last executing test programs: 7.665374838s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) 6.378479168s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) 4.590856065s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) 3.53819766s ago: executing program 2 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140064f3b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='module_request\x00', r3}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 3.527401468s ago: executing program 4 (id=409): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) 3.301409012s ago: executing program 2 (id=411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000740)="128d16d90c697b08f3c9704225d1", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 3.279011302s ago: executing program 0 (id=412): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff000) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x78dd, 0x0) 3.194964311s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) 2.128950094s ago: executing program 0 (id=413): unshare(0x10010280) r0 = socket(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x3f}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2.127401566s ago: executing program 2 (id=414): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x4001000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = socket$tipc(0x1e, 0x5, 0x0) chdir(0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.126765264s ago: executing program 3 (id=415): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) 2.119944738s ago: executing program 4 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1.976375378s ago: executing program 3 (id=417): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001780)={0x0, "8818950e2c28d752a2ab5cbded433ab0139b0c10fe45a82686474075dd57d375", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000017c0)={"84ab4ec3b9357d8c3a74fd6badadcc176cd51231907fca5204b29387a4f051f0", r5}) 1.878502199s ago: executing program 4 (id=418): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5, 0x808, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f3668d3d1d1a7834313117f693b1796314416836cdb45961f89c3f3421927b848e15337a8da6ac921d9395e146c2898d275fb842ccbb7e3f7f66fd6840480edf"}}, 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.834292084s ago: executing program 0 (id=419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xaf, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0xfffffffb, 0x1) signalfd(r2, &(0x7f0000000040)={[0x2]}, 0x8) 1.768523726s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x9, "ad117d66"}, @local=@item_4={0x3, 0x2, 0x0, "fa9e274a"}, @global=@item_012={0x2, 0x1, 0x9, "822b"}, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @main=@item_4={0x3, 0x0, 0xb, "e633ec2c"}, @local=@item_4={0x3, 0x2, 0x0, "7d024063"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x0, "cacb7460"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1.674159685s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) 522.250023ms ago: executing program 0 (id=421): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) unshare(0x20000400) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') fstat(r3, &(0x7f0000000400)) 478.390065ms ago: executing program 2 (id=422): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r3, &(0x7f0000000280)=@shmem={0xc, 0x1, {0x2da}}, 0x9e0a) 478.16031ms ago: executing program 3 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0x0, 0x0, @val=@netfilter}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 477.783352ms ago: executing program 4 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdef, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde4}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) 364.731262ms ago: executing program 4 (id=425): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 353.844641ms ago: executing program 3 (id=426): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000480)=[@cr0={0x0, 0x20}], 0x1) 278.323153ms ago: executing program 0 (id=427): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 278.108525ms ago: executing program 2 (id=428): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}], 0x2, 0x0) 244.409314ms ago: executing program 4 (id=429): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 206.216258ms ago: executing program 3 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) ioprio_set$pid(0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) 165.436851ms ago: executing program 0 (id=431): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 45.432737ms ago: executing program 2 (id=432): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) pipe(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x7) 0s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 58.449810][ T5201] cgroup: Unknown subsys name 'net' [ 58.619828][ T5201] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.004613][ T5201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.320223][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.332401][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.345592][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.356376][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.364190][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.364806][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.372761][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.381263][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.393458][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.401791][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.401922][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.410792][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.425498][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.432921][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.433565][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.440327][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.448322][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.463178][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.466091][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.470932][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.480000][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.493112][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.505829][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.513728][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.521677][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.541663][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.550228][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.550355][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.584234][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.595135][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.171670][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 63.215024][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 63.308017][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 63.362112][ T5211] chnl_net:caif_netlink_parms(): no params data found [ 63.402696][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 63.465366][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.473558][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.481107][ T5227] bridge_slave_0: entered allmulticast mode [ 63.488103][ T5227] bridge_slave_0: entered promiscuous mode [ 63.536634][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.544096][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.552003][ T5227] bridge_slave_1: entered allmulticast mode [ 63.558969][ T5227] bridge_slave_1: entered promiscuous mode [ 63.625468][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.633117][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.640362][ T5212] bridge_slave_0: entered allmulticast mode [ 63.647513][ T5212] bridge_slave_0: entered promiscuous mode [ 63.680682][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.688149][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.696527][ T5214] bridge_slave_0: entered allmulticast mode [ 63.704421][ T5214] bridge_slave_0: entered promiscuous mode [ 63.715644][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.723149][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.730400][ T5214] bridge_slave_1: entered allmulticast mode [ 63.737967][ T5214] bridge_slave_1: entered promiscuous mode [ 63.758217][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.767707][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.775103][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.782703][ T5212] bridge_slave_1: entered allmulticast mode [ 63.789540][ T5212] bridge_slave_1: entered promiscuous mode [ 63.803740][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.811154][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.818465][ T5211] bridge_slave_0: entered allmulticast mode [ 63.826966][ T5211] bridge_slave_0: entered promiscuous mode [ 63.836279][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.844048][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.851648][ T5211] bridge_slave_1: entered allmulticast mode [ 63.858500][ T5211] bridge_slave_1: entered promiscuous mode [ 63.879044][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.962727][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.984027][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.992556][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.999795][ T5213] bridge_slave_0: entered allmulticast mode [ 64.006858][ T5213] bridge_slave_0: entered promiscuous mode [ 64.027407][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.042195][ T5227] team0: Port device team_slave_0 added [ 64.050911][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.060715][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.067852][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.075622][ T5213] bridge_slave_1: entered allmulticast mode [ 64.082876][ T5213] bridge_slave_1: entered promiscuous mode [ 64.092213][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.103664][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.128196][ T5227] team0: Port device team_slave_1 added [ 64.176782][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.211597][ T5212] team0: Port device team_slave_0 added [ 64.241563][ T5214] team0: Port device team_slave_0 added [ 64.249047][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.256384][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.286071][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.301810][ T5212] team0: Port device team_slave_1 added [ 64.310960][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.337751][ T5214] team0: Port device team_slave_1 added [ 64.359366][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.366753][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.393662][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.418415][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.432520][ T5211] team0: Port device team_slave_0 added [ 64.490149][ T5211] team0: Port device team_slave_1 added [ 64.499037][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.506678][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.506714][ T5217] Bluetooth: hci1: command tx timeout [ 64.538991][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.552285][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.559261][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.585512][ T5217] Bluetooth: hci0: command tx timeout [ 64.589201][ T5226] Bluetooth: hci4: command tx timeout [ 64.591503][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.621105][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.628085][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.655014][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.665991][ T5226] Bluetooth: hci2: command tx timeout [ 64.666010][ T5217] Bluetooth: hci3: command tx timeout [ 64.668406][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.684255][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.710871][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.749910][ T5227] hsr_slave_0: entered promiscuous mode [ 64.756906][ T5227] hsr_slave_1: entered promiscuous mode [ 64.775138][ T5213] team0: Port device team_slave_0 added [ 64.792870][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.799956][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.826728][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.839905][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.847146][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.873336][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.895621][ T5213] team0: Port device team_slave_1 added [ 64.979313][ T5214] hsr_slave_0: entered promiscuous mode [ 64.986353][ T5214] hsr_slave_1: entered promiscuous mode [ 64.993119][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.001672][ T5214] Cannot create hsr debugfs directory [ 65.019846][ T5212] hsr_slave_0: entered promiscuous mode [ 65.028420][ T5212] hsr_slave_1: entered promiscuous mode [ 65.034971][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.042668][ T5212] Cannot create hsr debugfs directory [ 65.087675][ T5211] hsr_slave_0: entered promiscuous mode [ 65.096953][ T5211] hsr_slave_1: entered promiscuous mode [ 65.103498][ T5211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.111173][ T5211] Cannot create hsr debugfs directory [ 65.117476][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.126402][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.152556][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.218352][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.225600][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.252190][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.453404][ T5213] hsr_slave_0: entered promiscuous mode [ 65.459824][ T5213] hsr_slave_1: entered promiscuous mode [ 65.467298][ T5213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.475276][ T5213] Cannot create hsr debugfs directory [ 65.744919][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.759587][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.782154][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.801093][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.853467][ T5214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.867013][ T5214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.892853][ T5214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.905034][ T5214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.971154][ T5212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.984528][ T5212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.995954][ T5212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.015695][ T5212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.135171][ T5211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.145515][ T5211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.156707][ T5211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.170890][ T5211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.246871][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.262015][ T5213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.308480][ T5213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.319005][ T5213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.332744][ T5213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.358232][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.386444][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.419677][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.427693][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.489962][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.503020][ T2569] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.511145][ T2569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.546986][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.589795][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.593963][ T5226] Bluetooth: hci1: command tx timeout [ 66.597077][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.612946][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.620101][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.664755][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.676858][ T5226] Bluetooth: hci4: command tx timeout [ 66.682637][ T5226] Bluetooth: hci0: command tx timeout [ 66.697281][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.734660][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.741917][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.749785][ T5217] Bluetooth: hci2: command tx timeout [ 66.755623][ T5217] Bluetooth: hci3: command tx timeout [ 66.806462][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.813753][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.910305][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.973000][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.056029][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.076018][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.095272][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.149410][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.177912][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.185175][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.207061][ T2569] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.214430][ T2569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.259136][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.266399][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.309359][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.316809][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.413634][ T5227] veth0_vlan: entered promiscuous mode [ 67.457123][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.469876][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.504522][ T5227] veth1_vlan: entered promiscuous mode [ 67.650293][ T5214] veth0_vlan: entered promiscuous mode [ 67.666828][ T5214] veth1_vlan: entered promiscuous mode [ 67.734211][ T5214] veth0_macvtap: entered promiscuous mode [ 67.748616][ T5227] veth0_macvtap: entered promiscuous mode [ 67.778576][ T5227] veth1_macvtap: entered promiscuous mode [ 67.803273][ T5214] veth1_macvtap: entered promiscuous mode [ 67.842130][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.869720][ T5212] veth0_vlan: entered promiscuous mode [ 67.893449][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.920138][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.931754][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941723][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.954837][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.983935][ T5212] veth1_vlan: entered promiscuous mode [ 67.996979][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.009524][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.023507][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.036183][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.093007][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.105396][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117068][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.131531][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.148660][ T5214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.170520][ T5214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.179585][ T5214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.192752][ T5214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.293710][ T5213] veth0_vlan: entered promiscuous mode [ 68.336984][ T5212] veth0_macvtap: entered promiscuous mode [ 68.359873][ T5213] veth1_vlan: entered promiscuous mode [ 68.378969][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.383534][ T5212] veth1_macvtap: entered promiscuous mode [ 68.404126][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.520153][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.533871][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.579302][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.590301][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.600317][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.610930][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.623396][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.637782][ T5213] veth0_macvtap: entered promiscuous mode [ 68.661519][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.662054][ T5217] Bluetooth: hci1: command tx timeout [ 68.669358][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.689882][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.701745][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.712064][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.722909][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.734084][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.743188][ T5217] Bluetooth: hci0: command tx timeout [ 68.745526][ T5226] Bluetooth: hci4: command tx timeout [ 68.794117][ T5212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804679][ T5212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814328][ T5212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.823696][ T5226] Bluetooth: hci3: command tx timeout [ 68.829134][ T5212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.838053][ T5226] Bluetooth: hci2: command tx timeout [ 68.885485][ T5213] veth1_macvtap: entered promiscuous mode [ 68.929204][ T5211] veth0_vlan: entered promiscuous mode [ 68.939568][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.943400][ T5211] veth1_vlan: entered promiscuous mode [ 68.962980][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.009301][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.027728][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.037963][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.048659][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.058953][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.069941][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.081660][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.118021][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.129942][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.144075][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.156946][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.167871][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.178673][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.191900][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.232245][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.240120][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.273565][ T5211] veth0_macvtap: entered promiscuous mode [ 69.283232][ T5213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.293057][ T5213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.303220][ T5213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.312029][ T5213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.377812][ T5211] veth1_macvtap: entered promiscuous mode [ 69.393679][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.403018][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.497351][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.508925][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.519246][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.529997][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.540351][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.555893][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.566800][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.577517][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.589759][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.600231][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.610995][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.621114][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.631652][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.650524][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.676849][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.686951][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.698508][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.711712][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.725196][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.736571][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.776739][ T5211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801534][ T5211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.810288][ T5211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822866][ T5211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.878341][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.888798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.087870][ T5312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.127294][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.147807][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.258025][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.281920][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.378767][ T5224] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.606737][ T5224] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 70.649208][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.687973][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.741781][ T5226] Bluetooth: hci1: command tx timeout [ 70.762308][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.801902][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.820902][ T5226] Bluetooth: hci0: command tx timeout [ 70.826420][ T5226] Bluetooth: hci4: command tx timeout [ 70.845745][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.902296][ T5217] Bluetooth: hci2: command tx timeout [ 70.902306][ T5226] Bluetooth: hci3: command tx timeout [ 70.916253][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.926483][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.941059][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.952533][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.962537][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.972319][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.988955][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.017378][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.032998][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.056469][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.067456][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.080358][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.106711][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.123617][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.137009][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.156017][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.166278][ T5224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.177921][ T5224] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.196981][ T5224] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.214764][ T5224] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 71.227558][ T5224] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 71.230692][ T5266] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.238399][ T5224] usb 2-1: Product: syz [ 71.251691][ T5224] usb 2-1: Manufacturer: syz [ 71.260878][ T5224] usb 2-1: SerialNumber: syz [ 71.284918][ T5337] evm: overlay not supported [ 71.291973][ T5224] usb 2-1: config 0 descriptor?? [ 71.320004][ T29] audit: type=1804 audit(1723943758.335:2): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/3/bus/bus" dev="overlay" ino=41 res=1 errno=0 [ 71.340614][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.366896][ T5224] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 71.451217][ T5266] usb 5-1: Using ep0 maxpacket: 16 [ 71.479840][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.538692][ T5266] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.573646][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.614140][ T5266] usb 5-1: Product: syz [ 71.635292][ T5266] usb 5-1: Manufacturer: syz [ 71.655292][ T5266] usb 5-1: SerialNumber: syz [ 71.662198][ T5345] mmap: syz.0.18 (5345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.688587][ T5266] usb 5-1: config 0 descriptor?? [ 71.748509][ T5266] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.796121][ T5266] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 71.868684][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.876413][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.883193][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 71.976758][ T5215] usb 2-1: USB disconnect, device number 2 [ 72.019624][ T5215] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 72.170356][ T5358] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.401615][ T5266] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 72.862648][ T5266] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 72.884616][ T5266] em28xx 5-1:0.0: board has no eeprom [ 73.248193][ T5266] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 73.340536][ T5266] em28xx 5-1:0.0: dvb set to bulk mode. [ 73.348600][ T5310] em28xx 5-1:0.0: Binding DVB extension [ 73.367591][ T5266] usb 5-1: USB disconnect, device number 2 [ 73.396740][ T5266] em28xx 5-1:0.0: Disconnecting em28xx [ 73.530318][ T5310] em28xx 5-1:0.0: Registering input extension [ 73.572150][ T5266] em28xx 5-1:0.0: Closing input extension [ 74.478197][ T5266] em28xx 5-1:0.0: Freeing device [ 74.522661][ T5405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'. [ 74.554442][ T5403] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 74.614935][ T5405] Zero length message leads to an empty skb [ 74.810561][ T1613] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.014113][ T1613] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 75.047621][ T1613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.084086][ T1613] usb 1-1: config 0 descriptor?? [ 75.120262][ T1613] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 75.130519][ T5432] dccp_close: ABORT with 36 bytes unread [ 75.504369][ T5439] tipc: Started in network mode [ 75.509606][ T5439] tipc: Node identity 523b8c3964f9, cluster identity 4711 [ 75.521238][ T5439] tipc: Enabled bearer , priority 0 [ 75.588521][ T5439] syzkaller0: entered promiscuous mode [ 75.594122][ T5439] syzkaller0: entered allmulticast mode [ 75.602002][ T5439] tipc: Resetting bearer [ 75.643572][ T5438] tipc: Resetting bearer [ 76.100873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.653991][ T5269] tipc: Node number set to 918719545 [ 76.742058][ T1613] gspca_cpia1: usb_control_msg 02, error -110 [ 76.786019][ T1613] gspca_cpia1: usb_control_msg 05, error -32 [ 76.825494][ T1613] gspca_cpia1: usb_control_msg 05, error -32 [ 76.855978][ T1613] gspca_cpia1: usb_control_msg 05, error -32 [ 76.886319][ T1613] gspca_cpia1: usb_control_msg 05, error -32 [ 76.913544][ T1613] gspca_cpia1: usb_control_msg 04, error -32 [ 76.937390][ T1613] gspca_cpia1: usb_control_msg 04, error -32 [ 76.977460][ T1613] gspca_cpia1: usb_control_msg 04, error -32 [ 77.000595][ T1613] gspca_cpia1: usb_control_msg 04, error -32 [ 77.006903][ T1613] cpia1 1-1:0.0: probe with driver cpia1 failed with error -32 [ 78.832753][ T5217] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 78.842409][ T5217] Bluetooth: hci3: Injecting HCI hardware error event [ 78.850832][ T5217] Bluetooth: hci3: hardware error 0x00 [ 81.226205][ T5217] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 82.117508][ T25] cfg80211: failed to load regulatory.db [ 85.215219][ T1613] usb 1-1: USB disconnect, device number 2 [ 86.213963][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.228114][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.243018][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.259893][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.267860][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.279945][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.371508][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.381539][ T5226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.389570][ T5226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.397711][ T5226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.422389][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.429980][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.437882][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.447033][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.477046][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.489859][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.511666][ T5220] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.531203][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.932763][ T5438] tipc: Disabling bearer [ 87.359831][ T1062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.626671][ T1062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.745783][ T1062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.856360][ T1062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.066513][ T5487] ªªªªªª: renamed from vlan0 (while UP) [ 88.340664][ T5220] Bluetooth: hci0: command tx timeout [ 88.385010][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 88.401695][ T5504] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 88.500731][ T5220] Bluetooth: hci4: command tx timeout [ 88.589534][ T5220] Bluetooth: hci5: command tx timeout [ 88.749560][ T5470] chnl_net:caif_netlink_parms(): no params data found [ 88.765591][ T1062] bridge_slave_1: left allmulticast mode [ 88.780991][ T1062] bridge_slave_1: left promiscuous mode [ 88.788720][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.851605][ T1062] bridge_slave_0: left allmulticast mode [ 88.857324][ T1062] bridge_slave_0: left promiscuous mode [ 88.867618][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.151988][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.331026][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.344156][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.353133][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 89.361427][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 89.364553][ T1062] bond0 (unregistering): Released all slaves [ 89.375199][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 89.410816][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.434161][ T25] usb 4-1: config 0 descriptor?? [ 89.479106][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 89.820355][ T1169] usb 4-1: USB disconnect, device number 2 [ 89.830377][ T4654] bcm5974 4-1:0.0: could not read from device [ 89.866187][ T4654] bcm5974 4-1:0.0: could not read from device [ 89.883135][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.891941][ T5234] bcm5974 4-1:0.0: could not read from device [ 89.898554][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.911322][ T5464] bridge_slave_0: entered allmulticast mode [ 89.927769][ T5464] bridge_slave_0: entered promiscuous mode [ 90.084160][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.120788][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.138348][ T5464] bridge_slave_1: entered allmulticast mode [ 90.165602][ T5464] bridge_slave_1: entered promiscuous mode [ 90.245344][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 90.394756][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.420975][ T5220] Bluetooth: hci0: command tx timeout [ 90.436371][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.454694][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.471729][ T5470] bridge_slave_0: entered allmulticast mode [ 90.479137][ T5470] bridge_slave_0: entered promiscuous mode [ 90.528812][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.570685][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.577965][ T5470] bridge_slave_1: entered allmulticast mode [ 90.581593][ T5220] Bluetooth: hci4: command tx timeout [ 90.600341][ T5470] bridge_slave_1: entered promiscuous mode [ 90.610167][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.663062][ T5220] Bluetooth: hci5: command tx timeout [ 90.722432][ T1062] hsr_slave_0: left promiscuous mode [ 90.729219][ T1062] hsr_slave_1: left promiscuous mode [ 90.737877][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.745626][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.755165][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.775893][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.821927][ T1062] veth1_macvtap: left promiscuous mode [ 90.828030][ T1062] veth0_macvtap: left promiscuous mode [ 90.834099][ T1062] veth1_vlan: left promiscuous mode [ 90.841033][ T1062] veth0_vlan: left promiscuous mode [ 90.953681][ T5567] kvm: emulating exchange as write [ 91.499260][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 91.573832][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 92.281961][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.314776][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.354739][ T5464] team0: Port device team_slave_0 added [ 92.482525][ T5464] team0: Port device team_slave_1 added [ 92.501806][ T5226] Bluetooth: hci0: command tx timeout [ 92.526788][ T2473] Bluetooth: hci2: Frame reassembly failed (-84) [ 92.541261][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.554260][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.562240][ T5468] bridge_slave_0: entered allmulticast mode [ 92.569571][ T5468] bridge_slave_0: entered promiscuous mode [ 92.614883][ T5470] team0: Port device team_slave_0 added [ 92.625151][ T5470] team0: Port device team_slave_1 added [ 92.660667][ T5226] Bluetooth: hci4: command tx timeout [ 92.685191][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.693238][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.723824][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.736330][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.743525][ T5226] Bluetooth: hci5: command tx timeout [ 92.750384][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.758121][ T5468] bridge_slave_1: entered allmulticast mode [ 92.765919][ T5468] bridge_slave_1: entered promiscuous mode [ 92.811828][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.820585][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.850923][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.908700][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.919161][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.946204][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.962689][ T1169] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.966729][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.986193][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.017294][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.063660][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.160776][ T1169] usb 4-1: Using ep0 maxpacket: 16 [ 93.162359][ T5464] hsr_slave_0: entered promiscuous mode [ 93.170755][ T1169] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 93.181791][ T5464] hsr_slave_1: entered promiscuous mode [ 93.188112][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.210929][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.230503][ T1169] usb 4-1: Product: syz [ 93.235523][ T1169] usb 4-1: Manufacturer: syz [ 93.240248][ T1169] usb 4-1: SerialNumber: syz [ 93.261580][ T1169] usb 4-1: config 0 descriptor?? [ 93.279859][ T1169] gspca_main: conex-2.14.0 probing 0572:0041 [ 93.372331][ T5470] hsr_slave_0: entered promiscuous mode [ 93.379063][ T5470] hsr_slave_1: entered promiscuous mode [ 93.387122][ T5470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.395092][ T5470] Cannot create hsr debugfs directory [ 93.468019][ T5468] team0: Port device team_slave_0 added [ 93.535003][ T5468] team0: Port device team_slave_1 added [ 93.652588][ T1169] usb 4-1: USB disconnect, device number 3 [ 93.707756][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.730805][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.789729][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.834195][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.849373][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.892427][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.972992][ T1062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.215477][ T1062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.288767][ T5468] hsr_slave_0: entered promiscuous mode [ 94.306071][ T5468] hsr_slave_1: entered promiscuous mode [ 94.318647][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.328759][ T5468] Cannot create hsr debugfs directory [ 94.434863][ T1062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.501016][ T5220] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 94.503319][ T5226] Bluetooth: hci2: command 0x1003 tx timeout [ 94.580790][ T5220] Bluetooth: hci0: command tx timeout [ 94.669584][ T5464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.740968][ T5220] Bluetooth: hci4: command tx timeout [ 94.748895][ T1062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.823599][ T5220] Bluetooth: hci5: command tx timeout [ 94.840216][ T5464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.939700][ T5464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.104444][ T5464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.435846][ T1062] bridge_slave_1: left allmulticast mode [ 95.466876][ T1062] bridge_slave_1: left promiscuous mode [ 95.492564][ T5643] 9pnet_fd: Insufficient options for proto=fd [ 95.501522][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.532100][ T1062] bridge_slave_0: left allmulticast mode [ 95.537833][ T1062] bridge_slave_0: left promiscuous mode [ 95.568695][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.672628][ T1062] bridge_slave_1: left allmulticast mode [ 95.679536][ T1062] bridge_slave_1: left promiscuous mode [ 95.711560][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.752099][ T1062] bridge_slave_0: left allmulticast mode [ 95.757801][ T1062] bridge_slave_0: left promiscuous mode [ 95.764791][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.080745][ T1613] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.273950][ T1613] usb 5-1: Using ep0 maxpacket: 16 [ 96.285508][ T1613] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 96.303991][ T1613] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 96.319893][ T1613] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.337727][ T1613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.346568][ T1613] usb 5-1: Product: ëŒì³‚ꭲ릢鰃롱ʈ∳휑ßì„™å°ë¥®æ€˜â˜·ê±è­±ê›…룷䔔꺼墶ኊ莊â‰ä¤ªî‹–쫃䥑冗颴èŠì¬Ÿê·£ì Ÿî—„꧳ࣱ▖缷퇯긲䱊왻䰸鶰෬纮æœé˜Šä®Œá”Œà£˜îµáºªîª³ë°žçŠºíž‰á¹á±™á™¿ë¤‹ [ 96.367870][ T1613] usb 5-1: Manufacturer: Ð… [ 96.372498][ T1613] usb 5-1: SerialNumber: çƒâªŸëŒ…ম焩삯믃䰜졗è¯è–㚠ܱã’ã­ç€’㻻귦ⱸ휆櫫놓배蘖擣髭힧㤇᜽䳪â쿙늅â‰ãª°ë²”₲å£ê˜œä™ê‡“ℳ㊠ꛛ㾀嚿꠼휀蔰䢹뙵䜹쇌吏îƒìŸ‚俠꩟鮎礋䋵瀻 [ 96.581988][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.594114][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.617708][ T1062] bond0 (unregistering): Released all slaves [ 96.733054][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.746328][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.759757][ T1062] bond0 (unregistering): Released all slaves [ 96.818882][ T1613] cdc_ncm 5-1:1.0: bind() failure [ 96.869583][ T1613] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 96.905172][ T1613] cdc_ncm 5-1:1.1: bind() failure [ 96.916973][ T1613] usb 5-1: USB disconnect, device number 3 [ 96.953511][ T1062] tipc: Left network mode [ 97.748342][ T29] audit: type=1800 audit(1723943784.765:3): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.111" name="bus" dev="overlay" ino=192 res=0 errno=0 [ 97.930902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.939701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.948944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.959866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.968813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.030633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 98.174517][ T1062] hsr_slave_0: left promiscuous mode [ 98.191550][ T1062] hsr_slave_1: left promiscuous mode [ 98.202249][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.210598][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.226908][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.244306][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.271590][ T1062] hsr_slave_0: left promiscuous mode [ 98.288194][ T1062] hsr_slave_1: left promiscuous mode [ 98.304811][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.312482][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.347323][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.360381][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.419412][ T1062] veth1_macvtap: left promiscuous mode [ 98.425247][ T1062] veth0_macvtap: left promiscuous mode [ 98.440618][ T1062] veth1_vlan: left promiscuous mode [ 98.446015][ T1062] veth0_vlan: left promiscuous mode [ 98.470291][ T1062] veth1_macvtap: left promiscuous mode [ 98.481056][ T1062] veth0_macvtap: left promiscuous mode [ 98.486724][ T1062] veth1_vlan: left promiscuous mode [ 98.510840][ T1062] veth0_vlan: left promiscuous mode [ 99.149804][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.167316][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.189727][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.204569][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.221501][ T5217] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.228963][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.547178][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 99.592303][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 100.306568][ T5224] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.422542][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 100.455337][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 100.514960][ T5224] usb 4-1: Using ep0 maxpacket: 32 [ 100.536164][ T5224] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=86.5d [ 100.555550][ T5224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.563948][ T5224] usb 4-1: Product: syz [ 100.569522][ T5224] usb 4-1: Manufacturer: syz [ 100.574685][ T5224] usb 4-1: SerialNumber: syz [ 100.583313][ T5224] usb 4-1: config 0 descriptor?? [ 100.844592][ T25] usb 4-1: USB disconnect, device number 4 [ 101.121227][ T5468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.149365][ T5468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.204580][ T5468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.241577][ T5468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.344356][ T5464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.392549][ T5464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.414786][ T5464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.431219][ T5464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.455324][ T5217] Bluetooth: hci1: command tx timeout [ 101.524592][ T5701] chnl_net:caif_netlink_parms(): no params data found [ 101.626613][ T5470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.710986][ T5470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.811040][ T5470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.842440][ T5470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.969837][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.977795][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.986570][ T5701] bridge_slave_0: entered allmulticast mode [ 101.993767][ T5701] bridge_slave_0: entered promiscuous mode [ 102.003933][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.011244][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.019426][ T5701] bridge_slave_1: entered allmulticast mode [ 102.026283][ T5701] bridge_slave_1: entered promiscuous mode [ 102.096179][ T5701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.111915][ T5701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.199145][ T5701] team0: Port device team_slave_0 added [ 102.209623][ T5701] team0: Port device team_slave_1 added [ 102.230156][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.416400][ T1062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.452277][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.459863][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.497819][ T5701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.533787][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.551895][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.559320][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.588331][ T5701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.625215][ T1062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.708001][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.715266][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.736566][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.744539][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.793387][ T1062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.839728][ T5701] hsr_slave_0: entered promiscuous mode [ 102.856745][ T5701] hsr_slave_1: entered promiscuous mode [ 102.868254][ T5701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.881269][ T5701] Cannot create hsr debugfs directory [ 102.915360][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.948042][ T1062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.119066][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.237847][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.245053][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.309070][ T5464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.444860][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.452094][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.509370][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.525320][ T1062] bridge_slave_1: left allmulticast mode [ 103.531031][ T1062] bridge_slave_1: left promiscuous mode [ 103.540325][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.552479][ T1062] bridge_slave_0: left allmulticast mode [ 103.563930][ T1062] bridge_slave_0: left promiscuous mode [ 103.571100][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.722093][ T5217] Bluetooth: hci1: command tx timeout [ 103.772026][ T1169] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.000893][ T1169] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.009540][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.021501][ T1169] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.030564][ T1169] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.045428][ T1169] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.062235][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.076052][ T1169] usb 4-1: Product: syz [ 104.080533][ T1169] usb 4-1: Manufacturer: syz [ 104.112120][ T1169] cdc_wdm 4-1:1.0: skipping garbage [ 104.117412][ T1169] cdc_wdm 4-1:1.0: skipping garbage [ 104.145307][ T1169] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 104.152135][ T1169] cdc_wdm 4-1:1.0: Unknown control protocol [ 104.257297][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.276512][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.297659][ T1062] bond0 (unregistering): Released all slaves [ 104.496249][ T5470] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.807398][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.814631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.005718][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.012995][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.072986][ T5215] usb 4-1: USB disconnect, device number 5 [ 105.124434][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.237763][ T1062] hsr_slave_0: left promiscuous mode [ 105.274573][ T1062] hsr_slave_1: left promiscuous mode [ 105.284919][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.299281][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.316375][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.325050][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.414803][ T1062] veth1_macvtap: left promiscuous mode [ 105.437358][ T1062] veth0_macvtap: left promiscuous mode [ 105.448331][ T1062] veth1_vlan: left promiscuous mode [ 105.455968][ T1062] veth0_vlan: left promiscuous mode [ 105.961330][ T5217] Bluetooth: hci1: command tx timeout [ 106.000830][ T1062] team0 (unregistering): Port device team_slave_1 removed [ 106.040182][ T1062] team0 (unregistering): Port device team_slave_0 removed [ 106.401779][ T5848] netlink: 14 bytes leftover after parsing attributes in process `syz.3.135'. [ 106.426119][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.436106][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.533423][ T5470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.595540][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.742657][ T5464] veth0_vlan: entered promiscuous mode [ 106.778168][ T5464] veth1_vlan: entered promiscuous mode [ 106.821270][ T5701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.860254][ T5701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.900029][ T5701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.943083][ T5701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.107777][ T5468] veth0_vlan: entered promiscuous mode [ 107.138295][ T5464] veth0_macvtap: entered promiscuous mode [ 107.152960][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.200465][ T5464] veth1_macvtap: entered promiscuous mode [ 107.216925][ T5468] veth1_vlan: entered promiscuous mode [ 107.332714][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.346055][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.364408][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.406768][ T5468] veth0_macvtap: entered promiscuous mode [ 107.427052][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.441472][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.454165][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.470703][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.492066][ T5464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.511563][ T5464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.521578][ T5464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.530325][ T5464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.549955][ T5468] veth1_macvtap: entered promiscuous mode [ 107.638823][ T5701] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.676890][ T5470] veth0_vlan: entered promiscuous mode [ 107.686137][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.707313][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.723792][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.734551][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.746534][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.763063][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.770310][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.796520][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.807181][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.818011][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.828657][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.839844][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.871405][ T5470] veth1_vlan: entered promiscuous mode [ 107.885390][ T2569] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.892603][ T2569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.910605][ T5468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.919459][ T5468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.928917][ T5468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.938288][ T5468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.037897][ T2473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.066947][ T2473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.122808][ T5470] veth0_macvtap: entered promiscuous mode [ 108.135240][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.152654][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.178697][ T5470] veth1_macvtap: entered promiscuous mode [ 108.224873][ T5217] Bluetooth: hci1: command tx timeout [ 108.245315][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.256274][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.337707][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.362745][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.380506][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.398891][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.409224][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.426941][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.440077][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.471274][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.492573][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.519561][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.542100][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.552953][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.565457][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.584837][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.623246][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.637006][ T5470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.645776][ T5470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.654972][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.676240][ T5470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.685390][ T5470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.904402][ T5701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.939437][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.981316][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.159857][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.197283][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.610269][ T5701] veth0_vlan: entered promiscuous mode [ 109.647661][ T5701] veth1_vlan: entered promiscuous mode [ 109.756009][ T5701] veth0_macvtap: entered promiscuous mode [ 109.769469][ T5701] veth1_macvtap: entered promiscuous mode [ 109.841351][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.852639][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.866924][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.884244][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.896804][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.908814][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.936897][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.949412][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.961753][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.973753][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.984624][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.994918][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.007245][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.030468][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.043609][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.068500][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.080565][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.094456][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.129331][ T5922] netlink: 9 bytes leftover after parsing attributes in process `syz.2.147'. [ 110.155126][ T5922] gretap0: entered promiscuous mode [ 110.210676][ T5701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.243968][ T5701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.264595][ T5701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.291330][ T5701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.670552][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.688738][ T5933] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 110.722301][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.735858][ T5933] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 110.744512][ T5933] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.153'. [ 110.863811][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.058930][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.108582][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.126746][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.197691][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.417452][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.531396][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.543913][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.572807][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.589144][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.600141][ T5220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.609297][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.327970][ T5975] syzkaller0: entered promiscuous mode [ 112.353710][ T5975] syzkaller0: entered allmulticast mode [ 112.378119][ T35] bridge_slave_1: left allmulticast mode [ 112.396802][ T35] bridge_slave_1: left promiscuous mode [ 112.415959][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.468780][ T35] bridge_slave_0: left allmulticast mode [ 112.480765][ T35] bridge_slave_0: left promiscuous mode [ 112.500754][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.687420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.715220][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.751443][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.790427][ T35] bond0 (unregistering): Released all slaves [ 113.849733][ T5220] Bluetooth: hci2: command tx timeout [ 113.885324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.581420][ T5220] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 115.592040][ T5220] Bluetooth: hci5: Injecting HCI hardware error event [ 115.601408][ T5220] Bluetooth: hci5: hardware error 0x00 [ 116.099904][ T5217] Bluetooth: hci2: command tx timeout [ 117.150710][ T6030] tipc: Enabling of bearer rejected, failed to enable media [ 117.343956][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 117.681729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 117.812917][ T35] hsr_slave_0: left promiscuous mode [ 117.833019][ T5220] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 117.849096][ T35] hsr_slave_1: left promiscuous mode [ 117.894391][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.940776][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.063680][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.120849][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.264335][ T35] veth1_macvtap: left promiscuous mode [ 118.284425][ T35] veth0_macvtap: left promiscuous mode [ 118.346138][ T35] veth1_vlan: left promiscuous mode [ 118.352739][ T5220] Bluetooth: hci2: command tx timeout [ 118.374146][ T35] veth0_vlan: left promiscuous mode [ 118.397311][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.477682][ T6083] input: syz1 as /devices/virtual/input/input7 [ 120.063648][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.152087][ T35] team0 (unregistering): Port device team_slave_0 removed [ 120.234434][ T6057] syz.1.191 (6057): drop_caches: 1 [ 120.606063][ T5220] Bluetooth: hci2: command tx timeout [ 121.347388][ T6093] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.189'. [ 121.370900][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 121.600635][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.613149][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.626115][ T5951] bridge_slave_0: entered allmulticast mode [ 121.643212][ T5951] bridge_slave_0: entered promiscuous mode [ 121.696534][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 121.753395][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.777910][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.785470][ T5951] bridge_slave_1: entered allmulticast mode [ 121.814038][ T5951] bridge_slave_1: entered promiscuous mode [ 122.020960][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.045345][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.419679][ T5951] team0: Port device team_slave_0 added [ 122.460842][ T5951] team0: Port device team_slave_1 added [ 122.649298][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.681893][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.786656][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.824839][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.834378][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.897392][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.253761][ T5951] hsr_slave_0: entered promiscuous mode [ 123.329853][ T5951] hsr_slave_1: entered promiscuous mode [ 123.336150][ T5295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.358095][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.376842][ T5951] Cannot create hsr debugfs directory [ 123.565219][ T5295] usb 3-1: Using ep0 maxpacket: 16 [ 123.582370][ T5295] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 123.599898][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.609783][ T5295] usb 3-1: Product: syz [ 123.614165][ T5295] usb 3-1: Manufacturer: syz [ 123.622711][ T6176] input: syz1 as /devices/virtual/input/input8 [ 123.630625][ T5295] usb 3-1: SerialNumber: syz [ 123.658162][ T5295] usb 3-1: config 0 descriptor?? [ 124.072095][ T5295] usb_8dev 3-1:0.0 can0: sending command message failed [ 124.105516][ T5295] usb_8dev 3-1:0.0 can0: can't get firmware version [ 124.137640][ T6191] tipc: Failed to remove unknown binding: 66,1,1/0:2820553048/2820553050 [ 124.281059][ T5295] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 124.341380][ T5295] usb 3-1: USB disconnect, device number 2 [ 125.300803][ T6224] batman_adv: batadv0: Adding interface: gretap1 [ 125.308290][ T6224] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.341359][ T6224] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 125.438519][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.495443][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.521024][ T6230] input: syz1 as /devices/virtual/input/input9 [ 125.549331][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.576203][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.594056][ T5230] udevd[5230]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 125.631845][ T5230] udevd[5230]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 125.693384][ T6234] syz.0.225 uses obsolete (PF_INET,SOCK_PACKET) [ 125.760464][ T6234] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 125.803400][ T6234] team0: Port device netdevsim0 added [ 126.051901][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.143576][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.199690][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.206900][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.250678][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.257968][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.772492][ T6269] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.261203][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.355452][ T6288] input: syz1 as /devices/virtual/input/input10 [ 127.512270][ T5951] veth0_vlan: entered promiscuous mode [ 127.533486][ T5951] veth1_vlan: entered promiscuous mode [ 127.655550][ T5951] veth0_macvtap: entered promiscuous mode [ 127.683279][ T5951] veth1_macvtap: entered promiscuous mode [ 127.722936][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.735308][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.748746][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.775538][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.787226][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.805980][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.816784][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.833663][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.848450][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.881702][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.895174][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.931234][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.964178][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.981229][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.009213][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.032841][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.058590][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.090677][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.155265][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.191280][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.213067][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.232403][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.457502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.470577][ T5269] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.506968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.587599][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.617711][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.711291][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.739590][ T5269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.832619][ T5269] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.862995][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.911170][ T5269] usb 2-1: config 0 descriptor?? [ 129.400069][ T5269] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 129.430483][ T5269] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 129.488563][ T5269] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 129.907527][ T5267] usb 2-1: USB disconnect, device number 3 [ 132.223717][ T6401] syz.2.255 (6401): drop_caches: 1 [ 132.488746][ T6401] syz.2.255 (6401): drop_caches: 1 [ 132.855948][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 132.873730][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 133.066402][ T5310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.282630][ T5310] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.293778][ T5310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.307396][ T5310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.317805][ T5310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.332274][ T5310] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.342088][ T5310] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.354457][ T5310] usb 1-1: Product: syz [ 133.364505][ T5310] usb 1-1: Manufacturer: syz [ 133.382610][ T5310] cdc_wdm 1-1:1.0: skipping garbage [ 133.394427][ T5310] cdc_wdm 1-1:1.0: skipping garbage [ 133.403836][ T5310] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 133.412180][ T5310] cdc_wdm 1-1:1.0: Unknown control protocol [ 133.520138][ T5267] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.748467][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.766136][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.790223][ T5267] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.799682][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.848934][ T5267] usb 4-1: config 0 descriptor?? [ 134.027734][ C1] hrtimer: interrupt took 60280 ns [ 134.202947][ T5295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.349975][ T5294] usb 1-1: USB disconnect, device number 3 [ 134.355454][ T5267] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 134.396882][ T5267] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 134.450640][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 134.466255][ T5295] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.491974][ T5295] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.513009][ T5295] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.547240][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.589689][ T5295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.612087][ T5295] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.648752][ T5295] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.672724][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.706083][ T5295] usb 2-1: config 0 descriptor?? [ 134.840325][ T1169] usb 4-1: USB disconnect, device number 6 [ 134.973355][ T5295] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 135.231698][ C1] usblp0: nonzero read bulk status received: -71 [ 135.238830][ T5267] usb 2-1: USB disconnect, device number 4 [ 135.492508][ T6453] usblp0: removed [ 135.523632][ T6486] capability: warning: `syz.4.284' uses 32-bit capabilities (legacy support in use) [ 136.126900][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.133714][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.448783][ T6506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.486972][ T5267] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.709301][ T5267] usb 2-1: Using ep0 maxpacket: 32 [ 136.729559][ T5267] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 136.755280][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.770669][ T5267] usb 2-1: Product: syz [ 136.774908][ T5267] usb 2-1: Manufacturer: syz [ 136.780376][ T5267] usb 2-1: SerialNumber: syz [ 136.795196][ T5267] usb 2-1: config 0 descriptor?? [ 136.815486][ T5267] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 137.047067][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.062832][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.305659][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.322725][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.855221][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'. [ 138.005808][ T5267] gspca_ov534_9: reg_w failed -71 [ 138.377550][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 138.388865][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 138.427510][ T5267] gspca_ov534_9: Unknown sensor 0000 [ 138.427581][ T5267] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 138.451584][ T5267] usb 2-1: USB disconnect, device number 5 [ 138.565357][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.576736][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 139.184445][ T6555] nbd2: detected capacity change from 0 to 6 [ 139.198913][ T6561] block nbd2: shutting down sockets [ 139.202755][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.216192][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.242557][ T58] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.252272][ T58] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.262110][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.273606][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.300690][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.320974][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.344601][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.370697][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.391298][ T5230] ldm_validate_partition_table(): Disk read failed. [ 139.415130][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.439450][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.452839][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.465553][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.479375][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.494237][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.505296][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.522122][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.530472][ T5230] Dev nbd2: unable to read RDB block 0 [ 139.538409][ T5230] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.548524][ T5230] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.556951][ T5230] nbd2: unable to read partition table [ 139.565776][ T5230] nbd2: partition table beyond EOD, truncated [ 139.579700][ T5230] ldm_validate_partition_table(): Disk read failed. [ 139.598396][ T5230] Dev nbd2: unable to read RDB block 0 [ 139.619584][ T5230] nbd2: unable to read partition table [ 139.627563][ T5230] nbd2: partition table beyond EOD, truncated [ 140.036537][ T6582] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 140.046714][ T6582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.059012][ T6582] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 140.124162][ T6590] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 140.527970][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.745628][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 140.766088][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 140.779116][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.793750][ T25] usb 1-1: Product: syz [ 140.799459][ T25] usb 1-1: Manufacturer: syz [ 140.805571][ T25] usb 1-1: SerialNumber: syz [ 140.821131][ T25] usb 1-1: config 0 descriptor?? [ 141.066654][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 141.135863][ T5267] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.150907][ T6615] process 'syz.1.332' launched '/dev/fd/6/./file0' with NULL argv: empty string added [ 141.377336][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 141.393241][ T5267] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 141.414656][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.466909][ T5267] usb 5-1: config 0 descriptor?? [ 141.978937][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 142.012809][ T25] usb 1-1: USB disconnect, device number 4 [ 142.104668][ T6627] binder: BINDER_SET_CONTEXT_MGR already set [ 142.141633][ T6627] binder: 6626:6627 ioctl 4018620d 20000040 returned -16 [ 142.814747][ T6637] Bluetooth: MGMT ver 1.23 [ 143.257834][ T5267] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.272554][ T5267] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 143.290263][ T5267] asix 5-1:0.0: probe with driver asix failed with error -71 [ 143.314081][ T5220] Bluetooth: hci1: command 0x0406 tx timeout [ 143.314335][ T5267] usb 5-1: USB disconnect, device number 4 [ 143.379782][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.520342][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.620350][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 143.661786][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 143.701259][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.716146][ T6659] ceph: No mds server is up or the cluster is laggy [ 143.878394][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.214673][ T35] bridge_slave_1: left allmulticast mode [ 144.234472][ T35] bridge_slave_1: left promiscuous mode [ 144.254151][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.277442][ T35] bridge_slave_0: left allmulticast mode [ 144.300603][ T35] bridge_slave_0: left promiscuous mode [ 144.307833][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.190449][ T6711] ======================================================= [ 145.190449][ T6711] WARNING: The mand mount option has been deprecated and [ 145.190449][ T6711] and is ignored by this kernel. Remove the mand [ 145.190449][ T6711] option from the mount to silence this warning. [ 145.190449][ T6711] ======================================================= [ 145.774456][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.809081][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.831550][ T35] bond0 (unregistering): Released all slaves [ 146.866260][ T35] hsr_slave_0: left promiscuous mode [ 146.929061][ T35] hsr_slave_1: left promiscuous mode [ 146.960429][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.991131][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.013838][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.029158][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.109612][ T35] veth1_macvtap: left promiscuous mode [ 147.134428][ T35] veth0_macvtap: left promiscuous mode [ 147.151672][ T35] veth1_vlan: left promiscuous mode [ 147.162146][ T35] veth0_vlan: left promiscuous mode [ 147.878239][ T35] team0 (unregistering): Port device team_slave_1 removed [ 147.926917][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.316194][ T29] audit: type=1326 audit(1723943832.504:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.4.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25cb79e79 code=0x0 [ 149.439612][ T6813] @: renamed from vlan0 (while UP) [ 150.845564][ T6867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.306876][ T29] audit: type=1326 audit(1723943834.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b8d579e79 code=0x0 [ 151.575907][ T6891] wireguard: wg1: Could not create IPv6 socket [ 152.859626][ T6939] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.866796][ T6939] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.883819][ T6939] hsr_slave_0: left promiscuous mode [ 152.897968][ T6939] hsr_slave_1: left promiscuous mode [ 154.060090][ T1169] IPVS: starting estimator thread 0... [ 154.067717][ T6953] tipc: Started in network mode [ 154.074564][ T6953] tipc: Node identity ac1414aa, cluster identity 4711 [ 154.091972][ T6953] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.135342][ T6953] tipc: Enabled bearer , priority 10 [ 154.153145][ T6948] warning: `syz.4.416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.175000][ T6955] IPVS: using max 25 ests per chain, 60000 per kthread [ 154.242593][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.393632][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.545313][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.697150][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.848519][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.000178][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.151945][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.306666][ T5295] tipc: Node number set to 2886997162 [ 155.983162][ T6986] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 156.005340][ T6993] Process accounting resumed [ 156.092611][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 156.603201][ T6997] ================================================================== [ 156.611301][ T6997] BUG: KASAN: slab-use-after-free in isolate_migratepages_block+0x1f53/0x53c0 [ 156.620364][ T6997] Read of size 8 at addr ffff88801ff84618 by task syz.2.432/6997 [ 156.628090][ T6997] [ 156.630449][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.2.432 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 156.641030][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 156.651239][ T6997] Call Trace: [ 156.654543][ T6997] [ 156.657475][ T6997] dump_stack_lvl+0x241/0x360 [ 156.662167][ T6997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.667393][ T6997] ? __pfx__printk+0x10/0x10 [ 156.672078][ T6997] ? _printk+0xd5/0x120 [ 156.676266][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.681419][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.686634][ T6997] print_report+0x169/0x550 [ 156.691250][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.696366][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.701481][ T6997] ? __virt_addr_valid+0x45f/0x530 [ 156.706606][ T6997] ? __phys_addr+0xba/0x170 [ 156.711114][ T6997] ? isolate_migratepages_block+0x1f53/0x53c0 [ 156.717300][ T6997] kasan_report+0x143/0x180 [ 156.721899][ T6997] ? isolate_migratepages_block+0x1f53/0x53c0 [ 156.728136][ T6997] kasan_check_range+0x282/0x290 [ 156.733068][ T6997] isolate_migratepages_block+0x1f53/0x53c0 [ 156.738968][ T6997] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 156.745226][ T6997] ? free_unref_page+0x634/0xea0 [ 156.750157][ T6997] compact_zone+0x32e6/0x4af0 [ 156.754862][ T6997] ? __pfx_compact_zone+0x10/0x10 [ 156.759887][ T6997] ? __lock_acquire+0x137a/0x2040 [ 156.764909][ T6997] sysctl_compaction_handler+0x5a3/0x990 [ 156.770538][ T6997] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 156.776699][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.781801][ T6997] ? __virt_addr_valid+0x183/0x530 [ 156.786897][ T6997] ? __virt_addr_valid+0x45f/0x530 [ 156.792084][ T6997] ? __check_object_size+0x49c/0x900 [ 156.797365][ T6997] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 156.803515][ T6997] proc_sys_call_handler+0x551/0x8b0 [ 156.808797][ T6997] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 156.814607][ T6997] iter_file_splice_write+0xbd7/0x14e0 [ 156.820760][ T6997] ? __pfx_iter_file_splice_write+0x10/0x10 [ 156.826677][ T6997] ? rcu_read_lock_any_held+0xb7/0x160 [ 156.832138][ T6997] ? __pfx_iter_file_splice_write+0x10/0x10 [ 156.838030][ T6997] direct_splice_actor+0x11e/0x220 [ 156.843137][ T6997] splice_direct_to_actor+0x58e/0xc90 [ 156.848595][ T6997] ? __pfx_direct_splice_actor+0x10/0x10 [ 156.854223][ T6997] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 156.860458][ T6997] ? __fget_files+0x29/0x470 [ 156.865124][ T6997] ? __pfx_lock_release+0x10/0x10 [ 156.870166][ T6997] do_splice_direct+0x28c/0x3e0 [ 156.875214][ T6997] ? __pfx_do_splice_direct+0x10/0x10 [ 156.880611][ T6997] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 156.886532][ T6997] ? rw_verify_area+0x1d2/0x6b0 [ 156.891556][ T6997] do_sendfile+0x56d/0xe20 [ 156.895972][ T6997] ? __might_fault+0xaa/0x120 [ 156.900647][ T6997] ? __pfx_do_sendfile+0x10/0x10 [ 156.906009][ T6997] ? __might_fault+0xc6/0x120 [ 156.910680][ T6997] __se_sys_sendfile64+0x100/0x1e0 [ 156.915783][ T6997] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 156.921415][ T6997] ? do_syscall_64+0x100/0x230 [ 156.926187][ T6997] ? do_syscall_64+0xb6/0x230 [ 156.930951][ T6997] do_syscall_64+0xf3/0x230 [ 156.935537][ T6997] ? clear_bhb_loop+0x35/0x90 [ 156.940303][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.946253][ T6997] RIP: 0033:0x7fbfa1979e79 [ 156.950668][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.970303][ T6997] RSP: 002b:00007fbfa283b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.978731][ T6997] RAX: ffffffffffffffda RBX: 00007fbfa1b15f80 RCX: 00007fbfa1979e79 [ 156.986696][ T6997] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 156.994659][ T6997] RBP: 00007fbfa19e7916 R08: 0000000000000000 R09: 0000000000000000 [ 157.002621][ T6997] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 157.010583][ T6997] R13: 0000000000000000 R14: 00007fbfa1b15f80 R15: 00007ffec6196728 [ 157.018641][ T6997] [ 157.021655][ T6997] [ 157.023962][ T6997] Allocated by task 27: [ 157.028102][ T6997] kasan_save_track+0x3f/0x80 [ 157.032790][ T6997] __kasan_slab_alloc+0x66/0x80 [ 157.037652][ T6997] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 157.043462][ T6997] shmem_alloc_inode+0x28/0x40 [ 157.048336][ T6997] new_inode+0x6e/0x310 [ 157.052531][ T6997] shmem_get_inode+0x34a/0xd50 [ 157.057527][ T6997] shmem_mknod+0x5f/0x1e0 [ 157.061876][ T6997] vfs_mknod+0x36d/0x3b0 [ 157.066121][ T6997] devtmpfs_work_loop+0x963/0x1040 [ 157.071265][ T6997] devtmpfsd+0x4c/0x50 [ 157.075344][ T6997] kthread+0x2f0/0x390 [ 157.079411][ T6997] ret_from_fork+0x4b/0x80 [ 157.083824][ T6997] ret_from_fork_asm+0x1a/0x30 [ 157.088579][ T6997] [ 157.091005][ T6997] Freed by task 16: [ 157.094967][ T6997] kasan_save_track+0x3f/0x80 [ 157.099630][ T6997] kasan_save_free_info+0x40/0x50 [ 157.104651][ T6997] poison_slab_object+0xe0/0x150 [ 157.109665][ T6997] __kasan_slab_free+0x37/0x60 [ 157.114416][ T6997] kmem_cache_free+0x145/0x350 [ 157.119195][ T6997] rcu_core+0xafd/0x1830 [ 157.123463][ T6997] handle_softirqs+0x2c4/0x970 [ 157.128340][ T6997] run_ksoftirqd+0xca/0x130 [ 157.132939][ T6997] smpboot_thread_fn+0x544/0xa30 [ 157.138048][ T6997] kthread+0x2f0/0x390 [ 157.142157][ T6997] ret_from_fork+0x4b/0x80 [ 157.146623][ T6997] ret_from_fork_asm+0x1a/0x30 [ 157.151514][ T6997] [ 157.153837][ T6997] Last potentially related work creation: [ 157.159558][ T6997] kasan_save_stack+0x3f/0x60 [ 157.164247][ T6997] __kasan_record_aux_stack+0xac/0xc0 [ 157.169915][ T6997] call_rcu+0x167/0xa70 [ 157.174078][ T6997] evict+0x88b/0x950 [ 157.178001][ T6997] do_unlinkat+0x512/0x830 [ 157.182550][ T6997] __x64_sys_unlink+0x47/0x50 [ 157.187233][ T6997] do_syscall_64+0xf3/0x230 [ 157.191753][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.197666][ T6997] [ 157.199986][ T6997] The buggy address belongs to the object at ffff88801ff84150 [ 157.199986][ T6997] which belongs to the cache shmem_inode_cache of size 1544 [ 157.214901][ T6997] The buggy address is located 1224 bytes inside of [ 157.214901][ T6997] freed 1544-byte region [ffff88801ff84150, ffff88801ff84758) [ 157.229056][ T6997] [ 157.231466][ T6997] The buggy address belongs to the physical page: [ 157.237917][ T6997] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801ff87590 pfn:0x1ff80 [ 157.247984][ T6997] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.257083][ T6997] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.265588][ T6997] page_type: 0xfdffffff(slab) [ 157.270256][ T6997] raw: 00fff00000000240 ffff888016ee5280 ffffea0000a7ec10 ffffea00017e5e10 [ 157.278854][ T6997] raw: ffff88801ff87590 0000000000130001 00000001fdffffff 0000000000000000 [ 157.287522][ T6997] head: 00fff00000000240 ffff888016ee5280 ffffea0000a7ec10 ffffea00017e5e10 [ 157.296701][ T6997] head: ffff88801ff87590 0000000000130001 00000001fdffffff 0000000000000000 [ 157.305362][ T6997] head: 00fff00000000003 ffffea00007fe001 ffffffffffffffff 0000000000000000 [ 157.314194][ T6997] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 157.322934][ T6997] page dumped because: kasan: bad access detected [ 157.329328][ T6997] page_owner tracks the page as allocated [ 157.335296][ T6997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27, tgid 27 (kdevtmpfs), ts 7076887442, free_ts 0 [ 157.355446][ T6997] post_alloc_hook+0x1f3/0x230 [ 157.360495][ T6997] get_page_from_freelist+0x2e4c/0x2f10 [ 157.366050][ T6997] __alloc_pages_noprof+0x256/0x6c0 [ 157.371336][ T6997] alloc_slab_page+0x5f/0x120 [ 157.376025][ T6997] allocate_slab+0x5a/0x2f0 [ 157.380556][ T6997] ___slab_alloc+0xcd1/0x14b0 [ 157.385245][ T6997] __slab_alloc+0x58/0xa0 [ 157.389574][ T6997] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 157.395379][ T6997] shmem_alloc_inode+0x28/0x40 [ 157.400140][ T6997] new_inode+0x6e/0x310 [ 157.404293][ T6997] shmem_get_inode+0x34a/0xd50 [ 157.409046][ T6997] shmem_mknod+0x5f/0x1e0 [ 157.413386][ T6997] vfs_mknod+0x36d/0x3b0 [ 157.417613][ T6997] devtmpfs_work_loop+0x963/0x1040 [ 157.422709][ T6997] devtmpfsd+0x4c/0x50 [ 157.426770][ T6997] kthread+0x2f0/0x390 [ 157.430852][ T6997] page_owner free stack trace missing [ 157.436229][ T6997] [ 157.438996][ T6997] Memory state around the buggy address: [ 157.444631][ T6997] ffff88801ff84500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.452708][ T6997] ffff88801ff84580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.460767][ T6997] >ffff88801ff84600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.468832][ T6997] ^ [ 157.473695][ T6997] ffff88801ff84680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.482027][ T6997] ffff88801ff84700: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 157.490192][ T6997] ================================================================== [ 157.535104][ T6997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.542352][ T6997] CPU: 1 UID: 0 PID: 6997 Comm: syz.2.432 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 157.552959][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.563129][ T6997] Call Trace: [ 157.566407][ T6997] [ 157.569334][ T6997] dump_stack_lvl+0x241/0x360 [ 157.574031][ T6997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.579409][ T6997] ? __pfx__printk+0x10/0x10 [ 157.584086][ T6997] ? preempt_schedule+0xe1/0xf0 [ 157.588937][ T6997] ? vscnprintf+0x5d/0x90 [ 157.593264][ T6997] panic+0x349/0x860 [ 157.597168][ T6997] ? check_panic_on_warn+0x21/0xb0 [ 157.602327][ T6997] ? __pfx_panic+0x10/0x10 [ 157.606833][ T6997] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 157.612940][ T6997] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.619494][ T6997] ? print_report+0x502/0x550 [ 157.624256][ T6997] check_panic_on_warn+0x86/0xb0 [ 157.629206][ T6997] ? isolate_migratepages_block+0x1f53/0x53c0 [ 157.635361][ T6997] end_report+0x77/0x160 [ 157.639594][ T6997] kasan_report+0x154/0x180 [ 157.644095][ T6997] ? isolate_migratepages_block+0x1f53/0x53c0 [ 157.650325][ T6997] kasan_check_range+0x282/0x290 [ 157.655259][ T6997] isolate_migratepages_block+0x1f53/0x53c0 [ 157.661164][ T6997] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 157.667502][ T6997] ? free_unref_page+0x634/0xea0 [ 157.672554][ T6997] compact_zone+0x32e6/0x4af0 [ 157.677260][ T6997] ? __pfx_compact_zone+0x10/0x10 [ 157.682360][ T6997] ? __lock_acquire+0x137a/0x2040 [ 157.687488][ T6997] sysctl_compaction_handler+0x5a3/0x990 [ 157.693137][ T6997] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 157.699358][ T6997] ? __virt_addr_valid+0x183/0x530 [ 157.704560][ T6997] ? __virt_addr_valid+0x183/0x530 [ 157.709848][ T6997] ? __virt_addr_valid+0x45f/0x530 [ 157.715002][ T6997] ? __check_object_size+0x49c/0x900 [ 157.720307][ T6997] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 157.726984][ T6997] proc_sys_call_handler+0x551/0x8b0 [ 157.732374][ T6997] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 157.738278][ T6997] iter_file_splice_write+0xbd7/0x14e0 [ 157.743836][ T6997] ? __pfx_iter_file_splice_write+0x10/0x10 [ 157.749814][ T6997] ? rcu_read_lock_any_held+0xb7/0x160 [ 157.755270][ T6997] ? __pfx_iter_file_splice_write+0x10/0x10 [ 157.761636][ T6997] direct_splice_actor+0x11e/0x220 [ 157.766766][ T6997] splice_direct_to_actor+0x58e/0xc90 [ 157.772404][ T6997] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.778046][ T6997] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 157.784033][ T6997] ? __fget_files+0x29/0x470 [ 157.788689][ T6997] ? __pfx_lock_release+0x10/0x10 [ 157.793723][ T6997] do_splice_direct+0x28c/0x3e0 [ 157.798567][ T6997] ? __pfx_do_splice_direct+0x10/0x10 [ 157.803930][ T6997] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.809827][ T6997] ? rw_verify_area+0x1d2/0x6b0 [ 157.814680][ T6997] do_sendfile+0x56d/0xe20 [ 157.819178][ T6997] ? __might_fault+0xaa/0x120 [ 157.823859][ T6997] ? __pfx_do_sendfile+0x10/0x10 [ 157.828817][ T6997] ? __might_fault+0xc6/0x120 [ 157.833506][ T6997] __se_sys_sendfile64+0x100/0x1e0 [ 157.838616][ T6997] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 157.844349][ T6997] ? do_syscall_64+0x100/0x230 [ 157.849172][ T6997] ? do_syscall_64+0xb6/0x230 [ 157.853853][ T6997] do_syscall_64+0xf3/0x230 [ 157.858378][ T6997] ? clear_bhb_loop+0x35/0x90 [ 157.863083][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.869016][ T6997] RIP: 0033:0x7fbfa1979e79 [ 157.873528][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.893315][ T6997] RSP: 002b:00007fbfa283b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.901846][ T6997] RAX: ffffffffffffffda RBX: 00007fbfa1b15f80 RCX: 00007fbfa1979e79 [ 157.909943][ T6997] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 157.918020][ T6997] RBP: 00007fbfa19e7916 R08: 0000000000000000 R09: 0000000000000000 [ 157.925994][ T6997] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 157.933980][ T6997] R13: 0000000000000000 R14: 00007fbfa1b15f80 R15: 00007ffec6196728 [ 157.941958][ T6997] [ 157.945266][ T6997] Kernel Offset: disabled [ 157.949683][ T6997] Rebooting in 86400 seconds..