last executing test programs: 47.370542376s ago: executing program 1 (id=412): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 47.187041524s ago: executing program 1 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000080110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) lchown(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) 45.464856102s ago: executing program 1 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 45.211321911s ago: executing program 1 (id=423): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x400008, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@unlock_all, 0xb) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) r1 = syz_pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000001440)=[{0x0}], 0x1, 0x19, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, 0x0) finit_module(r4, 0x0, 0x0) 44.283156191s ago: executing program 1 (id=426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0xff02, 0x0) open$dir(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 35.396403524s ago: executing program 3 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x0) 34.830445194s ago: executing program 3 (id=462): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000280)=[r2], &(0x7f00000002c0)}) 34.65063245s ago: executing program 3 (id=463): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000500)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34a9e42d07d80ec4500490af81ec29d06ff32465ad17a550f034fff344f609c9c3bd09aec89a9756c2de823523a0089d1bed", 0xfffffffffffffeca, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x40}, 0x1c) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 32.124577987s ago: executing program 3 (id=468): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 31.621365261s ago: executing program 3 (id=470): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "961a58"}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000001300)=@newtaction={0x490, 0x30, 0x9, 0x0, 0xfffffffe, {}, [{0x244, 0x1, [@m_tunnel_key={0x10c, 0x17, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10400, 0x5a, 0x1, 0x5, 0x1003}, 0x2}}]}, {0xb7, 0x6, "7f761bcd6e1636c5e7b715f8392a58d549eb6d133f3e08dcbdae0f413b5b700cd11a7ea7330ef2882dfdd7e0ea67d7b6c33e9b1f703f6499e1497adec57ee4d140cd7c29156d6889922bad32562e97f0f31515c8a0e73b5e1b445546212a9cb8c2978513c7e1ea3ff500d882944ec58e780c6a9bdab3045db8bcb7b3f372acdc0a89b983e4326d9b8e5725eed358288e266fea0ff1e8ad6b4b8c2340c11a897e46d43791471a22ae2555c558390e9efcc7bace"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_mpls={0x134, 0xd, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22f0}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x10000000, 0x1000007, 0x9a90}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5, 0xffffffffffffffff, 0x8, 0x6}, 0x4}}]}, {0xae, 0x6, "b12087d7447bf2c30055073f72067ac7cb545b17a9ab89547ebf28e2c5428e4e217aff74397531aac98bc1046a699ffb4eb309568ca06d59243fb1abb87a59039e474d5369c0b5469c06ddf29c05a7ef1a9041aaf09379e5b61c2fb6d049056bcecbb98b31b62367a69773b5fb4e8c85fa3114ca6276aed7e31e3e116402f23c4444aced619b8f950d850fd05d3d7bd9bda1855286bdaeba08b04c383683f2cfac13f6956456bbe09014"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x238, 0x1, [@m_tunnel_key={0x168, 0xb, 0x0, 0x0, {{0xf}, {0x98, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8000, 0x8000, 0xffffffffffffffff, 0x100, 0x7fd}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x2, 0x5, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5c3, 0x6, 0x4, 0x3, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x8d58, 0x2, 0xca52, 0x6}, 0x2}}]}, {0xa2, 0x6, "a414e2a1fec4d677be183301599311637caa3dc8ff889d7985d2d654321c9a235b14355400aa467488724062931ffb842c1c5ef4f032a16dd022297c250ff4884f9ebd9f51b1bfcb85460d23ddb2f4e54106b310e1f964075fff2bed8039107cd6f407844ab4ebd2dd49dffc3a43948b19545e99c512ce4cdebe20431dfd04e6af589eb929eab74f7660f6640c06e602589a9aec71fcd26c957654b01886"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x10000000, 0x2, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @random="405b4536f82e"}]}, {0xc, 0x6, "25aeebc9bd71e00e"}, {0xc}, {0xc, 0x8, {0x1, 0x4d2af647678f3eac}}}}]}]}, 0x490}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r8, 0x1, 0x0, &(0x7f00000000c0)=[{0x81, 0xfffffffffffffffa}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r8}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x388, 0x278, 0x1e0, 0x1e0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x418) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 28.785991801s ago: executing program 3 (id=481): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) write$sequencer(r0, &(0x7f00000003c0)=ANY=[], 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff72, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003b00), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000aa63d9ae50003800800"], 0x28}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x0, 0xfffd, 0x3, 0x5}, @mpls={[{0x18, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@gre={{0x1d, 0x4, 0x1, 0x1b, 0x30a, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x5, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0x7, [{@rand_addr=0x64010100, 0xc}, {@empty, 0x4}, {@remote, 0x23}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x8000}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x84}, {@empty, 0xfffffffd}, {@local, 0x6}, {@empty, 0x1853}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7e, 0x3, [0x1, 0x8], "260f2b4ac8b1b7f60a8a51fc9f5c69012de9f053ada6fb6bc28cbb0842c50dbb55ad6c1e556fb9fc1e78cc7af34d063d8694a2174f8d6eec87ff465ff8776aafb51e108f4582b56854843f5055cb856aa4b86aa5e3a24bbd1501d17b41af642ae69485ebc80f33e4f80752ca3b385b79bdf748cea75823c87ed073fb2d85"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x9, 0xf], "6a2916076679e99c0f0d987e8506721a624c54980286ee51dedbeee79dee1f24acca3d2552e375d0ed1aed2e65a6fc59e427ce0ca268b52bf49386195609d7926156cc2c94d050e4acf1649c365f7d099f633459af200ba5f439beb8afd03609b7ff92c0d646413cf660fb0285798d4fd8bc2be2edb87a9ef08b98c26d5c08674b41842eada22b6329b8e5342f65918ab6ef8217762a469c4528d1d9ec53a1dc00ec180aacabf8d2977a30f9b423a18af26f883bd6614e16a3b75276fa246fc0cb3d62bd7e3e1cdcd7bfbc0d8868b7f74c69e57870a6243fd657ba13a18ea07d8b2309b26f70a655fa97503a7d277dd789674243d0d8d8f3fc"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x2, 0x7f, 0x4], "9c8405c814666e9e2916a6e69a6e9b6ff787985527c8750fd5eadaceba5699b80632733729c8b4b565ed640817019833770982dbfbae5b2517d66e61f16f53ca9bb703d809adef30e590ad505288212baae23e98d8f7997cfa6c1e06d6856cd84e4082553c926ae04d1d6ef95c4c64d9e2a2f74049dd0d7fbcbecbaad5cf9abf888c23683a7411dfd48e0c17"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0x9, 0x3, 0x1, 0x0, 0x5, 0xc}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x1, 0x2, 0x1, 0x2, 0x0, 0x4}, 0x2, {0xffffffff, 0xb, 0x1, 0x7, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "142b93b7c62ff178f0474582d0186007318e89bf11b11dd015970ccabff984a34b93d8abd4affb60cb52559040ec75c76a59f0daa950825d101f0a9231e54553d9"}}}}}, 0x31c) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) 12.941784594s ago: executing program 0 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 12.89776957s ago: executing program 4 (id=513): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) 9.47408234s ago: executing program 4 (id=514): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 9.433741774s ago: executing program 0 (id=515): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 9.042414517s ago: executing program 4 (id=517): syz_clone(0x8004100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.384254754s ago: executing program 4 (id=518): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 7.946401443s ago: executing program 4 (id=520): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x16, 0x61, 0x20, 0x1485, 0x1, 0x3e65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x1, 0xbf, 0x72}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 6.817485983s ago: executing program 2 (id=522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.075786527s ago: executing program 2 (id=523): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x16, 0x61, 0x20, 0x1485, 0x1, 0x3e65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x1, 0xbf, 0x72}}, {{0x9, 0x4, 0x14, 0x0, 0x0, 0x51, 0xf6, 0xf0, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 5.624592481s ago: executing program 0 (id=524): socket$inet(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7ca050000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 5.164833281s ago: executing program 0 (id=525): r0 = syz_io_uring_setup(0x56a2, &(0x7f0000000080)={0x0, 0xbd5b, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 4.94568572s ago: executing program 0 (id=526): syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 4.131408831s ago: executing program 4 (id=527): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) write$sequencer(r0, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4085d}, 0x40000) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYBLOB], 0x2c, 0x0) syz_clone(0x1002000, &(0x7f0000003900)="e6289dcffab041ad21b5da8df44ac7fa60a02f3c1d1f93", 0x17, 0x0, &(0x7f0000003980), &(0x7f0000000800)) sendmmsg$unix(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="2d2dc82866ebd1dce1ad0346f1dc4913ed3f228deef6b837d9f2f119746548ea033f340aac404a0884025d231e1dc5fcf72f2bc5f96fa4885e34ae49dca9938ea0246097d142bd4a9ade4fbf9007ff57d76713075335192fa20252ac1d2e5aaf3068771b8578a199bd5a84b18b7273285cc14666f764bfa0ceb6a96b947ac5dbf3c5d59d1349264abc0545cf82de3d43cf81e03d5045381ce49d4cf2fa8846187425884ed1dc19cccfdd03a91de7f06523dda6a693b382b24525c12973bf601cdc2b68f77718421ab6dea54911b5a2a1", 0xd0}, {&(0x7f0000000240)="0e18a898676eefd562e2bc68e456d8c098a456ebe77ba273ea94d704b5d62dfc7beb887f29c8d32a7a07cdf676f436d9205b0fc3d7ae9d911fb12784cbf87fb1fe46850c2ae00cd9494bf194596d1eec21818cd8cb4f9c5a5c51d580", 0x5c}, {&(0x7f0000000400)="22d7274896fad1884be5c6076acb312a59b85d55280cc1e21644e604dde762b9801331f889323d231b75c382837b292a9171914c0fb44c819f0523d707c0f84a160e8e29f769b166590e18b6c5e4aa96ddcbe5c314eece6cdd2a1671952181b5fd0bb752740edb91c302ac4244953a329abcf3362e52d2d805e5406084f808eb9f14afcbccc70814bd9c09bfb08cffc914554600146de71a317af6b2efce4f9524f63b57cb25fddfebca4ffd75b30f5154", 0xb1}, {&(0x7f00000004c0)="320032f2423314e433d332605fceab6cba3622b75c6d7dc29ac87f6f4c959c02040853bbd57e08f2f1ca8675685915e42aff17587194e2b3c52a65995ee234ad3ad5b8ad8b", 0x45}, {0x0}, {0x0}, {&(0x7f0000000580)="b0945a150c41f9d08aeb03a332e1d1ca378afef43966744ff146aabffec1cc03b1ce2ac4e06c4e5365dd3a05fe", 0x2d}, {0x0}, {&(0x7f0000000640)}], 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000105000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4c002}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40, 0x400c094}}], 0x2, 0x20000004) 2.169419292s ago: executing program 2 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 672.540719ms ago: executing program 2 (id=529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@deltfilter={0x2354, 0x2d, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xf, 0x3}, {0xffe0, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd4, 0x2, [@TCA_CGROUP_EMATCHES={0xc4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x9}, {0x4, 0x3, 0x9, 0x5}}}, @TCF_EM_META={0x8c, 0x1, 0x0, 0x0, {{0x100, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0xca, 0x2}, {0xfffd, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='7', @TCF_META_TYPE_VAR="0d488f", @TCF_META_TYPE_VAR="3705", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="81b4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="175b29", @TCF_META_TYPE_VAR="fd5692e692a5", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b6c226e9", @TCF_META_TYPE_VAR='7']}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR='r', @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="00fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc3d7, 0x4, 0x3}, {0x68c0, 0x28, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3}, {0xa808, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7f}, {{}, {0x2, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff4}]}]}}, @TCA_RATE={0x6, 0x5, {0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0xf, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x220c, 0x2, [@TCA_BASIC_POLICE={0x830, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x8, 0xb, 0x1, 0x33bf, 0x8001, 0x7cb, 0x2452, 0xfffffffa, 0x1, 0x3, 0xbd, 0x7, 0x7fffffff, 0x48, 0x4, 0x7, 0x53, 0x2, 0x4, 0x1, 0x4, 0x7, 0x80000001, 0x9, 0x9, 0xffff25a2, 0x2, 0x9, 0xf00, 0x9, 0xc6b2, 0x9, 0xd1b, 0x7, 0x4, 0xffff, 0x5, 0x7fffffff, 0xb29, 0x8, 0x5, 0x6, 0xc5, 0x20, 0x9, 0x7, 0x7, 0x2, 0x3, 0x761, 0xb, 0x9, 0x2, 0x4, 0x8, 0x6, 0x2, 0x3, 0x5, 0x3, 0xfffffffa, 0x3, 0x0, 0x9, 0x8, 0x5, 0x0, 0x4, 0x70b3f0ff, 0x5, 0x2, 0xfcc, 0x7, 0x7ac1ec73, 0x1fe00, 0x2, 0xffffffff, 0x5, 0x7ff, 0x5, 0x3, 0xc, 0xfffffffc, 0x3, 0xffffffff, 0x1, 0x2, 0xfffffff9, 0x8, 0x7, 0x3d2, 0x6, 0x1, 0x7f800000, 0x0, 0x4, 0x9, 0x2, 0x100, 0x80000000, 0x9, 0x7fffffff, 0x1, 0xfff, 0x800, 0x10001, 0x10001, 0x1, 0x9, 0x2, 0x3, 0xa, 0x7fffffff, 0x0, 0x2, 0x3, 0x5, 0x9, 0x2, 0xffffffc0, 0x35, 0x80, 0x7, 0xc, 0x33903b3e, 0x3cf, 0x64ef, 0x10, 0xc16, 0x7, 0x3ff, 0xc, 0x3, 0x6, 0xffff, 0x5, 0x4, 0x7, 0x400, 0x1000000, 0x7f373c54, 0x7f, 0x2, 0x1, 0xcff, 0x2, 0x1000, 0x4, 0xfffffffa, 0x2, 0xc5, 0x8, 0x7, 0xe, 0x0, 0x6, 0x5, 0x5, 0x3, 0xb8d, 0x3, 0x7, 0x4, 0x0, 0x80007, 0x1, 0x0, 0xe, 0xf, 0x10000, 0x10000, 0x400, 0x36, 0x5, 0x9, 0x594, 0xc1de0000, 0x7, 0x6, 0x1, 0x0, 0xe0000000, 0x5, 0x7, 0x6, 0x59, 0x9, 0xfd06, 0xbe, 0x7, 0x1, 0xfffffff9, 0xffffffff, 0x9, 0x2, 0x7fffffff, 0xb, 0xf9, 0x1a, 0x5c7, 0x5, 0x6, 0xc8c, 0x3, 0x8, 0x1, 0x0, 0x6, 0x1, 0x81, 0x81, 0x9, 0x7, 0x8, 0xc8d, 0x0, 0x3, 0xded, 0x7, 0x8, 0x3, 0x56764738, 0x7, 0xfff, 0xffffe433, 0x7f, 0x7, 0x81, 0xfffffffd, 0xfffffff5, 0x5, 0x800, 0x100, 0x9, 0x3, 0x6, 0x7fc, 0x10001, 0x7, 0x4, 0x1400, 0x7f, 0x800, 0xe, 0x381, 0xa, 0xd9, 0x9, 0x6e4cf4a1, 0x1ff, 0x9, 0x4, 0x8, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x754}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x5, 0x80000001, 0x2, 0x3, 0xfffffff8, 0x2, 0x0, 0x7, 0xce, 0x3, 0x640a, 0x8, 0x8, 0x0, 0xffff0001, 0x6af, 0x4, 0x2, 0x696a, 0x101, 0x1, 0x1, 0x9887, 0x9, 0xc942, 0x6, 0x7, 0x9, 0xffffffd6, 0x4, 0xe66, 0x7fff, 0x5, 0x1, 0x0, 0x5, 0x80, 0x8, 0x9, 0x3, 0x0, 0x8, 0x1, 0xef6, 0x200, 0x7fff, 0x8, 0x5, 0x5, 0xe000, 0xfffff711, 0x5, 0x3, 0x0, 0x7fffffff, 0x80000001, 0x43, 0x0, 0x4, 0xf6, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x9, 0x9, 0x9, 0x5, 0x7fff, 0x3, 0x0, 0x7, 0x97a, 0x7, 0x0, 0x524, 0x3, 0x7f, 0x1, 0xcf, 0x330, 0x5, 0xfffffff7, 0x28f18053, 0x3, 0x6, 0x40, 0x80, 0x9, 0x3, 0x5, 0x80000000, 0xfffffffa, 0x7, 0x8, 0x2, 0xffffffff, 0x6, 0x80000000, 0x48000000, 0x5, 0x9b2, 0x8001, 0x5, 0x5, 0x4, 0x7ff, 0x2, 0xfffffe01, 0x10000, 0x1, 0x0, 0x2, 0x2, 0x40, 0x3, 0x6, 0x4, 0x3, 0x401, 0x4, 0x4, 0x8, 0x8000, 0x5, 0x6, 0x4, 0xb16, 0x2, 0x6ad1, 0x9, 0x9, 0x7fffffff, 0x4, 0x40000, 0x7, 0x6, 0x3, 0x1, 0x159, 0x4, 0x80000000, 0x1, 0x80000000, 0x1, 0x0, 0x800, 0xf90, 0x0, 0x5, 0x3, 0x7fffffff, 0x8, 0x7, 0xf, 0x9b, 0x1, 0xfffff3ec, 0x8, 0x802, 0x2, 0xd1a, 0xffffd85f, 0x80000000, 0x8, 0x1, 0x400, 0xfffffff7, 0x3e1, 0x617, 0x2, 0x5, 0xb7, 0x7, 0xf9, 0x100, 0x6, 0xffff, 0x2, 0x43, 0x2, 0x7, 0x70000, 0x1, 0x400, 0xfffff2b3, 0x2, 0x4, 0x7, 0x3eb, 0x9, 0xfff, 0x9, 0x2, 0x3a7, 0x0, 0x5, 0x10, 0x4, 0x3, 0x100, 0x8, 0x0, 0x8980, 0x101, 0x0, 0x9, 0x81, 0xeed, 0xffff0000, 0x9, 0x10001, 0x9, 0x5, 0xc4, 0x7f, 0x7f, 0xa, 0x10001, 0x100, 0x1ff, 0x4d6, 0xe6, 0x313ed9e0, 0x834, 0x3, 0x10000, 0x0, 0x2, 0x75b, 0x5, 0x40, 0x81, 0x100, 0x6, 0x9, 0x5, 0x9, 0x0, 0x1, 0x0, 0xa, 0x9, 0x3, 0xfffffc01, 0x80000001, 0x664, 0xdb28, 0x6, 0x10, 0x7, 0x1, 0x200, 0x13080000]}]}, @TCA_BASIC_EMATCHES={0x260, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400, 0x1, 0x4}, {0x12, 0x4, 0x57fb, 0x2, 0x9, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x4}, "d1c31fb830421f2c2d5691c99c0f89c3d00ce848e369c79d46ec91c90f250792797c7caab750da3186f42b27fb2d6873a286f10cb6df1d76d600807256ab3b1ad7b7a7bc0830239c871e3bd37375732b3ef3"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x5}, {{0x0, 0x1}, {0x2, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x60, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x700}, {{0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x2}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0xd8, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="4210d0d47e351c", @TCF_META_TYPE_VAR="cf9354444188e9487b", @TCF_META_TYPE_VAR="9cdf9ef89b5f15"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="9401", @TCF_META_TYPE_VAR="e8", @TCF_META_TYPE_VAR="a637cd6effd9286152ec", @TCF_META_TYPE_VAR="44f8d5d6285f7502", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd863, 0x6, 0x2}, {0x0, 0xfa}}}, @TCA_EM_META_LVALUE={0x31, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="fd89a6c78aca4830cf", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="266130c5da95", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c3e7ee426c9f", @TCF_META_TYPE_VAR="ef3e5a9d91671cf1"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="78f86903a4f05721a9", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x3}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="edee7aa8bde363b37a28", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="d4e2cc762e8119", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xb5, 0x7, 0x8}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xfffc, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xbe}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0x4}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xa, 0x2, 0xfa}, {0x101, 0x1, 0x1, "84"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe2, 0xa}}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x1, 0x4, 0x809, 0x9, {0x3, 0x2, 0x2, 0x7, 0xff, 0x5}, {0x15, 0x1, 0xb, 0x2, 0x9, 0x101}, 0x8, 0x46, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x9, 0xfffffff8, 0xff, 0x7, 0xbf, 0x7, 0x7, 0x0, 0x1f, 0x7, 0x101, 0x6, 0x9, 0xfffffff9, 0x2, 0x8, 0x80, 0x1000, 0xffff, 0x1, 0xffffffff, 0x981c, 0x3ff, 0x3, 0x1, 0x3, 0x7f, 0x90000000, 0xffff, 0xe59, 0x61c, 0x2, 0x2, 0x2, 0x5, 0xd4, 0x3, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7fffffff, 0x0, 0x7, 0x89, 0x4, 0x4, 0x7, 0x3, 0x22, 0x0, 0x449b17fc, 0xe44b9195, 0x4, 0x5, 0x3, 0x400, 0x6, 0x1, 0x2, 0xcc, 0x9, 0x6, 0x2, 0x2220, 0x10, 0xf, 0x0, 0x3, 0x8e, 0x9, 0xfffffff8, 0x7, 0x7, 0x5, 0x6323, 0x5, 0x1, 0x6, 0x2, 0x7, 0x62979810, 0x1, 0xfff, 0x7, 0x5, 0x6, 0xf8, 0x3, 0xd84, 0x3, 0x583b, 0x7, 0xd, 0x6, 0x4, 0x5, 0x6, 0x40, 0x20, 0xaeb, 0x4, 0x10, 0x10, 0x8, 0x0, 0x6, 0xff, 0x4, 0xe50b, 0x2, 0x5, 0x2, 0x96c, 0xace, 0x1, 0x2, 0x8, 0xffff, 0xfffffff7, 0xfa9e, 0xdd, 0x2, 0x4, 0x5, 0x2, 0xbc, 0x5, 0x8001, 0x4, 0x9, 0x3, 0x8, 0x9, 0x8, 0x6, 0x2, 0x4fc, 0x5, 0x7, 0xdb71, 0x0, 0x10, 0x2209, 0xc, 0x6, 0x3, 0x80000000, 0x2, 0x9, 0x8, 0x3ff, 0xfffffde8, 0x7, 0x0, 0x74, 0x7, 0x4ccf, 0x80000000, 0x4, 0xd, 0x86, 0x62d, 0x9a, 0xd3a, 0x7, 0x8, 0x4, 0x99, 0xfffffffe, 0x5, 0x7, 0x4fe4, 0x7, 0x41, 0x4, 0xe69, 0x7f, 0x3, 0x30, 0x6, 0x2, 0x0, 0x6, 0xbbcb, 0x452, 0x8, 0x1, 0x5, 0x8, 0x7, 0x1, 0xf2b8, 0x8, 0x8000, 0x9, 0x4, 0xff, 0x0, 0xf, 0x7, 0x1000, 0x3, 0x23, 0x0, 0x3, 0x10, 0x800, 0xb, 0x5, 0x4, 0xd, 0x2, 0x10001, 0x7, 0x4, 0x825, 0x7ff, 0x5, 0x3, 0x8001, 0x0, 0x3ff, 0x1000, 0x6, 0x8001, 0xb, 0x4, 0x1, 0x1, 0x8, 0xffffff1b, 0x1000, 0x8, 0xf5d, 0x0, 0x229, 0x401, 0x3, 0x4, 0x9, 0x80, 0x0, 0x7, 0x4, 0xffffffff, 0x0, 0x3, 0x9, 0xfffffffd, 0x8, 0x4, 0x80000000, 0xc]}]}, @TCA_BASIC_ACT={0x1320, 0x3, [@m_bpf={0x1050, 0xf, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x100, 0x0, 0x5, 0x7}}]}, {0x1003, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xc0, 0xc, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x0, 0x80000001, 0xf86}, 0x84a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a, 0x3ff, 0x2, 0x4, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a, 0x4, 0x1, 0x3, 0x1}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x10000000, 0x1, 0x9da3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x8, 0x8, 0x1ff}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5e5c9a2251436d21}}}}, @m_nat={0x20c, 0x1f, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x1, 0xff}, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x10000000, 0x4, 0x40}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0xffff, 0x7, 0x6cce41f7, 0x8}, @remote, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x5, 0x10000000, 0x9, 0xffffff6f}, @local, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe0, 0x80, 0x1, 0x80, 0xff}, @private=0xa010100, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x7fffffff, 0x10000000, 0x1a95, 0x2}, @local, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0x6, 0x2}, @local, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0xffffffffffffffff, 0x2, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5e4, 0x0, 0x20000000, 0x400}, @remote, @rand_addr=0x64010100, 0xff000000, 0x1}}]}, {0x7b, 0x6, "575a415d2cc58e53753b4f564de4f18a0f75529a916c8b47c2a62dd6733f9087fb54a5a65567f1275761273b13cc98755bf0b584358ae0db21bacdab00d8368e19c838785a7fb071112ef6e42354c485d2b649d9d09c3269f5513aae0df71f057eed1f94b3713ab4f6d58dcd273786084800dd657e6620"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x2354}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 542.314586ms ago: executing program 1 (id=464): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000001000000080000000800", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001148d49b0a55fff41222ed835630091030c01761af1a143a2b48dcd8e1c0637c54591e519be8b4e57ffe642f1694d5dcbcf498e2146858625eb4530aadfb261e262225a6cfc1cbb27a56b692a2726bb96d73f09844c1014a1a2f079bb4e2a76f3794ab26c83297a98f7ae97cc06409a49af0ca2d92756309cf961be1206fe8497af2ab82f61b39fe1d734d2a2a869270e8e6b612c3214f71badd47b4cd951c98031182707fc2539a93b59be7dddc0cf06f0e6237b21cd78cce81"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0xffffffffffffffb6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 453.218326ms ago: executing program 0 (id=530): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x7d, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) 326.474883ms ago: executing program 2 (id=531): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[], 0xff02, 0x0) open$dir(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): adv_slave_0 [ 266.089229][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.097759][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.105392][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.122443][ T5663] hsr_slave_0: left promiscuous mode [ 266.128518][ T5663] hsr_slave_1: left promiscuous mode [ 266.134922][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.142498][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.153461][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.161897][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.216401][ T5663] veth1_macvtap: left promiscuous mode [ 266.222021][ T5663] veth0_macvtap: left promiscuous mode [ 266.227785][ T5663] veth1_vlan: left promiscuous mode [ 266.233079][ T5663] veth0_vlan: left promiscuous mode [ 266.241114][ T5663] veth1_macvtap: left promiscuous mode [ 266.246823][ T5663] veth0_macvtap: left promiscuous mode [ 266.252444][ T5663] veth1_vlan: left promiscuous mode [ 266.257897][ T5663] veth0_vlan: left promiscuous mode [ 266.264117][ T5663] veth1_macvtap: left promiscuous mode [ 266.270342][ T5663] veth0_macvtap: left promiscuous mode [ 266.276190][ T5663] veth1_vlan: left promiscuous mode [ 266.281514][ T5663] veth0_vlan: left promiscuous mode [ 266.289378][ T5663] veth1_macvtap: left promiscuous mode [ 266.294876][ T5663] veth0_macvtap: left promiscuous mode [ 266.300689][ T5663] veth1_vlan: left promiscuous mode [ 266.306146][ T5663] veth0_vlan: left promiscuous mode [ 266.734470][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 266.761535][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 267.383821][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 267.431102][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 267.682857][ T5229] Bluetooth: hci0: command tx timeout [ 268.084927][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 268.120795][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 268.784964][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 268.860032][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 269.535639][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 269.575398][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 269.756022][ T5229] Bluetooth: hci0: command tx timeout [ 270.062126][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.088542][ T5858] team0: Port device team_slave_1 added [ 270.111364][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.254601][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.275316][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.315148][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.337653][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.344638][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.391593][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.513212][ T5858] hsr_slave_0: entered promiscuous mode [ 270.531197][ T5858] hsr_slave_1: entered promiscuous mode [ 270.553359][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.677321][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.684498][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.698535][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.717758][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.736844][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.743987][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.761967][ T5743] veth0_vlan: entered promiscuous mode [ 270.773932][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.784628][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.812410][ T5743] veth1_vlan: entered promiscuous mode [ 270.986950][ T5743] veth0_macvtap: entered promiscuous mode [ 271.007651][ T5743] veth1_macvtap: entered promiscuous mode [ 271.144287][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.179596][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.300997][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.327511][ T5743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.340087][ T5743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.351009][ T5743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.360181][ T5743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.379220][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.416544][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.446754][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.453971][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.469135][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.476281][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.552134][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.574548][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.638734][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.645914][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.682237][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.689461][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.837251][ T5229] Bluetooth: hci0: command tx timeout [ 271.902889][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.929906][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.023534][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.103684][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.138108][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.145173][ T5726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.153024][ T5726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.172917][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.427884][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.464670][ T5734] veth0_vlan: entered promiscuous mode [ 272.503858][ T5734] veth1_vlan: entered promiscuous mode [ 272.606631][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.702412][ T5734] veth0_macvtap: entered promiscuous mode [ 272.714313][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.742243][ T5734] veth1_macvtap: entered promiscuous mode [ 272.765269][ T5269] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 272.800412][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.831915][ T5746] veth0_vlan: entered promiscuous mode [ 272.871654][ T5799] veth0_vlan: entered promiscuous mode [ 272.889282][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.896460][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.913227][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.920415][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.937267][ T5269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.943312][ T5734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.962894][ T5269] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.973734][ T5269] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 272.983153][ T5734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.993191][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.002996][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.016594][ T5269] usb 2-1: config 0 descriptor?? [ 273.078762][ T5734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.095970][ T5734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.108513][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.120687][ T5746] veth1_vlan: entered promiscuous mode [ 273.141519][ T5799] veth1_vlan: entered promiscuous mode [ 273.171431][ T5734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.183080][ T5734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.193407][ T5734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.202902][ T5734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.286998][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.303330][ T5746] veth0_macvtap: entered promiscuous mode [ 273.331086][ T5799] veth0_macvtap: entered promiscuous mode [ 273.340843][ T5799] veth1_macvtap: entered promiscuous mode [ 273.358626][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.390505][ T5746] veth1_macvtap: entered promiscuous mode [ 273.400518][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.412269][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.419017][ T5215] usb 2-1: USB disconnect, device number 3 [ 273.433018][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.445675][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.484760][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.533278][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.544781][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.562299][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.574018][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.594514][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.622819][ T5663] bridge_slave_1: left allmulticast mode [ 273.647817][ T5663] bridge_slave_1: left promiscuous mode [ 273.671183][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.698990][ T5663] bridge_slave_0: left allmulticast mode [ 273.704698][ T5663] bridge_slave_0: left promiscuous mode [ 273.714986][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.936553][ T5222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.115364][ T5222] usb 2-1: Using ep0 maxpacket: 32 [ 274.129594][ T5222] usb 2-1: config 0 has an invalid interface number: 123 but max is 1 [ 274.155456][ T5222] usb 2-1: config 0 has an invalid interface number: 20 but max is 1 [ 274.175153][ T5222] usb 2-1: config 0 has no interface number 0 [ 274.181292][ T5222] usb 2-1: config 0 has no interface number 1 [ 274.193680][ T5222] usb 2-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 274.205362][ T5222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.213405][ T5222] usb 2-1: Product: syz [ 274.228001][ T5222] usb 2-1: Manufacturer: syz [ 274.232878][ T5222] usb 2-1: SerialNumber: syz [ 274.248048][ T5222] usb 2-1: config 0 descriptor?? [ 274.274150][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.308654][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.330244][ T5663] bond0 (unregistering): Released all slaves [ 274.360049][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.371088][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.383775][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.402211][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.468907][ T5222] kaweth 2-1:0.123: Firmware present in device. [ 274.469691][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.497721][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.508182][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.519064][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.529316][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.540378][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.553896][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.597196][ T5663] hsr_slave_0: left promiscuous mode [ 274.613086][ T5663] hsr_slave_1: left promiscuous mode [ 274.619536][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.630059][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.662292][ T5222] kaweth 2-1:0.123: Error reading configuration (-32), no net device created [ 274.685638][ T5222] kaweth 2-1:0.123: probe with driver kaweth failed with error -5 [ 274.736650][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.767476][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.814217][ T5222] kaweth 2-1:0.20: Firmware present in device. [ 274.835445][ T5222] kaweth 2-1:0.20: Error reading configuration (-71), no net device created [ 274.844289][ T5222] kaweth 2-1:0.20: probe with driver kaweth failed with error -5 [ 274.897608][ T5222] usb 2-1: USB disconnect, device number 4 [ 275.007671][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 275.051275][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 275.496365][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.514006][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.525917][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.547485][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.564079][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.581985][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.626626][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.704847][ T5726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.713714][ T5726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.726117][ T5746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.734956][ T5746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.058796][ T5746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.147228][ T5746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.532212][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.889018][ T5726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.949341][ T5728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.957413][ T5726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.006327][ T5728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.208289][ T5728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.217333][ T5728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.283713][ T5728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.332079][ T5728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.372662][ T5858] veth0_vlan: entered promiscuous mode [ 277.418561][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.441952][ T5858] veth1_vlan: entered promiscuous mode [ 277.448594][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.534380][ T5858] veth0_macvtap: entered promiscuous mode [ 277.610330][ T5858] veth1_macvtap: entered promiscuous mode [ 277.742964][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.761048][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.800327][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.832574][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.915819][ T6024] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 277.929076][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.940662][ T6024] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.46'. [ 277.957857][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.978924][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.004095][ T6024] netlink: 217 bytes leftover after parsing attributes in process `syz.2.46'. [ 278.013335][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.041783][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.144989][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.193483][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.258855][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.285803][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.312291][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.358958][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.403553][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.448735][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.478887][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.532643][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.577821][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.615120][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.655188][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.024330][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.045234][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.072897][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.089871][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.459025][ T6051] overlayfs: overlapping lowerdir path [ 283.935268][ T5298] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.115174][ T5298] usb 5-1: Using ep0 maxpacket: 32 [ 284.146599][ T5298] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 284.154791][ T5298] usb 5-1: config 0 has no interface number 0 [ 284.212666][ T5298] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 284.388886][ T5298] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 284.399317][ T5298] usb 5-1: config 0 interface 126 has no altsetting 0 [ 284.426549][ T5298] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 284.438372][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.446896][ T5298] usb 5-1: Product: syz [ 284.452273][ T5298] usb 5-1: Manufacturer: syz [ 284.457221][ T5298] usb 5-1: SerialNumber: syz [ 286.043705][ T5298] usb 5-1: config 0 descriptor?? [ 286.094562][ T5298] usb 5-1: can't set config #0, error -71 [ 286.123820][ T5298] usb 5-1: USB disconnect, device number 4 [ 287.224694][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 288.320176][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 289.267331][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.278986][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 289.290624][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.372421][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 289.381545][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.633219][ T6122] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 289.647605][ T8] usb 2-1: config 0 descriptor?? [ 289.724375][ T8] usb 2-1: can't set config #0, error -71 [ 289.778034][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.792892][ T8] usb 2-1: USB disconnect, device number 5 [ 289.813220][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.854524][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.941333][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.955572][ T5223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.963342][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.508600][ T5229] Bluetooth: hci1: command tx timeout [ 293.899711][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 296.335886][ T5229] Bluetooth: hci1: command tx timeout [ 296.895355][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 296.930208][ T6120] chnl_net:caif_netlink_parms(): no params data found [ 297.055273][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 297.099088][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.174512][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 297.197780][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.212582][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 297.223683][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.238824][ T8] usb 4-1: config 0 descriptor?? [ 297.251281][ T6162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.264228][ T8] hub 4-1:0.0: USB hub found [ 297.303656][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.86'. [ 297.475293][ T8] hub 4-1:0.0: 2 ports detected [ 297.530235][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.576519][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.609343][ T6120] bridge_slave_0: entered allmulticast mode [ 297.629791][ T6120] bridge_slave_0: entered promiscuous mode [ 297.679150][ T8] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 297.710084][ T8] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 297.718661][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.746922][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 297.762854][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.775218][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.615295][ T5223] Bluetooth: hci1: command tx timeout [ 298.667277][ T8] usb 4-1: USB disconnect, device number 3 [ 298.705353][ T6120] bridge_slave_1: entered allmulticast mode [ 298.746058][ T6120] bridge_slave_1: entered promiscuous mode [ 300.675896][ T5223] Bluetooth: hci1: command tx timeout [ 301.074480][ T6197] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.92'. [ 301.085086][ T6197] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 301.937217][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.988117][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.320309][ T5225] IPVS: starting estimator thread 0... [ 303.084247][ T6120] team0: Port device team_slave_0 added [ 303.126919][ T6120] team0: Port device team_slave_1 added [ 303.165850][ T6203] IPVS: using max 18 ests per chain, 43200 per kthread [ 303.192559][ T6205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 303.283622][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.292469][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.301821][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.321324][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.329454][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.339261][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.534440][ T5726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.592941][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.620111][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.656870][ T6205] kvm: emulating exchange as write [ 304.689542][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.785767][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.636266][ T5229] Bluetooth: hci4: command tx timeout [ 305.647911][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.801096][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.888580][ T5726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.164437][ T5726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.275185][ T5225] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 306.311306][ T6120] hsr_slave_0: entered promiscuous mode [ 306.371794][ T6120] hsr_slave_1: entered promiscuous mode [ 306.385499][ T6120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.400114][ T6120] Cannot create hsr debugfs directory [ 306.446907][ T5225] usb 1-1: Using ep0 maxpacket: 32 [ 306.456886][ T5726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.468190][ T5225] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 306.479458][ T5225] usb 1-1: config 0 has no interface number 0 [ 306.485818][ T5225] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 306.497632][ T5225] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 306.510782][ T5225] usb 1-1: config 0 interface 126 has no altsetting 0 [ 306.529736][ T5225] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 306.569063][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.601921][ T5225] usb 1-1: Product: syz [ 306.614524][ T5225] usb 1-1: Manufacturer: syz [ 306.629419][ T5225] usb 1-1: SerialNumber: syz [ 306.804085][ T5543] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 307.411767][ T5225] usb 1-1: config 0 descriptor?? [ 307.454525][ T6233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.483146][ T6233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.683434][ T5229] Bluetooth: hci4: command tx timeout [ 307.736629][ T5543] usb 5-1: Using ep0 maxpacket: 8 [ 307.749079][ T5543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.766186][ T5543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.808317][ T5543] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.825435][ T5543] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 307.834691][ T5543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.886523][ T5543] usb 5-1: config 0 descriptor?? [ 307.989397][ T5726] bridge_slave_1: left allmulticast mode [ 308.005602][ T5726] bridge_slave_1: left promiscuous mode [ 308.043108][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.140772][ T5726] bridge_slave_0: left allmulticast mode [ 308.160298][ T5726] bridge_slave_0: left promiscuous mode [ 308.175323][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.562521][ T5225] ir_usb 1-1:0.126: IR Dongle converter detected [ 309.562977][ T5543] usbhid 5-1:0.0: can't add hid device: -71 [ 309.582431][ T5543] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 309.593997][ T5225] usb 1-1: IRDA class descriptor not found, device not bound [ 309.632372][ T5225] usb 1-1: USB disconnect, device number 4 [ 309.691288][ T5543] usb 5-1: USB disconnect, device number 5 [ 309.756625][ T5229] Bluetooth: hci4: command tx timeout [ 309.833935][ T6263] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 309.852561][ T6263] netlink: 8836 bytes leftover after parsing attributes in process `syz.3.109'. [ 310.865151][ T5292] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 311.052917][ T5292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.093674][ T5292] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 311.117181][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.177607][ T5292] usb 1-1: Product: syz [ 311.181887][ T5292] usb 1-1: Manufacturer: syz [ 311.189540][ T5292] usb 1-1: SerialNumber: syz [ 311.199757][ T5292] usb 1-1: config 0 descriptor?? [ 311.245363][ T5292] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.835808][ T5229] Bluetooth: hci4: command tx timeout [ 311.848794][ T6264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.404028][ T5726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.420565][ T5726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.438267][ T5726] bond0 (unregistering): Released all slaves [ 314.883871][ T6301] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.118'. [ 314.894361][ T6301] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 315.433946][ T6304] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 315.462564][ T6304] netlink: 8836 bytes leftover after parsing attributes in process `syz.3.120'. [ 316.530283][ T5292] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 316.540963][ T5292] usb 1-1: USB disconnect, device number 5 [ 316.765474][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 316.814561][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.278424][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.298526][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.125635][ T6328] syzkaller0: entered allmulticast mode [ 319.133418][ T6328] syzkaller0: left allmulticast mode [ 319.625013][ T6347] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.129'. [ 319.634358][ T6347] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 319.994189][ T5726] hsr_slave_0: left promiscuous mode [ 320.172706][ T5726] hsr_slave_1: left promiscuous mode [ 320.198097][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.211805][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.234490][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.336190][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.932298][ T5726] veth1_macvtap: left promiscuous mode [ 320.938279][ T5726] veth0_macvtap: left promiscuous mode [ 320.944154][ T5726] veth1_vlan: left promiscuous mode [ 320.951784][ T5726] veth0_vlan: left promiscuous mode [ 322.505267][ T29] audit: type=1800 audit(1727064689.786:2): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.138" name="file2" dev="overlay" ino=147 res=0 errno=0 [ 322.652973][ T5726] team0 (unregistering): Port device team_slave_1 removed [ 322.804692][ T5726] team0 (unregistering): Port device team_slave_0 removed [ 325.247017][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.254988][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.272205][ T6208] bridge_slave_0: entered allmulticast mode [ 325.288825][ T6208] bridge_slave_0: entered promiscuous mode [ 325.302771][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.321879][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.339694][ T6208] bridge_slave_1: entered allmulticast mode [ 325.350950][ T6208] bridge_slave_1: entered promiscuous mode [ 325.708841][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.964741][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.170788][ T6208] team0: Port device team_slave_0 added [ 326.208151][ T6208] team0: Port device team_slave_1 added [ 326.293412][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 326.347472][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.361346][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.668062][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.992043][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.115899][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.245521][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.313158][ T6120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.459329][ T6120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.476966][ T6120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.488170][ T6120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.246351][ T6208] hsr_slave_0: entered promiscuous mode [ 328.273782][ T6208] hsr_slave_1: entered promiscuous mode [ 328.349559][ T6208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.380042][ T6208] Cannot create hsr debugfs directory [ 328.449234][ T5543] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.493101][ T5726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.624294][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.645020][ T5543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.673692][ T5543] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.694443][ T5543] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.703792][ T5543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.726505][ T5543] usb 4-1: config 0 descriptor?? [ 328.825418][ T5726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.908284][ T6120] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.976962][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.984144][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.044670][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.763080][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.830466][ T5543] usb 4-1: USB disconnect, device number 4 [ 329.919590][ T5726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.968622][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.975913][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.060123][ T5726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.324850][ T5726] bridge_slave_1: left allmulticast mode [ 330.325228][ T5225] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 330.334594][ T5726] bridge_slave_1: left promiscuous mode [ 330.373486][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.405513][ T5726] bridge_slave_0: left allmulticast mode [ 330.411273][ T5726] bridge_slave_0: left promiscuous mode [ 330.418696][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.505325][ T5225] usb 4-1: Using ep0 maxpacket: 32 [ 330.571080][ T5225] usb 4-1: config 0 has an invalid interface number: 123 but max is 1 [ 330.585479][ T5225] usb 4-1: config 0 has an invalid interface number: 20 but max is 1 [ 330.597585][ T5225] usb 4-1: config 0 has no interface number 0 [ 330.603853][ T5225] usb 4-1: config 0 has no interface number 1 [ 330.725254][ T5225] usb 4-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 330.734390][ T5225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.755351][ T5225] usb 4-1: Product: syz [ 330.762104][ T5225] usb 4-1: Manufacturer: syz [ 330.767224][ T5225] usb 4-1: SerialNumber: syz [ 330.797887][ T5225] usb 4-1: config 0 descriptor?? [ 331.024518][ T5225] kaweth 4-1:0.123: Firmware present in device. [ 331.381541][ T5225] kaweth 4-1:0.123: Error reading configuration (-32), no net device created [ 331.391173][ T5225] kaweth 4-1:0.123: probe with driver kaweth failed with error -5 [ 331.427142][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.440238][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.633571][ T5225] kaweth 4-1:0.20: Firmware present in device. [ 333.625222][ T5225] kaweth 4-1:0.20: Error reading configuration (-71), no net device created [ 333.634258][ T5225] kaweth 4-1:0.20: probe with driver kaweth failed with error -5 [ 333.965906][ T5225] usb 4-1: USB disconnect, device number 5 [ 334.394642][ T5726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.423239][ T5726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.260416][ T5726] bond0 (unregistering): Released all slaves [ 335.386227][ T5215] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 335.565823][ T5215] usb 1-1: Using ep0 maxpacket: 32 [ 335.665206][ T5215] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 335.688482][ T5215] usb 1-1: config 0 has no interface number 0 [ 335.708649][ T5215] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 335.725660][ T5215] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 335.742034][ T5215] usb 1-1: config 0 interface 126 has no altsetting 0 [ 335.769389][ T5215] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 335.811517][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.826740][ T5215] usb 1-1: Product: syz [ 335.831185][ T5215] usb 1-1: Manufacturer: syz [ 335.840196][ T5215] usb 1-1: SerialNumber: syz [ 335.849896][ T5215] usb 1-1: config 0 descriptor?? [ 335.864779][ T6511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.881424][ T6511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.924349][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.181340][ T5726] hsr_slave_0: left promiscuous mode [ 336.198647][ T5726] hsr_slave_1: left promiscuous mode [ 336.211848][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.220660][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.249970][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.270842][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.358966][ T5726] veth1_macvtap: left promiscuous mode [ 336.374915][ T5726] veth0_macvtap: left promiscuous mode [ 336.404604][ T5726] veth1_vlan: left promiscuous mode [ 336.425495][ T5726] veth0_vlan: left promiscuous mode [ 337.547392][ T5215] ir_usb 1-1:0.126: IR Dongle converter detected [ 337.555314][ T5215] usb 1-1: IRDA class descriptor not found, device not bound [ 338.173026][ T5215] usb 1-1: USB disconnect, device number 6 [ 341.911920][ T5726] team0 (unregistering): Port device team_slave_1 removed [ 341.989995][ T5726] team0 (unregistering): Port device team_slave_0 removed [ 343.440718][ T6120] veth0_vlan: entered promiscuous mode [ 343.602488][ T6120] veth1_vlan: entered promiscuous mode [ 343.727685][ T6208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.072026][ T6208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.207700][ T6208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.542600][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 345.482443][ T6208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.706739][ T6595] overlayfs: missing 'lowerdir' [ 345.724539][ T6120] veth0_macvtap: entered promiscuous mode [ 345.737396][ T6120] veth1_macvtap: entered promiscuous mode [ 345.750295][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.760898][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.770895][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.781996][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.792035][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.803193][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.816554][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.864368][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.882446][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.908805][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.919843][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.931170][ T6120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.941759][ T6120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.954825][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.016073][ T6120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.028990][ T6120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.059948][ T6120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.074012][ T6120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.211273][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.224444][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.241654][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.330518][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.339320][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.358125][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.395482][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.402690][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.449834][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.457088][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.633115][ T6612] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 347.225867][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.268994][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 347.366215][ T6208] veth0_vlan: entered promiscuous mode [ 347.394943][ T6208] veth1_vlan: entered promiscuous mode [ 347.469518][ T6208] veth0_macvtap: entered promiscuous mode [ 347.545181][ T5543] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 347.559544][ T6208] veth1_macvtap: entered promiscuous mode [ 347.602085][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.634183][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.665130][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.695871][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.718244][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.719686][ T5543] usb 5-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.740976][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.748201][ T5543] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.765788][ T5543] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.776647][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.795119][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.797323][ T5543] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.806836][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.881517][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.914470][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.959528][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.014112][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.055965][ T5543] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 348.065813][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.077111][ T5543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.085322][ T5543] usb 5-1: Product: syz [ 348.089520][ T5543] usb 5-1: Manufacturer: syz [ 348.092340][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.094119][ T5543] usb 5-1: SerialNumber: syz [ 348.116480][ T5543] usb 5-1: config 0 descriptor?? [ 348.121273][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.122232][ T6631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 348.147719][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.170272][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.190268][ T5543] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 348.205811][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 348.234889][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 348.243543][ T6208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.256700][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 348.264443][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 348.280684][ T6208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.293451][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 348.305118][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 348.310046][ T6208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.312831][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 348.341121][ T6208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.371337][ T5543] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 348.409227][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 348.429255][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 348.459219][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 348.490076][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 348.525644][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 348.546161][ T5543] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 348.557947][ T5726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.579838][ T5726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.596002][ T5543] usb 5-1: USB disconnect, device number 6 [ 348.656921][ T5543] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 348.710315][ T5543] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 348.721074][ T2554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.730102][ T2554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.739536][ T5543] keyspan 5-1:0.0: device disconnected [ 350.297737][ T6654] syz_tun: entered promiscuous mode [ 350.325587][ T6654] macsec1: entered allmulticast mode [ 350.344750][ T6654] syz_tun: entered allmulticast mode [ 350.373407][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 350.383226][ T6654] syz_tun: left allmulticast mode [ 350.389432][ T6654] syz_tun: left promiscuous mode [ 350.587658][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 350.594680][ T25] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 350.603911][ T25] usb 5-1: config 0 has no interface number 0 [ 350.611361][ T25] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 350.663127][ T25] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 350.684526][ T25] usb 5-1: config 0 interface 126 has no altsetting 0 [ 350.735309][ T25] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 350.744652][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.752811][ T25] usb 5-1: Product: syz [ 350.757116][ T25] usb 5-1: Manufacturer: syz [ 350.761752][ T25] usb 5-1: SerialNumber: syz [ 350.787372][ T25] usb 5-1: config 0 descriptor?? [ 350.795205][ T6648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 350.802735][ T6648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 351.628795][ T25] ir_usb 5-1:0.126: IR Dongle converter detected [ 351.638687][ T25] usb 5-1: IRDA class descriptor not found, device not bound [ 351.657448][ T25] usb 5-1: USB disconnect, device number 7 [ 357.967664][ T5298] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 358.138811][ T5298] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 358.156269][ T5298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.185197][ T5298] usb 5-1: config 0 has no interface number 0 [ 358.204788][ T5298] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 358.218951][ T5298] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.268799][ T5298] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 358.298497][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.307259][ T5543] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 358.333986][ T5298] usb 5-1: Product: syz [ 358.338608][ T5298] usb 5-1: Manufacturer: syz [ 358.343548][ T5298] usb 5-1: SerialNumber: syz [ 358.350824][ T5298] usb 5-1: config 0 descriptor?? [ 358.955589][ T5543] usb 4-1: Using ep0 maxpacket: 32 [ 358.963458][ T5543] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 358.975674][ T5298] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 358.996673][ T5543] usb 4-1: config 0 has no interface number 0 [ 359.002836][ T5543] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 359.610393][ T5298] usb 5-1: USB disconnect, device number 8 [ 359.647588][ T5543] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 359.700867][ T5543] usb 4-1: config 0 interface 126 has no altsetting 0 [ 359.750019][ T6790] syz_tun: entered promiscuous mode [ 359.772259][ T6790] macsec1: entered allmulticast mode [ 359.786626][ T6790] syz_tun: entered allmulticast mode [ 359.812319][ T6790] syz_tun: left allmulticast mode [ 359.832062][ T6790] syz_tun: left promiscuous mode [ 359.945962][ T5543] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 359.955320][ T5543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.963358][ T5543] usb 4-1: Product: syz [ 359.970348][ T5543] usb 4-1: Manufacturer: syz [ 359.974987][ T5543] usb 4-1: SerialNumber: syz [ 360.021382][ T5543] usb 4-1: config 0 descriptor?? [ 360.027680][ T6766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 360.037924][ T6766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 361.013383][ T6811] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.253'. [ 361.412391][ T5543] ir_usb 4-1:0.126: IR Dongle converter detected [ 361.421340][ T5543] usb 4-1: IRDA class descriptor not found, device not bound [ 361.467467][ T5543] usb 4-1: USB disconnect, device number 6 [ 363.539499][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 363.735204][ T6845] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 363.753619][ T6845] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.266'. [ 363.790132][ T6845] netlink: 11 bytes leftover after parsing attributes in process `syz.4.266'. [ 363.851139][ T5543] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 364.007859][ T5543] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 95, using maximum allowed: 30 [ 364.038835][ T5543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 364.096293][ T5543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49784, setting to 1024 [ 364.130505][ T5543] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 95 [ 364.175444][ T5543] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 364.184879][ T5543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.226066][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 364.233947][ T5543] usb 4-1: config 0 descriptor?? [ 364.435221][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 364.454230][ T6858] syz_tun: entered promiscuous mode [ 364.455567][ T46] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 364.467978][ T46] usb 5-1: config 0 has no interface number 0 [ 364.469989][ T6858] macsec1: entered allmulticast mode [ 364.474122][ T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 364.490162][ T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 364.500881][ T46] usb 5-1: config 0 interface 126 has no altsetting 0 [ 364.512986][ T6858] syz_tun: entered allmulticast mode [ 364.523299][ T46] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 364.532649][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.540763][ T46] usb 5-1: Product: syz [ 364.544967][ T46] usb 5-1: Manufacturer: syz [ 364.550335][ T46] usb 5-1: SerialNumber: syz [ 364.567472][ T46] usb 5-1: config 0 descriptor?? [ 364.581333][ T6852] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 364.598986][ T6852] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 364.670394][ T6858] syz_tun: left allmulticast mode [ 364.677193][ T6858] syz_tun: left promiscuous mode [ 365.089329][ T46] ir_usb 5-1:0.126: IR Dongle converter detected [ 365.240744][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.257328][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.341770][ T46] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 365.586007][ T46] usb 5-1: USB disconnect, device number 9 [ 365.598520][ T46] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 365.621009][ T46] ir_usb 5-1:0.126: device disconnected [ 366.624210][ T5215] usb 4-1: USB disconnect, device number 7 [ 366.776745][ T6884] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 366.795102][ T6884] netlink: 9380 bytes leftover after parsing attributes in process `syz.3.279'. [ 366.823057][ T6884] netlink: 11 bytes leftover after parsing attributes in process `syz.3.279'. [ 366.876154][ T29] audit: type=1326 audit(1727064734.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 366.952027][ T29] audit: type=1326 audit(1727064734.146:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 367.037286][ T29] audit: type=1326 audit(1727064734.146:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 367.126124][ T29] audit: type=1326 audit(1727064734.146:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 367.282964][ T29] audit: type=1326 audit(1727064734.146:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 367.894712][ T6899] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 368.085182][ T29] audit: type=1326 audit(1727064734.146:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 368.125183][ T29] audit: type=1326 audit(1727064734.146:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 368.373404][ T29] audit: type=1326 audit(1727064734.146:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 368.407030][ T29] audit: type=1326 audit(1727064734.146:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 368.457728][ T6899] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.489476][ T29] audit: type=1326 audit(1727064734.146:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 369.287499][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 370.245249][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 370.364071][ T46] usb 5-1: device descriptor read/all, error -71 [ 370.473456][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 370.649733][ T5223] Bluetooth: hci5: command 0x0406 tx timeout [ 370.748179][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 95, using maximum allowed: 30 [ 370.765443][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 370.805286][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49784, setting to 1024 [ 370.818558][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 95 [ 370.831938][ T8] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 370.841282][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.856124][ T8] usb 3-1: config 0 descriptor?? [ 371.310460][ T6923] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 371.416777][ T6923] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.293'. [ 371.440125][ T6923] netlink: 11 bytes leftover after parsing attributes in process `syz.4.293'. [ 371.487445][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.499339][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.509523][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.518730][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.527631][ T5223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 371.535278][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.052240][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.118426][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 372.125779][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.166711][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 372.177664][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 372.177684][ T29] audit: type=1326 audit(1727064739.476:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.284566][ T29] audit: type=1326 audit(1727064739.546:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.329034][ T29] audit: type=1326 audit(1727064739.546:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.352113][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 372.362045][ T46] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 372.370786][ T29] audit: type=1326 audit(1727064739.556:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.375201][ T46] usb 5-1: config 0 has no interface number 0 [ 372.400369][ T29] audit: type=1326 audit(1727064739.556:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.445338][ T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 372.465181][ T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 372.477502][ T46] usb 5-1: config 0 interface 126 has no altsetting 0 [ 372.491448][ T29] audit: type=1326 audit(1727064739.566:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.492150][ T46] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 372.512778][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.538619][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.548135][ T46] usb 5-1: Product: syz [ 372.552444][ T46] usb 5-1: Manufacturer: syz [ 372.557839][ T46] usb 5-1: SerialNumber: syz [ 372.570998][ T46] usb 5-1: config 0 descriptor?? [ 372.580690][ T6932] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 372.588145][ T6932] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 372.596755][ T29] audit: type=1326 audit(1727064739.576:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.628337][ T29] audit: type=1326 audit(1727064739.576:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.740174][ T29] audit: type=1326 audit(1727064739.576:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.761546][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.872159][ T29] audit: type=1326 audit(1727064739.576:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.1.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d677def9 code=0x7ffc0000 [ 372.893572][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.958145][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.965739][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.980813][ T6926] bridge_slave_0: entered allmulticast mode [ 373.101961][ T6926] bridge_slave_0: entered promiscuous mode [ 373.149244][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.173454][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.202855][ T6926] bridge_slave_1: entered allmulticast mode [ 373.222347][ T6926] bridge_slave_1: entered promiscuous mode [ 373.258855][ T46] ir_usb 5-1:0.126: IR Dongle converter detected [ 373.269115][ T46] usb 5-1: IRDA class descriptor not found, device not bound [ 373.293579][ T8] usb 3-1: USB disconnect, device number 3 [ 373.368966][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.419687][ T46] usb 5-1: USB disconnect, device number 12 [ 373.425449][ T5225] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.468060][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.511826][ T6950] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 373.559393][ T6950] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 373.598476][ T5223] Bluetooth: hci2: command tx timeout [ 373.660981][ T6952] syz_tun: entered promiscuous mode [ 373.682697][ T6952] macsec1: entered allmulticast mode [ 373.712880][ T6952] syz_tun: entered allmulticast mode [ 373.747409][ T6952] syz_tun: left allmulticast mode [ 373.753014][ T5225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.789577][ T6952] syz_tun: left promiscuous mode [ 373.804340][ T5225] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.823073][ T5225] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 373.851747][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.890786][ T5225] usb 2-1: config 0 descriptor?? [ 374.029104][ T6926] team0: Port device team_slave_0 added [ 374.041131][ T6926] team0: Port device team_slave_1 added [ 374.119780][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.318102][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.336354][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.363015][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.177044][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.184045][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.210007][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.217269][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.305703][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.327085][ T5215] usb 2-1: USB disconnect, device number 6 [ 375.492706][ T6926] hsr_slave_0: entered promiscuous mode [ 375.511135][ T6926] hsr_slave_1: entered promiscuous mode [ 375.519352][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.533793][ T6926] Cannot create hsr debugfs directory [ 375.562725][ T6967] syz_tun: entered promiscuous mode [ 375.569295][ T6967] macsec1: entered allmulticast mode [ 375.574742][ T6967] syz_tun: entered allmulticast mode [ 375.583165][ T6967] syz_tun: left allmulticast mode [ 375.588736][ T6967] syz_tun: left promiscuous mode [ 375.676400][ T5229] Bluetooth: hci2: command tx timeout [ 375.761743][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.798201][ T5215] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 375.995324][ T5215] usb 2-1: Using ep0 maxpacket: 32 [ 376.003432][ T5215] usb 2-1: config 0 has an invalid interface number: 123 but max is 1 [ 376.022254][ T5215] usb 2-1: config 0 has an invalid interface number: 20 but max is 1 [ 376.053949][ T5215] usb 2-1: config 0 has no interface number 0 [ 376.061261][ T5215] usb 2-1: config 0 has no interface number 1 [ 376.071383][ T5215] usb 2-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 376.080897][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.083162][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.089036][ T5215] usb 2-1: Product: syz [ 376.089059][ T5215] usb 2-1: Manufacturer: syz [ 376.089079][ T5215] usb 2-1: SerialNumber: syz [ 376.115280][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 376.285620][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 95, using maximum allowed: 30 [ 376.308835][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 376.409490][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49784, setting to 1024 [ 376.482787][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 95 [ 376.611537][ T46] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 376.709518][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.854509][ T5215] usb 2-1: config 0 descriptor?? [ 376.856624][ T46] usb 3-1: config 0 descriptor?? [ 376.860241][ T5215] usb 2-1: can't set config #0, error -71 [ 376.954327][ T5215] usb 2-1: USB disconnect, device number 7 [ 377.014898][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.060154][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 377.125784][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.325191][ T5543] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 378.254919][ T5215] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 378.278938][ T5229] Bluetooth: hci2: command tx timeout [ 378.376705][ T5543] usb 5-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.382915][ T62] bridge_slave_1: left allmulticast mode [ 378.393315][ T5543] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.394069][ T62] bridge_slave_1: left promiscuous mode [ 378.406202][ T5543] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 378.411045][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.424635][ T5543] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.439684][ T5543] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 378.450989][ T5543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.459921][ T62] bridge_slave_0: left allmulticast mode [ 378.465752][ T5215] usb 2-1: Using ep0 maxpacket: 32 [ 378.466428][ T5543] usb 5-1: Product: syz [ 378.471451][ T62] bridge_slave_0: left promiscuous mode [ 378.477883][ T5543] usb 5-1: Manufacturer: syz [ 378.485303][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.487396][ T5543] usb 5-1: SerialNumber: syz [ 378.500179][ T5215] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 378.509592][ T5215] usb 2-1: config 0 has no interface number 0 [ 378.510812][ T5543] usb 5-1: config 0 descriptor?? [ 378.523541][ T5215] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 378.534773][ T6985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 378.542500][ T5215] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 378.552739][ T5215] usb 2-1: config 0 interface 126 has no altsetting 0 [ 378.563162][ T5215] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 378.569699][ T5543] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 378.573411][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.590370][ T5215] usb 2-1: Product: syz [ 378.591543][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 378.594638][ T5215] usb 2-1: Manufacturer: syz [ 378.594661][ T5215] usb 2-1: SerialNumber: syz [ 378.616803][ T5215] usb 2-1: config 0 descriptor?? [ 378.623197][ T6984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.630583][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 378.638555][ T6984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.657021][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 378.665700][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 378.674696][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 378.690640][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 378.699147][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 378.720708][ T5543] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 378.730046][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 378.738137][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 378.746382][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 378.753990][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 378.763075][ T5543] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 378.788588][ T5543] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 378.802554][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810362][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.829853][ T5543] usb 5-1: USB disconnect, device number 13 [ 378.852714][ T5543] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 378.888623][ T5543] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 378.899263][ T5543] keyspan 5-1:0.0: device disconnected [ 378.917820][ T5298] usb 3-1: USB disconnect, device number 4 [ 379.300315][ T5215] ir_usb 2-1:0.126: IR Dongle converter detected [ 379.311749][ T5215] usb 2-1: IRDA class descriptor not found, device not bound [ 379.335138][ T5215] usb 2-1: USB disconnect, device number 8 [ 379.448920][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.463290][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.483870][ T62] bond0 (unregistering): Released all slaves [ 380.316159][ T5223] Bluetooth: hci2: command tx timeout [ 380.683556][ T7010] syz_tun: entered promiscuous mode [ 380.693043][ T7010] macsec1: entered allmulticast mode [ 380.698645][ T7010] syz_tun: entered allmulticast mode [ 380.998074][ T5223] Bluetooth: hci3: command 0x0406 tx timeout [ 381.168768][ T7010] syz_tun: left allmulticast mode [ 381.202659][ T7010] syz_tun: left promiscuous mode [ 381.491083][ T7018] syz_tun: entered promiscuous mode [ 381.529378][ T7018] macsec1: entered allmulticast mode [ 381.534740][ T7018] syz_tun: entered allmulticast mode [ 381.585549][ T7018] syz_tun: left allmulticast mode [ 381.592717][ T7018] syz_tun: left promiscuous mode [ 381.885713][ T62] hsr_slave_0: left promiscuous mode [ 382.735183][ T62] hsr_slave_1: left promiscuous mode [ 382.868388][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.875950][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.894513][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.905167][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.932040][ T62] veth1_macvtap: left promiscuous mode [ 382.939139][ T62] veth0_macvtap: left promiscuous mode [ 382.944824][ T62] veth1_vlan: left promiscuous mode [ 382.950317][ T62] veth0_vlan: left promiscuous mode [ 383.143066][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 383.155614][ T5225] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 383.300714][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 383.313861][ T25] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 383.315185][ T5225] usb 2-1: Using ep0 maxpacket: 16 [ 383.326009][ T25] usb 3-1: config 0 has no interface number 0 [ 383.341510][ T5225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.347835][ T25] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 383.354427][ T5225] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 383.369937][ T25] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 383.400925][ T5225] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 383.422458][ T25] usb 3-1: config 0 interface 126 has no altsetting 0 [ 383.422753][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.450810][ T25] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 383.461552][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.467901][ T5225] usb 2-1: config 0 descriptor?? [ 383.476007][ T25] usb 3-1: Product: syz [ 383.480217][ T25] usb 3-1: Manufacturer: syz [ 383.484848][ T25] usb 3-1: SerialNumber: syz [ 383.557079][ T25] usb 3-1: config 0 descriptor?? [ 383.571903][ T7051] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 383.585378][ T7051] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 383.884051][ T62] team0 (unregistering): Port device team_slave_1 removed [ 383.979809][ T62] team0 (unregistering): Port device team_slave_0 removed [ 384.025172][ T25] ir_usb 3-1:0.126: IR Dongle converter detected [ 384.108975][ T5225] usbhid 2-1:0.0: can't add hid device: -71 [ 384.120988][ T5225] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 384.133654][ T5225] usb 2-1: USB disconnect, device number 9 [ 384.222973][ T25] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 384.449666][ T25] usb 3-1: USB disconnect, device number 5 [ 384.477845][ T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 384.496474][ T25] ir_usb 3-1:0.126: device disconnected [ 384.669398][ T6926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.700088][ T6926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.746708][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.331'. [ 384.803285][ T6926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.866448][ T6926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.179665][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 385.213072][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 385.934514][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.038287][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.236572][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.243805][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.321636][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.328895][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.204968][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.342'. [ 387.233439][ T7103] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 387.762352][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.836071][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 387.888253][ T6926] veth0_vlan: entered promiscuous mode [ 387.911788][ T6926] veth1_vlan: entered promiscuous mode [ 388.229040][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.231803][ T6926] veth0_macvtap: entered promiscuous mode [ 388.387434][ T8] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 388.648052][ T6926] veth1_macvtap: entered promiscuous mode [ 388.655141][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.663265][ T8] usb 5-1: Product: syz [ 388.683810][ T8] usb 5-1: Manufacturer: syz [ 388.697321][ T8] usb 5-1: SerialNumber: syz [ 388.724826][ T8] usb 5-1: config 0 descriptor?? [ 388.747173][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.758660][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.780972][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.805285][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.847484][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.857512][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.868105][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.878117][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.888626][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.899936][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.909909][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.921022][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.931831][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.942369][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.952587][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.964702][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.982544][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.988333][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.993507][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.012490][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.023835][ T6926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.086258][ T6926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.095388][ T6926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.105172][ T6926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.266609][ T8] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 389.301053][ T8] usb 5-1: USB disconnect, device number 14 [ 389.321307][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.454791][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.471932][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.509306][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.545431][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.649332][ T7139] syzkaller0: entered allmulticast mode [ 389.673148][ T7139] syzkaller0 (unregistering): left allmulticast mode [ 389.915376][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 390.020540][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'. [ 390.085901][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 390.115641][ T25] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 390.145589][ T25] usb 1-1: config 0 has no interface number 0 [ 390.152758][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 390.173734][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 390.214878][ T25] usb 1-1: config 0 interface 126 has no altsetting 0 [ 390.236437][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 390.295991][ T25] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 390.320241][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.335091][ T25] usb 1-1: Product: syz [ 390.339345][ T25] usb 1-1: Manufacturer: syz [ 390.344323][ T25] usb 1-1: SerialNumber: syz [ 390.366116][ T25] usb 1-1: config 0 descriptor?? [ 390.372361][ T7141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.430985][ T7141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.767473][ T25] ir_usb 1-1:0.126: IR Dongle converter detected [ 392.308340][ T25] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 392.345350][ T25] usb 1-1: USB disconnect, device number 7 [ 392.401048][ T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 392.415925][ T25] ir_usb 1-1:0.126: device disconnected [ 392.595381][ T5222] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 392.786740][ T5222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.808103][ T5222] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 392.838796][ T5222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.903407][ T5222] usb 2-1: Product: syz [ 392.924542][ T5222] usb 2-1: Manufacturer: syz [ 392.941910][ T5222] usb 2-1: SerialNumber: syz [ 392.975228][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 392.998037][ T5222] usb 2-1: config 0 descriptor?? [ 393.009430][ T5222] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.223426][ T7169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.442889][ T5222] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 393.487670][ T5222] usb 2-1: USB disconnect, device number 10 [ 393.510667][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.506502][ T7278] trusted_key: syz.3.405 sent an empty control message without MSG_MORE. [ 400.308043][ T7308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.417'. [ 400.327641][ T7308] netlink: 'syz.4.417': attribute type 10 has an invalid length. [ 400.372098][ T7308] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 400.975346][ T5543] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 401.197175][ T5543] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.233437][ T5543] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.260310][ T5543] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.315360][ T5543] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.347097][ T5543] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.381959][ T5543] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.399154][ T5543] usb 5-1: Product: syz [ 401.416867][ T5543] usb 5-1: Manufacturer: syz [ 401.431721][ T5543] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 402.185825][ T5225] usb 5-1: USB disconnect, device number 15 [ 403.036442][ T5225] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 403.149417][ T7341] team_slave_0: entered promiscuous mode [ 403.155515][ T7341] team_slave_1: entered promiscuous mode [ 403.171369][ T7341] macvtap1: entered promiscuous mode [ 403.177244][ T7341] team0: entered promiscuous mode [ 403.184249][ T7341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.247659][ T5225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.313570][ T5225] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 403.374084][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.457892][ T5225] usb 1-1: Product: syz [ 403.485227][ T5225] usb 1-1: Manufacturer: syz [ 403.489894][ T5225] usb 1-1: SerialNumber: syz [ 403.503724][ T7346] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 403.503789][ T5225] usb 1-1: config 0 descriptor?? [ 403.529144][ T7346] netlink: 9380 bytes leftover after parsing attributes in process `syz.2.432'. [ 403.529948][ T5225] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.551834][ T7346] netlink: 11 bytes leftover after parsing attributes in process `syz.2.432'. [ 403.767303][ T7339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.858153][ T5225] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 404.125184][ T5225] usb 1-1: USB disconnect, device number 8 [ 404.202461][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.170035][ T7383] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 406.188831][ T7383] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.445'. [ 406.241934][ T7383] netlink: 11 bytes leftover after parsing attributes in process `syz.0.445'. [ 406.562437][ T7390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.448'. [ 406.591146][ T7390] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 406.640325][ T7390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 407.235264][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 407.529921][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.625892][ T8] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 407.644705][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.817373][ T8] usb 1-1: Product: syz [ 407.951245][ T8] usb 1-1: Manufacturer: syz [ 407.969818][ T8] usb 1-1: SerialNumber: syz [ 407.991972][ T8] usb 1-1: config 0 descriptor?? [ 408.020817][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.218365][ T7394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.354948][ T8] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 408.429491][ T8] usb 1-1: USB disconnect, device number 9 [ 408.630075][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.071789][ T7424] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 410.124656][ T7424] netlink: 9380 bytes leftover after parsing attributes in process `syz.2.458'. [ 410.162342][ T7424] netlink: 11 bytes leftover after parsing attributes in process `syz.2.458'. [ 410.817567][ T7430] overlayfs: overlapping lowerdir path [ 413.155540][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.182695][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.214526][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.491647][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.505646][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.513060][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.048461][ T7461] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 414.096952][ T7461] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.471'. [ 414.145217][ T7461] netlink: 11 bytes leftover after parsing attributes in process `syz.0.471'. [ 414.354385][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 414.545773][ T5298] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 414.553545][ T5543] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 415.431756][ T5543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.443967][ T5298] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.459973][ T5298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.475311][ T5543] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 415.484393][ T5543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.495345][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.642977][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.651332][ T7449] bridge_slave_0: entered allmulticast mode [ 415.658631][ T7449] bridge_slave_0: entered promiscuous mode [ 415.668580][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.675970][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.683704][ T5298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.684004][ T7449] bridge_slave_1: entered allmulticast mode [ 415.695107][ T5543] usb 4-1: Product: syz [ 415.700145][ T7449] bridge_slave_1: entered promiscuous mode [ 415.709775][ T5543] usb 4-1: Manufacturer: syz [ 415.714924][ T5298] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.729354][ T5543] usb 4-1: SerialNumber: syz [ 415.781507][ T5543] usb 4-1: config 0 descriptor?? [ 415.788624][ T7487] overlayfs: overlapping lowerdir path [ 415.813477][ T5298] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.820345][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.843716][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.867991][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.868846][ T5543] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 415.894461][ T5298] usb 5-1: Product: syz [ 415.909627][ T5298] usb 5-1: Manufacturer: syz [ 415.957847][ T5298] cdc_wdm 5-1:1.0: skipping garbage [ 415.963683][ T5298] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 416.044796][ T7463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.048137][ T7449] team0: Port device team_slave_0 added [ 416.116905][ T7449] team0: Port device team_slave_1 added [ 416.173222][ T5543] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 416.214908][ T5543] usb 4-1: USB disconnect, device number 8 [ 416.222072][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.432095][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.464106][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.544484][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.572526][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.589953][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.635294][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 416.643011][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.685211][ T8] usb 5-1: USB disconnect, device number 16 [ 416.939489][ T7449] hsr_slave_0: entered promiscuous mode [ 416.974499][ T7449] hsr_slave_1: entered promiscuous mode [ 417.049729][ T7496] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 417.083651][ T7496] netlink: 9380 bytes leftover after parsing attributes in process `syz.2.482'. [ 417.129484][ T7496] netlink: 11 bytes leftover after parsing attributes in process `syz.2.482'. [ 417.515759][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.819991][ T7509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.486'. [ 417.829681][ T7509] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 419.083939][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.298172][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.463002][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.061948][ T62] bridge_slave_1: left allmulticast mode [ 420.072687][ T62] bridge_slave_1: left promiscuous mode [ 420.078856][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.127128][ T62] bridge_slave_0: left allmulticast mode [ 420.132811][ T62] bridge_slave_0: left promiscuous mode [ 420.155161][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 420.168994][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.231431][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 420.353370][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.372371][ T25] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 420.403141][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.437053][ T25] usb 5-1: Product: syz [ 420.447047][ T25] usb 5-1: Manufacturer: syz [ 420.451829][ T25] usb 5-1: SerialNumber: syz [ 420.623502][ T25] usb 5-1: config 0 descriptor?? [ 420.656562][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.157682][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.471384][ T25] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 421.508252][ T25] usb 5-1: USB disconnect, device number 17 [ 421.544058][ T7533] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 421.551707][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.614905][ T7533] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.494'. [ 421.678162][ T7533] netlink: 11 bytes leftover after parsing attributes in process `syz.0.494'. [ 423.148685][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.171355][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.431799][ T7545] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.498'. [ 423.441577][ T7545] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 424.284906][ T62] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 424.294472][ T62] bond0 (unregistering): Released all slaves [ 428.073444][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.099189][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.127252][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.157851][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.173211][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.180996][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.471305][ T62] hsr_slave_0: left promiscuous mode [ 428.532622][ T62] hsr_slave_1: left promiscuous mode [ 428.572496][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.749514][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.855164][ T7592] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.509'. [ 428.865957][ T7592] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 428.929143][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.387597][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.424368][ T62] veth1_macvtap: left promiscuous mode [ 429.430876][ T62] veth0_macvtap: left promiscuous mode [ 429.437183][ T62] veth1_vlan: left promiscuous mode [ 429.442676][ T62] veth0_vlan: left promiscuous mode [ 430.623935][ T5223] Bluetooth: hci4: command tx timeout [ 430.915190][ T938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 431.065323][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 431.082817][ T938] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 431.096892][ T938] usb 1-1: config 0 has no interface number 0 [ 431.103129][ T938] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 431.133859][ T938] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 431.150235][ T938] usb 1-1: config 0 interface 126 has no altsetting 0 [ 431.180601][ T938] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 431.205285][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.224366][ T938] usb 1-1: Product: syz [ 431.238107][ T938] usb 1-1: Manufacturer: syz [ 431.255750][ T938] usb 1-1: SerialNumber: syz [ 431.289887][ T938] usb 1-1: config 0 descriptor?? [ 431.308358][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.330315][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.577528][ T62] team0 (unregistering): Port device team_slave_1 removed [ 431.631839][ T62] team0 (unregistering): Port device team_slave_0 removed [ 431.989408][ T938] ir_usb 1-1:0.126: IR Dongle converter detected [ 432.011474][ T938] usb 1-1: IRDA class descriptor not found, device not bound [ 432.042680][ T938] usb 1-1: USB disconnect, device number 10 [ 432.514405][ T7449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 432.546901][ T7449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 432.559643][ T7449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.579330][ T7449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.635133][ T5223] Bluetooth: hci4: command tx timeout [ 434.974550][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 435.150720][ T5223] Bluetooth: hci4: command tx timeout [ 435.189811][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.353282][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.195549][ T5223] Bluetooth: hci4: command tx timeout [ 437.266667][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.273860][ T5663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.726904][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.734048][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.818732][ T7578] bridge_slave_0: entered allmulticast mode [ 437.870157][ T7578] bridge_slave_0: entered promiscuous mode [ 437.917599][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.924792][ T5663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.019167][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.046965][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.075213][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 438.114048][ T7578] bridge_slave_1: entered allmulticast mode [ 438.159067][ T7578] bridge_slave_1: entered promiscuous mode [ 438.288518][ T46] usb 5-1: config 0 has no interfaces? [ 438.296505][ T46] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.350060][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.392121][ T46] usb 5-1: config 0 descriptor?? [ 438.454047][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.593228][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.662922][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.772788][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.837839][ T46] usb 5-1: USB disconnect, device number 18 [ 439.099597][ T7578] team0: Port device team_slave_0 added [ 439.153115][ T7578] team0: Port device team_slave_1 added [ 439.365541][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 439.545310][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 439.566482][ T46] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 439.574713][ T46] usb 5-1: config 0 has no interface number 0 [ 439.643573][ T46] usb 5-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 439.675835][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.735109][ T46] usb 5-1: Product: syz [ 439.739337][ T46] usb 5-1: Manufacturer: syz [ 439.746934][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.753917][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.809506][ T46] usb 5-1: SerialNumber: syz [ 439.837740][ T46] usb 5-1: config 0 descriptor?? [ 439.927233][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.992493][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.022882][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.089340][ T46] kaweth 5-1:0.123: Firmware present in device. [ 440.105730][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 440.128913][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.168378][ T7656] ip6gretap0: entered promiscuous mode [ 440.175021][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.184291][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.201755][ T7656] macsec1: entered allmulticast mode [ 440.213099][ T7656] ip6gretap0: entered allmulticast mode [ 440.267723][ T46] kaweth 5-1:0.123: Error reading configuration (-32), no net device created [ 440.310510][ T46] kaweth 5-1:0.123: probe with driver kaweth failed with error -5 [ 440.320390][ T25] usb 3-1: config 0 has no interfaces? [ 440.327122][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 440.382903][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.446436][ T25] usb 3-1: config 0 descriptor?? [ 440.574367][ T7578] hsr_slave_0: entered promiscuous mode [ 440.652799][ T7578] hsr_slave_1: entered promiscuous mode [ 440.686127][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.723421][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.742431][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.766779][ T7578] Cannot create hsr debugfs directory [ 440.786389][ T25] usb 3-1: USB disconnect, device number 6 [ 440.865013][ C0] sched: DL replenish lagged too much [ 441.305398][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 441.344863][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.367243][ T46] usb 5-1: USB disconnect, device number 19 [ 441.495284][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 441.508004][ T25] usb 3-1: config 0 has an invalid interface number: 123 but max is 1 [ 441.535688][ T25] usb 3-1: config 0 has an invalid interface number: 20 but max is 1 [ 441.564513][ T25] usb 3-1: config 0 has no interface number 0 [ 441.581367][ T25] usb 3-1: config 0 has no interface number 1 [ 441.620127][ T25] usb 3-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 441.683123][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.701773][ T25] usb 3-1: Product: syz [ 441.747781][ T25] usb 3-1: Manufacturer: syz [ 441.752443][ T25] usb 3-1: SerialNumber: syz [ 441.789150][ T25] usb 3-1: config 0 descriptor?? [ 441.902198][ T7578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.032657][ T7449] veth0_vlan: entered promiscuous mode [ 442.063715][ T25] kaweth 3-1:0.123: Firmware present in device. [ 442.090877][ T7449] veth1_vlan: entered promiscuous mode [ 442.229029][ T25] kaweth 3-1:0.123: Error reading configuration (-32), no net device created [ 442.267288][ T25] kaweth 3-1:0.123: probe with driver kaweth failed with error -5 [ 442.277404][ T7449] veth0_macvtap: entered promiscuous mode [ 442.310854][ T7449] veth1_macvtap: entered promiscuous mode [ 442.385298][ T25] kaweth 3-1:0.20: Firmware present in device. [ 442.405854][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.439394][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.480709][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.521844][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.555085][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.568131][ T25] kaweth 3-1:0.20: Error reading configuration (-71), no net device created [ 442.598714][ T25] kaweth 3-1:0.20: probe with driver kaweth failed with error -5 [ 442.608217][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.638195][ T25] usb 3-1: USB disconnect, device number 7 [ 442.670889][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.713126][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.767131][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.821387][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.855062][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.884185][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.924220][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.954428][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.983110][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.011587][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.044408][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.076636][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.122530][ T7449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.142178][ T7449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.172354][ T7449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.193447][ T7449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.457347][ T5669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.495173][ T5669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.874258][ T5728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.897484][ T5728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.699855][ T7578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.737883][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.747787][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.761285][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.769552][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.777803][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.785453][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.830866][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.845459][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.855457][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.874763][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.883232][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.891164][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.011333][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.021538][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.033111][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.041543][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.055873][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 459.063372][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.178261][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 459.194011][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 459.203380][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 459.215410][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 459.226908][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 459.234322][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 460.875819][ T5229] Bluetooth: hci0: command tx timeout [ 460.965543][ T5229] Bluetooth: hci1: command tx timeout [ 461.115189][ T5229] Bluetooth: hci3: command tx timeout [ 461.275430][ T5229] Bluetooth: hci6: command tx timeout [ 462.955331][ T5229] Bluetooth: hci0: command tx timeout [ 463.035619][ T5229] Bluetooth: hci1: command tx timeout [ 463.199981][ T5229] Bluetooth: hci3: command tx timeout [ 463.355089][ T5229] Bluetooth: hci6: command tx timeout [ 465.041145][ T5229] Bluetooth: hci0: command tx timeout [ 465.116100][ T5229] Bluetooth: hci1: command tx timeout [ 465.275219][ T5229] Bluetooth: hci3: command tx timeout [ 465.435162][ T5229] Bluetooth: hci6: command tx timeout [ 467.115321][ T5229] Bluetooth: hci0: command tx timeout [ 467.195375][ T5229] Bluetooth: hci1: command tx timeout [ 467.365310][ T5229] Bluetooth: hci3: command tx timeout [ 467.515263][ T5229] Bluetooth: hci6: command tx timeout [ 489.749890][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.758635][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.766665][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.786715][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.797673][ T5223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.805444][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.835317][ T5229] Bluetooth: hci2: command tx timeout [ 493.921036][ T5229] Bluetooth: hci2: command tx timeout [ 495.995124][ T5229] Bluetooth: hci2: command tx timeout [ 498.075153][ T5229] Bluetooth: hci2: command tx timeout [ 501.603320][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.619952][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.695615][ T7719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.715776][ T7719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.724612][ T7719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.732648][ T7719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.745659][ T7719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 519.752997][ T7719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.820058][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 519.834312][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 519.842857][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 519.851254][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 519.861204][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 519.868610][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 519.919305][ T7719] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 519.928699][ T7719] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 519.940637][ T7719] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 519.955743][ T7719] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 519.965825][ T7719] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 519.973161][ T7719] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 520.105598][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.115679][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.123376][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.132912][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 520.140854][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 520.150555][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.835264][ T5229] Bluetooth: hci5: command tx timeout [ 521.915156][ T5229] Bluetooth: hci7: command tx timeout [ 522.080397][ T5229] Bluetooth: hci8: command tx timeout [ 522.235120][ T5229] Bluetooth: hci9: command tx timeout [ 523.922620][ T5229] Bluetooth: hci5: command tx timeout [ 523.995294][ T5229] Bluetooth: hci7: command tx timeout [ 524.155154][ T5229] Bluetooth: hci8: command tx timeout [ 524.316468][ T5229] Bluetooth: hci9: command tx timeout [ 525.995238][ T5229] Bluetooth: hci5: command tx timeout [ 526.075114][ T5229] Bluetooth: hci7: command tx timeout [ 526.235178][ T5229] Bluetooth: hci8: command tx timeout [ 526.407352][ T5229] Bluetooth: hci9: command tx timeout [ 528.085251][ T5229] Bluetooth: hci5: command tx timeout [ 528.155165][ T5229] Bluetooth: hci7: command tx timeout [ 528.332503][ T5229] Bluetooth: hci8: command tx timeout [ 528.475171][ T5229] Bluetooth: hci9: command tx timeout [ 550.340708][ T7719] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 550.353316][ T7719] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 550.361473][ T7719] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 550.369548][ T7719] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 550.377394][ T7719] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 550.388069][ T7719] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 552.475199][ T7719] Bluetooth: hci10: command tx timeout [ 554.555108][ T7719] Bluetooth: hci10: command tx timeout [ 554.892086][ T7719] Bluetooth: hci4: command 0x0406 tx timeout [ 556.635283][ T5229] Bluetooth: hci10: command tx timeout [ 558.725344][ T5229] Bluetooth: hci10: command tx timeout [ 563.042906][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049390][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.243462][ T7719] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 580.257702][ T7719] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 580.266301][ T7719] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 580.274585][ T7719] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 580.288562][ T7719] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 580.308623][ T7719] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 580.604734][ T5229] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 580.615618][ T5229] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 580.623765][ T5229] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 580.632377][ T5229] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 580.642598][ T5229] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 580.650146][ T5229] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 580.685625][ T5223] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 580.695528][ T5223] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 580.703341][ T5223] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 580.725806][ T5223] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 580.733569][ T5223] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 580.744955][ T5223] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 580.846816][ T5223] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 580.856394][ T5223] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 580.865616][ T5223] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 580.873599][ T5223] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 580.886815][ T5223] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 580.894231][ T5223] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 582.402222][ T5223] Bluetooth: hci11: command tx timeout [ 582.715115][ T5223] Bluetooth: hci12: command tx timeout [ 582.795211][ T5223] Bluetooth: hci13: command tx timeout [ 582.955133][ T5223] Bluetooth: hci14: command tx timeout [ 584.475065][ T7758] Bluetooth: hci11: command tx timeout [ 584.805290][ T7758] Bluetooth: hci12: command tx timeout [ 584.875159][ T7758] Bluetooth: hci13: command tx timeout [ 585.035162][ T7758] Bluetooth: hci14: command tx timeout [ 585.605804][ T7758] Bluetooth: hci1: command 0x0406 tx timeout [ 585.611920][ T7758] Bluetooth: hci0: command 0x0406 tx timeout [ 585.622039][ T7757] Bluetooth: hci6: command 0x0406 tx timeout [ 585.628599][ T7758] Bluetooth: hci3: command 0x0406 tx timeout [ 586.181580][ T7578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.562916][ T7756] Bluetooth: hci11: command tx timeout [ 586.875094][ T7756] Bluetooth: hci12: command tx timeout [ 586.956435][ T7756] Bluetooth: hci13: command tx timeout [ 587.115171][ T7756] Bluetooth: hci14: command tx timeout [ 588.638717][ T7756] Bluetooth: hci11: command tx timeout [ 588.955158][ T7756] Bluetooth: hci12: command tx timeout [ 589.035079][ T7756] Bluetooth: hci13: command tx timeout [ 589.195232][ T7756] Bluetooth: hci14: command tx timeout [ 611.221791][ T7719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.235143][ T7719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.243217][ T7719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.252002][ T7719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.268639][ T7719] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 611.277603][ T7719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.675280][ T30] INFO: task kworker/u8:15:5728 blocked for more than 143 seconds. [ 611.683255][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 611.709179][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 611.723895][ T30] task:kworker/u8:15 state:D stack:19856 pid:5728 tgid:5728 ppid:2 flags:0x00004000 [ 611.748782][ T30] Workqueue: netns cleanup_net [ 611.753673][ T30] Call Trace: [ 611.780040][ T30] [ 611.783052][ T30] __schedule+0x1843/0x4ae0 [ 611.866456][ T30] ? __pfx___schedule+0x10/0x10 [ 611.871414][ T30] ? __pfx_lock_release+0x10/0x10 [ 611.916160][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 611.921727][ T30] ? kthread_data+0x52/0xd0 [ 611.938511][ T30] ? schedule+0x90/0x320 [ 611.942840][ T30] ? wq_worker_sleeping+0x66/0x240 [ 611.957215][ T30] ? schedule+0x90/0x320 [ 611.961542][ T30] schedule+0x14b/0x320 [ 611.973504][ T30] schedule_preempt_disabled+0x13/0x30 [ 611.981795][ T30] __mutex_lock+0x6a7/0xd70 [ 611.990836][ T30] ? __mutex_lock+0x52a/0xd70 [ 612.005450][ T30] ? devlink_pernet_pre_exit+0x13b/0x440 [ 612.011166][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 612.025355][ T30] ? devlinks_xa_find_get+0x2b/0x310 [ 612.030732][ T30] ? devlinks_xa_find_get+0x2ed/0x310 [ 612.043081][ T30] ? devlinks_xa_find_get+0x2b/0x310 [ 612.048760][ T30] devlink_pernet_pre_exit+0x13b/0x440 [ 612.058217][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 612.064274][ T30] ? class_remove_file_ns+0x121/0x160 [ 612.079580][ T30] cleanup_net+0x615/0xcc0 [ 612.084613][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 612.091443][ T30] ? process_scheduled_works+0x976/0x1850 [ 612.103383][ T30] process_scheduled_works+0xa63/0x1850 [ 612.110908][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.122981][ T30] ? assign_work+0x364/0x3d0 [ 612.129122][ T30] worker_thread+0x870/0xd30 [ 612.133773][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 612.144971][ T30] ? __kthread_parkme+0x169/0x1d0 [ 612.150063][ T30] ? __pfx_worker_thread+0x10/0x10 [ 612.164145][ T30] kthread+0x2f0/0x390 [ 612.168608][ T30] ? __pfx_worker_thread+0x10/0x10 [ 612.173773][ T30] ? __pfx_kthread+0x10/0x10 [ 612.187322][ T30] ret_from_fork+0x4b/0x80 [ 612.191799][ T30] ? __pfx_kthread+0x10/0x10 [ 612.203177][ T30] ret_from_fork_asm+0x1a/0x30 [ 612.209554][ T30] [ 612.212726][ T30] [ 612.212726][ T30] Showing all locks held in the system: [ 612.225662][ T30] 1 lock held by khungtaskd/30: [ 612.234708][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 612.252384][ T30] 3 locks held by kworker/u8:3/52: [ 612.259468][ T30] #0: ffff88802e75c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 612.289063][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 612.311273][ T30] #2: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 612.322557][ T30] 2 locks held by getty/4972: [ 612.335020][ T30] #0: ffff88814b7930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 612.344876][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 612.364500][ T30] 6 locks held by kworker/0:4/5222: [ 612.375022][ T30] 3 locks held by kworker/0:5/5225: [ 612.380262][ T30] 3 locks held by kworker/1:6/5298: [ 612.392710][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 612.413089][ T30] #1: ffffc90004697d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 612.424690][ T30] #2: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 612.442756][ T30] 3 locks held by kworker/u8:10/5339: [ 612.449085][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 612.469471][ T30] #1: ffffc90003fb7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 612.482210][ T30] #2: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 612.498385][ T30] 3 locks held by kworker/1:7/5543: [ 612.503628][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 612.520793][ T30] #1: ffffc9000315fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 612.536293][ T30] #2: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 612.553094][ T30] 4 locks held by kworker/u8:15/5728: [ 612.560328][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 612.579823][ T30] #1: ffffc90002f0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 612.593314][ T30] #2: ffffffff8fcaccd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 612.611238][ T30] #3: ffff88802451f0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 612.623152][ T30] 1 lock held by syz-executor/7449: [ 612.634641][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 612.645709][ T30] 7 locks held by syz-executor/7578: [ 612.651036][ T30] #0: ffff8880244e4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 612.666880][ T30] #1: ffff888024a4a488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 612.683714][ T30] #2: ffff888027c30c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 612.694155][ T30] #3: ffffffff8f5571e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 612.714610][ T30] #4: ffff88802451f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 612.732742][ T30] #5: ffff88805e4d0250 (&devlink->lock_key#14){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 612.743540][ T30] #6: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 612.754994][ T30] 2 locks held by syz.0.530/7686: [ 612.760060][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 612.777660][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 612.794796][ T30] 2 locks held by syz-executor/7696: [ 612.812552][ T30] #0: ffffffff8fcaccd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 612.824415][ T30] #1: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 612.841411][ T30] 2 locks held by syz-executor/7698: [ 612.847100][ T30] #0: ffffffff8fcaccd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 612.863638][ T30] #1: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 612.885085][ T30] 1 lock held by syz-executor/7707: [ 612.890350][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 612.914334][ T30] 1 lock held by syz-executor/7716: [ 612.924677][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 612.941823][ T30] 1 lock held by syz-executor/7720: [ 612.947460][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 612.964183][ T30] 1 lock held by syz-executor/7723: [ 612.969901][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 612.985103][ T30] 1 lock held by syz-executor/7728: [ 612.990344][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.006963][ T30] 1 lock held by syz-executor/7736: [ 613.012220][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.029752][ T30] 1 lock held by syz-executor/7746: [ 613.045196][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.054782][ T30] 1 lock held by syz-executor/7750: [ 613.070315][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.090148][ T30] 1 lock held by syz-executor/7751: [ 613.096921][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.112077][ T30] 1 lock held by syz-executor/7754: [ 613.122294][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.134955][ T30] 1 lock held by syz-executor/7766: [ 613.140191][ T30] #0: ffffffff8fcb97c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 613.156734][ T30] [ 613.159098][ T30] ============================================= [ 613.159098][ T30] [ 613.172769][ T30] NMI backtrace for cpu 1 [ 613.177240][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 613.187442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 613.197528][ T30] Call Trace: [ 613.200832][ T30] [ 613.203787][ T30] dump_stack_lvl+0x241/0x360 [ 613.208512][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.213762][ T30] ? __pfx__printk+0x10/0x10 [ 613.218397][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 613.223381][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 613.228873][ T30] ? _printk+0xd5/0x120 [ 613.233064][ T30] ? __pfx__printk+0x10/0x10 [ 613.237685][ T30] ? __wake_up_klogd+0xcc/0x110 [ 613.242623][ T30] ? __pfx__printk+0x10/0x10 [ 613.247344][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 613.252428][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.258452][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 613.264470][ T30] watchdog+0xff4/0x1040 [ 613.268755][ T30] ? watchdog+0x1ea/0x1040 [ 613.273214][ T30] ? __pfx_watchdog+0x10/0x10 [ 613.278019][ T30] kthread+0x2f0/0x390 [ 613.282119][ T30] ? __pfx_watchdog+0x10/0x10 [ 613.286833][ T30] ? __pfx_kthread+0x10/0x10 [ 613.291450][ T30] ret_from_fork+0x4b/0x80 [ 613.295901][ T30] ? __pfx_kthread+0x10/0x10 [ 613.300524][ T30] ret_from_fork_asm+0x1a/0x30 [ 613.305342][ T30] [ 613.309173][ T30] Sending NMI from CPU 1 to CPUs 0: [ 613.314444][ C0] NMI backtrace for cpu 0 [ 613.314458][ C0] CPU: 0 UID: 0 PID: 5222 Comm: kworker/0:4 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 613.314479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 613.314492][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 613.314518][ C0] RIP: 0010:filter_irq_stacks+0x92/0xa0 [ 613.314542][ C0] Code: 8b 48 39 c8 72 11 4c 39 e8 72 bb 48 c7 c1 7b 90 c3 8b 48 39 c8 73 af 41 ff c7 eb 08 45 31 ff eb 03 45 89 e7 44 89 f8 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 [ 613.314564][ C0] RSP: 0018:ffffc90000006d88 EFLAGS: 00000246 [ 613.314579][ C0] RAX: 000000000000001a RBX: 0000000000000001 RCX: dffffc0000000000 [ 613.314592][ C0] RDX: 0000000000000000 RSI: 000000000000001a RDI: ffffc90000006e10 [ 613.314604][ C0] RBP: ffffffff8be00230 R08: 000000000000001b R09: ffffc90000006d70 [ 613.314617][ C0] R10: ffffc90000006cd0 R11: ffffffff81806ca0 R12: ffff88801ac41dc0 [ 613.314631][ C0] R13: ffffffff8bc39060 R14: ffffc90000006e10 R15: 000000000000001a [ 613.314644][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 613.314660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.314673][ C0] CR2: 0000000000000002 CR3: 000000000e734000 CR4: 00000000003526f0 [ 613.314688][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 613.314699][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 613.314710][ C0] Call Trace: [ 613.314717][ C0] [ 613.314724][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 613.314743][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 613.314771][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 613.314788][ C0] ? nmi_handle+0x2a/0x5a0 [ 613.314813][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 613.314836][ C0] ? nmi_handle+0x14f/0x5a0 [ 613.314853][ C0] ? nmi_handle+0x2a/0x5a0 [ 613.314871][ C0] ? filter_irq_stacks+0x92/0xa0 [ 613.314891][ C0] ? default_do_nmi+0x63/0x160 [ 613.314914][ C0] ? exc_nmi+0x123/0x1f0 [ 613.314933][ C0] ? end_repeat_nmi+0xf/0x53 [ 613.314957][ C0] ? __lock_text_end+0x6/0x6 [ 613.314979][ C0] ? xen_error_entry+0x60/0x60 [ 613.314999][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 613.315024][ C0] ? filter_irq_stacks+0x92/0xa0 [ 613.315059][ C0] ? filter_irq_stacks+0x92/0xa0 [ 613.315082][ C0] ? filter_irq_stacks+0x92/0xa0 [ 613.315104][ C0] [ 613.315111][ C0] [ 613.315119][ C0] stack_depot_save_flags+0x29/0x830 [ 613.315162][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 613.315194][ C0] kasan_save_track+0x51/0x80 [ 613.315218][ C0] ? kasan_save_track+0x3f/0x80 [ 613.315241][ C0] ? kasan_save_free_info+0x40/0x50 [ 613.315261][ C0] ? __kasan_slab_free+0x59/0x70 [ 613.315287][ C0] ? kfree+0x1a0/0x440 [ 613.315303][ C0] ? skb_release_data+0x6a0/0x8a0 [ 613.315332][ C0] ? consume_skb+0x9f/0xf0 [ 613.315357][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 613.315381][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 613.315404][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 613.315425][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 613.315446][ C0] ? nf_hook_slow+0xc3/0x220 [ 613.315463][ C0] ? NF_HOOK+0x29e/0x450 [ 613.315488][ C0] ? NF_HOOK+0x3a4/0x450 [ 613.315511][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 613.315527][ C0] ? process_backlog+0x662/0x15b0 [ 613.315545][ C0] ? __napi_poll+0xcb/0x490 [ 613.315561][ C0] ? net_rx_action+0x89b/0x1240 [ 613.315578][ C0] ? handle_softirqs+0x2c5/0x980 [ 613.315599][ C0] ? do_softirq+0x11b/0x1e0 [ 613.315619][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 613.315640][ C0] ? wg_packet_handshake_receive_worker+0x795/0xf50 [ 613.315660][ C0] ? process_scheduled_works+0xa63/0x1850 [ 613.315682][ C0] ? worker_thread+0x870/0xd30 [ 613.315704][ C0] ? kthread+0x2f0/0x390 [ 613.315718][ C0] ? ret_from_fork+0x4b/0x80 [ 613.315742][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 613.315781][ C0] kasan_save_free_info+0x40/0x50 [ 613.315799][ C0] __kasan_slab_free+0x59/0x70 [ 613.315821][ C0] ? skb_release_data+0x6a0/0x8a0 [ 613.315845][ C0] kfree+0x1a0/0x440 [ 613.315859][ C0] ? rcuref_put+0x1e3/0x240 [ 613.315880][ C0] ? skb_release_data+0x6a0/0x8a0 [ 613.315906][ C0] skb_release_data+0x6a0/0x8a0 [ 613.315936][ C0] consume_skb+0x9f/0xf0 [ 613.315959][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 613.315983][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 613.316004][ C0] ? NF_HOOK+0x29e/0x450 [ 613.316030][ C0] ? nf_ip_checksum+0x13a/0x500 [ 613.316053][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 613.316078][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 613.316100][ C0] ? __lock_acquire+0x1384/0x2050 [ 613.316125][ C0] ? __pfx_validate_chain+0x10/0x10 [ 613.316153][ C0] nft_do_chain+0x4ad/0x1da0 [ 613.316182][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 613.316202][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 613.316242][ C0] nft_do_chain_inet+0x418/0x6b0 [ 613.316264][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 613.316284][ C0] ? ipt_do_table+0x312/0x1860 [ 613.316313][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 613.316334][ C0] nf_hook_slow+0xc3/0x220 [ 613.316352][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 613.316378][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 613.316405][ C0] NF_HOOK+0x29e/0x450 [ 613.316431][ C0] ? NF_HOOK+0x9a/0x450 [ 613.316456][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 613.316482][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 613.316511][ C0] ? ip_rcv_finish+0x406/0x560 [ 613.316537][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 613.316562][ C0] NF_HOOK+0x3a4/0x450 [ 613.316591][ C0] ? __lock_acquire+0x1384/0x2050 [ 613.316636][ C0] ? NF_HOOK+0x9a/0x450 [ 613.316661][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 613.316686][ C0] ? ip_rcv_core+0x801/0xd10 [ 613.316713][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 613.316743][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 613.316770][ C0] __netif_receive_skb+0x2bf/0x650 [ 613.316789][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 613.316814][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 613.316832][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 613.316857][ C0] ? __pfx_lock_release+0x10/0x10 [ 613.316883][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 613.316908][ C0] process_backlog+0x662/0x15b0 [ 613.316930][ C0] ? process_backlog+0x33b/0x15b0 [ 613.316953][ C0] ? __pfx_process_backlog+0x10/0x10 [ 613.316971][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 613.316998][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 613.317026][ C0] __napi_poll+0xcb/0x490 [ 613.317045][ C0] net_rx_action+0x89b/0x1240 [ 613.317075][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 613.317094][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 613.317136][ C0] handle_softirqs+0x2c5/0x980 [ 613.317166][ C0] ? do_softirq+0x11b/0x1e0 [ 613.317189][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 613.317216][ C0] do_softirq+0x11b/0x1e0 [ 613.317238][ C0] [ 613.317244][ C0] [ 613.317250][ C0] ? __pfx_do_softirq+0x10/0x10 [ 613.317272][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 613.317296][ C0] ? wg_packet_send_staged_packets+0x33c/0x18c0 [ 613.317318][ C0] ? rcu_is_watching+0x15/0xb0 [ 613.317338][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 613.317360][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 613.317382][ C0] ? wg_packet_handshake_receive_worker+0x661/0xf50 [ 613.317403][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 613.317428][ C0] ? wg_packet_send_keepalive+0x15d/0x2a0 [ 613.317449][ C0] wg_packet_handshake_receive_worker+0x795/0xf50 [ 613.317471][ C0] ? wg_packet_handshake_receive_worker+0x661/0xf50 [ 613.317494][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 613.317521][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 613.317546][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 613.317573][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 613.317604][ C0] ? process_scheduled_works+0x976/0x1850 [ 613.317628][ C0] process_scheduled_works+0xa63/0x1850 [ 613.317666][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.317694][ C0] ? assign_work+0x364/0x3d0 [ 613.317719][ C0] worker_thread+0x870/0xd30 [ 613.317747][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 613.317768][ C0] ? __kthread_parkme+0x169/0x1d0 [ 613.317795][ C0] ? __pfx_worker_thread+0x10/0x10 [ 613.317819][ C0] kthread+0x2f0/0x390 [ 613.317834][ C0] ? __pfx_worker_thread+0x10/0x10 [ 613.317857][ C0] ? __pfx_kthread+0x10/0x10 [ 613.317874][ C0] ret_from_fork+0x4b/0x80 [ 613.317898][ C0] ? __pfx_kthread+0x10/0x10 [ 613.317914][ C0] ret_from_fork_asm+0x1a/0x30 [ 613.317945][ C0] [ 614.177102][ T7719] Bluetooth: hci3: command tx timeout [ 614.205435][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 614.212347][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 614.222561][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 614.232648][ T30] Call Trace: [ 614.235962][ T30] [ 614.238924][ T30] dump_stack_lvl+0x241/0x360 [ 614.243651][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.248890][ T30] ? __pfx__printk+0x10/0x10 [ 614.253512][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 614.259625][ T30] ? vscnprintf+0x5d/0x90 [ 614.264086][ T30] panic+0x349/0x880 [ 614.268017][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 614.274210][ T30] ? __pfx_panic+0x10/0x10 [ 614.278662][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 614.284153][ T30] ? __irq_work_queue_local+0x137/0x410 [ 614.289744][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 614.295159][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 614.301382][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 614.307566][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 614.313770][ T30] watchdog+0x1033/0x1040 [ 614.318162][ T30] ? watchdog+0x1ea/0x1040 [ 614.322631][ T30] ? __pfx_watchdog+0x10/0x10 [ 614.327347][ T30] kthread+0x2f0/0x390 [ 614.331445][ T30] ? __pfx_watchdog+0x10/0x10 [ 614.336157][ T30] ? __pfx_kthread+0x10/0x10 [ 614.340775][ T30] ret_from_fork+0x4b/0x80 [ 614.345228][ T30] ? __pfx_kthread+0x10/0x10 [ 614.349846][ T30] ret_from_fork_asm+0x1a/0x30 [ 614.354676][ T30] [ 614.358092][ T30] Kernel Offset: disabled [ 614.362435][ T30] Rebooting in 86400 seconds..