last executing test programs: 4.623922415s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f94e659c4a73a448e4cf6320f968cb08df9bd1f7a0ae887d570f4a3822d445315befa7d4fc55be4de5350232cdccb38d853101fb85801843d3195876b78774893f25d5a73c26fac9ea3b7acbf4e7302a8352f21fcc2b2553a025155562f0f6440fdb1f4c5a5eae4ba1c58db6b0e13ba36af7079ebaa89985dd199a70da325e", 0x7f}, {&(0x7f00000000c0)="1c", 0x1}], 0x2}}], 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 4.471846877s ago: executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000019c0)=0x40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x0, 0x7fff, 0x4000, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0xf, [0x3, 0xff, 0x4, 0x7]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="18005e800800020000000000080001"], 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 2.70150865s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) rt_sigaction(0x2f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) memfd_create(&(0x7f00000002c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x0) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x36, [@private, @rand_addr]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.315187767s ago: executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f045}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/4096, 0x1004}], 0x1, 0x0, 0x0) 2.16602053s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000300"], 0x48}}, 0x0) 1.920348031s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e275460f0011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r0, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 1.902501638s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) (async) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x2, r4}) (async) fcntl$setlease(r3, 0x400, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) creat(&(0x7f0000000100)='./file0\x00', 0x0) (rerun: 32) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800600010000000000280003800c00010000000000000000000c00010003000000020000000c00010005f8ffff000000001c0004800c00010006000000000800000c02000007000000000000000c000200040000000300000008000500", @ANYRES32=r2], 0x9c}, 0x1, 0xba01}, 0x0) (rerun: 32) 1.865066005s ago: executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000019c0)=0x40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x0, 0x7fff, 0x4000, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0xf, [0x3, 0xff, 0x4, 0x7]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="18005e800800020000000000080001"], 0x34}}, 0x0) 1.733917175s ago: executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.685260682s ago: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x8, 0x10, &(0x7f0000002480)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000632074907b2ec2a33148865ac296ec8574ab12b7a86826ba8abae8985eba2227f40"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1004, &(0x7f00000034c0)=""/4100, 0x41000}, 0x90) 1.581383415s ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "bfc8a80654ce7dcfc0b06ed189fed71b5619c0ce1a1a51f02b5ad66d2bf06c91", 0x2, 0x9, 0x8000}, 0x3c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x706, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r7, &(0x7f00000003c0), 0xa3) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r7, &(0x7f0000000080), 0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="1b210d2f207f25762edac27194511d7bae73d48ca4ca9371462a327bdc9b5485964c65757b6532e42d8032f15830af23c120fc9d7bc15724f2ea04f4ff8d93932a9531c8e768fc05ad1072fae7744f2fe1fa1b995444be17ad8d1fecc2f8236373ddbc1009da00c0c2cec0431710b40f8cc2b6db05f59f385483d8ad2c43c02dc4d4daf7696620c8ad74c52fadd0237e5adad5054222a7eb7630802690ae86747fa354bb99142cdaf2cb2e41be650bed0ec47190a4876545b042c9d57d4712f27125b45e15ad4e46ff7c13641b52198f8589705ec8dfd571737e49a536e0de4419ffc264a4d10c4d", 0xe8}, {&(0x7f0000000580)="de5e1c1e2163d50e8acbe4a133186adff6d619676fd11023df7e243b7f549679a223c1fb10a2b42130eefdf5b4861e4ec7a38d564ee743d185a38ad3b2e24d7c710638b7da4d35a5d038e0379f6901bcd2f3c20c23ae229678bf9ca9910b2fa49f6172991ae6492fb939965c31ffebd5c9d2142ca7fd6fcd6516a730b7563c6178b852b9c995742bcd05d4b825b4f2ff5f19bf2dc41b8ba30e81885e6b9b76bd954e94836b3d2d2f7eba63f7a0da5927d2b7ae4bbe73a87917e3c04f28c2cd67a27258712a3d0231f17cba125220e536beee6502ca0a33", 0xd7}], 0x2) accept4(r8, 0x0, 0x0, 0x0) sendfile(r8, r8, 0x0, 0x7) sendto$packet(r5, &(0x7f00000000c0)="3f050e00e6e8120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x4001, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x10a02) mmap$snddsp_control(&(0x7f0000feb000/0x14000)=nil, 0x1000, 0x0, 0x1010, r9, 0x83000000) 1.568157784s ago: executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.51511175s ago: executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.464891228s ago: executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x183101, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="65217d09d903"], 0xffdd) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.325840949s ago: executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 1.158705422s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000280)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 953.177336ms ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f94e659c4a73a448e4cf6320f968cb08df9bd1f7a0ae887d570f4a3822d445315befa7d4fc55be4de5350232cdccb38d853101fb85801843d3195876b78774893f25d5a73c26fac9ea3b7acbf4e7302a8352f21fcc2b2553a025155562f0f6440fdb1f4c5a5eae4ba1c58db6b0e13ba36af7079ebaa89985dd199a70da325e", 0x7f}, {&(0x7f00000000c0)="1c", 0x1}], 0x2}}], 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 860.851251ms ago: executing program 0: r0 = getpid() syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "18"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x100}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x903d01) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x29, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x5452, &(0x7f0000000100)={0x3, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) r4 = syz_pidfd_open(r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x34, 0x9, 0x402, r5, 0x92f, '\x00', 0x0, r5, 0x3, 0x2, 0x5}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x4, &(0x7f00000006c0)={@map=r6, 0xffffffffffffffff, 0x7}, 0x10) open_tree(r5, &(0x7f0000004600)='\x00', 0x89101) close_range(r4, 0xffffffffffffffff, 0x0) 806.681992ms ago: executing program 2: r0 = semget(0x0, 0x3, 0x10) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000000)=""/1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) semget(0x0, 0x3, 0x10) (async) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000000)=""/1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) (async) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) (async) 753.945386ms ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) sendmmsg$alg(r4, &(0x7f0000002340)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@assoc={0x18}], 0x18}], 0x3, 0x0) r5 = eventfd(0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090000000000000000001700000008000300", @ANYRES32=r10], 0x34}}, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="5cef79ecab34c8661e34c5a16a283154bb52c3ed1066c54b22ed22637b96d160c1"]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 604.707168ms ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f94e659c4a73a448e4cf6320f968cb08df9bd1f7a0ae887d570f4a3822d445315befa7d4fc55be4de5350232cdccb38d853101fb85801843d3195876b78774893f25d5a73c26fac9ea3b7acbf4e7302a8352f21fcc2b2553a025155562f0f6440fdb1f4c5a5eae4ba1c58db6b0e13ba36af7079ebaa89985dd199a70da325e", 0x7f}, {&(0x7f00000000c0)="1c", 0x1}], 0x2}}], 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 560.077543ms ago: executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 478.421933ms ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x8, 0x10, &(0x7f0000002480)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000632074907b2ec2a33148865ac296ec8574ab12b7a8682"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1004, &(0x7f00000034c0)=""/4100, 0x41000}, 0x90) 460.194523ms ago: executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000019c0)=0x40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x0, 0x7fff, 0x4000, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0xf, [0x3, 0xff, 0x4, 0x7]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="18005e800800020000000000080001"], 0x34}}, 0x0) 407.024788ms ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) rt_sigaction(0x2f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) memfd_create(&(0x7f00000002c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x0) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x36, [@private, @rand_addr]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 378.252672ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000300040000000c"], 0x48}}, 0x0) 367.120993ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000280)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 244.284155ms ago: executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x183101, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="65217d09d903"], 0xffdd) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 48.193145ms ago: executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f94e659c4a73a448e4cf6320f968cb08df9bd1f7a0ae887d570f4a3822d445315befa7d4fc55be4de5350232cdccb38d853101fb85801843d3195876b78774893f25d5a73c26fac9ea3b7acbf4e7302a8352f21fcc2b2553a025155562f0f6440fdb1f4c5a5eae4ba1c58db6b0e13ba36af7079ebaa89985dd199a70da325e", 0x7f}, {&(0x7f00000000c0)="1c", 0x1}], 0x2}}], 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 0s ago: executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x1d, 0x9) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): ] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.275953][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.288154][T10503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.315089][T10503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.336320][T10503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.349705][T10503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.366522][T10503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.375106][ T929] usb 4-1: USB disconnect, device number 32 [ 382.587425][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.647152][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.687760][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.806063][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.837956][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.843126][T10612] veth0_vlan: entered promiscuous mode [ 382.909251][T10612] veth1_vlan: entered promiscuous mode [ 383.091174][T10612] veth0_macvtap: entered promiscuous mode [ 383.115433][T10612] veth1_macvtap: entered promiscuous mode [ 383.145760][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.167421][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.190168][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.203226][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.217770][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.240381][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.252779][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.273037][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.286492][ T784] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 383.303852][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.322452][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.334411][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.362334][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.403602][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.413824][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.436403][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.476342][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.496680][ T784] usb 4-1: Using ep0 maxpacket: 16 [ 383.507476][ T784] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 383.518273][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.529305][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.543187][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.555400][ T784] usb 4-1: New USB device found, idVendor=413c, idProduct=4007, bcdDevice=36.f5 [ 383.565212][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.576152][ T784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.584655][ T784] usb 4-1: Product: syz [ 383.598636][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.615854][ T784] usb 4-1: Manufacturer: syz [ 383.623111][ T784] usb 4-1: SerialNumber: syz [ 383.632543][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.655773][ T784] usb 4-1: config 0 descriptor?? [ 383.697179][T10612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.733238][T10612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.774437][T10612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.787912][T10612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.908755][ T784] usb 4-1: USB disconnect, device number 33 [ 384.159733][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.176856][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.327263][ T6290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.335576][ T6290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.454041][ T6159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.607690][T10844] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 384.698640][ T6159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.782164][T10844] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 384.903894][T10846] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 385.079355][ T6159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.362523][ T6159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.524825][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.535295][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.550694][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.559923][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.572637][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.580785][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.785671][ T6159] bridge_slave_1: left allmulticast mode [ 385.805647][ T6159] bridge_slave_1: left promiscuous mode [ 385.829379][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.899022][ T6159] bridge_slave_0: left allmulticast mode [ 385.904806][ T6159] bridge_slave_0: left promiscuous mode [ 385.941146][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.963011][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.988562][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.011158][ T6159] bond0 (unregistering): Released all slaves [ 387.251048][ T29] audit: type=1326 audit(1717233605.387:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.306456][ T29] audit: type=1326 audit(1717233605.387:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.329534][ T29] audit: type=1326 audit(1717233605.407:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.355267][ T29] audit: type=1326 audit(1717233605.407:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.393130][ T29] audit: type=1326 audit(1717233605.407:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.477278][ T29] audit: type=1326 audit(1717233605.417:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.596369][ T29] audit: type=1326 audit(1717233605.417:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.623010][ T53] Bluetooth: hci1: command tx timeout [ 387.720512][ T29] audit: type=1326 audit(1717233605.417:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 387.767734][ T29] audit: type=1326 audit(1717233605.417:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadd227bae0 code=0x7ffc0000 [ 387.864197][ T29] audit: type=1326 audit(1717233605.417:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 388.128404][ T6159] hsr_slave_0: left promiscuous mode [ 388.153823][ T6159] hsr_slave_1: left promiscuous mode [ 388.188980][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.218057][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.239076][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.261771][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.348211][ T6159] veth1_macvtap: left promiscuous mode [ 388.366136][ T6159] veth0_macvtap: left promiscuous mode [ 388.385688][ T6159] veth1_vlan: left promiscuous mode [ 388.402979][ T6159] veth0_vlan: left promiscuous mode [ 389.615033][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 389.672308][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 389.707293][ T53] Bluetooth: hci1: command tx timeout [ 389.786429][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 389.990213][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.001630][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.012507][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 390.022429][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.044270][ T8] usb 4-1: config 0 descriptor?? [ 390.458136][T10870] chnl_net:caif_netlink_parms(): no params data found [ 390.539477][ T8] hid-multitouch 0003:0EEF:72D0.000F: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 390.765560][ T8] usb 4-1: USB disconnect, device number 34 [ 390.930205][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.956004][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.996654][T10870] bridge_slave_0: entered allmulticast mode [ 391.035306][T10870] bridge_slave_0: entered promiscuous mode [ 391.145947][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.156783][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.164442][T10870] bridge_slave_1: entered allmulticast mode [ 391.179692][T10870] bridge_slave_1: entered promiscuous mode [ 391.314354][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.395466][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.569575][T10870] team0: Port device team_slave_0 added [ 391.613224][T10870] team0: Port device team_slave_1 added [ 391.700937][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.716675][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.785498][ T53] Bluetooth: hci1: command tx timeout [ 391.822884][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.128825][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.148698][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.195258][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.553735][T10870] hsr_slave_0: entered promiscuous mode [ 392.586215][T10870] hsr_slave_1: entered promiscuous mode [ 392.622793][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.635700][T10870] Cannot create hsr debugfs directory [ 392.728378][ T784] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.789688][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.936468][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 392.951294][ T784] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 392.980710][T11114] batadv_slave_1: entered promiscuous mode [ 392.994417][ T784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.004503][T11113] batadv_slave_1: left promiscuous mode [ 393.021448][ T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.060308][ T784] usb 5-1: Product: syz [ 393.106327][ T784] usb 5-1: Manufacturer: syz [ 393.111055][ T784] usb 5-1: SerialNumber: syz [ 393.181865][ T784] usb 5-1: bad CDC descriptors [ 393.426428][ T784] usb 5-1: USB disconnect, device number 24 [ 393.857215][ T53] Bluetooth: hci1: command tx timeout [ 394.118450][T10870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.148409][T10870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.181528][T10870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.202071][T10870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.247395][ T784] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 394.379648][T11161] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 394.440245][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.453579][T11156] kvm: pic: non byte write [ 394.466376][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 394.484660][ T784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.508442][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.547781][ T784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.580518][ T784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.602827][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.610013][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.619139][ T784] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.635345][ T784] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.659027][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.666210][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.682927][ T784] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.699973][ T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.757599][ T784] usb 5-1: Product: syz [ 394.779771][ T784] usb 5-1: Manufacturer: syz [ 394.811078][ T784] usb 5-1: SerialNumber: syz [ 394.948049][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.050854][ T784] usb 5-1: 0:2 : does not exist [ 395.103292][ T784] usb 5-1: USB disconnect, device number 25 [ 395.164715][T10870] veth0_vlan: entered promiscuous mode [ 395.198952][ T6965] udevd[6965]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.235607][T10870] veth1_vlan: entered promiscuous mode [ 395.332473][T10870] veth0_macvtap: entered promiscuous mode [ 395.369617][T10870] veth1_macvtap: entered promiscuous mode [ 395.411455][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.422414][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.434492][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.447194][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.463871][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.478131][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.488655][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.504103][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.515023][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.516085][T11189] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 395.525581][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.528129][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.554950][T11189] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.587924][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.632358][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.643604][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.686528][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.707133][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.732703][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.743006][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.758416][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.771040][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.785387][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.804451][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.832514][T10870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.847563][T10870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.863687][T10870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.882381][T10870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.996537][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 396.166140][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 396.166158][ T29] audit: type=1800 audit(1717233614.297:181): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 [ 396.220448][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.258309][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.308273][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 396.322175][T11210] input: syz1 as /devices/virtual/input/input39 [ 396.340450][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.354787][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.377746][ T9] usb 5-1: config 0 descriptor?? [ 396.397146][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.417476][ T9] usbhid 5-1:0.0: can't add hid device: -22 [ 396.423549][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 396.608281][ T784] usb 5-1: USB disconnect, device number 26 [ 396.763199][ T6159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.895925][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.950149][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.046872][ T6159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.261164][ T6159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.278260][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 397.428986][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.632288][ T6159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.849954][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.868100][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.881442][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.896758][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.914834][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 397.922491][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.946839][ T6159] bridge_slave_1: left allmulticast mode [ 397.983880][ T6159] bridge_slave_1: left promiscuous mode [ 398.009070][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.054677][ T6159] bridge_slave_0: left allmulticast mode [ 398.063843][ T6159] bridge_slave_0: left promiscuous mode [ 398.070430][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.463315][T11268] random: crng reseeded on system resumption [ 399.227135][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.278430][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.301074][ T6159] bond0 (unregistering): Released all slaves [ 399.916762][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 400.028222][ T53] Bluetooth: hci0: command tx timeout [ 400.146683][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 400.161539][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 400.175746][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.196382][ T6159] hsr_slave_0: left promiscuous mode [ 400.203172][ T6159] hsr_slave_1: left promiscuous mode [ 400.210936][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.225475][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 400.253228][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.261165][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.276423][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 400.298305][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.315427][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.336931][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.366196][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.415684][ T6159] veth1_macvtap: left promiscuous mode [ 400.422641][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.437987][ T8] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 400.453637][ T6159] veth0_macvtap: left promiscuous mode [ 400.468815][ T6159] veth1_vlan: left promiscuous mode [ 400.488786][ T6159] veth0_vlan: left promiscuous mode [ 400.807076][T11350] input: syz1 as /devices/virtual/input/input40 [ 401.560052][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 401.703804][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 402.109946][ T53] Bluetooth: hci0: command tx timeout [ 402.347884][ T5164] usb 3-1: USB disconnect, device number 39 [ 402.601366][T11255] chnl_net:caif_netlink_parms(): no params data found [ 402.939488][T11402] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 402.956547][T11402] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.967855][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.975126][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.992503][T11255] bridge_slave_0: entered allmulticast mode [ 403.007996][T11255] bridge_slave_0: entered promiscuous mode [ 403.044933][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.069619][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.123761][T11255] bridge_slave_1: entered allmulticast mode [ 403.149487][T11255] bridge_slave_1: entered promiscuous mode [ 403.322103][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.382449][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.600022][T11255] team0: Port device team_slave_0 added [ 403.638779][T11255] team0: Port device team_slave_1 added [ 403.745447][T11439] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.745611][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.783735][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.854976][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.872832][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.879942][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.907818][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.919517][T11439] tipc: Started in network mode [ 403.924663][T11439] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 403.932387][T11439] tipc: Enabled bearer , priority 10 [ 404.011986][T11255] hsr_slave_0: entered promiscuous mode [ 404.021915][T11255] hsr_slave_1: entered promiscuous mode [ 404.032008][T11255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.044736][T11255] Cannot create hsr debugfs directory [ 404.176681][ T5114] Bluetooth: hci0: command tx timeout [ 405.047381][ T45] tipc: Node number set to 8432298 [ 405.218988][T11255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.273850][T11255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.333987][T11255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.368609][T11255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.663137][T11255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.733814][T11255] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.748209][T11511] random: crng reseeded on system resumption [ 405.763733][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.771054][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.851805][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.858990][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.089938][T11255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.256741][ T5114] Bluetooth: hci0: command 0x0419 tx timeout [ 406.319461][T11255] veth0_vlan: entered promiscuous mode [ 406.372420][T11255] veth1_vlan: entered promiscuous mode [ 406.633856][ T668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.806370][ T668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.851096][T11255] veth0_macvtap: entered promiscuous mode [ 406.885229][T11255] veth1_macvtap: entered promiscuous mode [ 406.971432][ T668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.089928][ T668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.130027][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.154953][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.165073][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.184795][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.194770][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.205667][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.229542][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.255958][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.273268][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.283896][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.321483][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.330504][T11255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.342801][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.355770][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.368975][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.384460][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.393965][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.462636][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.497634][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.512014][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.546335][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.557450][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.569236][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.579173][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.589881][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.599940][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.610604][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.622980][T11255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.643536][T11255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.653011][T11255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.663899][T11255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.673716][T11255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.814235][ T668] bridge_slave_1: left allmulticast mode [ 407.820244][ T668] bridge_slave_1: left promiscuous mode [ 407.825943][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.836100][ T668] bridge_slave_0: left allmulticast mode [ 407.842387][ T668] bridge_slave_0: left promiscuous mode [ 407.848564][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.314677][ T668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.328684][ T668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.342987][ T668] bond0 (unregistering): Released all slaves [ 408.347370][ T5114] Bluetooth: hci0: command 0x0419 tx timeout [ 408.847659][T11555] chnl_net:caif_netlink_parms(): no params data found [ 408.886439][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.916304][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.123577][ T668] hsr_slave_0: left promiscuous mode [ 409.135673][ T668] hsr_slave_1: left promiscuous mode [ 409.205631][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.226210][ T668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.271177][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.297025][ T668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.377888][ T668] veth1_macvtap: left promiscuous mode [ 409.383464][ T668] veth0_macvtap: left promiscuous mode [ 409.416563][ T668] veth1_vlan: left promiscuous mode [ 409.421905][ T668] veth0_vlan: left promiscuous mode [ 409.457345][ T5114] Bluetooth: hci2: command tx timeout [ 409.831597][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.845955][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.857362][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.877361][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.889203][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.896662][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.105564][T11602] random: crng reseeded on system resumption [ 410.414400][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.439406][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.460831][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.471330][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.485732][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 410.493300][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.565713][ T668] team0 (unregistering): Port device team_slave_1 removed [ 410.605765][ T668] team0 (unregistering): Port device team_slave_0 removed [ 411.131320][ T2791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.169716][ T2791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.184970][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.192629][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.202699][T11555] bridge_slave_0: entered allmulticast mode [ 411.219752][T11555] bridge_slave_0: entered promiscuous mode [ 411.290096][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.321543][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.330906][T11555] bridge_slave_1: entered allmulticast mode [ 411.345676][T11555] bridge_slave_1: entered promiscuous mode [ 411.435324][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.485165][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.543529][ T5114] Bluetooth: hci2: command tx timeout [ 411.584247][T11555] team0: Port device team_slave_0 added [ 411.653509][T11555] team0: Port device team_slave_1 added [ 411.755285][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.774724][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.816642][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.878128][ T668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.903767][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.911149][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.938687][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.949316][ T5114] Bluetooth: hci1: command tx timeout [ 412.006491][T11605] chnl_net:caif_netlink_parms(): no params data found [ 412.044948][ T668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.204515][ T668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.234172][T11601] chnl_net:caif_netlink_parms(): no params data found [ 412.298852][T11555] hsr_slave_0: entered promiscuous mode [ 412.305608][T11555] hsr_slave_1: entered promiscuous mode [ 412.313867][T11555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.323345][T11555] Cannot create hsr debugfs directory [ 412.381937][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.405557][ T668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.449774][T11642] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.482049][T11642] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 412.552134][T11642] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 412.577963][ T5114] Bluetooth: hci4: command tx timeout [ 412.789092][T11605] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.800677][T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.818779][T11605] bridge_slave_0: entered allmulticast mode [ 412.846481][T11605] bridge_slave_0: entered promiscuous mode [ 412.868337][T11605] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.875485][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.916668][T11605] bridge_slave_1: entered allmulticast mode [ 412.936820][T11605] bridge_slave_1: entered promiscuous mode [ 412.959358][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.976522][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.985047][T11601] bridge_slave_0: entered allmulticast mode [ 413.006251][T11601] bridge_slave_0: entered promiscuous mode [ 413.037891][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.056657][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.063907][T11601] bridge_slave_1: entered allmulticast mode [ 413.097825][T11601] bridge_slave_1: entered promiscuous mode [ 413.438810][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.497947][T11605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.539807][T11605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.577943][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.616871][ T5114] Bluetooth: hci2: command tx timeout [ 413.739757][T11601] team0: Port device team_slave_0 added [ 413.756568][T11601] team0: Port device team_slave_1 added [ 413.842212][ T668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.912098][T11605] team0: Port device team_slave_0 added [ 414.001551][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.011600][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.046499][ T5114] Bluetooth: hci1: command tx timeout [ 414.062074][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.084896][T11605] team0: Port device team_slave_1 added [ 414.158676][ T668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.367150][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.374148][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.402005][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.513949][ T668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.531490][T11703] netlink: 'syz-executor.0': attribute type 64 has an invalid length. [ 414.624345][T11605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.646131][T11605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.693903][ T5114] Bluetooth: hci4: command tx timeout [ 414.708988][T11605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.728706][T11605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.735678][T11605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.774271][T11605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.836139][ T668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.078992][T11601] hsr_slave_0: entered promiscuous mode [ 415.094326][T11601] hsr_slave_1: entered promiscuous mode [ 415.105480][T11601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.122208][T11601] Cannot create hsr debugfs directory [ 415.509970][ T668] bridge_slave_1: left allmulticast mode [ 415.522725][ T668] bridge_slave_1: left promiscuous mode [ 415.550336][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.568992][ T668] bridge_slave_0: left allmulticast mode [ 415.575174][ T668] bridge_slave_0: left promiscuous mode [ 415.581319][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.591601][ T668] bridge_slave_1: left allmulticast mode [ 415.597536][ T668] bridge_slave_1: left promiscuous mode [ 415.603279][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.612796][ T668] bridge_slave_0: left allmulticast mode [ 415.620302][ T668] bridge_slave_0: left promiscuous mode [ 415.633883][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.696811][ T5114] Bluetooth: hci2: command tx timeout [ 415.991442][ T29] audit: type=1326 audit(1717233634.127:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.024266][ T29] audit: type=1326 audit(1717233634.127:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.062051][ T29] audit: type=1326 audit(1717233634.127:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.106471][ T5114] Bluetooth: hci1: command tx timeout [ 416.109039][ T29] audit: type=1326 audit(1717233634.127:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.186373][ T29] audit: type=1326 audit(1717233634.127:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.225138][ T29] audit: type=1326 audit(1717233634.127:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.276803][ T29] audit: type=1326 audit(1717233634.127:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.310983][ T29] audit: type=1326 audit(1717233634.127:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.334637][ T29] audit: type=1326 audit(1717233634.127:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.369945][ T29] audit: type=1326 audit(1717233634.127:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd227cee9 code=0x7ffc0000 [ 416.736712][ T5114] Bluetooth: hci4: command tx timeout [ 416.869570][ T668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.884970][ T668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.896144][ T668] bond0 (unregistering): Released all slaves [ 417.011344][ T668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.022915][ T668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.040425][ T668] bond0 (unregistering): Released all slaves [ 417.062362][T11605] hsr_slave_0: entered promiscuous mode [ 417.069303][T11605] hsr_slave_1: entered promiscuous mode [ 417.075421][T11605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.085398][T11605] Cannot create hsr debugfs directory [ 417.189935][ T668] tipc: Disabling bearer [ 417.227161][ T668] tipc: Left network mode [ 417.532464][T11779] geneve3: entered promiscuous mode [ 417.552050][T11779] geneve3: entered allmulticast mode [ 417.594239][T11555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.605073][T11555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.710464][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.718894][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.738877][T11555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.923545][T11555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.178675][ T5114] Bluetooth: hci1: command tx timeout [ 418.444545][ T668] hsr_slave_0: left promiscuous mode [ 418.464922][ T668] hsr_slave_1: left promiscuous mode [ 418.483279][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.491101][ T668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.500591][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.508481][ T668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.523944][ T668] hsr_slave_0: left promiscuous mode [ 418.531104][ T668] hsr_slave_1: left promiscuous mode [ 418.538837][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.546831][ T668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.554690][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.562922][ T668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.604593][ T668] veth1_macvtap: left promiscuous mode [ 418.610215][ T668] veth0_macvtap: left promiscuous mode [ 418.616755][ T668] veth1_vlan: left promiscuous mode [ 418.622141][ T668] veth0_vlan: left promiscuous mode [ 418.629872][ T668] veth1_macvtap: left promiscuous mode [ 418.635380][ T668] veth0_macvtap: left promiscuous mode [ 418.641073][ T668] veth1_vlan: left promiscuous mode [ 418.647500][ T668] veth0_vlan: left promiscuous mode [ 418.816446][ T5114] Bluetooth: hci4: command tx timeout [ 419.049521][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.060085][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.403318][ T668] team0 (unregistering): Port device team_slave_1 removed [ 419.445013][ T668] team0 (unregistering): Port device team_slave_0 removed [ 420.304285][ T668] team0 (unregistering): Port device team_slave_1 removed [ 420.344797][ T668] team0 (unregistering): Port device team_slave_0 removed [ 420.752436][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.935408][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.019091][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.040595][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.047800][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.105690][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.112894][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.312092][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.366153][T11601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.399341][T11601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.427013][T11601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.442076][T11601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.481991][T11555] veth0_vlan: entered promiscuous mode [ 421.544134][T11555] veth1_vlan: entered promiscuous mode [ 421.633393][T11605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.653923][T11605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.691699][T11605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.741792][T11555] veth0_macvtap: entered promiscuous mode [ 421.757409][T11605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.817248][T11555] veth1_macvtap: entered promiscuous mode [ 421.928749][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.941589][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.951541][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.962088][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.972688][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.983341][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.995619][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.013231][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.025156][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.035589][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.047669][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.057766][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.068250][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.080209][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.102194][T11601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.128354][T11555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.137564][T11555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.147588][T11555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.157007][T11555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.205992][T11601] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.249758][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.256956][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.329120][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.336251][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.419473][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.437593][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.467806][T11605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.514752][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.536427][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.561485][T11605] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.592899][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.600068][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.641477][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.658543][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.665662][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.888086][T11605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.071150][T11601] veth0_vlan: entered promiscuous mode [ 423.174917][T11601] veth1_vlan: entered promiscuous mode [ 423.451475][T11605] veth0_vlan: entered promiscuous mode [ 423.492758][T11601] veth0_macvtap: entered promiscuous mode [ 423.518655][T11601] veth1_macvtap: entered promiscuous mode [ 423.593662][T11605] veth1_vlan: entered promiscuous mode [ 423.615561][T11877] netlink: zone id is out of range [ 423.657348][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.678210][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.693084][T11877] netlink: zone id is out of range [ 423.696972][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.729652][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.750434][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.774149][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.818697][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.848807][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.866496][ T5162] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 423.899294][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.003110][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.037858][ T5162] usb 5-1: device descriptor read/64, error -71 [ 424.052275][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.084161][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.099786][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.113600][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.127485][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.151654][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.209119][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.232701][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.289826][T11601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.333861][T11601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.344871][ T5162] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 424.406050][T11601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.461062][T11601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.518018][ T5162] usb 5-1: device descriptor read/64, error -71 [ 424.621415][T11605] veth0_macvtap: entered promiscuous mode [ 424.667154][ T5162] usb usb5-port1: attempt power cycle [ 424.695188][T11605] veth1_macvtap: entered promiscuous mode [ 424.787736][T11900] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 424.832587][T11900] tipc: Started in network mode [ 424.839727][T11900] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 424.847927][T11900] tipc: Enabled bearer , priority 10 [ 424.887445][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.924887][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.946318][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.968684][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.983449][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.001796][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.018922][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.034554][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.050836][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.073435][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.088931][T11605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.116396][ T5162] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 425.168755][ T5162] usb 5-1: device descriptor read/8, error -71 [ 425.194941][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.213707][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.233163][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.256390][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.273346][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.297315][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.316326][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.346305][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.356142][T11605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.372857][T11605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.389246][T11605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.420713][T11605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.434575][T11605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.448465][ T5162] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 425.457624][T11605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.466767][T11605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.487116][ T5162] usb 5-1: device descriptor read/8, error -71 [ 425.539984][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.596651][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.613178][ T5162] usb usb5-port1: unable to enumerate USB device [ 425.708435][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.744968][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.888717][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.946602][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.971168][ T6745] tipc: Node number set to 8432298 [ 426.053828][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.073786][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.610543][T11947] random: crng reseeded on system resumption [ 426.622153][T11950] loop0: detected capacity change from 0 to 7 [ 426.707138][T11950] Dev loop0: unable to read RDB block 7 [ 426.781656][T11950] loop0: unable to read partition table [ 426.807191][T11950] loop0: partition table beyond EOD, truncated [ 426.847893][T11950] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 426.847893][T11950] ) failed (rc=-5) [ 427.203032][T11975] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.259335][T11975] tipc: Started in network mode [ 427.281456][T11975] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 427.325683][T11975] tipc: Enabled bearer , priority 10 [ 428.328146][ T5161] tipc: Node number set to 8432298 [ 429.448582][ T5161] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 429.666407][ T5161] usb 1-1: Using ep0 maxpacket: 16 [ 429.681547][ T5161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 429.701719][ T5161] usb 1-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 429.734940][ T5161] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.760151][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.778003][ T5161] usb 1-1: Product: syz [ 429.816416][ T5161] usb 1-1: Manufacturer: syz [ 429.824551][ T5161] usb 1-1: SerialNumber: syz [ 429.861684][ T5161] usb 1-1: bad CDC descriptors [ 430.566711][T12076] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 430.648274][T12082] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 430.719804][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.746681][ T5161] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 431.959432][ T5161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 431.979454][ T5161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 431.995092][ T5161] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.013186][ T5161] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.024972][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.035540][T12120] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 432.057125][ T5162] usb 1-1: USB disconnect, device number 23 [ 432.113380][ T5161] usb 2-1: config 0 descriptor?? [ 432.151401][T12120] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 432.568466][ T5161] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 432.601776][ T5161] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 432.638400][ T5161] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 432.830518][ T6290] usb 2-1: USB disconnect, device number 27 [ 432.923996][T12145] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.945644][T12145] tipc: Started in network mode [ 432.952279][T12145] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 432.970284][T12145] tipc: Enabled bearer , priority 10 [ 433.446406][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 433.446425][ T29] audit: type=1400 audit(1717233651.577:199): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12157 comm="syz-executor.0" [ 434.088515][ T45] tipc: Node number set to 8432298 [ 434.160177][T12187] fuse: Bad value for 'group_id' [ 434.257990][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 434.406203][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.466769][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 434.473948][ T45] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 434.514553][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 434.575330][ T45] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 434.597317][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.609798][ T45] usb 5-1: Product: syz [ 434.614117][ T45] usb 5-1: Manufacturer: syz [ 434.657903][ T45] usb 5-1: SerialNumber: syz [ 434.756190][ T45] usb 5-1: config 0 descriptor?? [ 435.183763][ T45] iuu_phoenix 5-1:0.0: required endpoints missing [ 435.219517][ T45] usb 5-1: USB disconnect, device number 31 [ 435.446595][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 437.823778][T12293] tipc: Can't bind to reserved service type 0 [ 438.006547][ T5161] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 438.196521][ T5161] usb 4-1: Using ep0 maxpacket: 16 [ 438.206514][ T5161] usb 4-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 438.231887][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 438.254792][ T5161] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 438.264468][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.335253][ T5161] usb 4-1: Product: syz [ 438.369546][ T5161] usb 4-1: Manufacturer: syz [ 438.392061][ T5161] usb 4-1: SerialNumber: syz [ 438.425095][ T5161] usb 4-1: config 0 descriptor?? [ 438.594328][T12312] syz_tun: entered promiscuous mode [ 438.643145][T12312] ip6gretap0: entered promiscuous mode [ 438.936049][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.951161][ T5161] iuu_phoenix 4-1:0.0: required endpoints missing [ 438.971450][ T5161] usb 4-1: USB disconnect, device number 35 [ 439.310002][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.576831][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.581089][T12330] xt_NFQUEUE: number of total queues is 0 [ 439.650301][T12327] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 439.802139][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.888811][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.919334][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.928390][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.938612][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.946462][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.953969][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.343777][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.350217][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.531934][ T35] bridge_slave_1: left allmulticast mode [ 440.543462][ T35] bridge_slave_1: left promiscuous mode [ 440.558600][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.651928][ T35] bridge_slave_0: left allmulticast mode [ 440.663899][ T35] bridge_slave_0: left promiscuous mode [ 440.672443][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.284959][ T29] audit: type=1326 audit(1717233659.417:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ecc7cee9 code=0x0 [ 441.742683][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.754627][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.768740][ T35] bond0 (unregistering): Released all slaves [ 441.787613][T12348] syz_tun: entered promiscuous mode [ 441.794072][T12348] ip6gretap0: entered promiscuous mode [ 441.801844][T12348] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 441.809503][T12348] Cannot create hsr debugfs directory [ 441.896321][T10491] syz_tun (unregistering): left promiscuous mode [ 441.979350][ T35] tipc: Disabling bearer [ 441.987607][ T35] tipc: Left network mode [ 442.097651][ T53] Bluetooth: hci1: command tx timeout [ 442.647459][ T35] hsr_slave_0: left promiscuous mode [ 442.697075][ T35] hsr_slave_1: left promiscuous mode [ 442.720698][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.734025][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.756222][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.797702][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.872579][ T35] veth1_macvtap: left promiscuous mode [ 442.893806][ T35] veth0_macvtap: left promiscuous mode [ 442.911158][ T35] veth1_vlan: left promiscuous mode [ 442.914012][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 442.939055][ T35] veth0_vlan: left promiscuous mode [ 443.142881][T12435] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 443.406990][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.419931][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.431072][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.436539][ T29] audit: type=1326 audit(1717233661.567:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ba0e7cee9 code=0x0 [ 443.480627][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.502548][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 443.518771][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.990586][ T35] team0 (unregistering): Port device team_slave_1 removed [ 444.123675][ T35] team0 (unregistering): Port device team_slave_0 removed [ 444.177635][ T5114] Bluetooth: hci1: command tx timeout [ 444.790536][T12337] chnl_net:caif_netlink_parms(): no params data found [ 445.162353][T12337] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.176511][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.183777][T12337] bridge_slave_0: entered allmulticast mode [ 445.214013][T12337] bridge_slave_0: entered promiscuous mode [ 445.242426][T12337] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.255310][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.263060][T12337] bridge_slave_1: entered allmulticast mode [ 445.284327][T12337] bridge_slave_1: entered promiscuous mode [ 445.452964][T12337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.490955][T12337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.616825][ T5114] Bluetooth: hci3: command tx timeout [ 445.896929][T12337] team0: Port device team_slave_0 added [ 445.905821][T12337] team0: Port device team_slave_1 added [ 446.129477][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.141930][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.151089][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.165736][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.174995][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 446.183138][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.245251][T12337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.256536][ T5114] Bluetooth: hci1: command tx timeout [ 446.267049][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.304654][T12337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.319573][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.357094][T12499] bridge_slave_1: left allmulticast mode [ 446.364247][T12499] bridge_slave_1: left promiscuous mode [ 446.371664][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.397015][T12499] bridge_slave_0: left allmulticast mode [ 446.411843][T12499] bridge_slave_0: left promiscuous mode [ 446.429899][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.544368][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.560423][T12448] chnl_net:caif_netlink_parms(): no params data found [ 446.592958][T12337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.602298][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.634686][T12337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.757368][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.813160][T12337] hsr_slave_0: entered promiscuous mode [ 446.827703][T12337] hsr_slave_1: entered promiscuous mode [ 446.894087][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.009374][T12448] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.020097][T12448] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.036944][T12448] bridge_slave_0: entered allmulticast mode [ 447.043950][T12448] bridge_slave_0: entered promiscuous mode [ 447.118960][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.159429][T12448] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.177362][T12448] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.186122][T12448] bridge_slave_1: entered allmulticast mode [ 447.228144][T12448] bridge_slave_1: entered promiscuous mode [ 447.370641][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.418038][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.590711][T12448] team0: Port device team_slave_0 added [ 447.618789][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.630465][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.640980][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.649649][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.658583][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 447.669073][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.697070][ T5114] Bluetooth: hci3: command tx timeout [ 447.772746][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.845711][T12448] team0: Port device team_slave_1 added [ 447.979345][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.199329][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.224078][T12448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.231520][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.258675][ T5114] Bluetooth: hci0: command tx timeout [ 448.266241][T12448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.346383][ T5114] Bluetooth: hci1: command tx timeout [ 448.482688][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.522553][T12448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.535374][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.575745][T12448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.934972][T12448] hsr_slave_0: entered promiscuous mode [ 448.947994][T12448] hsr_slave_1: entered promiscuous mode [ 448.954457][T12448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.969976][T12448] Cannot create hsr debugfs directory [ 449.199071][T12504] chnl_net:caif_netlink_parms(): no params data found [ 449.615581][ T35] bridge_slave_1: left allmulticast mode [ 449.626495][ T35] bridge_slave_1: left promiscuous mode [ 449.637065][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.659123][ T35] bridge_slave_0: left allmulticast mode [ 449.664833][ T35] bridge_slave_0: left promiscuous mode [ 449.680390][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.701432][ T35] bridge_slave_1: left allmulticast mode [ 449.707258][ T5114] Bluetooth: hci2: command tx timeout [ 449.723711][ T35] bridge_slave_1: left promiscuous mode [ 449.732471][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.754168][ T35] bridge_slave_0: left allmulticast mode [ 449.763985][ T35] bridge_slave_0: left promiscuous mode [ 449.774869][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.782204][ T5114] Bluetooth: hci3: command tx timeout [ 450.091062][ T35] ip6gretap0 (unregistering): left promiscuous mode [ 450.346371][ T5114] Bluetooth: hci0: command tx timeout [ 450.938069][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.965966][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.993341][ T35] bond0 (unregistering): Released all slaves [ 451.172051][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.185777][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.198765][ T35] bond0 (unregistering): Released all slaves [ 451.398826][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.406044][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.415765][T12504] bridge_slave_0: entered allmulticast mode [ 451.427824][T12504] bridge_slave_0: entered promiscuous mode [ 451.467443][T12535] chnl_net:caif_netlink_parms(): no params data found [ 451.481019][ T35] tipc: Disabling bearer [ 451.496724][ T35] tipc: Left network mode [ 451.517857][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.533320][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.542200][T12504] bridge_slave_1: entered allmulticast mode [ 451.550094][T12504] bridge_slave_1: entered promiscuous mode [ 451.731809][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.766613][T12337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.776486][ T5114] Bluetooth: hci2: command tx timeout [ 451.794678][T12337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.857913][ T5114] Bluetooth: hci3: command tx timeout [ 451.863833][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.988032][T12337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.010415][T12337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.173852][T12504] team0: Port device team_slave_0 added [ 452.208926][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.226438][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.236044][T12535] bridge_slave_0: entered allmulticast mode [ 452.244234][T12535] bridge_slave_0: entered promiscuous mode [ 452.254660][T12535] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.263499][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.271142][T12535] bridge_slave_1: entered allmulticast mode [ 452.279007][T12535] bridge_slave_1: entered promiscuous mode [ 452.320595][T12504] team0: Port device team_slave_1 added [ 452.416434][ T5114] Bluetooth: hci0: command tx timeout [ 452.462213][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.470374][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.498587][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.623076][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.633151][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.660238][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.710101][T12535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.800842][T12535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.893026][T12504] hsr_slave_0: entered promiscuous mode [ 452.913355][T12504] hsr_slave_1: entered promiscuous mode [ 452.935894][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.944858][T12504] Cannot create hsr debugfs directory [ 453.032863][ T35] hsr_slave_0: left promiscuous mode [ 453.047248][ T35] hsr_slave_1: left promiscuous mode [ 453.056194][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.076421][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.086611][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.094049][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.123434][ T35] hsr_slave_0: left promiscuous mode [ 453.135671][ T35] hsr_slave_1: left promiscuous mode [ 453.154662][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.166868][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.174915][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.184000][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.259788][ T35] veth1_macvtap: left promiscuous mode [ 453.265364][ T35] veth0_macvtap: left promiscuous mode [ 453.271350][ T35] veth1_vlan: left promiscuous mode [ 453.286561][ T35] veth0_vlan: left promiscuous mode [ 453.295273][ T35] veth1_macvtap: left promiscuous mode [ 453.311110][ T35] veth0_macvtap: left promiscuous mode [ 453.317371][ T35] veth1_vlan: left promiscuous mode [ 453.322709][ T35] veth0_vlan: left promiscuous mode [ 453.864885][ T5114] Bluetooth: hci2: command tx timeout [ 454.199952][ T35] team0 (unregistering): Port device team_slave_1 removed [ 454.251764][ T35] team0 (unregistering): Port device team_slave_0 removed [ 454.517642][ T5114] Bluetooth: hci0: command tx timeout [ 455.518683][ T35] team0 (unregistering): Port device team_slave_1 removed [ 455.608231][ T35] team0 (unregistering): Port device team_slave_0 removed [ 455.946487][ T5114] Bluetooth: hci2: command tx timeout [ 456.215304][T12535] team0: Port device team_slave_0 added [ 456.248370][T12535] team0: Port device team_slave_1 added [ 456.508444][T12535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.515430][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.552970][T12535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.583138][T12337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.602361][T12448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.631618][T12448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.709983][T12535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.738218][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.786628][T12535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.907110][T12337] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.920558][T12448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.031854][T12535] hsr_slave_0: entered promiscuous mode [ 457.041797][T12535] hsr_slave_1: entered promiscuous mode [ 457.055410][T12535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.069943][T12535] Cannot create hsr debugfs directory [ 457.086118][T12448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.220426][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.227645][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.245170][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.252405][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.624401][T12337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.122981][T12337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.212654][T12448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.282936][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.415797][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.483420][T12504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.527200][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.566245][T12448] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.592553][T12504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.660407][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.683861][T12337] veth0_vlan: entered promiscuous mode [ 458.711380][T12504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.729352][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.736578][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.765654][T12504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.831547][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.838747][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.879223][T12337] veth1_vlan: entered promiscuous mode [ 458.993818][T12448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.037598][T12337] veth0_macvtap: entered promiscuous mode [ 459.093471][T12337] veth1_macvtap: entered promiscuous mode [ 459.188571][ T35] bridge_slave_1: left allmulticast mode [ 459.194269][ T35] bridge_slave_1: left promiscuous mode [ 459.201609][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.229801][ T35] bridge_slave_0: left allmulticast mode [ 459.235567][ T35] bridge_slave_0: left promiscuous mode [ 459.270943][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.140924][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.160291][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.181170][ T35] bond0 (unregistering): Released all slaves [ 460.320289][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.353389][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.383811][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.414463][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.436635][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.464044][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.504981][T12337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.532975][T12448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.569512][ T35] tipc: Disabling bearer [ 460.597213][ T35] tipc: Left network mode [ 460.661918][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.696656][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.726646][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.756622][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.786526][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.817242][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.847449][T12337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.961779][T12337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.986425][T12337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.995167][T12337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.026445][T12337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.231232][T12448] veth0_vlan: entered promiscuous mode [ 461.307438][ T35] hsr_slave_0: left promiscuous mode [ 461.318749][ T35] hsr_slave_1: left promiscuous mode [ 461.344109][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.364052][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.387477][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.395210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.442590][ T35] veth1_macvtap: left promiscuous mode [ 461.458000][ T35] veth0_macvtap: left promiscuous mode [ 461.463694][ T35] veth1_vlan: left promiscuous mode [ 461.476970][ T35] veth0_vlan: left promiscuous mode [ 462.457976][ T35] team0 (unregistering): Port device team_slave_1 removed [ 462.503055][ T35] team0 (unregistering): Port device team_slave_0 removed [ 462.934198][T12685] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.155499][T12685] tipc: Started in network mode [ 463.168535][T12685] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 463.187389][T12685] tipc: Enabled bearer , priority 10 [ 463.222395][T12448] veth1_vlan: entered promiscuous mode [ 463.338849][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.424460][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.543873][T11605] syz_tun (unregistering): left promiscuous mode [ 463.587246][T12448] veth0_macvtap: entered promiscuous mode [ 463.630063][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.637360][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.659915][ T668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.671825][T12448] veth1_macvtap: entered promiscuous mode [ 463.701019][ T668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.739810][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.747039][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.766076][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.780322][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.791981][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.807895][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.818289][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.829181][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.841197][T12448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.875469][ T929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.896601][ T929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.931948][T12535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.977789][T12535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.049991][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.076435][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.116753][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.146955][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.166622][T12448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.196355][T12448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.217945][T12448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.228194][T12535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.280186][T12504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.300956][T12504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.323709][ T9] tipc: Node number set to 8432298 [ 464.384523][T12535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.411438][T12448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.446555][T12448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.466407][T12448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.475137][T12448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.620658][ T2791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.728888][ T2791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.748208][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.760688][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.775940][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.793691][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.802672][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.813025][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 464.823055][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.855106][ T2791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.931262][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.952520][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.999255][ T2791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.092032][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.115943][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.251944][T12504] veth0_vlan: entered promiscuous mode [ 465.292374][T12728] input: syz1 as /devices/virtual/input/input42 [ 465.351634][T12725] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 465.508840][T12504] veth1_vlan: entered promiscuous mode [ 465.861856][ T2791] ip6gretap0 (unregistering): left promiscuous mode [ 466.460593][ T2791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.475529][ T2791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.491215][ T2791] bond0 (unregistering): Released all slaves [ 466.532343][T12535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.604237][T12535] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.616951][T12720] chnl_net:caif_netlink_parms(): no params data found [ 466.653776][ T2791] tipc: Disabling bearer [ 466.665722][ T2791] tipc: Left network mode [ 466.671417][T12504] veth0_macvtap: entered promiscuous mode [ 466.684673][T12504] veth1_macvtap: entered promiscuous mode [ 466.757176][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.764513][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.809698][T12753] input: syz1 as /devices/virtual/input/input43 [ 466.896930][ T53] Bluetooth: hci4: command tx timeout [ 466.960116][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.006591][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.024347][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.038255][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.065104][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.079774][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.106085][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.136109][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.173469][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.254903][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.262110][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.492864][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.527256][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.558807][T12720] bridge_slave_0: entered allmulticast mode [ 467.588044][T12720] bridge_slave_0: entered promiscuous mode [ 467.661645][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.700161][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.728672][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.756596][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.777897][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.799756][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.828460][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.858244][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.885050][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.957465][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.972693][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.988071][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.007658][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.015835][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.024065][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.070228][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.078653][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.085951][T12720] bridge_slave_1: entered allmulticast mode [ 468.093730][T12720] bridge_slave_1: entered promiscuous mode [ 468.149626][ T2791] hsr_slave_0: left promiscuous mode [ 468.165540][ T2791] hsr_slave_1: left promiscuous mode [ 468.171816][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.192451][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.206514][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.213973][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.255765][ T2791] veth1_macvtap: left promiscuous mode [ 468.272714][ T2791] veth0_macvtap: left promiscuous mode [ 468.281097][ T2791] veth1_vlan: left promiscuous mode [ 468.292345][ T2791] veth0_vlan: left promiscuous mode [ 468.756883][ T2791] team0 (unregistering): Port device team_slave_1 removed [ 468.799805][ T2791] team0 (unregistering): Port device team_slave_0 removed [ 468.986453][ T5114] Bluetooth: hci4: command tx timeout [ 469.261646][T12504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.272329][T12504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.281514][T12504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.291863][T12504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.353845][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.424848][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.553136][T12720] team0: Port device team_slave_0 added [ 469.614140][T12799] input: syz1 as /devices/virtual/input/input44 [ 469.674119][T12720] team0: Port device team_slave_1 added [ 469.711254][T12535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.881107][ T5236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.903832][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.910948][ T5236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.933908][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.965897][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.005551][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.015258][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.045346][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.096647][ T5114] Bluetooth: hci3: command tx timeout [ 470.240920][T12720] hsr_slave_0: entered promiscuous mode [ 470.265708][T12720] hsr_slave_1: entered promiscuous mode [ 470.283735][T12720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.292175][T12720] Cannot create hsr debugfs directory [ 470.436476][ T929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.440974][T12535] veth0_vlan: entered promiscuous mode [ 470.451143][ T929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.564132][T12817] input: syz1 as /devices/virtual/input/input45 [ 470.617899][T12535] veth1_vlan: entered promiscuous mode [ 470.780841][ T2791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.934713][ T2791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.022713][T12787] chnl_net:caif_netlink_parms(): no params data found [ 471.052101][T12826] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 471.062155][ T5114] Bluetooth: hci4: command tx timeout [ 471.104366][ T2791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.298302][ T2791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.395861][T12535] veth0_macvtap: entered promiscuous mode [ 471.544034][T12535] veth1_macvtap: entered promiscuous mode [ 471.763714][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.783763][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.799368][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.813044][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.826308][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.841970][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.852042][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.868907][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.882893][T12535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.973757][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.986059][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.996195][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.017290][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.038213][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.050272][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.060497][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.072732][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.084640][T12535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.094914][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.108233][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.115580][T12787] bridge_slave_0: entered allmulticast mode [ 472.123245][T12787] bridge_slave_0: entered promiscuous mode [ 472.132241][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.140041][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.147482][T12787] bridge_slave_1: entered allmulticast mode [ 472.154357][T12787] bridge_slave_1: entered promiscuous mode [ 472.187452][ T5114] Bluetooth: hci3: command tx timeout [ 472.201603][T12535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.232177][T12535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.242632][T12535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.252453][T12535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.272712][ T2791] bridge_slave_1: left allmulticast mode [ 472.279547][ T2791] bridge_slave_1: left promiscuous mode [ 472.285439][ T2791] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.294887][ T2791] bridge_slave_0: left allmulticast mode [ 472.301601][ T2791] bridge_slave_0: left promiscuous mode [ 472.307412][ T2791] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.871743][T12860] CUSE: info not properly terminated [ 473.117612][ T2791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.136472][ T5114] Bluetooth: hci4: command tx timeout [ 473.164000][ T2791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.197965][ T2791] bond0 (unregistering): Released all slaves [ 473.245315][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.303145][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.448729][T12877] input: syz1 as /devices/virtual/input/input46 [ 473.538648][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.569833][T12787] team0: Port device team_slave_0 added [ 473.602822][T12787] team0: Port device team_slave_1 added [ 473.841321][T12787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.859399][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.925884][T12787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.949255][T12787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.969647][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.013960][T12787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.156665][ T929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.167484][ T929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.181130][ T2791] hsr_slave_0: left promiscuous mode [ 474.208309][ T2791] hsr_slave_1: left promiscuous mode [ 474.227263][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.250837][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.266978][ T5114] Bluetooth: hci3: command tx timeout [ 474.284765][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.299774][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.350847][ T2791] veth1_macvtap: left promiscuous mode [ 474.361353][ T2791] veth0_macvtap: left promiscuous mode [ 474.372474][ T2791] veth1_vlan: left promiscuous mode [ 474.378409][ T2791] veth0_vlan: left promiscuous mode [ 474.916054][ T2791] team0 (unregistering): Port device team_slave_1 removed [ 474.964842][ T2791] team0 (unregistering): Port device team_slave_0 removed [ 475.552673][T12787] hsr_slave_0: entered promiscuous mode [ 475.589479][T12787] hsr_slave_1: entered promiscuous mode [ 475.607812][T12787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.615513][T12787] Cannot create hsr debugfs directory [ 475.675000][T12720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 475.695375][T12720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 475.763820][T12720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 475.803418][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.825020][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.864958][T12720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.346695][ T5114] Bluetooth: hci3: command tx timeout [ 476.389332][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.741554][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.864868][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.938383][ T29] audit: type=1326 audit(1717233695.067:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37dee7cee9 code=0x0 [ 477.035082][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.043758][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.071875][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.079122][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.239948][T12720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.376789][ T5164] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 477.413309][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.421837][T12787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.444222][T12787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.464685][T12787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.506747][T12787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.578396][ T5164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.609944][ T5164] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 477.643232][T12720] veth0_vlan: entered promiscuous mode [ 477.657743][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.669900][ T5164] usb 1-1: config 0 descriptor?? [ 477.733359][T12720] veth1_vlan: entered promiscuous mode [ 477.913303][T12720] veth0_macvtap: entered promiscuous mode [ 477.963075][T12720] veth1_macvtap: entered promiscuous mode [ 478.095287][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.095315][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.095328][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.095344][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.095357][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.095370][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.095382][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.098577][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.100508][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.118686][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.118712][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.118725][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.118740][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.118752][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.118766][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.118778][T12720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.118792][T12720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.125840][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.154040][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.170992][T12720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.171033][T12720] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.171062][T12720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.171089][T12720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.272910][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.464074][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.464174][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.489284][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.489386][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.615878][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.615904][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.671581][T12787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.671611][T12787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.765681][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.765707][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.805267][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.932655][T12787] veth0_vlan: entered promiscuous mode [ 479.000161][T12787] veth1_vlan: entered promiscuous mode [ 479.046908][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.145004][T12787] veth0_macvtap: entered promiscuous mode [ 479.198204][T12787] veth1_macvtap: entered promiscuous mode [ 479.296524][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.339826][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.364370][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.397052][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.429949][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.468336][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.483368][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.502146][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.513100][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.524223][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.561750][T12787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.627464][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.651386][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.670754][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.685501][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.706372][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.723902][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.749341][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.764559][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.777104][T12787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.788115][T12787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.805411][T12787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.824297][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.846995][T12787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.859041][T12787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.870823][T12787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.880885][T12787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.035802][ T929] usb 1-1: USB disconnect, device number 24 [ 480.076695][ T5160] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 480.102747][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.102773][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.229682][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.229709][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.277381][ T5160] usb 2-1: Using ep0 maxpacket: 32 [ 480.288098][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.288136][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.288177][ T5160] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.288203][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.291460][ T5160] usb 2-1: config 0 descriptor?? [ 480.293928][ T5160] hub 2-1:0.0: USB hub found [ 480.538097][T13062] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.699920][ T5160] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 480.719072][ T5160] usbhid 2-1:0.0: can't add hid device: -71 [ 480.719187][ T5160] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 480.749860][ T5160] usb 2-1: USB disconnect, device number 28 [ 480.779375][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.917031][T13075] input: syz1 as /devices/virtual/input/input47 [ 481.931872][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.327008][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.567680][T13136] input: syz1 as /devices/virtual/input/input48 [ 482.616530][ T5185] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 482.826389][ T5185] usb 1-1: Using ep0 maxpacket: 32 [ 482.843797][ T5185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.861104][ T5185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.873804][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.931099][ T5185] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 482.954930][ T5185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.990371][ T5185] usb 1-1: config 0 descriptor?? [ 483.011783][ T5185] hub 1-1:0.0: USB hub found [ 483.221351][T13153] fuse: Bad value for 'fd' [ 483.328405][ T5185] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 483.359502][ T5185] usbhid 1-1:0.0: can't add hid device: -71 [ 483.373826][ T5185] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 483.420287][ T5185] usb 1-1: USB disconnect, device number 25 [ 483.551922][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.570483][T13173] xfrm1: entered promiscuous mode [ 483.575734][T13173] xfrm1: entered allmulticast mode [ 483.644020][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.968357][T13188] input: syz1 as /devices/virtual/input/input49 [ 484.428676][T13203] input: syz1 as /devices/virtual/input/input50 [ 484.581117][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.890569][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 485.933397][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 485.952522][T13256] vlan2: entered allmulticast mode [ 485.958045][T13256] team0: entered allmulticast mode [ 485.963230][T13256] team_slave_0: entered allmulticast mode [ 485.969248][T13256] team_slave_1: entered allmulticast mode [ 485.983987][T13256] team0: left allmulticast mode [ 485.994948][T13256] team_slave_0: left allmulticast mode [ 486.010644][T13256] team_slave_1: left allmulticast mode [ 486.098378][ T929] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 486.308555][ T929] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 486.315547][T13268] input: syz1 as /devices/virtual/input/input51 [ 486.345603][ T929] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.366690][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.369051][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.443222][ T929] usb 1-1: Product: syz [ 486.458535][ T929] usb 1-1: Manufacturer: syz [ 486.465133][ T929] usb 1-1: SerialNumber: syz [ 486.484733][ T929] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 486.706098][T13251] [ 486.708476][T13251] ===================================================== [ 486.715425][T13251] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 486.722893][T13251] 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 Not tainted [ 486.730007][T13251] ----------------------------------------------------- [ 486.736944][T13251] syz-executor.0/13251 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 486.745021][T13251] ffff88801f209210 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x19e/0x4d0 [ 486.753763][T13251] [ 486.753763][T13251] and this task is already holding: [ 486.761150][T13251] ffff888015784028 (&client->buffer_lock){-.-.}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 486.770938][T13251] which would create a new lock dependency: [ 486.776834][T13251] (&client->buffer_lock){-.-.}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 486.784962][T13251] [ 486.784962][T13251] but this new dependency connects a HARDIRQ-irq-safe lock: [ 486.794422][T13251] (&client->buffer_lock){-.-.}-{2:2} [ 486.794456][T13251] [ 486.794456][T13251] ... which became HARDIRQ-irq-safe at: [ 486.807530][T13251] lock_acquire+0x1ed/0x550 [ 486.812142][T13251] _raw_spin_lock+0x2e/0x40 [ 486.816752][T13251] evdev_pass_values+0xf2/0xad0 [ 486.821711][T13251] evdev_events+0x1c2/0x300 [ 486.826320][T13251] input_pass_values+0x84d/0x1200 [ 486.831451][T13251] input_event_dispose+0x402/0x650 [ 486.836667][T13251] input_handle_event+0xa71/0xbe0 [ 486.841799][T13251] input_event+0xa4/0xd0 [ 486.846142][T13251] hidinput_hid_event+0x138c/0x1ca0 [ 486.851440][T13251] hid_process_event+0x439/0x590 [ 486.856488][T13251] hid_report_raw_event+0x1002/0x18a0 [ 486.861966][T13251] hid_input_report+0x416/0x500 [ 486.866940][T13251] hid_irq_in+0x4a0/0x6d0 [ 486.871374][T13251] __usb_hcd_giveback_urb+0x373/0x530 [ 486.876857][T13251] dummy_timer+0x830/0x45d0 [ 486.881469][T13251] __hrtimer_run_queues+0x59b/0xd50 [ 486.886773][T13251] hrtimer_interrupt+0x396/0x990 [ 486.891905][T13251] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 486.897992][T13251] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 486.903729][T13251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.909814][T13251] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 486.915645][T13251] do_nanosleep+0x158/0x600 [ 486.920255][T13251] hrtimer_nanosleep+0x227/0x470 [ 486.925300][T13251] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 486.930955][T13251] do_syscall_64+0xf3/0x230 [ 486.935555][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.941550][T13251] [ 486.941550][T13251] to a HARDIRQ-irq-unsafe lock: [ 486.948571][T13251] (tasklist_lock){.+.+}-{2:2} [ 486.948606][T13251] [ 486.948606][T13251] ... which became HARDIRQ-irq-unsafe at: [ 486.961242][T13251] ... [ 486.961254][T13251] lock_acquire+0x1ed/0x550 [ 486.968430][T13251] _raw_read_lock+0x36/0x50 [ 486.973031][T13251] __do_wait+0x12d/0x850 [ 486.977383][T13251] do_wait+0x1e9/0x560 [ 486.981570][T13251] kernel_wait+0xe9/0x240 [ 486.986001][T13251] call_usermodehelper_exec_work+0xbd/0x230 [ 486.991998][T13251] process_scheduled_works+0xa2c/0x1830 [ 486.997650][T13251] worker_thread+0x86d/0xd70 [ 487.002344][T13251] kthread+0x2f0/0x390 [ 487.006524][T13251] ret_from_fork+0x4b/0x80 [ 487.011050][T13251] ret_from_fork_asm+0x1a/0x30 [ 487.015921][T13251] [ 487.015921][T13251] other info that might help us debug this: [ 487.015921][T13251] [ 487.026172][T13251] Chain exists of: [ 487.026172][T13251] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 487.026172][T13251] [ 487.039324][T13251] Possible interrupt unsafe locking scenario: [ 487.039324][T13251] [ 487.047654][T13251] CPU0 CPU1 [ 487.053023][T13251] ---- ---- [ 487.058402][T13251] lock(tasklist_lock); [ 487.062677][T13251] local_irq_disable(); [ 487.069436][T13251] lock(&client->buffer_lock); [ 487.076827][T13251] lock(&new->fa_lock); [ 487.083697][T13251] [ 487.087155][T13251] lock(&client->buffer_lock); [ 487.092190][T13251] [ 487.092190][T13251] *** DEADLOCK *** [ 487.092190][T13251] [ 487.100333][T13251] 7 locks held by syz-executor.0/13251: [ 487.105885][T13251] #0: ffff8880247a4110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x272/0x7c0 [ 487.115078][T13251] #1: ffff88801af89230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 487.127737][T13251] #2: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 487.137430][T13251] #3: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x9d/0x1200 [ 487.147128][T13251] #4: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 487.156302][T13251] #5: ffff888015784028 (&client->buffer_lock){-.-.}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 487.166684][T13251] #6: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x55/0x4d0 [ 487.175769][T13251] [ 487.175769][T13251] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 487.186189][T13251] -> (&client->buffer_lock){-.-.}-{2:2} { [ 487.191946][T13251] IN-HARDIRQ-W at: [ 487.195935][T13251] lock_acquire+0x1ed/0x550 [ 487.202099][T13251] _raw_spin_lock+0x2e/0x40 [ 487.208269][T13251] evdev_pass_values+0xf2/0xad0 [ 487.214789][T13251] evdev_events+0x1c2/0x300 [ 487.220961][T13251] input_pass_values+0x84d/0x1200 [ 487.227663][T13251] input_event_dispose+0x402/0x650 [ 487.234532][T13251] input_handle_event+0xa71/0xbe0 [ 487.241224][T13251] input_event+0xa4/0xd0 [ 487.247136][T13251] hidinput_hid_event+0x138c/0x1ca0 [ 487.253998][T13251] hid_process_event+0x439/0x590 [ 487.260613][T13251] hid_report_raw_event+0x1002/0x18a0 [ 487.267654][T13251] hid_input_report+0x416/0x500 [ 487.274172][T13251] hid_irq_in+0x4a0/0x6d0 [ 487.280164][T13251] __usb_hcd_giveback_urb+0x373/0x530 [ 487.287206][T13251] dummy_timer+0x830/0x45d0 [ 487.293375][T13251] __hrtimer_run_queues+0x59b/0xd50 [ 487.300241][T13251] hrtimer_interrupt+0x396/0x990 [ 487.307279][T13251] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 487.314928][T13251] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 487.322232][T13251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.329881][T13251] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 487.337270][T13251] do_nanosleep+0x158/0x600 [ 487.343609][T13251] hrtimer_nanosleep+0x227/0x470 [ 487.350219][T13251] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 487.357427][T13251] do_syscall_64+0xf3/0x230 [ 487.363598][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.371154][T13251] IN-SOFTIRQ-W at: [ 487.375145][T13251] lock_acquire+0x1ed/0x550 [ 487.381307][T13251] _raw_spin_lock+0x2e/0x40 [ 487.387472][T13251] evdev_pass_values+0xf2/0xad0 [ 487.393989][T13251] evdev_events+0x1c2/0x300 [ 487.400163][T13251] input_pass_values+0x84d/0x1200 [ 487.407122][T13251] input_event_dispose+0x402/0x650 [ 487.413898][T13251] input_handle_event+0xa71/0xbe0 [ 487.420597][T13251] input_event+0xa4/0xd0 [ 487.426516][T13251] hidinput_hid_event+0x138c/0x1ca0 [ 487.433388][T13251] hid_process_event+0x439/0x590 [ 487.439993][T13251] hid_input_array_field+0x281/0x5d0 [ 487.446945][T13251] hid_report_raw_event+0xf4b/0x18a0 [ 487.453900][T13251] hid_input_report+0x416/0x500 [ 487.460422][T13251] hid_irq_in+0x4a0/0x6d0 [ 487.466418][T13251] __usb_hcd_giveback_urb+0x373/0x530 [ 487.473544][T13251] dummy_timer+0x830/0x45d0 [ 487.479731][T13251] __hrtimer_run_queues+0x59b/0xd50 [ 487.486594][T13251] hrtimer_interrupt+0x396/0x990 [ 487.493197][T13251] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 487.500837][T13251] sysvec_apic_timer_interrupt+0x52/0xc0 [ 487.508229][T13251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.515874][T13251] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 487.523349][T13251] try_to_wake_up+0x8fb/0x1470 [ 487.529798][T13251] call_timer_fn+0x18e/0x650 [ 487.536076][T13251] __run_timer_base+0x66a/0x8e0 [ 487.542604][T13251] run_timer_softirq+0xb7/0x170 [ 487.549119][T13251] handle_softirqs+0x2c4/0x970 [ 487.555540][T13251] __irq_exit_rcu+0xf4/0x1c0 [ 487.561794][T13251] irq_exit_rcu+0x9/0x30 [ 487.567700][T13251] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 487.575001][T13251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.582648][T13251] lock_is_held_type+0x13b/0x190 [ 487.589247][T13251] __might_resched+0xf4/0x780 [ 487.595586][T13251] do_wp_page+0x15b8/0x5310 [ 487.601754][T13251] handle_pte_fault+0x119a/0x7130 [ 487.608440][T13251] handle_mm_fault+0x10df/0x1ba0 [ 487.615109][T13251] exc_page_fault+0x459/0x8c0 [ 487.621485][T13251] asm_exc_page_fault+0x26/0x30 [ 487.628094][T13251] INITIAL USE at: [ 487.632008][T13251] lock_acquire+0x1ed/0x550 [ 487.638094][T13251] _raw_spin_lock+0x2e/0x40 [ 487.644176][T13251] evdev_pass_values+0xf2/0xad0 [ 487.650610][T13251] evdev_events+0x1c2/0x300 [ 487.657477][T13251] input_pass_values+0x84d/0x1200 [ 487.664089][T13251] input_event_dispose+0x36c/0x650 [ 487.670780][T13251] input_handle_event+0xa71/0xbe0 [ 487.677382][T13251] input_inject_event+0x22f/0x340 [ 487.684071][T13251] evdev_write+0x672/0x7c0 [ 487.690065][T13251] vfs_write+0x2a2/0xc90 [ 487.695878][T13251] ksys_write+0x1a0/0x2c0 [ 487.701779][T13251] do_syscall_64+0xf3/0x230 [ 487.707862][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.715336][T13251] } [ 487.717842][T13251] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 487.726016][T13251] [ 487.726016][T13251] the dependencies between the lock to be acquired [ 487.726028][T13251] and HARDIRQ-irq-unsafe lock: [ 487.739560][T13251] -> (tasklist_lock){.+.+}-{2:2} { [ 487.744902][T13251] HARDIRQ-ON-R at: [ 487.749062][T13251] lock_acquire+0x1ed/0x550 [ 487.755575][T13251] _raw_read_lock+0x36/0x50 [ 487.762091][T13251] __do_wait+0x12d/0x850 [ 487.768350][T13251] do_wait+0x1e9/0x560 [ 487.774432][T13251] kernel_wait+0xe9/0x240 [ 487.780770][T13251] call_usermodehelper_exec_work+0xbd/0x230 [ 487.788671][T13251] process_scheduled_works+0xa2c/0x1830 [ 487.796223][T13251] worker_thread+0x86d/0xd70 [ 487.802825][T13251] kthread+0x2f0/0x390 [ 487.808909][T13251] ret_from_fork+0x4b/0x80 [ 487.815431][T13251] ret_from_fork_asm+0x1a/0x30 [ 487.822206][T13251] SOFTIRQ-ON-R at: [ 487.826377][T13251] lock_acquire+0x1ed/0x550 [ 487.832898][T13251] _raw_read_lock+0x36/0x50 [ 487.839417][T13251] __do_wait+0x12d/0x850 [ 487.845673][T13251] do_wait+0x1e9/0x560 [ 487.851753][T13251] kernel_wait+0xe9/0x240 [ 487.858096][T13251] call_usermodehelper_exec_work+0xbd/0x230 [ 487.866010][T13251] process_scheduled_works+0xa2c/0x1830 [ 487.873581][T13251] worker_thread+0x86d/0xd70 [ 487.880192][T13251] kthread+0x2f0/0x390 [ 487.886304][T13251] ret_from_fork+0x4b/0x80 [ 487.892743][T13251] ret_from_fork_asm+0x1a/0x30 [ 487.899525][T13251] INITIAL USE at: [ 487.903617][T13251] lock_acquire+0x1ed/0x550 [ 487.910135][T13251] _raw_write_lock_irq+0xd3/0x120 [ 487.917088][T13251] copy_process+0x228b/0x3dc0 [ 487.923691][T13251] kernel_clone+0x226/0x8f0 [ 487.930117][T13251] user_mode_thread+0x132/0x1a0 [ 487.936898][T13251] rest_init+0x23/0x300 [ 487.942986][T13251] start_kernel+0x47a/0x500 [ 487.949431][T13251] x86_64_start_reservations+0x2a/0x30 [ 487.956954][T13251] x86_64_start_kernel+0x99/0xa0 [ 487.963827][T13251] common_startup_64+0x13e/0x147 [ 487.970693][T13251] INITIAL READ USE at: [ 487.975211][T13251] lock_acquire+0x1ed/0x550 [ 487.982072][T13251] _raw_read_lock+0x36/0x50 [ 487.988933][T13251] __do_wait+0x12d/0x850 [ 487.995537][T13251] do_wait+0x1e9/0x560 [ 488.001968][T13251] kernel_wait+0xe9/0x240 [ 488.008657][T13251] call_usermodehelper_exec_work+0xbd/0x230 [ 488.016995][T13251] process_scheduled_works+0xa2c/0x1830 [ 488.024901][T13251] worker_thread+0x86d/0xd70 [ 488.031847][T13251] kthread+0x2f0/0x390 [ 488.038276][T13251] ret_from_fork+0x4b/0x80 [ 488.045055][T13251] ret_from_fork_asm+0x1a/0x30 [ 488.052186][T13251] } [ 488.054866][T13251] ... key at: [] tasklist_lock+0x18/0x40 [ 488.062777][T13251] ... acquired at: [ 488.066761][T13251] lock_acquire+0x1ed/0x550 [ 488.071450][T13251] _raw_read_lock+0x36/0x50 [ 488.076138][T13251] send_sigio+0xfc/0x360 [ 488.080564][T13251] dnotify_handle_event+0x13c/0x440 [ 488.085944][T13251] fsnotify+0x1738/0x1f70 [ 488.090454][T13251] __fsnotify_parent+0x4f5/0x5e0 [ 488.095579][T13251] do_sendfile+0xa2b/0xe10 [ 488.100186][T13251] __se_sys_sendfile64+0x17c/0x1e0 [ 488.105484][T13251] do_syscall_64+0xf3/0x230 [ 488.110184][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.116274][T13251] [ 488.118604][T13251] -> (&f->f_owner.lock){...-}-{2:2} { [ 488.124099][T13251] IN-SOFTIRQ-R at: [ 488.128174][T13251] lock_acquire+0x1ed/0x550 [ 488.134522][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.141645][T13251] send_sigurg+0x29/0x3c0 [ 488.147811][T13251] sk_send_sigurg+0x75/0x2f0 [ 488.154245][T13251] tcp_check_urg+0x207/0x740 [ 488.160676][T13251] tcp_urg+0x15c/0x450 [ 488.166585][T13251] tcp_rcv_established+0xfac/0x2020 [ 488.173626][T13251] tcp_v6_do_rcv+0xabb/0x13b0 [ 488.180145][T13251] tcp_v6_rcv+0x2555/0x2fc0 [ 488.186508][T13251] ip6_protocol_deliver_rcu+0xc76/0x1570 [ 488.193994][T13251] ip6_input_finish+0x186/0x2d0 [ 488.200692][T13251] NF_HOOK+0x3a4/0x450 [ 488.206602][T13251] NF_HOOK+0x3a4/0x450 [ 488.212519][T13251] __netif_receive_skb+0x1ea/0x650 [ 488.219473][T13251] process_backlog+0x391/0x7d0 [ 488.226253][T13251] __napi_poll+0xcb/0x490 [ 488.232416][T13251] net_rx_action+0x7bb/0x10a0 [ 488.238924][T13251] handle_softirqs+0x2c4/0x970 [ 488.245530][T13251] do_softirq+0x11b/0x1e0 [ 488.251698][T13251] __local_bh_enable_ip+0x1bb/0x200 [ 488.258735][T13251] sk_stream_wait_memory+0x762/0xfa0 [ 488.265948][T13251] tcp_sendmsg_locked+0x140e/0x4d70 [ 488.272992][T13251] tcp_sendmsg+0x30/0x50 [ 488.279114][T13251] __sock_sendmsg+0xef/0x270 [ 488.285550][T13251] __sys_sendto+0x3a4/0x4f0 [ 488.291896][T13251] __x64_sys_sendto+0xde/0x100 [ 488.298506][T13251] do_syscall_64+0xf3/0x230 [ 488.304851][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.312583][T13251] INITIAL USE at: [ 488.316572][T13251] lock_acquire+0x1ed/0x550 [ 488.322824][T13251] _raw_write_lock_irq+0xd3/0x120 [ 488.329601][T13251] f_modown+0x38/0x340 [ 488.335416][T13251] fcntl_dirnotify+0x57d/0x740 [ 488.341928][T13251] do_fcntl+0x492/0x1730 [ 488.348007][T13251] __se_sys_fcntl+0xd2/0x1c0 [ 488.354349][T13251] do_syscall_64+0xf3/0x230 [ 488.360607][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.368264][T13251] INITIAL READ USE at: [ 488.372692][T13251] lock_acquire+0x1ed/0x550 [ 488.379385][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.386864][T13251] send_sigurg+0x29/0x3c0 [ 488.393379][T13251] sk_send_sigurg+0x75/0x2f0 [ 488.400154][T13251] tcp_check_urg+0x207/0x740 [ 488.406930][T13251] tcp_urg+0x15c/0x450 [ 488.413194][T13251] tcp_rcv_established+0xfac/0x2020 [ 488.420582][T13251] tcp_v6_do_rcv+0xabb/0x13b0 [ 488.427449][T13251] __release_sock+0x1c8/0x350 [ 488.434305][T13251] release_sock+0x61/0x1f0 [ 488.440906][T13251] sk_stream_wait_memory+0x762/0xfa0 [ 488.448374][T13251] tcp_sendmsg_locked+0x140e/0x4d70 [ 488.455767][T13251] tcp_sendmsg+0x30/0x50 [ 488.462209][T13251] __sock_sendmsg+0xef/0x270 [ 488.468988][T13251] __sys_sendto+0x3a4/0x4f0 [ 488.475680][T13251] __x64_sys_sendto+0xde/0x100 [ 488.482634][T13251] do_syscall_64+0xf3/0x230 [ 488.489318][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.497393][T13251] } [ 488.499981][T13251] ... key at: [] init_file.__key+0x0/0x20 [ 488.507893][T13251] ... acquired at: [ 488.511814][T13251] lock_acquire+0x1ed/0x550 [ 488.516509][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.521984][T13251] send_sigio+0x33/0x360 [ 488.526410][T13251] kill_fasync+0x23a/0x4d0 [ 488.531008][T13251] sock_wake_async+0x147/0x170 [ 488.535959][T13251] af_alg_wmem_wakeup+0x3c1/0x440 [ 488.541177][T13251] skcipher_recvmsg+0x11c6/0x1230 [ 488.546382][T13251] sock_recvmsg+0x22f/0x280 [ 488.551070][T13251] ____sys_recvmsg+0x1db/0x470 [ 488.556017][T13251] __sys_recvmsg+0x2f0/0x3e0 [ 488.560797][T13251] do_syscall_64+0xf3/0x230 [ 488.565489][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.571568][T13251] [ 488.573897][T13251] -> (&new->fa_lock){...-}-{2:2} { [ 488.579044][T13251] IN-SOFTIRQ-R at: [ 488.583035][T13251] lock_acquire+0x1ed/0x550 [ 488.589212][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.596166][T13251] kill_fasync+0x19e/0x4d0 [ 488.602238][T13251] sock_wake_async+0x147/0x170 [ 488.608664][T13251] sock_def_readable+0x3df/0x5b0 [ 488.615266][T13251] tcp_data_queue+0x20fa/0x76c0 [ 488.621779][T13251] tcp_rcv_established+0xfb7/0x2020 [ 488.628742][T13251] tcp_v6_do_rcv+0xabb/0x13b0 [ 488.635085][T13251] tcp_v6_rcv+0x2555/0x2fc0 [ 488.641254][T13251] ip6_protocol_deliver_rcu+0xc76/0x1570 [ 488.648558][T13251] ip6_input_finish+0x186/0x2d0 [ 488.655076][T13251] NF_HOOK+0x3a4/0x450 [ 488.660813][T13251] NF_HOOK+0x3a4/0x450 [ 488.666549][T13251] __netif_receive_skb+0x1ea/0x650 [ 488.673328][T13251] process_backlog+0x391/0x7d0 [ 488.679750][T13251] __napi_poll+0xcb/0x490 [ 488.685736][T13251] net_rx_action+0x7bb/0x10a0 [ 488.692073][T13251] handle_softirqs+0x2c4/0x970 [ 488.698580][T13251] do_softirq+0x11b/0x1e0 [ 488.704716][T13251] __local_bh_enable_ip+0x1bb/0x200 [ 488.711584][T13251] sk_stream_wait_memory+0x762/0xfa0 [ 488.718540][T13251] tcp_sendmsg_locked+0x140e/0x4d70 [ 488.725416][T13251] tcp_sendmsg+0x30/0x50 [ 488.731330][T13251] __sock_sendmsg+0xef/0x270 [ 488.737586][T13251] __sys_sendto+0x3a4/0x4f0 [ 488.743760][T13251] __x64_sys_sendto+0xde/0x100 [ 488.750208][T13251] do_syscall_64+0xf3/0x230 [ 488.756395][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.763959][T13251] INITIAL USE at: [ 488.768046][T13251] lock_acquire+0x1ed/0x550 [ 488.774130][T13251] _raw_write_lock_irq+0xd3/0x120 [ 488.780751][T13251] fasync_remove_entry+0xff/0x1d0 [ 488.787349][T13251] __fput+0x745/0x8b0 [ 488.792910][T13251] task_work_run+0x24f/0x310 [ 488.799090][T13251] syscall_exit_to_user_mode+0x168/0x370 [ 488.806295][T13251] do_syscall_64+0x100/0x230 [ 488.812461][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.819939][T13251] INITIAL READ USE at: [ 488.824285][T13251] lock_acquire+0x1ed/0x550 [ 488.830799][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.838100][T13251] kill_fasync+0x19e/0x4d0 [ 488.844524][T13251] sock_wake_async+0x147/0x170 [ 488.851304][T13251] af_alg_wmem_wakeup+0x3c1/0x440 [ 488.858342][T13251] skcipher_recvmsg+0x11c6/0x1230 [ 488.865379][T13251] sock_recvmsg+0x22f/0x280 [ 488.871908][T13251] ____sys_recvmsg+0x1db/0x470 [ 488.878681][T13251] __sys_recvmsg+0x2f0/0x3e0 [ 488.885278][T13251] do_syscall_64+0xf3/0x230 [ 488.891789][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.899695][T13251] } [ 488.902197][T13251] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 488.910983][T13251] ... acquired at: [ 488.914792][T13251] lock_acquire+0x1ed/0x550 [ 488.919484][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 488.924963][T13251] kill_fasync+0x19e/0x4d0 [ 488.929560][T13251] evdev_pass_values+0x58a/0xad0 [ 488.934687][T13251] evdev_events+0x1c2/0x300 [ 488.939372][T13251] input_pass_values+0x84d/0x1200 [ 488.944596][T13251] input_event_dispose+0x36c/0x650 [ 488.949893][T13251] input_handle_event+0xa71/0xbe0 [ 488.955096][T13251] input_inject_event+0x22f/0x340 [ 488.960312][T13251] evdev_write+0x672/0x7c0 [ 488.964922][T13251] vfs_write+0x2a2/0xc90 [ 488.969349][T13251] ksys_write+0x1a0/0x2c0 [ 488.973949][T13251] do_syscall_64+0xf3/0x230 [ 488.978632][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.984714][T13251] [ 488.987039][T13251] [ 488.987039][T13251] stack backtrace: [ 488.992938][T13251] CPU: 1 PID: 13251 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 489.003449][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 489.013529][T13251] Call Trace: [ 489.016830][T13251] [ 489.019767][T13251] dump_stack_lvl+0x241/0x360 [ 489.024552][T13251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.029767][T13251] ? __pfx__printk+0x10/0x10 [ 489.034377][T13251] ? print_shortest_lock_dependencies+0xf2/0x160 [ 489.040716][T13251] validate_chain+0x4de0/0x5900 [ 489.045671][T13251] ? mark_lock+0x9a/0x350 [ 489.050030][T13251] ? __pfx_validate_chain+0x10/0x10 [ 489.055244][T13251] ? rcu_is_watching+0x15/0xb0 [ 489.060022][T13251] ? __pfx_validate_chain+0x10/0x10 [ 489.065243][T13251] ? trace_pelt_se_tp+0x3d/0x140 [ 489.070208][T13251] ? register_lock_class+0x102/0x980 [ 489.075507][T13251] ? __pfx_register_lock_class+0x10/0x10 [ 489.081148][T13251] ? look_up_lock_class+0x77/0x160 [ 489.086271][T13251] ? mark_lock+0x9a/0x350 [ 489.090609][T13251] __lock_acquire+0x1346/0x1fd0 [ 489.095486][T13251] lock_acquire+0x1ed/0x550 [ 489.099995][T13251] ? kill_fasync+0x19e/0x4d0 [ 489.104599][T13251] ? __pfx_lock_acquire+0x10/0x10 [ 489.109641][T13251] ? __pfx_lock_acquire+0x10/0x10 [ 489.114683][T13251] _raw_read_lock_irqsave+0xdd/0x130 [ 489.119983][T13251] ? kill_fasync+0x19e/0x4d0 [ 489.124583][T13251] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 489.130492][T13251] kill_fasync+0x19e/0x4d0 [ 489.134919][T13251] ? kill_fasync+0x55/0x4d0 [ 489.139434][T13251] evdev_pass_values+0x58a/0xad0 [ 489.144393][T13251] ? evdev_pass_values+0x5a1/0xad0 [ 489.149521][T13251] evdev_events+0x1c2/0x300 [ 489.154039][T13251] ? evdev_events+0x6f/0x300 [ 489.158645][T13251] ? __pfx_evdev_events+0x10/0x10 [ 489.163690][T13251] input_pass_values+0x84d/0x1200 [ 489.168740][T13251] ? input_pass_values+0x9d/0x1200 [ 489.173875][T13251] input_event_dispose+0x36c/0x650 [ 489.179001][T13251] input_handle_event+0xa71/0xbe0 [ 489.184041][T13251] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 489.189515][T13251] ? __pfx_input_handle_event+0x10/0x10 [ 489.195076][T13251] input_inject_event+0x22f/0x340 [ 489.200112][T13251] ? input_inject_event+0xd6/0x340 [ 489.205238][T13251] evdev_write+0x672/0x7c0 [ 489.209680][T13251] ? __pfx_evdev_write+0x10/0x10 [ 489.214638][T13251] ? bpf_lsm_file_permission+0x9/0x10 [ 489.220018][T13251] ? security_file_permission+0x7f/0xa0 [ 489.225579][T13251] ? rw_verify_area+0x1d2/0x6b0 [ 489.230439][T13251] ? __pfx_evdev_write+0x10/0x10 [ 489.235395][T13251] vfs_write+0x2a2/0xc90 [ 489.239655][T13251] ? __pfx_vfs_write+0x10/0x10 [ 489.244428][T13251] ? do_futex+0x33b/0x560 [ 489.248770][T13251] ? __fget_files+0x29/0x470 [ 489.253391][T13251] ? __fget_files+0x3f6/0x470 [ 489.258081][T13251] ? __fget_files+0x29/0x470 [ 489.262688][T13251] ksys_write+0x1a0/0x2c0 [ 489.267299][T13251] ? __pfx_ksys_write+0x10/0x10 [ 489.272175][T13251] ? do_syscall_64+0x100/0x230 [ 489.276958][T13251] ? do_syscall_64+0xb6/0x230 [ 489.281648][T13251] do_syscall_64+0xf3/0x230 [ 489.286166][T13251] ? clear_bhb_loop+0x35/0x90 [ 489.290858][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.296772][T13251] RIP: 0033:0x7f37dee7cee9 [ 489.301199][T13251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 489.320826][T13251] RSP: 002b:00007f37dfc390c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.329265][T13251] RAX: ffffffffffffffda RBX: 00007f37defb3fa0 RCX: 00007f37dee7cee9 [ 489.337248][T13251] RDX: 0000000000002778 RSI: 0000000020000040 RDI: 0000000000000004 [ 489.345224][T13251] RBP: 00007f37deec947f R08: 0000000000000000 R09: 0000000000000000 [ 489.353202][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2024/06/01 09:21:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 489.361182][T13251] R13: 000000000000000b R14: 00007f37defb3fa0 R15: 00007f37df0dfa98 [ 489.369178][T13251] [ 489.530412][ T5160] usb 1-1: USB disconnect, device number 26