.457542][T13788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.478925][T13788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.506106][T13788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.532833][T13788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.720402][ T51] Bluetooth: hci2: command tx timeout [ 356.818024][T13788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.869274][T13788] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.895970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.903240][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.929160][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.936473][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.919396][ C0] net_ratelimit: 3 callbacks suppressed [ 357.919417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 357.925432][T13788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.950698][T14012] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 358.681260][T13788] veth0_vlan: entered promiscuous mode [ 358.733611][T13788] veth1_vlan: entered promiscuous mode [ 358.836498][T13788] veth0_macvtap: entered promiscuous mode [ 358.863055][T13788] veth1_macvtap: entered promiscuous mode [ 358.903741][T13788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.927017][T13788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.948192][T13788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.959433][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.985219][T13788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.998021][T13788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.009220][T13788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.182571][ T5995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.192546][ T5995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.247546][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.256317][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.689535][ T5921] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.827022][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.874606][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 359.896258][ T5921] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.919639][ T5921] usb 7-1: config 0 has no interface number 0 [ 359.960698][ T5921] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 359.974841][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.995080][T14041] ceph: No mds server is up or the cluster is laggy [ 359.999360][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.003402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.023992][ T5921] usb 7-1: Product: syz [ 360.040309][ T5921] usb 7-1: Manufacturer: syz [ 360.044975][ T5921] usb 7-1: SerialNumber: syz [ 360.063428][T14045] ceph: No mds server is up or the cluster is laggy [ 360.088250][ T5921] usb 7-1: config 0 descriptor?? [ 360.120427][ T5921] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 360.135473][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.335853][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.515573][ T5921] usb 7-1: qt2_attach - failed to power on unit: -71 [ 360.528170][ T5921] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 360.542445][ T5921] usb 7-1: USB disconnect, device number 2 [ 360.719689][ T5995] bridge_slave_1: left allmulticast mode [ 360.725395][ T5995] bridge_slave_1: left promiscuous mode [ 360.734343][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.746152][ T5995] bridge_slave_0: left allmulticast mode [ 360.757289][ T5995] bridge_slave_0: left promiscuous mode [ 360.779569][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.039432][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.445489][T14069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.487771][T14069] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 361.609928][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.621340][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.634905][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.651984][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.678609][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.077635][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.086461][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.127906][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.151905][ T5995] bond0 (unregistering): Released all slaves [ 362.533493][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 362.533513][ T30] audit: type=1400 audit(1886407098.516:304): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14085 comm="syz.5.2960" src=1 dest=20000 netif=wpan0 [ 362.978309][ T5995] hsr_slave_0: left promiscuous mode [ 363.012747][ T5995] hsr_slave_1: left promiscuous mode [ 363.033395][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.063172][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.086120][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.101732][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.119700][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.157049][ T5995] veth1_macvtap: left promiscuous mode [ 363.164909][ T5995] veth0_macvtap: left promiscuous mode [ 363.173891][ T5995] veth1_vlan: left promiscuous mode [ 363.181786][ T5995] veth0_vlan: left promiscuous mode [ 363.349575][ T5921] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 363.542640][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 363.574718][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.589470][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.629364][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.638486][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.676275][ T5921] usb 4-1: config 0 descriptor?? [ 363.769678][ T51] Bluetooth: hci2: command tx timeout [ 364.112848][ T5921] HID 045e:07da: Invalid code 65791 type 1 [ 364.152651][ T5921] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0025/input/input52 [ 364.159477][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.195887][ T5921] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 364.427518][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 364.511906][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 364.764038][ T30] audit: type=1326 audit(1886407100.746:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.790900][ T30] audit: type=1326 audit(1886407100.766:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.824441][ T30] audit: type=1326 audit(1886407100.766:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.853711][ T30] audit: type=1326 audit(1886407100.766:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.883577][ T30] audit: type=1326 audit(1886407100.766:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.909500][ T30] audit: type=1326 audit(1886407100.766:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.938513][ T30] audit: type=1326 audit(1886407100.766:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.966278][ T30] audit: type=1326 audit(1886407100.766:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 364.969168][ T6033] usb 4-1: USB disconnect, device number 33 [ 364.993232][ T30] audit: type=1326 audit(1886407100.766:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 365.204950][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.575371][T14072] chnl_net:caif_netlink_parms(): no params data found [ 365.839530][ T51] Bluetooth: hci2: command tx timeout [ 366.154086][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.179211][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.197439][T14072] bridge_slave_0: entered allmulticast mode [ 366.208061][T14072] bridge_slave_0: entered promiscuous mode [ 366.239436][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.253171][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.276423][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.293239][T14072] bridge_slave_1: entered allmulticast mode [ 366.303665][T14072] bridge_slave_1: entered promiscuous mode [ 366.370451][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.386767][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.456666][T14072] team0: Port device team_slave_0 added [ 366.468340][T14072] team0: Port device team_slave_1 added [ 366.551017][ T5921] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 366.580819][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.587838][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.614058][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.630860][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.637861][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.664243][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.761175][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.788251][ T5921] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.817963][ T5921] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.837663][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.847554][ T5921] usb 7-1: SerialNumber: syz [ 366.893272][T14072] hsr_slave_0: entered promiscuous mode [ 366.901302][T14072] hsr_slave_1: entered promiscuous mode [ 366.907986][T14072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.916111][T14072] Cannot create hsr debugfs directory [ 367.072470][ T5921] usb 7-1: 0:2 : does not exist [ 367.108132][ T5921] usb 7-1: USB disconnect, device number 3 [ 367.279515][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 367.536062][T14072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.574458][T14072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.585390][T14186] trusted_key: encrypted_key: insufficient parameters specified [ 367.621551][T14072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.648312][T14072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.918333][T14072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.929798][ T51] Bluetooth: hci2: command tx timeout [ 368.008302][T14072] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.065877][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.073240][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.099364][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.106585][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.320909][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.332702][T14072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.005251][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.359510][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.915187][T14072] veth0_vlan: entered promiscuous mode [ 369.931318][T14072] veth1_vlan: entered promiscuous mode [ 369.964416][ T6033] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 369.994089][T14072] veth0_macvtap: entered promiscuous mode [ 370.000279][ T51] Bluetooth: hci2: command tx timeout [ 370.006690][T14260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3023'. [ 370.023209][T14072] veth1_macvtap: entered promiscuous mode [ 370.057651][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.079188][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.109124][T14072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.128280][T14072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.137302][T14072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.139469][ T6033] usb 7-1: Using ep0 maxpacket: 8 [ 370.146340][T14072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.185537][ T6033] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 370.205621][ T6033] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.236388][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.274077][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.299356][ T6033] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.329565][ T6033] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.348919][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.356549][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.390903][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.399435][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.486644][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.504124][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.593174][ T6033] usb 7-1: usb_control_msg returned -32 [ 370.598979][ T6033] usbtmc 7-1:16.0: can't read capabilities [ 370.889413][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 371.011161][ T6190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.044248][ T24] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 371.054053][ T24] usb 4-1: config 0 has no interface number 0 [ 371.070034][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 371.088224][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.124422][ T6190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.137553][ T24] usb 4-1: config 0 descriptor?? [ 371.147020][ T24] cp210x 4-1:0.25: cp210x converter detected [ 371.240241][ T6190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.439491][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.478498][ T6190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.546988][ T24] cp210x 4-1:0.25: failed to get vendor val 0x000e size 3: -71 [ 371.559231][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 371.570491][ T24] usb 4-1: USB disconnect, device number 34 [ 371.578864][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 371.587761][ T24] cp210x 4-1:0.25: device disconnected [ 371.648215][ T6190] bridge_slave_1: left allmulticast mode [ 371.654460][ T6190] bridge_slave_1: left promiscuous mode [ 371.660406][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.670413][ T6190] bridge_slave_0: left allmulticast mode [ 371.676321][ T6190] bridge_slave_0: left promiscuous mode [ 371.685544][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.105099][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3032'. [ 372.122678][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3032'. [ 372.262846][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.286245][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.366148][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.377010][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.386787][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.398797][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.409107][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.410984][ T6190] bond0 (unregistering): Released all slaves [ 372.479422][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.741405][ T121] usb 7-1: USB disconnect, device number 4 [ 372.867802][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 372.867818][ T30] audit: type=1326 audit(1886407108.846:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.3.3039" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d6178e929 code=0x0 [ 372.956484][T14304] @: renamed from vlan0 (while UP) [ 372.996448][ T6190] hsr_slave_0: left promiscuous mode [ 373.004588][ T6190] hsr_slave_1: left promiscuous mode [ 373.011379][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.018937][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.031167][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.038604][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.075556][ T6190] veth1_macvtap: left promiscuous mode [ 373.081334][ T6190] veth0_macvtap: left promiscuous mode [ 373.087037][ T6190] veth1_vlan: left promiscuous mode [ 373.092473][ T6190] veth0_vlan: left promiscuous mode [ 373.519544][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.766722][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 373.859766][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 374.118973][T14320] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3048'. [ 374.479545][ T5844] Bluetooth: hci2: command tx timeout [ 374.559432][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.879548][ T121] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 375.022766][T14285] chnl_net:caif_netlink_parms(): no params data found [ 375.071960][ T121] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.127408][ T121] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.144827][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.179421][ T121] usb 7-1: Product: syz [ 375.184412][ T121] usb 7-1: Manufacturer: syz [ 375.189051][ T121] usb 7-1: SerialNumber: syz [ 375.363708][T14360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.371527][T14360] IPv6: NLM_F_CREATE should be set when creating new route [ 375.378804][T14360] IPv6: NLM_F_CREATE should be set when creating new route [ 375.537843][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.554807][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.563144][T14285] bridge_slave_0: entered allmulticast mode [ 375.581881][T14285] bridge_slave_0: entered promiscuous mode [ 375.599452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.620550][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.628062][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.637095][T14285] bridge_slave_1: entered allmulticast mode [ 375.647048][T14285] bridge_slave_1: entered promiscuous mode [ 375.703038][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.744679][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.862922][T14285] team0: Port device team_slave_0 added [ 375.898422][T14285] team0: Port device team_slave_1 added [ 376.033453][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.051430][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.079063][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.093550][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.100774][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.127936][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.264659][T14285] hsr_slave_0: entered promiscuous mode [ 376.285935][T14285] hsr_slave_1: entered promiscuous mode [ 376.291882][ T121] cdc_ncm 7-1:1.0: failed to get mac address [ 376.313077][T14285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.330181][T14285] Cannot create hsr debugfs directory [ 376.492437][ T121] cdc_ncm 7-1:1.0: bind() failure [ 376.531549][ T121] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 376.562990][ T5844] Bluetooth: hci2: command tx timeout [ 376.568879][ T121] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 376.613396][ T121] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 376.640513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.678210][ T121] usb 7-1: USB disconnect, device number 5 [ 377.396996][T14285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.413471][T14285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.439237][T14285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.460429][T14285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.576836][T14285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.598323][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.615128][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.619486][ T5921] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 377.622369][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.652400][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.659644][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.679457][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.805018][ T5921] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 377.829800][ T5921] usb 7-1: config 0 has no interface number 0 [ 377.848867][ T5921] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 377.868471][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.889504][ T5921] usb 7-1: Product: syz [ 377.893800][ T5921] usb 7-1: Manufacturer: syz [ 377.898433][ T5921] usb 7-1: SerialNumber: syz [ 377.908815][ T5921] usb 7-1: config 0 descriptor?? [ 377.961037][T14285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.294343][T14285] veth0_vlan: entered promiscuous mode [ 378.309904][T14285] veth1_vlan: entered promiscuous mode [ 378.368289][T14285] veth0_macvtap: entered promiscuous mode [ 378.383256][T14285] veth1_macvtap: entered promiscuous mode [ 378.408661][T14285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.450614][T14285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.492493][T14285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.510642][T14285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.527994][T14285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.538164][T14285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.572493][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578884][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.641417][ T5844] Bluetooth: hci2: command tx timeout [ 378.719547][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.846852][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.864583][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.928385][ T4499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.942860][ T5921] usb 7-1: non-Atmel transceiver xxxx3800 [ 378.949408][ T4499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.143690][ T5921] usb 7-1: Firmware version (0.0) predates our first public release. [ 379.157696][ T5921] usb 7-1: Please update to version 0.2 or newer [ 379.164788][ T5921] usb 7-1: atusb_probe: initialization failed, error = -19 [ 379.199190][ T5921] usb 7-1: USB disconnect, device number 6 [ 379.346093][T14460] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3100'. [ 379.539630][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 379.753764][ T5914] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 379.759660][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.773816][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.793839][ T5914] usb 4-1: Product: syz [ 379.803975][ T5914] usb 4-1: Manufacturer: syz [ 379.819016][ T5914] usb 4-1: SerialNumber: syz [ 379.831141][ T5914] usb 4-1: config 0 descriptor?? [ 379.841830][ T5914] ch341 4-1:0.0: ch341-uart converter detected [ 380.799601][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.860732][ T5914] ch341-uart ttyUSB0: break control not supported, using simulated break [ 380.879764][ T5914] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 380.919855][ T5914] usb 4-1: USB disconnect, device number 35 [ 380.953546][ T5914] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 380.995244][ T5914] ch341 4-1:0.0: device disconnected [ 381.143453][ T4499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.672520][ T4499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.739781][ T4499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.820094][ T4499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.839629][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.945887][ T4499] bridge_slave_1: left allmulticast mode [ 381.951789][ T4499] bridge_slave_1: left promiscuous mode [ 381.957516][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.967096][ T4499] bridge_slave_0: left allmulticast mode [ 381.973092][ T4499] bridge_slave_0: left promiscuous mode [ 381.978831][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.490992][ T5914] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 382.613459][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.624940][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.638876][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.659480][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 382.664974][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.674556][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.692206][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.701175][ T5914] usb 4-1: config 0 has no interface number 0 [ 382.713270][ T5914] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 382.731366][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.739665][ T5914] usb 4-1: Product: syz [ 382.744015][ T5914] usb 4-1: Manufacturer: syz [ 382.748720][ T5914] usb 4-1: SerialNumber: syz [ 382.756824][ T5914] usb 4-1: config 0 descriptor?? [ 382.768086][ T5914] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 382.870603][T14534] Invalid ELF header magic: != ELF [ 382.879546][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.117998][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.138562][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.156765][ T4499] bond0 (unregistering): Released all slaves [ 383.163747][ T30] audit: type=1326 audit(1886407119.146:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.187513][ T30] audit: type=1326 audit(1886407119.146:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.223328][ T30] audit: type=1326 audit(1886407119.206:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bee18d290 code=0x7ffc0000 [ 383.285925][ T30] audit: type=1326 audit(1886407119.206:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bee18d290 code=0x7ffc0000 [ 383.318019][ T30] audit: type=1326 audit(1886407119.206:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.367410][ T30] audit: type=1326 audit(1886407119.206:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.404378][ T30] audit: type=1326 audit(1886407119.206:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.433103][ T30] audit: type=1326 audit(1886407119.206:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.483887][ T30] audit: type=1326 audit(1886407119.206:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.506285][ T30] audit: type=1326 audit(1886407119.206:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz.0.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bee18e929 code=0x7ffc0000 [ 383.559909][T14547] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3138'. [ 383.919599][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.954329][ T4499] hsr_slave_0: left promiscuous mode [ 383.964310][ T4499] hsr_slave_1: left promiscuous mode [ 383.971676][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.979455][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.992411][ T5914] gspca_spca1528: reg_w err -71 [ 383.998207][ T5914] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 384.008675][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.018627][ T5914] usb 4-1: USB disconnect, device number 36 [ 384.024767][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.057437][ T4499] veth1_macvtap: left promiscuous mode [ 384.063310][ T4499] veth0_macvtap: left promiscuous mode [ 384.069171][ T4499] veth1_vlan: left promiscuous mode [ 384.076245][ T4499] veth0_vlan: left promiscuous mode [ 384.108242][T14569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3147'. [ 384.666409][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 384.743482][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 384.805230][ T5844] Bluetooth: hci2: command tx timeout [ 384.960138][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.999542][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.324782][T14529] chnl_net:caif_netlink_parms(): no params data found [ 386.432118][T14624] input: syz0 as /devices/virtual/input/input54 [ 386.802776][T14529] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.820596][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.832722][T14529] bridge_slave_0: entered allmulticast mode [ 386.850020][T14529] bridge_slave_0: entered promiscuous mode [ 386.872848][T14529] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.881338][ T5844] Bluetooth: hci2: command tx timeout [ 386.899515][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.906928][T14529] bridge_slave_1: entered allmulticast mode [ 386.923264][T14529] bridge_slave_1: entered promiscuous mode [ 387.006217][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.033138][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.039605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.182574][T14529] team0: Port device team_slave_0 added [ 387.202463][T14529] team0: Port device team_slave_1 added [ 387.286145][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.309517][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.359457][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.391363][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.398806][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.475753][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.599866][T14529] hsr_slave_0: entered promiscuous mode [ 387.606677][T14529] hsr_slave_1: entered promiscuous mode [ 387.620256][T14529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.627936][T14529] Cannot create hsr debugfs directory [ 388.079510][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.498288][T14529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.542036][T14529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.604973][T14529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.647082][T14529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.978692][ T5844] Bluetooth: hci2: command tx timeout [ 389.119529][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.134493][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.217797][T14529] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.256859][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.264227][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.301540][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.308740][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.920146][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.058653][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3206'. [ 390.159420][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.823308][T14529] veth0_vlan: entered promiscuous mode [ 390.844513][T14529] veth1_vlan: entered promiscuous mode [ 390.928193][T14529] veth0_macvtap: entered promiscuous mode [ 390.963639][T14529] veth1_macvtap: entered promiscuous mode [ 391.038062][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.051868][ T5844] Bluetooth: hci2: command tx timeout [ 391.084843][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.141925][T14529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.169513][T14529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.178285][T14529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.199419][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.215044][T14529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.410675][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.429082][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.537022][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.575600][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.204967][ T5979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.239544][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.373345][ T5979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.517880][ T5979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.666958][ T5979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.849894][ T5979] bridge_slave_1: left allmulticast mode [ 392.855621][ T5979] bridge_slave_1: left promiscuous mode [ 392.869721][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.888124][ T5979] bridge_slave_0: left allmulticast mode [ 392.899536][ T5979] bridge_slave_0: left promiscuous mode [ 392.905732][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.279626][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.319551][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.336304][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.382889][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.473596][ T5979] bond0 (unregistering): Released all slaves [ 394.552841][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.572544][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.583381][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.594500][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.607101][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.359502][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.552833][ T5914] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 395.644520][ T5979] hsr_slave_0: left promiscuous mode [ 395.664614][ T5979] hsr_slave_1: left promiscuous mode [ 395.672691][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.691681][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.714833][T14837] netlink: 'syz.0.3253': attribute type 3 has an invalid length. [ 395.729389][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.737073][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.742476][ T5914] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.762553][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.780060][ T5914] usb 7-1: config 0 descriptor?? [ 395.787856][ T5914] cp210x 7-1:0.0: cp210x converter detected [ 395.804527][ T5979] veth1_macvtap: left promiscuous mode [ 395.823903][ T5979] veth0_macvtap: left promiscuous mode [ 395.840168][ T5979] veth1_vlan: left promiscuous mode [ 395.851309][ T5979] veth0_vlan: left promiscuous mode [ 396.201112][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.212921][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.246328][ T5914] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 396.287535][ T5914] usb 7-1: cp210x converter now attached to ttyUSB0 [ 396.402860][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.476413][ T10] usb 7-1: USB disconnect, device number 7 [ 396.488480][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.562422][ T10] cp210x 7-1:0.0: device disconnected [ 396.729865][ T5844] Bluetooth: hci2: command tx timeout [ 397.439578][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.001499][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 398.129211][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 398.479426][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.807695][ T5844] Bluetooth: hci2: command tx timeout [ 399.064579][T14804] chnl_net:caif_netlink_parms(): no params data found [ 399.393521][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.400960][T14804] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.408451][T14804] bridge_slave_0: entered allmulticast mode [ 399.422537][T14804] bridge_slave_0: entered promiscuous mode [ 399.434203][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 399.446645][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.454666][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 399.454976][T14804] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.468173][T14804] bridge_slave_1: entered allmulticast mode [ 399.480123][T14804] bridge_slave_1: entered promiscuous mode [ 399.493242][ T121] libceph: connect (1)[c::]:6789 error -101 [ 399.499845][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 399.519450][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.609883][T14804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.630138][T14921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3285'. [ 399.643504][T14804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.653523][T14921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3285'. [ 399.766480][ T121] libceph: connect (1)[c::]:6789 error -101 [ 399.787822][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 399.792737][T14804] team0: Port device team_slave_0 added [ 399.799993][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 399.803630][T14804] team0: Port device team_slave_1 added [ 399.817623][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 399.867626][T14804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.883874][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.937538][T14804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.995220][T14804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.015338][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.053875][T14804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.156708][T14804] hsr_slave_0: entered promiscuous mode [ 400.165458][T14804] hsr_slave_1: entered promiscuous mode [ 400.176546][T14804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.187570][T14804] Cannot create hsr debugfs directory [ 400.218045][T14912] ceph: No mds server is up or the cluster is laggy [ 400.229003][T14915] ceph: No mds server is up or the cluster is laggy [ 400.379692][ T5964] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 400.556065][ T5964] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 400.559831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.569487][ T5964] usb 7-1: config 0 has no interface number 0 [ 400.589572][ T5964] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 400.605612][ T5964] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.620353][ T5964] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 400.638568][ T5964] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 400.649012][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.663522][ T5964] usb 7-1: config 0 descriptor?? [ 400.684924][ T5914] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 400.700582][ T5964] gspca_main: spca561-2.14.0 probing abcd:cdee [ 400.872884][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 400.879553][ T5844] Bluetooth: hci2: command tx timeout [ 400.898692][ T5964] spca561 7-1:0.156: probe with driver spca561 failed with error -22 [ 400.920623][ T5914] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.929815][ T5964] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.936852][ T5964] usb 7-1: MIDIStreaming interface descriptor not found [ 400.944279][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.957286][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.973719][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.984397][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.993969][ T5914] usb 4-1: Product: syz [ 400.998287][ T5914] usb 4-1: Manufacturer: syz [ 401.006776][ T5914] usb 4-1: SerialNumber: syz [ 401.116311][ T5964] snd-usb-audio 7-1:0.156: probe with driver snd-usb-audio failed with error -12 [ 401.123276][T14804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.131221][ T5964] usb 7-1: USB disconnect, device number 8 [ 401.146134][T14804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.168478][T14804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.193819][T14804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.368328][T14804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.401799][T14804] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.417111][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.424414][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.448831][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.456118][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.494363][ T5914] usb 4-1: 0:2 : does not exist [ 401.599709][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.962305][T14804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.298040][ T5921] usb 4-1: USB disconnect, device number 37 [ 402.555132][T14804] veth0_vlan: entered promiscuous mode [ 402.586371][T14804] veth1_vlan: entered promiscuous mode [ 402.639599][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.665351][T14804] veth0_macvtap: entered promiscuous mode [ 402.692820][T14804] veth1_macvtap: entered promiscuous mode [ 402.845972][T14804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.886886][T14804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.928094][T14804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.959674][ T5844] Bluetooth: hci2: command tx timeout [ 402.965423][T14804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.989416][T14804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.017334][T14804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.221640][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 403.221657][ T30] audit: type=1326 audit(1886407139.206:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.323886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.332184][ T30] audit: type=1326 audit(1886407139.206:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.355106][ T30] audit: type=1326 audit(1886407139.206:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.374206][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.378274][ T30] audit: type=1326 audit(1886407139.286:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.407693][ T30] audit: type=1326 audit(1886407139.286:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15003 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.434697][ T30] audit: type=1326 audit(1886407139.286:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4fe7c11e5 code=0x7ffc0000 [ 403.513725][ T30] audit: type=1326 audit(1886407139.446:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc4fe78e929 code=0x7ffc0000 [ 403.550250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.575342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.679471][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.442130][ T5979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.581183][ T5979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.719570][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.778983][ T5979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.869208][ T5979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.972642][ T5979] bridge_slave_1: left allmulticast mode [ 404.978331][ T5979] bridge_slave_1: left promiscuous mode [ 404.985326][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.995537][ T5979] bridge_slave_0: left allmulticast mode [ 405.001539][ T5979] bridge_slave_0: left promiscuous mode [ 405.007255][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.381866][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.396454][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.408207][ T5979] bond0 (unregistering): Released all slaves [ 405.663799][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 405.685081][T15046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.711497][T15046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.736996][T15047] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 405.752211][T15046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.759470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.769934][T15046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.125991][ T5979] hsr_slave_0: left promiscuous mode [ 406.159803][ T5979] hsr_slave_1: left promiscuous mode [ 406.173689][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.204717][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.242821][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.279414][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.366089][ T5979] veth1_macvtap: left promiscuous mode [ 406.383146][ T5979] veth0_macvtap: left promiscuous mode [ 406.388898][ T5979] veth1_vlan: left promiscuous mode [ 406.405699][ T5979] veth0_vlan: left promiscuous mode [ 406.430501][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.441446][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.453610][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.465853][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.478464][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.561423][ T30] audit: type=1326 audit(1886407142.546:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15073 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 406.618272][ T30] audit: type=1326 audit(1886407142.566:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15073 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 406.649376][ T30] audit: type=1326 audit(1886407142.566:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15073 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d8e929 code=0x7ffc0000 [ 406.799563][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.091170][T15095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.844646][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.874289][T15124] loop6: detected capacity change from 0 to 524287999 [ 408.353084][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 408.446120][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 408.569484][ T5157] Bluetooth: hci2: command tx timeout [ 408.879431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.337369][T15171] netlink: 'syz.0.3383': attribute type 1 has an invalid length. [ 409.817570][T15171] bond1: entered promiscuous mode [ 409.823537][T15171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.898999][T15174] bond1: (slave bridge1): making interface the new active one [ 409.920155][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.942118][T15174] bridge1: entered promiscuous mode [ 409.955311][T15174] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 410.123286][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3390'. [ 410.158933][T15190] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 410.182169][T15190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3390'. [ 410.484361][T15071] chnl_net:caif_netlink_parms(): no params data found [ 410.639403][ T5157] Bluetooth: hci2: command tx timeout [ 410.947512][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.959634][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.974788][T15071] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.982860][T15071] bridge_slave_0: entered allmulticast mode [ 411.004520][T15071] bridge_slave_0: entered promiscuous mode [ 411.047573][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.090578][T15071] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.116135][T15071] bridge_slave_1: entered allmulticast mode [ 411.224735][T15071] bridge_slave_1: entered promiscuous mode [ 411.597251][T15071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.643825][T15071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.999500][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.038862][T15071] team0: Port device team_slave_0 added [ 412.091090][T15071] team0: Port device team_slave_1 added [ 412.273254][T15071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.291085][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.335608][T15071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.353755][T15071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.366182][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.412595][T15071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.584127][T15071] hsr_slave_0: entered promiscuous mode [ 412.600593][T15071] hsr_slave_1: entered promiscuous mode [ 412.613574][T15071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.636713][T15071] Cannot create hsr debugfs directory [ 412.719490][ T5157] Bluetooth: hci2: command tx timeout [ 413.039453][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.059436][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 413.232662][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 413.249807][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 413.277007][ T10] usb 4-1: string descriptor 0 read error: -22 [ 413.300079][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.342553][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.396773][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 413.415546][ T10] cdc_ncm 4-1:1.0: bind() failure [ 413.442900][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 413.467752][ T10] cdc_ncm 4-1:1.1: bind() failure [ 413.670315][ T5914] usb 4-1: USB disconnect, device number 38 [ 413.802181][T15071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.829227][T15071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.843906][T15071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.865528][T15071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.079402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.089089][T15071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.122930][T15071] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.140693][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.148030][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.197939][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.205263][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.803668][ T5157] Bluetooth: hci2: command tx timeout [ 414.938074][T15071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.119501][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.659772][ T1210] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 415.705382][T15358] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.727717][T15071] veth0_vlan: entered promiscuous mode [ 415.762118][T15071] veth1_vlan: entered promiscuous mode [ 415.824055][T15071] veth0_macvtap: entered promiscuous mode [ 415.829549][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 415.838154][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3445'. [ 415.859565][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3445'. [ 415.868977][T15361] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 415.889815][ T1210] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 415.898150][ T1210] usb 7-1: config 0 has no interface number 0 [ 415.900516][T15071] veth1_macvtap: entered promiscuous mode [ 415.910033][ T1210] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.935035][ T5964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.941299][ T1210] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 415.945640][ T5964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.957323][T15071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.967273][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.975422][ T1210] usb 7-1: Product: syz [ 415.985481][ T1210] usb 7-1: Manufacturer: syz [ 415.997062][T15071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.009568][ T1210] usb 7-1: SerialNumber: syz [ 416.014573][ T5964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 416.025051][ T1210] usb 7-1: config 0 descriptor?? [ 416.034325][ T5964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 416.042000][T15071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.042039][T15071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.042068][T15071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.042098][T15071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.074890][ T1210] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 416.113766][ T1210] em28xx 7-1:0.132: Video interface 132 found: [ 416.123090][ T5964] rtc rtc0: __rtc_set_alarm: err=-22 [ 416.159513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.463495][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.477639][ T1210] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 416.490668][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.540516][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.560874][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.111675][ T1210] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 417.139430][ T1210] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 417.146078][ T1210] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 417.199424][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.229527][ T1210] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 417.237473][ T1210] em28xx 7-1:0.132: analog set to bulk mode. [ 417.263181][ T10] em28xx 7-1:0.132: Registering V4L2 extension [ 417.302640][ T1210] usb 7-1: USB disconnect, device number 9 [ 417.324900][ T1210] em28xx 7-1:0.132: Disconnecting em28xx [ 417.335015][ T5984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.490490][ T5984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.541285][ T10] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 417.548639][ T10] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 417.569430][ T10] em28xx 7-1:0.132: No AC97 audio processor [ 417.592572][ T10] usb 7-1: Decoder not found [ 417.597259][ T10] em28xx 7-1:0.132: failed to create media graph [ 417.603847][ T10] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 417.615666][ T10] em28xx 7-1:0.132: Remote control support is not available for this card. [ 417.624506][ T1210] em28xx 7-1:0.132: Closing input extension [ 417.656303][ T1210] em28xx 7-1:0.132: Freeing device [ 417.731837][ T5984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.957437][ T5984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.215233][ T5984] bridge_slave_1: left allmulticast mode [ 418.221045][ T5984] bridge_slave_1: left promiscuous mode [ 418.226787][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.236681][ T5984] bridge_slave_0: left allmulticast mode [ 418.240232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.245220][ T5984] bridge_slave_0: left promiscuous mode [ 418.260218][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.726575][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.747043][T15411] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3463'. [ 418.778395][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.814385][ T5984] bond0 (unregistering): Released all slaves [ 419.279486][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.287265][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.301886][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.311444][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.324791][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.336003][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.486243][ T5984] hsr_slave_0: left promiscuous mode [ 419.496954][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'. [ 419.513731][ T5984] hsr_slave_1: left promiscuous mode [ 419.535340][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.543102][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.561457][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.585244][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.633886][ T5984] veth1_macvtap: left promiscuous mode [ 419.649686][ T5984] veth0_macvtap: left promiscuous mode [ 419.655579][ T5984] veth1_vlan: left promiscuous mode [ 419.665589][ T5984] veth0_vlan: left promiscuous mode [ 420.319414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.714091][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 420.899351][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 420.906851][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 420.939406][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 420.980761][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 420.995149][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.029430][ T10] usb 7-1: Product: syz [ 421.033763][ T10] usb 7-1: Manufacturer: syz [ 421.038400][ T10] usb 7-1: SerialNumber: syz [ 421.070373][ T10] usb 7-1: config 0 descriptor?? [ 421.079096][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 421.120743][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 421.201912][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 421.338397][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 421.362845][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.439543][ T5844] Bluetooth: hci2: command tx timeout [ 421.603601][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 421.686721][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (188) [ 421.889426][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 422.103548][ T10] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 422.110864][ T10] em28xx 7-1:0.0: No AC97 audio processor [ 422.138985][ T10] usb 7-1: USB disconnect, device number 10 [ 422.153583][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 422.170008][ T10] em28xx 7-1:0.0: Freeing device [ 422.243487][T15484] trusted_key: encrypted_key: insufficient parameters specified [ 422.331639][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3474'. [ 422.399414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.927371][T15426] chnl_net:caif_netlink_parms(): no params data found [ 423.164145][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.182993][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.210161][T15426] bridge_slave_0: entered allmulticast mode [ 423.218115][T15426] bridge_slave_0: entered promiscuous mode [ 423.261339][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.268560][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.309939][T15426] bridge_slave_1: entered allmulticast mode [ 423.317883][T15426] bridge_slave_1: entered promiscuous mode [ 423.326719][T15517] input: syz0 as /devices/virtual/input/input55 [ 423.439414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.459049][T15426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.492263][T15426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.520298][ T5157] Bluetooth: hci2: command tx timeout [ 423.620252][T15426] team0: Port device team_slave_0 added [ 423.642909][T15426] team0: Port device team_slave_1 added [ 423.654485][T15530] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 423.746913][T15426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.763406][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.789439][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.800124][T15426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.817412][T15426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.825108][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.853398][T15426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.956096][T15426] hsr_slave_0: entered promiscuous mode [ 423.965235][T15426] hsr_slave_1: entered promiscuous mode [ 423.977539][T15426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.986170][T15426] Cannot create hsr debugfs directory [ 424.479438][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.688355][T15426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.700077][T15426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.715143][T15426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.735221][T15426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.855046][T15426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.879686][T15426] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.894521][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.901759][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.921807][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.929024][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.429906][T15426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.519429][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.599637][ T5157] Bluetooth: hci2: command tx timeout [ 426.339467][T15426] veth0_vlan: entered promiscuous mode [ 426.365892][T15426] veth1_vlan: entered promiscuous mode [ 426.511079][T15426] veth0_macvtap: entered promiscuous mode [ 426.552596][T15426] veth1_macvtap: entered promiscuous mode [ 426.559351][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.656392][T15426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.698999][T15426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.737440][T15426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.778281][T15426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.809313][T15426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.828313][T15426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.116489][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.133944][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.188149][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.222029][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.319504][ T1210] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 427.487369][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.512086][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 427.553686][ T1210] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 427.581452][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.599396][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.613470][ T1210] usb 4-1: config 0 descriptor?? [ 427.876147][ T1210] usbhid 4-1:0.0: can't add hid device: -71 [ 427.908387][ T1210] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.931682][ T1210] usb 4-1: USB disconnect, device number 39 [ 428.239207][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.280484][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 428.639434][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.021221][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.103675][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.496740][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.593258][ T63] bridge_slave_1: left allmulticast mode [ 429.598951][ T63] bridge_slave_1: left promiscuous mode [ 429.606143][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.617971][ T63] bridge_slave_0: left allmulticast mode [ 429.624062][ T63] bridge_slave_0: left promiscuous mode [ 429.629858][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.679452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.982492][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.044644][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.131937][ T63] bond0 (unregistering): Released all slaves [ 430.679647][ T5928] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.719524][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.861513][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.909484][ T5928] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.938033][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.958783][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.979018][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.994281][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.003780][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.022959][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.032018][T15678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 431.050884][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.059172][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.263350][ T63] hsr_slave_0: left promiscuous mode [ 431.273889][ T63] hsr_slave_1: left promiscuous mode [ 431.286887][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.298084][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.311523][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.319096][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.366488][ T63] veth1_macvtap: left promiscuous mode [ 431.379768][ T63] veth0_macvtap: left promiscuous mode [ 431.385576][ T63] veth1_vlan: left promiscuous mode [ 431.395442][ T63] veth0_vlan: left promiscuous mode [ 431.464153][ T5928] usb 4-1: USB disconnect, device number 40 [ 431.759396][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.207199][ T63] team0 (unregistering): Port device team_slave_1 removed [ 432.308460][ T63] team0 (unregistering): Port device team_slave_0 removed [ 432.809350][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.051706][T15721] input: syz0 as /devices/virtual/input/input56 [ 433.089603][T15723] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3577'. [ 433.127871][ T5157] Bluetooth: hci2: command tx timeout [ 433.408343][T15693] chnl_net:caif_netlink_parms(): no params data found [ 433.668341][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.697778][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.717765][T15693] bridge_slave_0: entered allmulticast mode [ 433.726041][T15693] bridge_slave_0: entered promiscuous mode [ 433.762261][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.769950][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.794866][T15693] bridge_slave_1: entered allmulticast mode [ 433.803867][T15693] bridge_slave_1: entered promiscuous mode [ 433.849398][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.905684][T15693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.924727][T15693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.026743][T15693] team0: Port device team_slave_0 added [ 434.038277][T15693] team0: Port device team_slave_1 added [ 434.137964][T15693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.148948][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.209468][T15693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.233189][T15693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.246853][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.277617][T15693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.437719][T15693] hsr_slave_0: entered promiscuous mode [ 434.460489][T15693] hsr_slave_1: entered promiscuous mode [ 434.466981][T15693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.481673][T15764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.488977][T15764] IPv6: NLM_F_CREATE should be set when creating new route [ 434.496298][T15764] IPv6: NLM_F_CREATE should be set when creating new route [ 434.515070][T15693] Cannot create hsr debugfs directory [ 434.891456][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.205211][ T5157] Bluetooth: hci2: command tx timeout [ 435.571231][T15693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.587039][T15693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.633253][T15693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.678613][T15693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.919349][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.068456][T15693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.145014][T15693] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.187099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.194379][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.232012][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.239399][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.891725][T15693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.969674][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.295829][ T5157] Bluetooth: hci2: command tx timeout [ 437.862902][T15693] veth0_vlan: entered promiscuous mode [ 437.890492][T15833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.900826][T15693] veth1_vlan: entered promiscuous mode [ 437.989888][T15693] veth0_macvtap: entered promiscuous mode [ 438.007537][T15693] veth1_macvtap: entered promiscuous mode [ 438.013473][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.065467][T15693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.088811][T15693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.179073][T15693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.209712][T15693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.218530][T15693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.249055][T15693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.485839][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.512506][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.578667][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.588102][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.609624][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 439.039452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.317412][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.576073][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.686838][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.833808][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.014627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.021217][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.069543][ T63] bridge_slave_1: left allmulticast mode [ 440.075365][ T63] bridge_slave_1: left promiscuous mode [ 440.081147][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.088845][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.108819][ T63] bridge_slave_0: left allmulticast mode [ 440.129433][ T63] bridge_slave_0: left promiscuous mode [ 440.135324][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.534098][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.546181][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.556412][ T63] bond0 (unregistering): Released all slaves [ 440.810868][ T63] hsr_slave_0: left promiscuous mode [ 440.816797][ T63] hsr_slave_1: left promiscuous mode [ 440.823277][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.831164][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.839615][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.879520][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.946044][T15859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.956519][ T63] veth1_macvtap: left promiscuous mode [ 440.962608][ T63] veth0_macvtap: left promiscuous mode [ 440.968311][ T63] veth1_vlan: left promiscuous mode [ 440.978201][ T63] veth0_vlan: left promiscuous mode [ 440.984723][T15861] netlink: 'syz.0.3627': attribute type 4 has an invalid length. [ 441.036313][T15864] netlink: 'syz.0.3627': attribute type 4 has an invalid length. [ 441.119340][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.447767][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.461282][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.470760][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.484537][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.511784][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.876394][ T63] team0 (unregistering): Port device team_slave_1 removed [ 441.931017][ T63] team0 (unregistering): Port device team_slave_0 removed [ 442.166286][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.974524][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'. [ 443.161771][T15900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.209447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.233675][T15906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.250012][T15906] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 443.283045][T15906] bond1: (slave vcan0): Error -95 calling set_mac_address [ 443.427650][T15874] chnl_net:caif_netlink_parms(): no params data found [ 443.599630][ T5844] Bluetooth: hci2: command tx timeout [ 443.690963][T15874] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.712009][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.729940][T15874] bridge_slave_0: entered allmulticast mode [ 443.737466][T15874] bridge_slave_0: entered promiscuous mode [ 443.766867][T15874] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.779566][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.786832][T15874] bridge_slave_1: entered allmulticast mode [ 443.810825][T15874] bridge_slave_1: entered promiscuous mode [ 443.859539][ T5964] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 443.926855][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.952807][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.024942][ T5964] usb 7-1: Using ep0 maxpacket: 16 [ 444.035003][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.073182][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.097428][ T5964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.127894][ T5964] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.153005][T15874] team0: Port device team_slave_0 added [ 444.168808][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.186445][T15874] team0: Port device team_slave_1 added [ 444.197537][ T5964] usb 7-1: config 0 descriptor?? [ 444.239435][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.314267][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.339470][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.365722][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.376616][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.392187][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.405349][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.444473][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.643187][T15874] hsr_slave_0: entered promiscuous mode [ 444.651705][T15920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.676694][T15874] hsr_slave_1: entered promiscuous mode [ 444.682996][T15920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.707602][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 444.711471][T15874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.721800][T15874] Cannot create hsr debugfs directory [ 444.733756][ T5964] HID 045e:07da: Invalid code 65791 type 1 [ 444.736676][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 444.749080][ T5964] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0026/input/input57 [ 444.764775][ T5964] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 444.805280][T15948] ceph: No mds server is up or the cluster is laggy [ 444.939647][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 444.939667][ T30] audit: type=1326 audit(1886407180.926:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.5.3664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4fe78e929 code=0x0 [ 444.999596][ T5937] usb 7-1: USB disconnect, device number 11 [ 445.289735][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.558352][T15874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.585941][T15874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.621131][T15874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.656923][T15874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.679645][ T5844] Bluetooth: hci2: command tx timeout [ 445.823203][T15874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.860445][T15874] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.885063][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.892363][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.949743][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.957020][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.148491][T15996] Invalid ELF header magic: != ELF [ 446.329429][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.453262][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.944850][T15874] veth0_vlan: entered promiscuous mode [ 446.988546][T15874] veth1_vlan: entered promiscuous mode [ 447.064339][T15874] veth0_macvtap: entered promiscuous mode [ 447.076858][T15874] veth1_macvtap: entered promiscuous mode [ 447.107197][T15874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.137369][T15874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.168762][T15874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.185901][T15874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.195136][T15874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.204438][T15874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.358167][T16044] input: syz0 as /devices/virtual/input/input58 [ 447.364798][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.369388][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.380284][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.416832][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.425928][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.582491][T16050] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&I [ 448.027137][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3706'. [ 448.069564][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3706'. [ 448.096955][T16066] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 448.399612][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.904884][T16083] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3713'. [ 449.439500][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.519589][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 449.519715][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 449.539807][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 449.566009][ T24] ================================================================== [ 449.574151][ T24] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 449.583307][ T24] Read of size 8 at addr ffff8881436f4558 by task kworker/1:0/24 [ 449.591035][ T24] [ 449.593417][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 449.593444][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.593458][ T24] Workqueue: events rfkill_op_handler [ 449.593491][ T24] Call Trace: [ 449.593507][ T24] [ 449.593515][ T24] dump_stack_lvl+0x189/0x250 [ 449.593533][ T24] ? __virt_addr_valid+0x1c8/0x5c0 [ 449.593550][ T24] ? rcu_is_watching+0x15/0xb0 [ 449.593565][ T24] ? __kasan_check_byte+0x12/0x40 [ 449.593587][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.593602][ T24] ? rcu_is_watching+0x15/0xb0 [ 449.593617][ T24] ? lock_release+0x4b/0x3e0 [ 449.593631][ T24] ? __virt_addr_valid+0x1c8/0x5c0 [ 449.593648][ T24] ? __virt_addr_valid+0x4a5/0x5c0 [ 449.593666][ T24] print_report+0xd2/0x2b0 [ 449.593688][ T24] ? __list_del_entry_valid_or_report+0x92/0x190 [ 449.593706][ T24] kasan_report+0x118/0x150 [ 449.593728][ T24] ? __list_del_entry_valid_or_report+0x92/0x190 [ 449.593750][ T24] __list_del_entry_valid_or_report+0x92/0x190 [ 449.593769][ T24] bt_accept_unlink+0x39/0x240 [ 449.593787][ T24] l2cap_sock_teardown_cb+0x17e/0x460 [ 449.593809][ T24] l2cap_chan_del+0xb2/0x5e0 [ 449.593832][ T24] l2cap_conn_del+0x388/0x680 [ 449.593851][ T24] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 449.593869][ T24] hci_conn_hash_flush+0x10a/0x230 [ 449.593890][ T24] hci_dev_close_sync+0xaef/0x1330 [ 449.593910][ T24] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 449.593929][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 449.593950][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 449.593972][ T24] hci_dev_do_close+0x2f/0x90 [ 449.593989][ T24] hci_rfkill_set_block+0x21d/0x2e0 [ 449.594004][ T24] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 449.594028][ T24] rfkill_set_block+0x1d2/0x440 [ 449.594058][ T24] rfkill_epo+0x7e/0x180 [ 449.594085][ T24] rfkill_op_handler+0x84/0x240 [ 449.594103][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 449.594124][ T24] process_scheduled_works+0xade/0x17b0 [ 449.594162][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.594193][ T24] worker_thread+0x8a0/0xda0 [ 449.594220][ T24] kthread+0x711/0x8a0 [ 449.594241][ T24] ? __pfx_worker_thread+0x10/0x10 [ 449.594256][ T24] ? __pfx_kthread+0x10/0x10 [ 449.594276][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.594296][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.594317][ T24] ? __pfx_kthread+0x10/0x10 [ 449.594336][ T24] ret_from_fork+0x3fc/0x770 [ 449.594351][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 449.594367][ T24] ? __switch_to_asm+0x39/0x70 [ 449.594384][ T24] ? __switch_to_asm+0x33/0x70 [ 449.594402][ T24] ? __pfx_kthread+0x10/0x10 [ 449.594421][ T24] ret_from_fork_asm+0x1a/0x30 [ 449.594446][ T24] [ 449.594451][ T24] [ 449.867062][ T24] Allocated by task 15426: [ 449.871485][ T24] kasan_save_track+0x3e/0x80 [ 449.876180][ T24] __kasan_kmalloc+0x93/0xb0 [ 449.880787][ T24] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 449.887218][ T24] kmalloc_reserve+0x136/0x290 [ 449.892077][ T24] pskb_expand_head+0x18e/0x1150 [ 449.897025][ T24] netlink_trim+0x1d5/0x2e0 [ 449.901538][ T24] netlink_broadcast_filtered+0x80/0x1140 [ 449.907269][ T24] nlmsg_notify+0xf0/0x1a0 [ 449.911697][ T24] rtnetlink_event+0x224/0x270 [ 449.916464][ T24] notifier_call_chain+0x1b6/0x3e0 [ 449.921584][ T24] netif_set_mac_address+0x37c/0x4c0 [ 449.926878][ T24] do_setlink+0x88c/0x41c0 [ 449.931301][ T24] rtnl_newlink+0x160b/0x1c70 [ 449.935987][ T24] rtnetlink_rcv_msg+0x7cc/0xb70 [ 449.940938][ T24] netlink_rcv_skb+0x208/0x470 [ 449.945714][ T24] netlink_unicast+0x75c/0x8e0 [ 449.950483][ T24] netlink_sendmsg+0x805/0xb30 [ 449.955257][ T24] __sock_sendmsg+0x219/0x270 [ 449.959949][ T24] __sys_sendto+0x3bd/0x520 [ 449.964458][ T24] __x64_sys_sendto+0xde/0x100 [ 449.969234][ T24] do_syscall_64+0xfa/0x3b0 [ 449.973838][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.979752][ T24] [ 449.982186][ T24] Freed by task 15426: [ 449.986256][ T24] kasan_save_track+0x3e/0x80 [ 449.990950][ T24] kasan_save_free_info+0x46/0x50 [ 449.995988][ T24] __kasan_slab_free+0x62/0x70 [ 450.000769][ T24] kfree+0x18e/0x440 [ 450.004690][ T24] skb_release_data+0x62d/0x7c0 [ 450.009556][ T24] consume_skb+0x9e/0xf0 [ 450.013811][ T24] netlink_broadcast_filtered+0x103e/0x1140 [ 450.019719][ T24] nlmsg_notify+0xf0/0x1a0 [ 450.024211][ T24] rtnetlink_event+0x224/0x270 [ 450.028989][ T24] notifier_call_chain+0x1b6/0x3e0 [ 450.034114][ T24] netif_set_mac_address+0x37c/0x4c0 [ 450.039424][ T24] do_setlink+0x88c/0x41c0 [ 450.043875][ T24] rtnl_newlink+0x160b/0x1c70 [ 450.048561][ T24] rtnetlink_rcv_msg+0x7cc/0xb70 [ 450.053510][ T24] netlink_rcv_skb+0x208/0x470 [ 450.058297][ T24] netlink_unicast+0x75c/0x8e0 [ 450.063068][ T24] netlink_sendmsg+0x805/0xb30 [ 450.067845][ T24] __sock_sendmsg+0x219/0x270 [ 450.072551][ T24] __sys_sendto+0x3bd/0x520 [ 450.077069][ T24] __x64_sys_sendto+0xde/0x100 [ 450.081847][ T24] do_syscall_64+0xfa/0x3b0 [ 450.086361][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.092262][ T24] [ 450.094597][ T24] The buggy address belongs to the object at ffff8881436f4000 [ 450.094597][ T24] which belongs to the cache kmalloc-2k of size 2048 [ 450.108659][ T24] The buggy address is located 1368 bytes inside of [ 450.108659][ T24] freed 2048-byte region [ffff8881436f4000, ffff8881436f4800) [ 450.122647][ T24] [ 450.124981][ T24] The buggy address belongs to the physical page: [ 450.131405][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881436f1000 pfn:0x1436f0 [ 450.141565][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 450.150093][ T24] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 450.158790][ T24] page_type: f5(slab) [ 450.162870][ T24] raw: 057ff00000000240 ffff88801a442000 ffff888140400948 ffffea000502c210 [ 450.171463][ T24] raw: ffff8881436f1000 0000000000080004 00000000f5000000 0000000000000000 [ 450.180055][ T24] head: 057ff00000000240 ffff88801a442000 ffff888140400948 ffffea000502c210 [ 450.188732][ T24] head: ffff8881436f1000 0000000000080004 00000000f5000000 0000000000000000 [ 450.197414][ T24] head: 057ff00000000003 ffffea00050dbc01 00000000ffffffff 00000000ffffffff [ 450.206095][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 450.214768][ T24] page dumped because: kasan: bad access detected [ 450.221200][ T24] page_owner tracks the page as allocated [ 450.226930][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3380473262, free_ts 0 [ 450.246568][ T24] post_alloc_hook+0x240/0x2a0 [ 450.251356][ T24] get_page_from_freelist+0x21d5/0x22b0 [ 450.256929][ T24] __alloc_frozen_pages_noprof+0x181/0x370 [ 450.262747][ T24] alloc_pages_mpol+0x232/0x4a0 [ 450.267720][ T24] allocate_slab+0x8a/0x3b0 [ 450.272249][ T24] ___slab_alloc+0xbfc/0x1480 [ 450.276932][ T24] __kmalloc_cache_noprof+0x296/0x3d0 [ 450.282316][ T24] acpi_ds_create_walk_state+0xd9/0x270 [ 450.287868][ T24] acpi_ps_execute_method+0x220/0x7c0 [ 450.293250][ T24] acpi_ns_evaluate+0x5a6/0xa20 [ 450.298112][ T24] acpi_evaluate_object+0x53f/0xa10 [ 450.303415][ T24] acpi_evaluate_integer+0xfc/0x270 [ 450.308627][ T24] acpi_bus_get_status+0x14a/0x380 [ 450.313754][ T24] acpi_add_single_object+0x391/0x1a20 [ 450.319226][ T24] acpi_bus_check_add+0x349/0x820 [ 450.324271][ T24] acpi_ns_walk_namespace+0x268/0x690 [ 450.329660][ T24] page_owner free stack trace missing [ 450.335031][ T24] [ 450.337362][ T24] Memory state around the buggy address: [ 450.342996][ T24] ffff8881436f4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.351088][ T24] ffff8881436f4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.359160][ T24] >ffff8881436f4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.367229][ T24] ^ [ 450.374167][ T24] ffff8881436f4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.382240][ T24] ffff8881436f4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.390402][ T24] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 450.468833][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 450.476135][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 450.488067][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.498169][ T24] Workqueue: events rfkill_op_handler [ 450.503633][ T24] Call Trace: [ 450.506934][ T24] [ 450.509890][ T24] dump_stack_lvl+0x99/0x250 [ 450.514513][ T24] ? __asan_memcpy+0x40/0x70 [ 450.519144][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.524377][ T24] ? __pfx__printk+0x10/0x10 [ 450.529003][ T24] panic+0x2db/0x790 [ 450.532925][ T24] ? __pfx_panic+0x10/0x10 [ 450.537394][ T24] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 450.543307][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 450.549654][ T24] ? print_memory_metadata+0x314/0x400 [ 450.555137][ T24] ? __list_del_entry_valid_or_report+0x92/0x190 [ 450.561478][ T24] check_panic_on_warn+0x89/0xb0 [ 450.566453][ T24] ? __list_del_entry_valid_or_report+0x92/0x190 [ 450.572810][ T24] end_report+0x78/0x160 [ 450.577070][ T24] kasan_report+0x129/0x150 [ 450.581591][ T24] ? __list_del_entry_valid_or_report+0x92/0x190 [ 450.587966][ T24] __list_del_entry_valid_or_report+0x92/0x190 [ 450.594144][ T24] bt_accept_unlink+0x39/0x240 [ 450.598934][ T24] l2cap_sock_teardown_cb+0x17e/0x460 [ 450.604329][ T24] l2cap_chan_del+0xb2/0x5e0 [ 450.608942][ T24] l2cap_conn_del+0x388/0x680 [ 450.613636][ T24] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 450.619109][ T24] hci_conn_hash_flush+0x10a/0x230 [ 450.624238][ T24] hci_dev_close_sync+0xaef/0x1330 [ 450.629370][ T24] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 450.634931][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 450.640843][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 450.647195][ T24] hci_dev_do_close+0x2f/0x90 [ 450.651888][ T24] hci_rfkill_set_block+0x21d/0x2e0 [ 450.657097][ T24] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 450.662834][ T24] rfkill_set_block+0x1d2/0x440 [ 450.667707][ T24] rfkill_epo+0x7e/0x180 [ 450.671969][ T24] rfkill_op_handler+0x84/0x240 [ 450.676830][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 450.682561][ T24] process_scheduled_works+0xade/0x17b0 [ 450.688129][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.694127][ T24] worker_thread+0x8a0/0xda0 [ 450.698741][ T24] kthread+0x711/0x8a0 [ 450.702837][ T24] ? __pfx_worker_thread+0x10/0x10 [ 450.707960][ T24] ? __pfx_kthread+0x10/0x10 [ 450.712565][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.717781][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.722996][ T24] ? __pfx_kthread+0x10/0x10 [ 450.727607][ T24] ret_from_fork+0x3fc/0x770 [ 450.732215][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 450.737342][ T24] ? __switch_to_asm+0x39/0x70 [ 450.742122][ T24] ? __switch_to_asm+0x33/0x70 [ 450.746900][ T24] ? __pfx_kthread+0x10/0x10 [ 450.751507][ T24] ret_from_fork_asm+0x1a/0x30 [ 450.756296][ T24] [ 450.759748][ T24] Kernel Offset: disabled [ 450.764088][ T24] Rebooting in 86400 seconds..