last executing test programs: 14.611631939s ago: executing program 3 (id=1965): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="845d", 0x2}, {&(0x7f0000000900)="638290d61f46ae656f55d7ffcd9e4d57e92bebbe0e01", 0x16}], 0x2}}], 0x1, 0x0) 13.68779167s ago: executing program 0 (id=1968): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 12.928559653s ago: executing program 0 (id=1970): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x2, &(0x7f0000000380)=[{0x3ff, 0x1, 0x2, 0x3}, {0x3, 0x4, 0x6, 0x81}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x18, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x4001, 0x3, 0xa68, 0x0, 0x0, 0x148, 0x8f0, 0x148, 0x9d0, 0x240, 0x240, 0x9d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x8a8, 0x8f0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@u32={{0x7e0, 'u32\x00', 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xac8) r3 = syz_open_procfs(0x0, &(0x7f0000001200)='io\x00') preadv(r3, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800800, &(0x7f0000000380)=ANY=[], 0x1, 0x2c1, &(0x7f0000000080)="$eJzs3T9rZFUUAPDzJi+TWS1mERvF4oEWVmFja5MoK4iplBHUQoObBcmEhQQCruBkKz+Bpd/Dj2Bj4xcQwVawi0X0yvuXmTEvsyGJE3R/vyY3955z75l3YaaaM5+9sr/34FEWT05+icHPWfQ2YzP+yuJu9KJ1HHmc1zUHAPwX/JFS/J6ukpn3br4aAGAZ6s//2m3XAgAsxwcfffze1vb2/feLYhAvDSMbZRGx/83RqF7fehhfxDh2414M4zQinanH77y7fT/yonQ3XtufHI3KzP1Pf2z23/otosrfiOEkuvM3itpM/uRotBrPRRFbD1fbUofxYnf+Gx35MerH66/O1L8ew/jp83gU43hQ1THN/3qjKN5O35589Ul5TJmf9WK0VsVNpZXqz53l3Q0AAAAAAAAAAAAAAAAAAAAAAP9f60WR1e17qv495VTTf2fltFpfb5rrFHnM9+ep87N2o7o/UGpb/ExSfNf217lXFEVqAqf5ebyc+xEBAAAAAAAAAAAAAAAAAAAAKB1++XhvZzzePbiRQdsNoP1a/1X32ZzOrM2V2xFcBfQvddZst4Gy1oXBkeexeMOTVHv66+q1h3bH3Ll46RqDtenlfhj1oL2Ya+2c/nEXL7xV//94b6doYtqHvLeTPe2sQbvP97NL/bjuQ0hVhadp/k4HZ6WWT+O4rLBa6t/Qk+8/37n0Z0rpcvu8+Wt9R81MVrXYuNzpq81gJn0+ZnD+Ln64eMML3zJWrv5uAwAAAAAAAAAAAAAAAAAALFJ/1/d49+CwY/HJwtTev1YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACxZ/fv/492Ds8EgIuZnzg0mTfKimGbQj4PDW36JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAP+DgAA//+fNku1") r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000042406f200df8c236b0524004e580d240f0101000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x8413, &(0x7f0000000340)={[{@nombcache}, {@noquota}]}, 0x0, 0x52d, &(0x7f0000000f40)="$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") 12.867886572s ago: executing program 1 (id=1971): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xc91c, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3ff}, @in6={0xa, 0x4e22, 0xc7, @remote, 0xaaa8}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1}, @in6={0xa, 0x4e20, 0x6, @remote, 0x7449}], 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000400)={0x1d, r7, 0x2}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netpci0\x00'}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4c000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x20}, 0x5c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000480)=0xc) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000f40)={0x0, "f343e20ef86c00221ec3f4fb4fb5d9ee"}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 12.837583827s ago: executing program 4 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 11.763348169s ago: executing program 3 (id=1973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404"], 0x0}, 0x90) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c8054000b80080009"], 0x16c}}, 0x0) 11.244667635s ago: executing program 4 (id=1975): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0xffa8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x1869, 0x408) 11.070256675s ago: executing program 1 (id=1976): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x202ddd, &(0x7f0000000080)={0x0, 0x0, 0x40, 0xfffffffd, 0x3}, &(0x7f0000000280), &(0x7f00000002c0)) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0x81785501, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x30}}, 0x0) 10.86535252s ago: executing program 3 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) brk(0x0) 10.706816302s ago: executing program 2 (id=1978): bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x5) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/147, 0x93}], 0x1}, 0x9}], 0x2, 0x0, 0x0) 10.44082592s ago: executing program 4 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = io_uring_setup(0x7ab1, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x14, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 10.108801604s ago: executing program 3 (id=1980): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 10.108591762s ago: executing program 2 (id=1981): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x5d, 0x0, 0xfd, 0x8, 0x2040, 0xc612, 0x2024, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x96, 0x7, 0x0, 0xb4, 0x31, 0x8d}}]}}]}}, 0x0) 9.831152751s ago: executing program 4 (id=1982): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xfb, &(0x7f0000000400)="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") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @rumble}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 9.696348506s ago: executing program 0 (id=1983): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="845d", 0x2}, {&(0x7f0000000900)="638290d61f46ae656f55d7ffcd9e4d57e92bebbe0e01", 0x16}], 0x2}}], 0x1, 0x0) 9.519629066s ago: executing program 1 (id=1984): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000001700)=@generic={0x0, 0x2, 0x0, "a6411c11"}) 6.955976737s ago: executing program 2 (id=1985): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 6.463023335s ago: executing program 0 (id=1986): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xc91c, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3ff}, @in6={0xa, 0x4e22, 0xc7, @remote, 0xaaa8}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1}, @in6={0xa, 0x4e20, 0x6, @remote, 0x7449}], 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000400)={0x1d, r7, 0x2}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netpci0\x00'}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4c000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x20}, 0x5c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000480)=0xc) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000f40)={0x0, "f343e20ef86c00221ec3f4fb4fb5d9ee"}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.843114914s ago: executing program 1 (id=1987): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c8054000b80080009"], 0x16c}}, 0x0) 5.736568785s ago: executing program 2 (id=1988): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x48, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) socketpair(0x1e, 0x0, 0x7, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 5.331094852s ago: executing program 4 (id=1989): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.922972813s ago: executing program 0 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) brk(0x0) 4.843190151s ago: executing program 2 (id=1991): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "397210e6", {0x1, 0x4, 0x1, 0x4e, 0xe5}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1c565cfc", {0x3, 0x100, 0x0, 0x2, 0x0, 0x4, 0x7}}) 4.771499318s ago: executing program 3 (id=1992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = io_uring_setup(0x7ab1, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x14, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 4.719816966s ago: executing program 1 (id=1993): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x2, &(0x7f0000000380)=[{0x3ff, 0x1, 0x2, 0x3}, {0x3, 0x4, 0x6, 0x81}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x18, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x4001, 0x3, 0xa68, 0x0, 0x0, 0x148, 0x8f0, 0x148, 0x9d0, 0x240, 0x240, 0x9d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x8a8, 0x8f0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@u32={{0x7e0, 'u32\x00', 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xac8) r3 = syz_open_procfs(0x0, &(0x7f0000001200)='io\x00') preadv(r3, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800800, &(0x7f0000000380)=ANY=[], 0x1, 0x2c1, &(0x7f0000000080)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000042406f200df8c236b0524004e580d240f0101000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x8413, &(0x7f0000000340)={[{@nombcache}, {@noquota}]}, 0x0, 0x52d, &(0x7f0000000f40)="$eJzs3V1rY2kdAPD/SZPuvHS2WfVCF5wd3ZWZQSdpt+xu8WJdQfRqQV3vx9qmpTRthibdnZbF7eAHEERU8EpvvBH8AIIseOOlCAt6ragoorN6oaBzJMlJ7UuSxk6aTNvfD86c5+Wc/J8nM+fkvM15AriwXsumR2ma3o6I6aw8l00fb2Z2I25ExPsP315sTkmk6Rt/TSLJyjqflbY8FVfbq0QUI778hYivJUfj1rd31haq1cpmli831u+V69s7d1bXF1YqK5WNubnZl+dfmX9pfuZxurd8NUtci4hXP/fH73zzR59/9Wefeut3d/986+tJu83vxKF+/J/y/SrbXS/EpUNlmycM9iTK709cHmydB9k/EQAARqt5XPqB7Dj/dkzHRP/DWQAAAOAMSj8zFf9OOvfujpjsUQ4AAACcIbmImIokV8qe952KXK5UitYzvB+KK7lqrd745HJta2OpWRdRjEJuebVamcmeFS5GIWnmZ9uP++7lXzyUn4uIZyLi29OXW/nSYq26NO6LHwAAAHBBFA+d//9jun3+P4DcqTcOAAAAGJ5iXC+Muw0AAADA6SoOsMyA73UGAAAAnlCDnP8DAAAAZ9YXX3+9OaWd8a+X3tzeWqu9eWepUl8rrW8tlhZrm/dKK7XaSuudfet9P2xv6MCNrfvlRqXeKNe3d+6u17Y2GndXDwyBDQAAAIzQM8+9+5skInY/fbk1NU3uq/9XNk7A2BoInJp8xMTBksmjC/326fb8D6NpEzAaE+NuADA2+ZOvOplE7A6zLcBoee8fkBxT3/PhnV9m848Ntz0AAMDw3fxI7/v//Qf42zX+H5xxNmK4uNz/h4urdf+/yyN/XTlYgHOlcPIjgNSxA5wPj33//1j+DxEAAIzbVGtKcqXs8t5U5HKlUsS11rAAhWR5tVqZiYinI+LX04WnmvnZ1prJsecMAAAAAAAAAAAAAAAAAAAAAAAAAEBbmiaRAgAAAOdaRO5Pyc/b7/K/Of3C1OHrA5PJP6cjGyL0re+/8d37C43G5myz/G975Y3vZeUvjuMKBgAAAFxEhb61nfP0znk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzT+w/fXuxMo4z7l89GRLFb/Hxcas0vRSEirvw9ify+9ZKImBhC/N0HEfHhbvGTZrP2QnaLf/n040cx+xa6xb86hPhwkb3b3P+81m37y8WN1rz79pePOJA/qd77v9jb/0302P6vDRjj2fd+Uu4Z/0HEs/nu+59O/KRH/OcHjP/Vr+zs9KpLfxBxs+vvT3IgVrmxfq9c3965s7q+sFJZqWzMzc2+PP/K/EvzM+Xl1Wol+7NrjG999KeP+vX/So/4xWP6/8KA/f/Pe/cffrCdLHSLf+v5LvF/8cNsiaPxc9lv3yeydLP+Zie9207vd/3Hv7rer/9LPfp/3N//rQH7f/tL3/j9gIsCACNQ395ZW6hWK5vnNtE8S38CmiExskQ+Bl34naNVz8WJo6dpmja3qcdofNI/+o1sqz297zDZKxnvfgkAABi+/x39j7slAAAAAAAAAAAAAAAAAAAAcHGN4pVsh2Pu7qWSYbxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgKP4bAAD//5Jb5uo=") 4.104564001s ago: executing program 0 (id=1994): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x202ddd, &(0x7f0000000080)={0x0, 0x0, 0x40, 0xfffffffd, 0x3}, &(0x7f0000000280), &(0x7f00000002c0)) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0x81785501, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x30}}, 0x0) 3.126986877s ago: executing program 3 (id=1995): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x14, 0xa6, "9873594f1ce9cad2f842f9fc51b098dc2291ca0985e6d31e729ec0f9d0be0a02426f75483136d1d7ca7c9e6d062e9f00e45c00867c266e58f9b100e4f949fc76038b53b310fe083e14432ea1325b72c8c96492c621be5c9bb04f3469ad996c4efe4d595f5f6ea752eb71aa23aea2297761dd2869bf62b164a2ac5d43d498964ffdbeb7a2c2284b65133c47a1b3c8567bed3ec035f2871297d8fe778e873c3c9f5850a94b87f2"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x83, 0x1, '('}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000040)=ANY=[]) 328.193366ms ago: executing program 2 (id=1996): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="845d", 0x2}, {&(0x7f0000000900)="638290d61f46ae656f55d7ffcd9e4d57e92bebbe0e01", 0x16}], 0x2}}], 0x1, 0x0) 200.067893ms ago: executing program 1 (id=1997): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 0s ago: executing program 4 (id=1998): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) kernel console output (not intermixed with test programs): 1F: unknown main item tag 0x0 [ 1307.328587][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.328799][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.329011][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.329223][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.329440][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.329652][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.329879][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.330366][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.330579][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.330789][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.331000][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.331204][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.331439][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.331645][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.331852][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.332080][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.332295][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.332530][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.332743][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.333144][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.333370][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.333588][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.333804][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.334020][ T8414] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1307.354621][T12853] loop4: detected capacity change from 0 to 256 [ 1307.421109][ T8414] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1307.905767][ T9862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1307.988693][ T9862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1308.002167][ T9862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1308.040952][ T9862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1308.072000][ T9862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1308.074924][ T9862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1309.011811][T12864] loop4: detected capacity change from 0 to 256 [ 1309.017165][T12864] vfat: Unknown parameter 'ÿ' [ 1314.271774][ T5197] Bluetooth: hci4: command tx timeout [ 1314.333416][ T1655] usb 1-1: device descriptor read/all, error -110 [ 1314.525254][ T1655] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1314.557936][ T1655] usb 1-1: device descriptor read/8, error -32 [ 1314.699072][ T1655] usb usb1-port1: unable to enumerate USB device [ 1315.732060][T12856] chnl_net:caif_netlink_parms(): no params data found [ 1315.808256][ T9862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1315.815857][ T9862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1315.817892][ T9862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1315.824848][ T9862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1315.872171][ T9862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1315.878734][ T9862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1316.401169][ T5197] Bluetooth: hci4: command tx timeout [ 1316.615487][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.615590][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.966011][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.966112][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.293753][ T5197] Bluetooth: hci5: command tx timeout [ 1318.373384][T12896] syz.3.1476[12896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1318.373924][T12896] syz.3.1476[12896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1318.572041][ T9862] Bluetooth: hci4: command tx timeout [ 1320.310777][ T9862] Bluetooth: hci5: command tx timeout [ 1320.451608][T12875] chnl_net:caif_netlink_parms(): no params data found [ 1320.634385][ T9862] Bluetooth: hci4: command tx timeout [ 1322.390472][ T9862] Bluetooth: hci5: command tx timeout [ 1324.470298][ T9862] Bluetooth: hci5: command tx timeout [ 1332.744836][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1332.745209][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1332.863449][T12856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.863971][T12856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.864583][T12856] bridge_slave_0: entered allmulticast mode [ 1332.867588][T12856] bridge_slave_0: entered promiscuous mode [ 1333.054217][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.054537][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.055096][T12856] bridge_slave_1: entered allmulticast mode [ 1333.057089][T12856] bridge_slave_1: entered promiscuous mode [ 1333.578216][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.646337][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.133345][T12856] team0: Port device team_slave_0 added [ 1334.200979][T12856] team0: Port device team_slave_1 added [ 1334.681555][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.681612][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.681706][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.803232][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.803290][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.803386][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.486261][T12921] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1335.497920][T12921] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1335.502391][T12921] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1335.522062][T12921] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1335.526080][T12921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1335.528221][T12921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1335.538316][T12921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1335.539122][ T5205] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1335.584118][T12924] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1335.593052][T12921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1335.602653][T12921] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1335.606747][T12924] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1335.617691][T12856] hsr_slave_0: entered promiscuous mode [ 1335.721949][T12856] hsr_slave_1: entered promiscuous mode [ 1335.760394][T12856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1335.760480][T12856] Cannot create hsr debugfs directory [ 1335.788859][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.789369][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.790252][T12875] bridge_slave_0: entered allmulticast mode [ 1335.793310][T12875] bridge_slave_0: entered promiscuous mode [ 1335.876334][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.877203][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.878221][T12875] bridge_slave_1: entered allmulticast mode [ 1335.887895][T12875] bridge_slave_1: entered promiscuous mode [ 1336.413212][ T5197] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1336.454556][ T5197] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1336.571057][T12875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.649659][T12875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.652172][ T5197] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1336.831791][ T5197] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1336.921541][ T5197] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1337.001148][ T5197] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1337.134532][T12875] team0: Port device team_slave_0 added [ 1337.141528][T12875] team0: Port device team_slave_1 added [ 1337.527329][T12875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.527386][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.527484][T12875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.532529][T12875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.532606][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.532758][T12875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.670185][T12924] Bluetooth: hci7: command tx timeout [ 1337.818185][T12924] Bluetooth: hci8: command tx timeout [ 1339.077141][ T4394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.172899][T12856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.192421][ T5197] Bluetooth: hci9: command tx timeout [ 1339.239083][T12875] hsr_slave_0: entered promiscuous mode [ 1339.281768][T12875] hsr_slave_1: entered promiscuous mode [ 1339.320332][T12875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.320421][T12875] Cannot create hsr debugfs directory [ 1339.759160][ T5197] Bluetooth: hci7: command tx timeout [ 1339.821258][T12920] chnl_net:caif_netlink_parms(): no params data found [ 1339.830299][ T5197] Bluetooth: hci8: command tx timeout [ 1339.895925][ T4394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.397811][T12856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.566320][T12856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.817275][ T4394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.112949][T12856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.171022][T12919] chnl_net:caif_netlink_parms(): no params data found [ 1341.278512][ T5197] Bluetooth: hci9: command tx timeout [ 1341.366279][ T4394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.862253][ T5197] Bluetooth: hci7: command tx timeout [ 1341.917948][ T5197] Bluetooth: hci8: command tx timeout [ 1342.214045][ T4394] bridge_slave_1: left allmulticast mode [ 1342.220121][ T4394] bridge_slave_1: left promiscuous mode [ 1342.226641][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.375374][ T4394] bridge_slave_0: left allmulticast mode [ 1342.381442][ T4394] bridge_slave_0: left promiscuous mode [ 1342.387990][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.014984][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.081745][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.098537][ T4394] bond0 (unregistering): Released all slaves [ 1343.350727][ T5197] Bluetooth: hci9: command tx timeout [ 1343.491622][T12856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1343.710363][T12856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1343.872728][T12875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.910628][ T5197] Bluetooth: hci7: command tx timeout [ 1343.993799][ T5197] Bluetooth: hci8: command tx timeout [ 1344.156819][T12856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1344.232046][T12926] chnl_net:caif_netlink_parms(): no params data found [ 1344.517122][T12875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.603391][T12856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1344.725232][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.733180][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.741509][T12920] bridge_slave_0: entered allmulticast mode [ 1344.750960][T12920] bridge_slave_0: entered promiscuous mode [ 1344.842644][ T4394] hsr_slave_0: left promiscuous mode [ 1344.895896][ T4394] hsr_slave_1: left promiscuous mode [ 1344.915175][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.923626][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.950623][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.958388][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.009377][ T4394] veth1_macvtap: left promiscuous mode [ 1345.015532][ T4394] veth0_macvtap: left promiscuous mode [ 1345.021715][ T4394] veth1_vlan: left promiscuous mode [ 1345.027379][ T4394] veth0_vlan: left promiscuous mode [ 1345.484355][ T5197] Bluetooth: hci9: command tx timeout [ 1345.927430][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1345.953701][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1346.372350][T12875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.518045][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.526423][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.538139][T12920] bridge_slave_1: entered allmulticast mode [ 1346.547286][T12920] bridge_slave_1: entered promiscuous mode [ 1346.667663][T12875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.952593][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.962175][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.970194][T12919] bridge_slave_0: entered allmulticast mode [ 1346.979431][T12919] bridge_slave_0: entered promiscuous mode [ 1347.016648][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.024676][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.033094][T12919] bridge_slave_1: entered allmulticast mode [ 1347.048408][T12919] bridge_slave_1: entered promiscuous mode [ 1347.137018][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.381778][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.416590][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.491350][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.621879][ T4394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.688753][T12920] team0: Port device team_slave_0 added [ 1347.879035][ T4394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.900776][T12920] team0: Port device team_slave_1 added [ 1347.912995][T12926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.923911][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.933811][T12926] bridge_slave_0: entered allmulticast mode [ 1347.946246][T12926] bridge_slave_0: entered promiscuous mode [ 1347.983406][ T4394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.028850][T12919] team0: Port device team_slave_0 added [ 1348.121178][T12926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.128870][T12926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.137031][T12926] bridge_slave_1: entered allmulticast mode [ 1348.145504][T12926] bridge_slave_1: entered promiscuous mode [ 1348.199036][ T4394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.220445][T12919] team0: Port device team_slave_1 added [ 1348.254701][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.263234][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.295229][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.348342][T12875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1348.370964][T12875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1348.487411][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.496206][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.523421][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.593482][T12926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.605051][T12875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1348.644839][T12926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.666970][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.674258][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.703436][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.744995][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.752440][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.778908][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.802009][T12875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1349.138104][T12926] team0: Port device team_slave_0 added [ 1349.165396][T12926] team0: Port device team_slave_1 added [ 1349.368394][ T4394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.408839][T12919] hsr_slave_0: entered promiscuous mode [ 1349.419477][T12919] hsr_slave_1: entered promiscuous mode [ 1349.429645][T12919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.438739][T12919] Cannot create hsr debugfs directory [ 1349.587292][T12926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.597292][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.628771][T12926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.656793][T12920] hsr_slave_0: entered promiscuous mode [ 1349.672289][T12920] hsr_slave_1: entered promiscuous mode [ 1349.681632][T12920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.689410][T12920] Cannot create hsr debugfs directory [ 1349.727914][ T4394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.834091][T12926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.842348][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.869141][T12926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.966447][ T4394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.205016][ T4394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.415799][T12926] hsr_slave_0: entered promiscuous mode [ 1350.449613][T12926] hsr_slave_1: entered promiscuous mode [ 1350.462315][T12926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.470261][T12926] Cannot create hsr debugfs directory [ 1351.205265][ T4394] bridge_slave_1: left allmulticast mode [ 1351.212405][ T4394] bridge_slave_1: left promiscuous mode [ 1351.219075][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.291176][ T4394] bridge_slave_0: left allmulticast mode [ 1351.297101][ T4394] bridge_slave_0: left promiscuous mode [ 1351.303893][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.325480][ T4394] bridge_slave_1: left allmulticast mode [ 1351.333619][ T4394] bridge_slave_1: left promiscuous mode [ 1351.340525][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.375976][ T4394] bridge_slave_0: left allmulticast mode [ 1351.383727][ T4394] bridge_slave_0: left promiscuous mode [ 1351.393080][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.417022][ T4394] bridge_slave_1: left allmulticast mode [ 1351.424957][ T4394] bridge_slave_1: left promiscuous mode [ 1351.433773][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.463181][ T4394] bridge_slave_0: left allmulticast mode [ 1351.469095][ T4394] bridge_slave_0: left promiscuous mode [ 1351.475916][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.519903][ T4394] bridge_slave_1: left allmulticast mode [ 1351.526124][ T4394] bridge_slave_1: left promiscuous mode [ 1351.535915][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.574495][ T4394] bridge_slave_0: left allmulticast mode [ 1351.580649][ T4394] bridge_slave_0: left promiscuous mode [ 1351.587205][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.413868][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.437607][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.455398][ T4394] bond0 (unregistering): Released all slaves [ 1353.478244][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.512647][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.537907][ T4394] bond0 (unregistering): Released all slaves [ 1353.562687][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.578369][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.622386][ T4394] bond0 (unregistering): Released all slaves [ 1353.648489][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.666529][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.691480][ T4394] bond0 (unregistering): Released all slaves [ 1354.172905][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.635031][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.847457][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.855200][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.900377][T12875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.067927][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.075721][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.180780][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.414822][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.422595][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.445425][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.453205][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.916124][T12856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1356.427125][ T4394] hsr_slave_0: left promiscuous mode [ 1356.435396][ T4394] hsr_slave_1: left promiscuous mode [ 1356.448805][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.456663][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.468783][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.477612][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.499145][ T4394] hsr_slave_0: left promiscuous mode [ 1356.507037][ T4394] hsr_slave_1: left promiscuous mode [ 1356.516119][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.524112][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.535595][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.543500][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.569166][ T4394] hsr_slave_0: left promiscuous mode [ 1356.576415][ T4394] hsr_slave_1: left promiscuous mode [ 1356.587121][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.595067][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.605607][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.613516][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.636342][ T4394] hsr_slave_0: left promiscuous mode [ 1356.644179][ T4394] hsr_slave_1: left promiscuous mode [ 1356.657859][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.667208][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.677398][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.685298][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.718252][ T4394] veth1_macvtap: left promiscuous mode [ 1356.724289][ T4394] veth0_macvtap: left promiscuous mode [ 1356.730946][ T4394] veth1_vlan: left promiscuous mode [ 1356.736472][ T4394] veth0_vlan: left promiscuous mode [ 1356.745197][ T4394] veth1_macvtap: left promiscuous mode [ 1356.751198][ T4394] veth0_macvtap: left promiscuous mode [ 1356.756972][ T4394] veth1_vlan: left promiscuous mode [ 1356.762641][ T4394] veth0_vlan: left promiscuous mode [ 1356.773524][ T4394] veth1_macvtap: left promiscuous mode [ 1356.779210][ T4394] veth0_macvtap: left promiscuous mode [ 1356.785107][ T4394] veth1_vlan: left promiscuous mode [ 1356.790755][ T4394] veth0_vlan: left promiscuous mode [ 1356.797761][ T4394] veth1_macvtap: left promiscuous mode [ 1356.803669][ T4394] veth0_macvtap: left promiscuous mode [ 1356.809562][ T4394] veth1_vlan: left promiscuous mode [ 1356.815536][ T4394] veth0_vlan: left promiscuous mode [ 1358.099174][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1358.131821][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1358.532536][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1358.567614][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1359.069039][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1359.116173][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1359.692234][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1359.714825][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1360.505216][T12919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1360.807317][T12919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1360.844022][T12920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1360.920349][T12919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1361.006121][T12919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1361.035782][T12920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1361.071959][T12926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1361.115365][T12920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1361.183134][T12920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1361.254077][T12926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1361.391786][T12926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1361.454478][T12926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1361.610870][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.822737][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.468674][T12856] veth0_vlan: entered promiscuous mode [ 1362.512412][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.673313][T12856] veth1_vlan: entered promiscuous mode [ 1362.730656][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.820645][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.834194][T12875] veth0_vlan: entered promiscuous mode [ 1362.970553][T12875] veth1_vlan: entered promiscuous mode [ 1362.989533][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.997340][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.043856][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.110415][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.188771][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.196536][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.254844][T12856] veth0_macvtap: entered promiscuous mode [ 1363.290246][T12856] veth1_macvtap: entered promiscuous mode [ 1363.314476][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.322242][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.416671][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.424436][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.496721][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.619180][T12875] veth0_macvtap: entered promiscuous mode [ 1363.653171][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.729060][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.736805][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.771162][ T3224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.778944][ T3224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.813769][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.890208][T12875] veth1_macvtap: entered promiscuous mode [ 1363.962145][T12856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.971317][T12856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.980470][T12856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.989467][T12856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.206893][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.221280][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.296585][T12875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.426916][T12920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1364.495753][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.508384][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.526906][T12875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.773466][T12875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.782639][T12875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.791855][T12875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.801051][T12875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.210384][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.704047][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.776561][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.817506][T12919] veth0_vlan: entered promiscuous mode [ 1366.955741][T12919] veth1_vlan: entered promiscuous mode [ 1367.509495][T12920] veth0_vlan: entered promiscuous mode [ 1367.633096][T12919] veth0_macvtap: entered promiscuous mode [ 1367.718603][T12920] veth1_vlan: entered promiscuous mode [ 1367.767433][T12919] veth1_macvtap: entered promiscuous mode [ 1367.983465][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.994307][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.004585][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.015374][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.030565][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.134516][T12920] veth0_macvtap: entered promiscuous mode [ 1368.223186][T12920] veth1_macvtap: entered promiscuous mode [ 1368.241840][T12924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1368.251035][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.261846][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.271995][T12919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.282836][T12919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.298690][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.363416][T12924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1368.408113][T12924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1368.415548][T12919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.415794][T12919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.416001][T12919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.416206][T12919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.477162][T12924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1368.498700][T12924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1368.503553][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.516550][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.526770][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.537486][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.548938][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.561051][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.577004][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.607628][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.612524][T12924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.618958][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.639151][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.651199][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.661381][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.672194][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.687150][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.005545][T12920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.014789][T12920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.024052][T12920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.036164][T12920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.483256][T13030] chnl_net:caif_netlink_parms(): no params data found [ 1370.615469][T12926] veth0_vlan: entered promiscuous mode [ 1370.816504][T12924] Bluetooth: hci0: command tx timeout [ 1371.042697][T12926] veth1_vlan: entered promiscuous mode [ 1371.295934][ T4494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.482268][ T4494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.617803][ T4494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.817795][ T4494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.879139][T12926] veth0_macvtap: entered promiscuous mode [ 1371.977650][T12926] veth1_macvtap: entered promiscuous mode [ 1372.260532][ T4494] bridge_slave_1: left allmulticast mode [ 1372.266438][ T4494] bridge_slave_1: left promiscuous mode [ 1372.273314][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.370978][ T4494] bridge_slave_0: left allmulticast mode [ 1372.376890][ T4494] bridge_slave_0: left promiscuous mode [ 1372.386162][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.880589][T12924] Bluetooth: hci0: command tx timeout [ 1373.000908][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.044534][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.064732][ T4494] bond0 (unregistering): Released all slaves [ 1373.152354][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.163256][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.173432][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.184192][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.197540][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.209212][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.219417][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.230352][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.245263][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.438159][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.447027][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.455044][T13030] bridge_slave_0: entered allmulticast mode [ 1373.464025][T13030] bridge_slave_0: entered promiscuous mode [ 1373.623009][ T4494] hsr_slave_0: left promiscuous mode [ 1373.714616][ T4494] hsr_slave_1: left promiscuous mode [ 1373.738053][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.745933][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.802740][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.810591][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.881038][ T4494] veth1_macvtap: left promiscuous mode [ 1373.886825][ T4494] veth0_macvtap: left promiscuous mode [ 1373.893698][ T4494] veth1_vlan: left promiscuous mode [ 1373.899270][ T4494] veth0_vlan: left promiscuous mode [ 1374.651110][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1374.700495][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1374.967079][T12924] Bluetooth: hci0: command tx timeout [ 1375.062253][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.073155][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.083325][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.094115][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.104208][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.114991][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.129805][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.138234][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.146738][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.154839][T13030] bridge_slave_1: entered allmulticast mode [ 1375.166194][T13030] bridge_slave_1: entered promiscuous mode [ 1375.226112][T12926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.235536][T12926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.245322][T12926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.254479][T12926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.710255][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.784138][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.105999][T13030] team0: Port device team_slave_0 added [ 1376.178697][T13030] team0: Port device team_slave_1 added [ 1376.374838][ T5197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1376.386116][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1376.399329][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1376.523470][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1376.547161][ T5197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1376.556277][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1376.561032][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.570665][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.597321][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.692351][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.699534][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.732134][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.989169][T13030] hsr_slave_0: entered promiscuous mode [ 1377.043019][ T5197] Bluetooth: hci0: command tx timeout [ 1377.056089][T13030] hsr_slave_1: entered promiscuous mode [ 1378.730296][ T5197] Bluetooth: hci1: command tx timeout [ 1378.794442][ T3224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.857896][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.866262][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.077543][ T3224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.224777][ T3224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.321883][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.330034][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.446902][ T3224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.551399][T13116] chnl_net:caif_netlink_parms(): no params data found [ 1379.612519][T12314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.621450][T12314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.827323][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.836781][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.846678][T13030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1380.021297][ T3224] bridge_slave_1: left allmulticast mode [ 1380.027205][ T3224] bridge_slave_1: left promiscuous mode [ 1380.036169][ T3224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.153061][ T3224] bridge_slave_0: left allmulticast mode [ 1380.158975][ T3224] bridge_slave_0: left promiscuous mode [ 1380.165890][ T3224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.792139][ T5197] Bluetooth: hci1: command tx timeout [ 1381.003066][ T3224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.103628][ T3224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.196474][ T3224] bond0 (unregistering): Released all slaves [ 1381.301138][T13030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1381.422122][T13030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1381.496169][T13030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1382.882880][ T5197] Bluetooth: hci1: command tx timeout [ 1384.040269][ T3224] hsr_slave_0: left promiscuous mode [ 1385.131731][ T5197] Bluetooth: hci1: command tx timeout [ 1385.192436][ T3224] hsr_slave_1: left promiscuous mode [ 1385.223658][ T3224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.231600][ T3224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.303134][ T3224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.311036][ T3224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.385839][ T3224] veth1_macvtap: left promiscuous mode [ 1385.391766][ T3224] veth0_macvtap: left promiscuous mode [ 1385.397673][ T3224] veth1_vlan: left promiscuous mode [ 1385.403490][ T3224] veth0_vlan: left promiscuous mode [ 1386.251832][T13184] syz.3.1623[13184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1386.252378][T13184] syz.3.1623[13184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1386.467325][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.485852][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1388.940618][T13190] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 1389.137957][ T3224] team0 (unregistering): Port device team_slave_1 removed [ 1389.177556][ T3224] team0 (unregistering): Port device team_slave_0 removed [ 1390.351426][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.351940][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.352573][T13116] bridge_slave_0: entered allmulticast mode [ 1390.355462][T13116] bridge_slave_0: entered promiscuous mode [ 1390.463249][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.471159][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.479029][T13116] bridge_slave_1: entered allmulticast mode [ 1390.488320][T13116] bridge_slave_1: entered promiscuous mode [ 1390.836608][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.968258][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.017314][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.292670][T13116] team0: Port device team_slave_0 added [ 1391.340682][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.369354][T13116] team0: Port device team_slave_1 added [ 1391.546603][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.554810][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.708619][T13213] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1391.730085][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.737744][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.813025][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.821853][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.849888][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.888757][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.896534][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.938667][T12913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.946866][T12913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.040494][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.047672][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.074528][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.798235][T13116] hsr_slave_0: entered promiscuous mode [ 1392.852123][T13116] hsr_slave_1: entered promiscuous mode [ 1392.906933][T13116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.914883][T13116] Cannot create hsr debugfs directory [ 1393.752703][ T5197] Bluetooth: hci0: command 0x0c20 tx timeout [ 1394.022594][T13234] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1394.827796][T13244] syz.1.1633[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1394.828359][T13244] syz.1.1633[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1396.648687][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.284904][T13116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1397.429029][T13116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1397.538971][T13116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1397.642703][T13030] veth0_vlan: entered promiscuous mode [ 1397.653257][T13116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1397.803466][T13030] veth1_vlan: entered promiscuous mode [ 1398.290533][T13030] veth0_macvtap: entered promiscuous mode [ 1398.396796][T13030] veth1_macvtap: entered promiscuous mode [ 1398.617533][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.629554][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.639827][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.654492][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.665835][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.677014][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.695343][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.899582][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.911157][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.921400][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.932168][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.942405][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.953190][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.973184][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.180092][T13030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.189186][T13030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.204600][T13030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.214999][T13030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.384007][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.627263][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.741667][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.749341][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.923347][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.931128][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.934767][T13279] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1640'. [ 1402.121715][T13284] loop1: detected capacity change from 0 to 256 [ 1402.335914][T13284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1403.035428][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.075320][T13284] loop1: detected capacity change from 256 to 0 [ 1403.273829][T13296] bio_check_eod: 396 callbacks suppressed [ 1403.273916][T13296] syz.1.1641: attempt to access beyond end of device [ 1403.273916][T13296] loop1: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 1403.294277][T13296] buffer_io_error: 194 callbacks suppressed [ 1403.294351][T13296] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1403.647091][T13116] veth0_vlan: entered promiscuous mode [ 1403.808005][T13116] veth1_vlan: entered promiscuous mode [ 1404.340766][T13307] syz.4.1644[13307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1404.341320][T13307] syz.4.1644[13307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1405.875351][T13116] veth0_macvtap: entered promiscuous mode [ 1405.917531][T13116] veth1_macvtap: entered promiscuous mode [ 1406.218417][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.231454][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.252772][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.263672][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.273784][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.284657][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.294881][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.305634][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.322742][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.531614][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.544836][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.557278][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.568249][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.578295][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.588904][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.599009][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.609773][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.623360][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.784934][T12919] syz-executor: attempt to access beyond end of device [ 1406.784934][T12919] loop1: rw=0, sector=128, nr_sectors = 1 limit=0 [ 1406.798608][T12919] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 1406.932714][T12919] syz-executor: attempt to access beyond end of device [ 1406.932714][T12919] loop1: rw=524288, sector=168, nr_sectors = 1 limit=0 [ 1406.953606][T12919] syz-executor: attempt to access beyond end of device [ 1406.953606][T12919] loop1: rw=524288, sector=169, nr_sectors = 1 limit=0 [ 1406.968172][T12919] syz-executor: attempt to access beyond end of device [ 1406.968172][T12919] loop1: rw=524288, sector=170, nr_sectors = 1 limit=0 [ 1406.982464][T12919] syz-executor: attempt to access beyond end of device [ 1406.982464][T12919] loop1: rw=524288, sector=171, nr_sectors = 1 limit=0 [ 1406.996623][T12919] syz-executor: attempt to access beyond end of device [ 1406.996623][T12919] loop1: rw=524288, sector=172, nr_sectors = 1 limit=0 [ 1407.010661][T12919] syz-executor: attempt to access beyond end of device [ 1407.010661][T12919] loop1: rw=524288, sector=173, nr_sectors = 1 limit=0 [ 1407.024503][T12919] syz-executor: attempt to access beyond end of device [ 1407.024503][T12919] loop1: rw=524288, sector=174, nr_sectors = 1 limit=0 [ 1407.038392][T12919] syz-executor: attempt to access beyond end of device [ 1407.038392][T12919] loop1: rw=524288, sector=175, nr_sectors = 1 limit=0 [ 1407.162691][T13116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.172005][T13116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.181307][T13116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.190563][T13116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.988372][ T3224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.140834][T13337] futex_wake_op: syz.4.1650 tries to shift op by -1; fix this program [ 1409.246378][ T3224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.808167][ T3224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.291538][ T3224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.407112][ T3224] bridge_slave_1: left allmulticast mode [ 1411.414931][ T3224] bridge_slave_1: left promiscuous mode [ 1411.422349][ T3224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.707013][ T3224] bridge_slave_0: left allmulticast mode [ 1411.713290][ T3224] bridge_slave_0: left promiscuous mode [ 1411.720685][ T3224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.931906][ T3224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.992096][ T3224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.028275][ T3224] bond0 (unregistering): Released all slaves [ 1413.889236][ T3224] hsr_slave_0: left promiscuous mode [ 1413.912961][ T3224] hsr_slave_1: left promiscuous mode [ 1413.985550][ T3224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.993629][ T3224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.053507][ T3224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.061777][ T3224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.138267][ T3224] veth1_macvtap: left promiscuous mode [ 1414.144691][ T3224] veth0_macvtap: left promiscuous mode [ 1414.152615][ T3224] veth1_vlan: left promiscuous mode [ 1414.158171][ T3224] veth0_vlan: left promiscuous mode [ 1414.864782][T13372] syz.4.1654[13372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1414.865467][T13372] syz.4.1654[13372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1415.510084][T12924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1415.534165][T12924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1415.543999][T12924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1415.559284][T12924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1415.591381][T12924] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1415.609757][T12924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.732921][ T3224] team0 (unregistering): Port device team_slave_1 removed [ 1415.805037][ T3224] team0 (unregistering): Port device team_slave_0 removed [ 1416.160487][T13367] netlink: 'syz.3.1653': attribute type 4 has an invalid length. [ 1416.192430][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.201762][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.898248][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.907558][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.546467][T13383] loop4: detected capacity change from 0 to 512 [ 1417.582331][T13387] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1417.626037][T13387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1417.759700][ T5197] Bluetooth: hci2: command tx timeout [ 1417.922750][T13375] chnl_net:caif_netlink_parms(): no params data found [ 1417.949868][T13383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.963367][T13383] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.303429][T12926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.787442][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.795376][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.803546][T13375] bridge_slave_0: entered allmulticast mode [ 1419.812699][T13375] bridge_slave_0: entered promiscuous mode [ 1419.837090][ T5197] Bluetooth: hci2: command tx timeout [ 1419.982466][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.990815][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.998414][T13375] bridge_slave_1: entered allmulticast mode [ 1420.006425][T13375] bridge_slave_1: entered promiscuous mode [ 1420.094413][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.102592][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.266186][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.278448][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.286740][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.338042][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.578186][T13375] team0: Port device team_slave_0 added [ 1420.675172][T13375] team0: Port device team_slave_1 added [ 1420.961338][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.968511][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.996822][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.134574][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.142470][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.168906][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.299087][T13433] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1421.910326][ T5197] Bluetooth: hci2: command tx timeout [ 1422.231330][T13439] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1423.713290][T13375] hsr_slave_0: entered promiscuous mode [ 1424.000896][ T5197] Bluetooth: hci2: command tx timeout [ 1424.326553][T13375] hsr_slave_1: entered promiscuous mode [ 1424.736549][T13375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.745144][T13375] Cannot create hsr debugfs directory [ 1425.941358][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 1426.863068][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1428.137037][T13470] loop4: detected capacity change from 0 to 128 [ 1428.394382][T13470] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1428.428530][T13375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1428.482855][T13470] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.554869][T13375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1428.655967][T13375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1428.770272][T13375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1428.814581][T12926] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1429.382614][T13493] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1430.328106][T13375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.415738][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1430.415819][ T29] audit: type=1326 audit(1725575610.995:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.451246][ T29] audit: type=1326 audit(1725575610.995:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.474606][ T29] audit: type=1326 audit(1725575611.025:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.499138][ T29] audit: type=1326 audit(1725575611.025:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.522538][ T29] audit: type=1326 audit(1725575611.045:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.531089][T13375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.545356][ T29] audit: type=1326 audit(1725575611.045:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.584333][ T29] audit: type=1326 audit(1725575611.045:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.607261][ T29] audit: type=1326 audit(1725575611.085:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.631720][ T29] audit: type=1326 audit(1725575611.085:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.655282][ T29] audit: type=1326 audit(1725575611.085:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfed7cef9 code=0x7ffc0000 [ 1430.764628][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.772433][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.788061][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.795804][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.882274][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'. [ 1432.831136][T13537] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1688'. [ 1433.191604][T13540] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1434.055950][T13547] loop4: detected capacity change from 0 to 128 [ 1434.161575][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1434.396749][T13547] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1434.541429][T13547] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.056998][T13375] veth0_vlan: entered promiscuous mode [ 1435.119330][T13375] veth1_vlan: entered promiscuous mode [ 1435.948503][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'. [ 1436.072133][T13375] veth0_macvtap: entered promiscuous mode [ 1436.206028][T13375] veth1_macvtap: entered promiscuous mode [ 1436.322642][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.340135][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.352187][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.363863][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.373993][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.384732][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.396346][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.408038][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.423383][T13375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.649447][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.660374][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.670628][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.683210][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.693463][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.704288][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.714592][T13375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.725437][T13375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.741239][T13375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.026882][T12926] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1437.048660][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1437.048736][ T29] audit: type=1326 audit(1725575617.725:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13568 comm="syz.0.1697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86ef7cef9 code=0x0 [ 1437.186697][T13375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.197751][T13375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.208563][T13375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.219055][T13375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.984896][T13585] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x9 [ 1438.358970][T13593] loop2: detected capacity change from 0 to 512 [ 1438.523126][T13593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.536543][T13593] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.947952][T13599] bond_slave_0: entered promiscuous mode [ 1438.954082][T13599] bond_slave_1: entered promiscuous mode [ 1438.960466][T13599] macsec1: entered promiscuous mode [ 1438.965911][T13599] bond0: entered promiscuous mode [ 1438.974104][T13599] macsec1: entered allmulticast mode [ 1438.979617][T13599] bond0: entered allmulticast mode [ 1438.985131][T13599] bond_slave_0: entered allmulticast mode [ 1438.991446][T13599] bond_slave_1: entered allmulticast mode [ 1439.042464][T13599] bond0: left allmulticast mode [ 1439.047585][T13599] bond_slave_0: left allmulticast mode [ 1439.053717][T13599] bond_slave_1: left allmulticast mode [ 1439.059452][T13599] bond0: left promiscuous mode [ 1439.067801][T13599] bond_slave_0: left promiscuous mode [ 1439.073603][T13599] bond_slave_1: left promiscuous mode [ 1439.197293][T13603] syzkaller0: entered allmulticast mode [ 1439.255392][T13605] syzkaller0 (unregistering): left allmulticast mode [ 1439.341426][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 1441.655620][T13617] 9pnet_fd: Insufficient options for proto=fd [ 1443.618064][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1443.842466][T13030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.223923][T13650] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x9 [ 1445.273957][T13653] syz.4.1713[13653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1445.274512][T13653] syz.4.1713[13653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1447.914979][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.935706][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.404225][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 1448.423291][T13673] loop4: detected capacity change from 0 to 1024 [ 1449.014379][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.022870][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.221848][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.230206][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.282702][ T3705] hfsplus: b-tree write err: -5, ino 4 [ 1453.201838][T12924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1453.213059][T12924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1453.227323][T12924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1453.271688][T12924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1453.323594][T12924] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1453.368335][T12924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1453.552053][T13701] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x9 [ 1455.134396][T13719] syz.3.1727[13719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1455.134945][T13719] syz.3.1727[13719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1455.442823][T12924] Bluetooth: hci3: command tx timeout [ 1456.332827][T13696] chnl_net:caif_netlink_parms(): no params data found [ 1456.462064][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 1457.521149][T12924] Bluetooth: hci3: command tx timeout [ 1457.846727][T13737] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1457.858495][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1459.590284][T12921] Bluetooth: hci3: command tx timeout [ 1460.162417][T12921] Bluetooth: hci8: command 0x0406 tx timeout [ 1460.168849][ T9862] Bluetooth: hci9: command 0x0406 tx timeout [ 1461.604852][T13696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.615190][T13696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.623320][T13696] bridge_slave_0: entered allmulticast mode [ 1461.635150][T13696] bridge_slave_0: entered promiscuous mode [ 1461.690456][T12921] Bluetooth: hci3: command tx timeout [ 1461.738832][T13696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.746847][T13696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.757621][T13696] bridge_slave_1: entered allmulticast mode [ 1461.766988][T13696] bridge_slave_1: entered promiscuous mode [ 1462.012565][T13696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.160813][T13696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.835343][T13696] team0: Port device team_slave_0 added [ 1462.910659][ T29] audit: type=1326 audit(1725575643.505:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1462.934159][ T29] audit: type=1326 audit(1725575643.525:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1462.957176][ T29] audit: type=1326 audit(1725575643.545:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1462.981575][ T29] audit: type=1326 audit(1725575643.545:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d0dd7cf33 code=0x7ffc0000 [ 1463.013108][T13696] team0: Port device team_slave_1 added [ 1463.275937][T13696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.283427][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.309786][T13696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.366510][T13765] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 1463.376694][T13765] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1734'. [ 1463.450965][ T29] audit: type=1326 audit(1725575644.065:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d0dd7b9df code=0x7ffc0000 [ 1463.554892][T13696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.562365][T13696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.590637][T13696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.277823][T13696] hsr_slave_0: entered promiscuous mode [ 1464.351099][T13696] hsr_slave_1: entered promiscuous mode [ 1464.390240][T13696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1464.400129][T13696] Cannot create hsr debugfs directory [ 1465.567828][T13696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.949281][T13696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.599327][T13696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.941429][T13696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.054759][T13696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1468.206939][T13696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1468.209825][ T9862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.225299][ T9862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1468.253435][ T9862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1468.297515][ T9862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1468.315988][ T9862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1468.332981][ T9862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1468.361378][T12913] bridge_slave_1: left allmulticast mode [ 1468.367327][T12913] bridge_slave_1: left promiscuous mode [ 1468.374028][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.547335][T12913] bridge_slave_0: left allmulticast mode [ 1468.553422][T12913] bridge_slave_0: left promiscuous mode [ 1468.560129][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.924768][ T29] audit: type=1326 audit(1725575649.405:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1468.947804][ T29] audit: type=1326 audit(1725575649.415:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1468.974380][ T29] audit: type=1326 audit(1725575649.415:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1468.998766][ T29] audit: type=1326 audit(1725575649.425:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1469.023199][ T29] audit: type=1326 audit(1725575649.425:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1469.048474][ T29] audit: type=1326 audit(1725575649.515:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1469.071590][ T29] audit: type=1326 audit(1725575649.525:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1469.094718][ T29] audit: type=1326 audit(1725575649.525:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1469.911997][T12913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.034555][T12913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.091134][T12913] bond0 (unregistering): Released all slaves [ 1470.164423][T13696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1470.478246][T12921] Bluetooth: hci1: command tx timeout [ 1470.526306][T13696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1471.246477][T12913] hsr_slave_0: left promiscuous mode [ 1471.310851][T12913] hsr_slave_1: left promiscuous mode [ 1471.392133][T12913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1471.400289][T12913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.413261][ T29] audit: type=1326 audit(1725575651.965:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1417cef9 code=0x7ffc0000 [ 1471.436609][ T29] audit: type=1326 audit(1725575651.965:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1417cef9 code=0x7ffc0000 [ 1471.580712][T12913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.588611][T12913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.773233][T12913] veth1_macvtap: left promiscuous mode [ 1471.779032][T12913] veth0_macvtap: left promiscuous mode [ 1471.785212][T12913] veth1_vlan: left promiscuous mode [ 1471.791219][T12913] veth0_vlan: left promiscuous mode [ 1472.550157][T12921] Bluetooth: hci1: command tx timeout [ 1472.948540][T12913] team0 (unregistering): Port device team_slave_1 removed [ 1473.036929][T12913] team0 (unregistering): Port device team_slave_0 removed [ 1474.649074][T12921] Bluetooth: hci1: command tx timeout [ 1474.995174][T13793] chnl_net:caif_netlink_parms(): no params data found [ 1475.029664][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1475.029754][ T29] audit: type=1326 audit(1725575655.645:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1475.057389][T13696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.060432][ T29] audit: type=1326 audit(1725575655.655:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1475.088556][ T29] audit: type=1326 audit(1725575655.655:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1475.469076][T13696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.664850][ T4494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.740025][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.747715][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.876593][ T4494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.972744][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.980500][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.141463][ T4494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.361568][ T4494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.723482][T12921] Bluetooth: hci1: command tx timeout [ 1476.779311][ T4494] bridge_slave_1: left allmulticast mode [ 1476.788249][ T4494] bridge_slave_1: left promiscuous mode [ 1476.795077][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.939572][ T4494] bridge_slave_0: left allmulticast mode [ 1476.945686][ T4494] bridge_slave_0: left promiscuous mode [ 1476.952515][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.587040][T13869] syz.1.1764[13869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1477.587600][T13869] syz.1.1764[13869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1477.842054][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.977612][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.048857][ T4494] bond0 (unregistering): Released all slaves [ 1478.316526][T13869] batadv0: entered promiscuous mode [ 1478.433396][T13869] bridge0: entered promiscuous mode [ 1478.645065][T13793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.653619][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.661686][T13793] bridge_slave_0: entered allmulticast mode [ 1478.671326][T13793] bridge_slave_0: entered promiscuous mode [ 1478.784550][T13793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.792551][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.800620][T13793] bridge_slave_1: entered allmulticast mode [ 1478.809715][T13793] bridge_slave_1: entered promiscuous mode [ 1479.393561][ T4494] hsr_slave_0: left promiscuous mode [ 1479.427372][ T4494] hsr_slave_1: left promiscuous mode [ 1479.481189][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.488962][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.514532][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.522559][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.593291][ T4494] veth1_macvtap: left promiscuous mode [ 1479.599085][ T4494] veth0_macvtap: left promiscuous mode [ 1479.605387][ T4494] veth1_vlan: left promiscuous mode [ 1479.611077][ T4494] veth0_vlan: left promiscuous mode [ 1480.892934][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1480.962586][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1481.233262][T13881] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 1481.241661][T13881] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1768'. [ 1481.451250][T13793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.571057][T13696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.597984][T13793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.833116][T13793] team0: Port device team_slave_0 added [ 1481.920653][T13793] team0: Port device team_slave_1 added [ 1482.267494][T13793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.274896][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.301432][T13793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.387519][T13696] veth0_vlan: entered promiscuous mode [ 1482.525261][T13696] veth1_vlan: entered promiscuous mode [ 1482.566442][T13793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.573876][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.600656][T13793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.870661][T13696] veth0_macvtap: entered promiscuous mode [ 1483.188468][T13696] veth1_macvtap: entered promiscuous mode [ 1483.324338][T13793] hsr_slave_0: entered promiscuous mode [ 1483.367575][T13793] hsr_slave_1: entered promiscuous mode [ 1483.890922][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.901771][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.911981][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.922739][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.933129][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.943948][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.966631][T13696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.097826][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.108629][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.118766][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.129515][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.139693][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1484.150577][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.165346][T13696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.492910][ T29] audit: type=1326 audit(1725575665.085:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1484.515855][ T29] audit: type=1326 audit(1725575665.085:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1484.524973][T13696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.539088][ T29] audit: type=1326 audit(1725575665.105:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1484.547548][T13696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.574313][ T29] audit: type=1326 audit(1725575665.115:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0dd7cef9 code=0x7ffc0000 [ 1484.578768][T13696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.611580][T13696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.695129][T13793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1485.811893][T13793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1485.913453][T13793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1485.991639][T13793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1487.393034][T13793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.595266][T13935] netlink: 'syz.4.1778': attribute type 4 has an invalid length. [ 1487.648552][T13793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.738122][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.745973][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.891082][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.898801][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.717812][ T9862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1488.727418][ T9862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1488.737792][ T9862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1488.772832][ T9862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1488.789761][ T9862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1488.823016][ T9862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1490.621287][T13948] chnl_net:caif_netlink_parms(): no params data found [ 1490.954699][T12921] Bluetooth: hci0: command tx timeout [ 1491.211862][T13793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.946493][T13793] veth0_vlan: entered promiscuous mode [ 1491.986100][ T4494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.158915][ T4494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.277295][T13793] veth1_vlan: entered promiscuous mode [ 1492.374132][ T4494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.664833][ T4494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.804805][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.812660][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.820679][T13948] bridge_slave_0: entered allmulticast mode [ 1492.829582][T13948] bridge_slave_0: entered promiscuous mode [ 1493.018436][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.027172][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.035481][T13948] bridge_slave_1: entered allmulticast mode [ 1493.044726][T13948] bridge_slave_1: entered promiscuous mode [ 1493.058170][T12921] Bluetooth: hci0: command tx timeout [ 1493.423472][ T4494] bridge_slave_1: left allmulticast mode [ 1493.429491][ T4494] bridge_slave_1: left promiscuous mode [ 1493.436299][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.501552][ T4494] bridge_slave_0: left allmulticast mode [ 1493.507451][ T4494] bridge_slave_0: left promiscuous mode [ 1493.515580][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.127347][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.155536][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.222053][ T4494] bond0 (unregistering): Released all slaves [ 1494.250573][T13793] veth0_macvtap: entered promiscuous mode [ 1494.261098][T13995] netlink: 'syz.1.1787': attribute type 4 has an invalid length. [ 1494.357288][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.429054][T13793] veth1_macvtap: entered promiscuous mode [ 1494.456184][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.015495][T13948] team0: Port device team_slave_0 added [ 1495.074327][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.082536][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.118615][T12921] Bluetooth: hci0: command tx timeout [ 1495.228838][T13948] team0: Port device team_slave_1 added [ 1495.368930][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.381232][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.392254][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.404350][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.415315][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.427408][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.438904][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.450858][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.472120][T13793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.703591][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.715076][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.726102][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.741441][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.753457][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.765443][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.776459][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.787995][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.803076][T13793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.946854][ T4494] hsr_slave_0: left promiscuous mode [ 1495.974906][ T4494] hsr_slave_1: left promiscuous mode [ 1495.998092][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1496.006742][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.027222][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1496.039705][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.086305][ T4494] veth1_macvtap: left promiscuous mode [ 1496.092334][ T4494] veth0_macvtap: left promiscuous mode [ 1496.098341][ T4494] veth1_vlan: left promiscuous mode [ 1496.104562][ T4494] veth0_vlan: left promiscuous mode [ 1496.767605][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1496.862611][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1497.190308][T12921] Bluetooth: hci0: command tx timeout [ 1497.298145][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.305542][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.333040][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.361442][ T3224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.372750][ T3224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.435212][T13793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.444485][T13793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.453717][T13793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.462763][T13793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.484449][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.491804][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.519353][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.117637][ T29] audit: type=1326 audit(1725575678.705:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14028 comm="syz.4.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1498.141594][ T29] audit: type=1326 audit(1725575678.715:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14028 comm="syz.4.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f450f57cef9 code=0x7ffc0000 [ 1498.201435][T13948] hsr_slave_0: entered promiscuous mode [ 1498.261807][T13948] hsr_slave_1: entered promiscuous mode [ 1498.300657][T13948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1498.308562][T13948] Cannot create hsr debugfs directory [ 1499.045786][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1795'. [ 1499.774662][T14045] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 1500.449486][T13948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1500.561844][T13948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1500.667973][T13948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1500.740389][T13948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1502.088337][T13948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.340288][T13948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.827894][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.835405][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.881245][T14074] syz.4.1802[14074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1502.881793][T14074] syz.4.1802[14074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1504.387545][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.406897][T12913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.826259][T14095] netlink: 'syz.4.1803': attribute type 1 has an invalid length. [ 1505.834388][T14095] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1803'. [ 1506.964979][T13948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.431596][T14109] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 1507.564098][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.572634][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.702113][T13948] veth0_vlan: entered promiscuous mode [ 1507.788335][T13948] veth1_vlan: entered promiscuous mode [ 1507.894575][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.903104][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.218096][T13948] veth0_macvtap: entered promiscuous mode [ 1508.300526][T13948] veth1_macvtap: entered promiscuous mode [ 1508.517705][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.531222][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.542156][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.554960][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.565651][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.576450][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.586624][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.597405][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.613013][T13948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.383632][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.397325][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.407918][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.418705][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.429043][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.439817][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.455926][T13948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1509.468495][T13948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1509.483611][T13948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.619419][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.626202][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.677114][T14131] syz.4.1811[14131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1509.677804][T14131] syz.4.1811[14131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1510.832600][T13948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.853521][T13948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.862924][T13948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.872082][T13948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.456967][T14141] loop1: detected capacity change from 0 to 512 [ 1514.716092][T14141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.729494][T14141] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.641367][T14163] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1516.455444][T14166] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 1516.463618][T14166] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1816'. [ 1516.968548][T13375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.968596][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1519.736954][T14216] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1520.679352][T14225] loop2: detected capacity change from 0 to 512 [ 1520.806205][T14225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.824735][T14225] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.396244][T12913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.404657][T12913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.635353][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.643583][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.708893][T13793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.588968][T14256] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 1524.597365][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1838'. [ 1524.614418][T14256] bridge0: port 3(batadv0) entered blocking state [ 1524.621847][T14256] bridge0: port 3(batadv0) entered disabled state [ 1524.628949][T14256] batadv0: entered allmulticast mode [ 1524.641014][T14256] batadv0: entered promiscuous mode [ 1524.649026][T14256] bridge0: port 3(batadv0) entered blocking state [ 1524.656335][T14256] bridge0: port 3(batadv0) entered forwarding state [ 1524.924843][T14259] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 1524.986277][ T4469] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1524.996085][ T4469] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1525.277512][T14242] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 1525.285931][T14242] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1835'. [ 1527.836214][T14280] loop1: detected capacity change from 0 to 256 [ 1527.887027][T14280] vfat: Unknown parameter 'ÿ' [ 1528.363994][T14280] loop1: detected capacity change from 0 to 8 [ 1531.983828][ T5256] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1532.435746][T14302] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1537.413705][T14340] loop1: detected capacity change from 0 to 256 [ 1537.432554][T14340] vfat: Unknown parameter 'ÿ' [ 1537.649436][T14340] loop1: detected capacity change from 0 to 8 [ 1538.697362][T14348] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1539.232179][ T8414] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1539.646828][ T8414] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.663755][ T8414] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1539.676759][ T8414] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1540.188465][ T8414] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1540.198162][ T8414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.268962][ T8414] usb 2-1: can't set config #1, error -71 [ 1540.326642][ T8414] usb 2-1: USB disconnect, device number 16 [ 1542.071333][ T9862] Bluetooth: hci2: command 0x0406 tx timeout [ 1542.174360][T14375] loop2: detected capacity change from 0 to 512 [ 1542.512144][T14375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1542.531668][T14375] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.074637][T14390] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 1545.145783][T13793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.420687][T14405] loop1: detected capacity change from 0 to 256 [ 1545.440535][T14405] vfat: Unknown parameter 'ÿ' [ 1545.694680][T14405] loop1: detected capacity change from 0 to 8 [ 1549.306315][T14412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1549.441089][T14412] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1549.497629][ T5256] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1550.985782][T14440] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x9 [ 1551.404358][T14445] loop1: detected capacity change from 0 to 512 [ 1551.564745][T14445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.577951][T14445] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1551.678671][T14450] syz.3.1896[14450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.679231][T14450] syz.3.1896[14450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.882498][T14450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1556.168492][T13375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.933236][T14463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 1556.973321][T14463] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1557.574575][T14473] loop1: detected capacity change from 0 to 256 [ 1557.643618][T14473] vfat: Unknown parameter 'ÿ' [ 1557.806543][T14473] loop1: detected capacity change from 0 to 8 [ 1559.800829][ T8420] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1560.797943][ T8420] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1560.806004][ T8420] usb 2-1: can't read configurations, error -71 [ 1561.021078][T14489] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1561.222400][T14498] syz.1.1909[14498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1561.222956][T14498] syz.1.1909[14498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.057874][T14534] loop1: detected capacity change from 0 to 256 [ 1568.127124][T14534] vfat: Unknown parameter 'ÿ' [ 1568.376570][T14534] loop1: detected capacity change from 0 to 8 [ 1568.641823][T14537] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1571.926394][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1571.933181][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1572.880272][ T8414] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1573.210241][T14555] fuse: Unknown parameter '18446744073709551615' [ 1574.263109][T14571] loop4: detected capacity change from 0 to 512 [ 1574.318894][T14571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1574.429767][T14571] EXT4-fs (loop4): 1 truncate cleaned up [ 1574.437953][T14571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.604741][ T29] audit: type=1800 audit(1725575755.245:288): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1931" name="file1" dev="loop4" ino=19 res=0 errno=0 [ 1574.861428][T12926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.676725][T14583] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 1576.208701][T14585] loop4: detected capacity change from 0 to 512 [ 1576.668339][T14585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.681826][T14585] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.793890][ T9862] Bluetooth: hci3: command 0x0406 tx timeout [ 1579.994610][T12926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.710596][ T8420] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1584.672676][T14630] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 1585.060813][T14636] loop2: detected capacity change from 0 to 512 [ 1585.172291][T14636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.185945][T14636] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.261560][T13793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.780865][T14658] loop2: detected capacity change from 0 to 256 [ 1589.836391][T14658] vfat: Unknown parameter 'ÿ' [ 1590.947577][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 1591.900730][ T5256] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1592.601853][T14677] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1593.271084][T12921] Bluetooth: hci1: command 0x0406 tx timeout [ 1595.895730][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 1596.470923][ T8420] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1596.476291][T14727] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1596.741079][ T8420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.751678][ T8420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1596.761287][ T8420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1596.838046][ T8420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1596.847574][ T8420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.855944][ T8420] usb 1-1: Product: syz [ 1596.860365][ T8420] usb 1-1: Manufacturer: syz [ 1596.865086][ T8420] usb 1-1: SerialNumber: syz [ 1596.887478][ T8420] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1596.894703][ T8420] cdc_ncm 1-1:1.0: bind() failure [ 1597.132450][ T8420] usb 1-1: USB disconnect, device number 12 [ 1598.045044][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1598.112254][ T5256] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1598.270229][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1598.292115][ T8] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 1598.301047][ T8] usb 3-1: config 0 has no interface number 0 [ 1598.307489][ T8] usb 3-1: config 0 interface 150 has no altsetting 0 [ 1598.314802][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=20.24 [ 1598.324362][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.426433][ T8] usb 3-1: config 0 descriptor?? [ 1598.688103][ T8] usb 3-1: USB disconnect, device number 15 [ 1598.704735][T11261] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1598.891422][ T8414] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1599.583622][ T5256] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1599.644668][ T5256] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.654592][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1599.666350][ T5256] usb 4-1: SerialNumber: syz [ 1599.829638][ T8414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.841896][ T8414] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1599.851730][ T8414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.945378][ T8414] usb 5-1: config 0 descriptor?? [ 1600.552986][ T5256] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1600.735343][ T8414] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1600.868134][ T8414] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input8 [ 1601.227345][T11261] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1601.237623][T11261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.246035][T11261] usb 2-1: Product: syz [ 1601.250561][T11261] usb 2-1: Manufacturer: syz [ 1601.255415][T11261] usb 2-1: SerialNumber: syz [ 1601.410940][ T8414] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1601.620478][ T8414] usb 5-1: USB disconnect, device number 33 [ 1601.642886][T11261] usb 2-1: can't set config #1, error -71 [ 1601.693856][T11261] usb 2-1: USB disconnect, device number 21 [ 1601.861500][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 1602.328805][T14772] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 1602.360740][T14774] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1602.370285][T14774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1602.700334][T11261] usb 4-1: USB disconnect, device number 7 [ 1602.708238][T11261] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1602.900588][ T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1603.120808][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1603.157139][ T8] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 1603.166005][ T8] usb 5-1: config 0 has no interface number 0 [ 1603.172509][ T8] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1603.183809][ T8] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1603.195862][ T8] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1603.207656][ T8] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1603.218264][ T8] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1603.228839][ T8] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1603.429660][ T8] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1603.439191][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.447625][ T8] usb 5-1: Product: syz [ 1603.456863][ T8] usb 5-1: Manufacturer: syz [ 1603.463899][ T8] usb 5-1: SerialNumber: syz [ 1603.685575][ T8] usb 5-1: config 0 descriptor?? [ 1603.737611][T14779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1603.794127][ T8414] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1603.868186][T14791] loop1: detected capacity change from 0 to 256 [ 1603.908598][T14791] vfat: Unknown parameter 'ÿ' [ 1604.335878][T14779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1606.786107][ T8415] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1607.202504][ T8414] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1607.212415][ T8414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.221066][ T8414] usb 3-1: Product: syz [ 1607.225603][ T8414] usb 3-1: Manufacturer: syz [ 1607.358193][ T8414] usb 3-1: can't set config #1, error -71 [ 1607.454569][T11261] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1607.493072][ T8414] usb 3-1: USB disconnect, device number 16 [ 1607.554649][ T8] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 1607.631031][ T8] etas_es58x 5-1:0.219: could not retrieve the product info string [ 1607.710922][T11261] usb 4-1: Using ep0 maxpacket: 32 [ 1607.750890][T11261] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1607.765841][T11261] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1607.774693][T11261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1607.783863][T11261] usb 4-1: config 1 has no interface number 0 [ 1607.790212][T11261] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.801387][T11261] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1607.814552][T11261] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1607.823819][T11261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.864161][ T8] usb 5-1: USB disconnect, device number 34 [ 1607.872253][ T8] etas_es58x 5-1:0.219: Disconnecting syz syz [ 1607.971825][T14805] loop2: detected capacity change from 0 to 512 [ 1608.025541][T11261] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1608.172092][ T8415] usb 2-1: device descriptor read/64, error -71 [ 1608.208784][T14805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.223284][T14805] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.237704][T11261] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1608.468962][ C0] ===================================================== [ 1608.476302][ C0] BUG: KMSAN: uninit-value in line6_midibuf_read+0x40b/0x1050 [ 1608.483978][ C0] line6_midibuf_read+0x40b/0x1050 [ 1608.489295][ C0] line6_data_received+0x503/0xa80 [ 1608.494609][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 1608.500162][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 1608.504586][ T8415] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1608.505472][ C0] dummy_timer+0xd3f/0x6aa0 [ 1608.517711][ C0] __hrtimer_run_queues+0x564/0xe40 [ 1608.523194][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 1608.528395][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1608.534409][ C0] sysvec_apic_timer_interrupt+0x40/0x90 [ 1608.540153][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1608.546244][ C0] __msan_metadata_ptr_for_load_4+0x18/0x40 [ 1608.552243][ C0] queued_spin_lock_slowpath+0x3c/0xa70 [ 1608.557909][ C0] _raw_spin_lock+0x54/0x60 [ 1608.562551][ C0] mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 1608.568755][ C0] mac80211_hwsim_tx_frame+0x2d8/0x380 [ 1608.574341][ C0] __mac80211_hwsim_beacon_tx+0x540/0x600 [ 1608.580238][ C0] mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 1608.585877][ C0] __iterate_interfaces+0x447/0x690 [ 1608.591175][ C0] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 1608.598232][ C0] mac80211_hwsim_beacon+0x11c/0x300 [ 1608.603625][ C0] __hrtimer_run_queues+0x564/0xe40 [ 1608.609015][ C0] hrtimer_run_softirq+0x18f/0x750 [ 1608.614257][ C0] handle_softirqs+0x1ce/0x800 [ 1608.619120][ C0] __irq_exit_rcu+0x68/0x120 [ 1608.623806][ C0] irq_exit_rcu+0x12/0x20 [ 1608.628224][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 1608.633953][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1608.640058][ C0] kmsan_get_metadata+0x19a/0x1c0 [ 1608.645184][ C0] kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1608.650922][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 1608.656914][ C0] unwind_get_return_address_ptr+0x6a/0x100 [ 1608.662896][ C0] update_stack_state+0x206/0x270 [ 1608.667998][ C0] unwind_next_frame+0x19a/0x470 [ 1608.673041][ C0] arch_stack_walk+0x1ec/0x2d0 [ 1608.677966][ C0] stack_trace_save+0xaa/0xe0 [ 1608.682764][ C0] kmsan_internal_poison_memory+0x49/0x90 [ 1608.688590][ C0] kmsan_slab_alloc+0xdf/0x160 [ 1608.693450][ C0] __kmalloc_noprof+0x661/0xf30 [ 1608.698394][ C0] tomoyo_realpath_from_path+0x104/0xaa0 [ 1608.704120][ C0] tomoyo_path_number_perm+0x1d9/0x8f0 [ 1608.709677][ C0] tomoyo_path_mknod+0x191/0x1e0 [ 1608.714698][ C0] security_path_mknod+0x14b/0x230 [ 1608.719892][ C0] path_openat+0x1982/0x6100 [ 1608.724636][ C0] do_filp_open+0x20e/0x590 [ 1608.729256][ C0] do_sys_openat2+0x1bf/0x2f0 [ 1608.734023][ C0] __x64_sys_openat+0x2a1/0x310 [ 1608.738962][ C0] x64_sys_call+0x120e/0x3ba0 [ 1608.743763][ C0] do_syscall_64+0xcd/0x1e0 [ 1608.748360][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.754360][ C0] [ 1608.756713][ C0] Uninit was created at: [ 1608.761070][ C0] __kmalloc_noprof+0x661/0xf30 [ 1608.766004][ C0] line6_midibuf_init+0x43/0x180 [ 1608.771039][ C0] line6_init_midi+0x3e7/0x670 [ 1608.775913][ C0] line6_init_cap_control+0x54e/0x770 [ 1608.781450][ C0] line6_probe+0xeae/0x1120 [ 1608.786055][ C0] pod_probe+0x79/0x90 [ 1608.790237][ C0] usb_probe_interface+0xd6f/0x1350 [ 1608.795518][ C0] really_probe+0x4db/0xd90 [ 1608.800119][ C0] __driver_probe_device+0x2ab/0x5d0 [ 1608.805501][ C0] driver_probe_device+0x72/0x890 [ 1608.810623][ C0] __device_attach_driver+0x568/0x9e0 [ 1608.816091][ C0] bus_for_each_drv+0x403/0x620 [ 1608.821016][ C0] __device_attach+0x3c1/0x650 [ 1608.825889][ C0] device_initial_probe+0x32/0x40 [ 1608.831020][ C0] bus_probe_device+0x3dc/0x5c0 [ 1608.835956][ C0] device_add+0x13aa/0x1ba0 [ 1608.840560][ C0] usb_set_configuration+0x31c9/0x38d0 [ 1608.846131][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 1608.851781][ C0] usb_probe_device+0x3a7/0x690 [ 1608.856704][ C0] really_probe+0x4db/0xd90 [ 1608.861315][ C0] __driver_probe_device+0x2ab/0x5d0 [ 1608.866696][ C0] driver_probe_device+0x72/0x890 [ 1608.871819][ C0] __device_attach_driver+0x568/0x9e0 [ 1608.877300][ C0] bus_for_each_drv+0x403/0x620 [ 1608.882260][ C0] __device_attach+0x3c1/0x650 [ 1608.887118][ C0] device_initial_probe+0x32/0x40 [ 1608.892237][ C0] bus_probe_device+0x3dc/0x5c0 [ 1608.897168][ C0] device_add+0x13aa/0x1ba0 [ 1608.901763][ C0] usb_new_device+0x15f4/0x2470 [ 1608.906706][ C0] hub_event+0x4ffb/0x72d0 [ 1608.911223][ C0] process_scheduled_works+0xae0/0x1c40 [ 1608.916864][ C0] worker_thread+0xea7/0x14d0 [ 1608.921635][ C0] kthread+0x3e2/0x540 [ 1608.925806][ C0] ret_from_fork+0x6d/0x90 [ 1608.930297][ C0] ret_from_fork_asm+0x1a/0x30 [ 1608.935157][ C0] [ 1608.937533][ C0] CPU: 0 UID: 0 PID: 14759 Comm: udevd Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 1608.947952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1608.958072][ C0] ===================================================== [ 1608.965045][ C0] Disabling lock debugging due to kernel taint [ 1608.971271][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1608.977745][ C0] CPU: 0 UID: 0 PID: 14759 Comm: udevd Tainted: G B 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 1608.989665][ C0] Tainted: [B]=BAD_PAGE [ 1608.993893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1609.004011][ C0] Call Trace: [ 1609.007344][ C0] [ 1609.010235][ C0] dump_stack_lvl+0x216/0x2d0 [ 1609.015020][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.020943][ C0] dump_stack+0x1e/0x30 [ 1609.025201][ C0] panic+0x4e2/0xcd0 [ 1609.029190][ C0] ? kmsan_get_metadata+0x131/0x1c0 [ 1609.034509][ C0] kmsan_report+0x2c7/0x2d0 [ 1609.039146][ C0] ? is_module_text_address+0x2aa/0x340 [ 1609.044806][ C0] ? __msan_warning+0x95/0x120 [ 1609.049682][ C0] ? line6_midibuf_read+0x40b/0x1050 [ 1609.055077][ C0] ? line6_data_received+0x503/0xa80 [ 1609.060461][ C0] ? __usb_hcd_giveback_urb+0x572/0x840 [ 1609.066096][ C0] ? usb_hcd_giveback_urb+0x157/0x720 [ 1609.071549][ C0] ? dummy_timer+0xd3f/0x6aa0 [ 1609.076351][ C0] ? __hrtimer_run_queues+0x564/0xe40 [ 1609.081825][ C0] ? hrtimer_interrupt+0x3ab/0x1490 [ 1609.087126][ C0] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1609.093310][ C0] ? sysvec_apic_timer_interrupt+0x40/0x90 [ 1609.099219][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1609.105485][ C0] ? __msan_metadata_ptr_for_load_4+0x18/0x40 [ 1609.111655][ C0] ? queued_spin_lock_slowpath+0x3c/0xa70 [ 1609.117477][ C0] ? _raw_spin_lock+0x54/0x60 [ 1609.122234][ C0] ? mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 1609.128599][ C0] ? mac80211_hwsim_tx_frame+0x2d8/0x380 [ 1609.134322][ C0] ? __mac80211_hwsim_beacon_tx+0x540/0x600 [ 1609.140324][ C0] ? mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 1609.146132][ C0] ? __iterate_interfaces+0x447/0x690 [ 1609.151610][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 1609.158841][ C0] ? mac80211_hwsim_beacon+0x11c/0x300 [ 1609.164409][ C0] ? __hrtimer_run_queues+0x564/0xe40 [ 1609.169906][ C0] ? hrtimer_run_softirq+0x18f/0x750 [ 1609.175365][ C0] ? handle_softirqs+0x1ce/0x800 [ 1609.180410][ C0] ? __irq_exit_rcu+0x68/0x120 [ 1609.185295][ C0] ? irq_exit_rcu+0x12/0x20 [ 1609.189981][ C0] ? sysvec_apic_timer_interrupt+0x83/0x90 [ 1609.195918][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1609.202184][ C0] ? kmsan_get_metadata+0x19a/0x1c0 [ 1609.207505][ C0] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1609.213421][ C0] ? __msan_metadata_ptr_for_load_8+0x24/0x40 [ 1609.219589][ C0] ? unwind_get_return_address_ptr+0x6a/0x100 [ 1609.225754][ C0] ? update_stack_state+0x206/0x270 [ 1609.231038][ C0] ? unwind_next_frame+0x19a/0x470 [ 1609.236247][ C0] ? arch_stack_walk+0x1ec/0x2d0 [ 1609.241275][ C0] ? stack_trace_save+0xaa/0xe0 [ 1609.246237][ C0] ? kmsan_internal_poison_memory+0x49/0x90 [ 1609.252246][ C0] ? kmsan_slab_alloc+0xdf/0x160 [ 1609.257276][ C0] ? __kmalloc_noprof+0x661/0xf30 [ 1609.262388][ C0] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1609.268282][ C0] ? tomoyo_path_number_perm+0x1d9/0x8f0 [ 1609.274042][ C0] ? tomoyo_path_mknod+0x191/0x1e0 [ 1609.279258][ C0] ? security_path_mknod+0x14b/0x230 [ 1609.284634][ C0] ? path_openat+0x1982/0x6100 [ 1609.289529][ C0] ? do_filp_open+0x20e/0x590 [ 1609.294375][ C0] ? do_sys_openat2+0x1bf/0x2f0 [ 1609.299343][ C0] ? __x64_sys_openat+0x2a1/0x310 [ 1609.304463][ C0] ? x64_sys_call+0x120e/0x3ba0 [ 1609.309414][ C0] ? do_syscall_64+0xcd/0x1e0 [ 1609.314191][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.320374][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 1609.325480][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.330785][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.336711][ C0] __msan_warning+0x95/0x120 [ 1609.341394][ C0] line6_midibuf_read+0x40b/0x1050 [ 1609.346639][ C0] line6_data_received+0x503/0xa80 [ 1609.351862][ C0] ? __pfx_line6_data_received+0x10/0x10 [ 1609.357594][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 1609.363065][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.368377][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 1609.373673][ C0] dummy_timer+0xd3f/0x6aa0 [ 1609.378308][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.383654][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1609.388707][ C0] __hrtimer_run_queues+0x564/0xe40 [ 1609.394035][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 1609.399183][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 1609.404748][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 1609.410308][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1609.416318][ C0] sysvec_apic_timer_interrupt+0x40/0x90 [ 1609.422057][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1609.428169][ C0] RIP: 0010:__msan_metadata_ptr_for_load_4+0x18/0x40 [ 1609.434961][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 04 00 00 00 31 d2 e8 fc 26 00 00 48 89 5d f0 ff 75 f0 9d 48 83 [ 1609.454680][ C0] RSP: 0018:ffff88813fc05868 EFLAGS: 00000282 [ 1609.460831][ C0] RAX: 0000000000000000 RBX: 0000000000000282 RCX: 000000022447c7b0 [ 1609.468874][ C0] RDX: ffff88822447c7b0 RSI: ffff88813fff9020 RDI: ffffffff9448a7b0 [ 1609.476926][ C0] RBP: ffff88813fc05880 R08: ffffea000000000f R09: 0000000000000000 [ 1609.484990][ C0] R10: ffff888237a837b0 R11: ffffffff81462200 R12: ffffffff9448a7b0 [ 1609.493070][ C0] R13: ffff88813fca1b40 R14: 0000000000000001 R15: 0000000000000001 [ 1609.501168][ C0] ? __pfx_read_tsc+0x10/0x10 [ 1609.505944][ C0] queued_spin_lock_slowpath+0x3c/0xa70 [ 1609.511603][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1609.517802][ C0] _raw_spin_lock+0x54/0x60 [ 1609.522418][ C0] mac80211_hwsim_tx_frame_no_nl+0xc29/0x2130 [ 1609.528634][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.533952][ C0] mac80211_hwsim_tx_frame+0x2d8/0x380 [ 1609.539506][ C0] __mac80211_hwsim_beacon_tx+0x540/0x600 [ 1609.545329][ C0] mac80211_hwsim_beacon_tx+0x70e/0xc40 [ 1609.550996][ C0] __iterate_interfaces+0x447/0x690 [ 1609.556301][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1609.562472][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1609.568632][ C0] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 1609.575700][ C0] mac80211_hwsim_beacon+0x11c/0x300 [ 1609.581101][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1609.587009][ C0] __hrtimer_run_queues+0x564/0xe40 [ 1609.592346][ C0] hrtimer_run_softirq+0x18f/0x750 [ 1609.597621][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.603608][ C0] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 1609.609368][ C0] handle_softirqs+0x1ce/0x800 [ 1609.614252][ C0] __irq_exit_rcu+0x68/0x120 [ 1609.618945][ C0] irq_exit_rcu+0x12/0x20 [ 1609.623373][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 1609.629110][ C0] [ 1609.632086][ C0] [ 1609.635059][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1609.641158][ C0] RIP: 0010:kmsan_get_metadata+0x19a/0x1c0 [ 1609.647076][ C0] Code: c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 48 09 d9 48 b8 00 00 00 00 80 88 ff ff e9 e6 fe ff ff 31 c0 5b 41 5e 41 5f <5d> c3 cc cc cc cc 90 0f 0b 90 c6 05 a2 40 93 0f 00 83 3d 9e 40 93 [ 1609.666806][ C0] RSP: 0018:ffff8880415b31a0 EFLAGS: 00000282 [ 1609.672962][ C0] RAX: ffff888040db3340 RBX: 0000000000000286 RCX: 0000000040db3340 [ 1609.681011][ C0] RDX: 00000000415b3340 RSI: ffff88813fff9080 RDI: ffff8880415b3340 [ 1609.689056][ C0] RBP: ffff8880415b31a0 R08: ffffea000000000f R09: ffff8880415b0000 [ 1609.697221][ C0] R10: ffff8880415b32e8 R11: ffffffff8193fca0 R12: 0000000000000000 [ 1609.705327][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880415b3340 [ 1609.713401][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1609.719789][ C0] kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1609.725580][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 1609.731593][ C0] unwind_get_return_address_ptr+0x6a/0x100 [ 1609.737625][ C0] update_stack_state+0x206/0x270 [ 1609.742744][ C0] unwind_next_frame+0x19a/0x470 [ 1609.747773][ C0] arch_stack_walk+0x1ec/0x2d0 [ 1609.752643][ C0] ? tomoyo_path_mknod+0x191/0x1e0 [ 1609.757847][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1609.764122][ C0] stack_trace_save+0xaa/0xe0 [ 1609.768931][ C0] kmsan_internal_poison_memory+0x49/0x90 [ 1609.774781][ C0] ? kmsan_internal_poison_memory+0x49/0x90 [ 1609.780790][ C0] ? kmsan_slab_alloc+0xdf/0x160 [ 1609.785875][ C0] ? __kmalloc_noprof+0x661/0xf30 [ 1609.791011][ C0] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1609.796923][ C0] ? tomoyo_path_number_perm+0x1d9/0x8f0 [ 1609.802699][ C0] ? tomoyo_path_mknod+0x191/0x1e0 [ 1609.807940][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 1609.813058][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.818376][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.824325][ C0] ? __kmalloc_noprof+0xe4/0xf30 [ 1609.829470][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.834802][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.840745][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.846070][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.852013][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1609.857334][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1609.863280][ C0] kmsan_slab_alloc+0xdf/0x160 [ 1609.868144][ C0] __kmalloc_noprof+0x661/0xf30 [ 1609.873096][ C0] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1609.879004][ C0] tomoyo_realpath_from_path+0x104/0xaa0 [ 1609.884751][ C0] ? __srcu_read_lock+0x76/0xd0 [ 1609.889707][ C0] tomoyo_path_number_perm+0x1d9/0x8f0 [ 1609.895313][ C0] tomoyo_path_mknod+0x191/0x1e0 [ 1609.900344][ C0] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1609.905900][ C0] security_path_mknod+0x14b/0x230 [ 1609.911113][ C0] path_openat+0x1982/0x6100 [ 1609.915846][ C0] do_filp_open+0x20e/0x590 [ 1609.920479][ C0] do_sys_openat2+0x1bf/0x2f0 [ 1609.925260][ C0] __x64_sys_openat+0x2a1/0x310 [ 1609.930220][ C0] x64_sys_call+0x120e/0x3ba0 [ 1609.935003][ C0] do_syscall_64+0xcd/0x1e0 [ 1609.939606][ C0] ? clear_bhb_loop+0x25/0x80 [ 1609.944394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.950401][ C0] RIP: 0033:0x7f84c05169a4 [ 1609.954902][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1609.974610][ C0] RSP: 002b:00007fff7d70b690 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1609.983127][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f84c05169a4 [ 1609.991172][ C0] RDX: 0000000000080241 RSI: 00007fff7d70bbd8 RDI: 00000000ffffff9c [ 1609.999210][ C0] RBP: 00007fff7d70bbd8 R08: 0000000000000004 R09: 0000000000000001 [ 1610.007272][ C0] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000080241 [ 1610.015327][ C0] R13: 0000555a6ba1e72e R14: 0000000000000001 R15: 0000555a6ba39160 [ 1610.023403][ C0] [ 1610.026731][ C0] Kernel Offset: disabled [ 1610.031106][ C0] Rebooting in 86400 seconds..