last executing test programs: 25.860138543s ago: executing program 1 (id=1154): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)=@chain) keyctl$search(0xa, 0x0, &(0x7f0000000280)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x560f, &(0x7f0000001900)={0x2, {0x2, 0x6, 0x0, 0x101, 0x40}}) 24.370742289s ago: executing program 1 (id=1158): unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x764) semctl$IPC_STAT(r0, 0x0, 0x14, 0x0) 23.930962384s ago: executing program 1 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) 23.388029833s ago: executing program 1 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) 22.970413487s ago: executing program 4 (id=1167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x101, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0xffff}}}, 0x24}}, 0x10) 22.8702751s ago: executing program 1 (id=1168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x5c}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) 22.869856711s ago: executing program 4 (id=1169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.746206556s ago: executing program 4 (id=1170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="e5b5", 0x2}], 0x1, 0x0, 0x0, 0x200488d1}, 0x20000050) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da7", 0x45}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9", 0xd1}, {&(0x7f0000000840)="a9ae40a02163bc35c9e4208cdd56e268b2e480846f59ccaa133e00d27a5c4ab4ee7b3866ee59c76e5cadb1d0c83da3fc7e7b21ef", 0x34}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435", 0xdd}], 0x1}}], 0x3, 0x0) 22.246817121s ago: executing program 4 (id=1171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) 21.280077386s ago: executing program 4 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) 21.229732239s ago: executing program 1 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x80100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='sched_wake_idle_without_ipi\x00', r2}, 0x10) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x2}, 0x0, &(0x7f0000000680)={0xff, 0x800}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x1c, "3a9a0776000000a807000000000000000043e546e2a10623a160582b8e188537", "665859255eb415c5d7fc9358bde6aad0c732fc0da70b2c739d7ae7b27138321b", "cee02dfab7706502033b6659d60d02aacf7df23ae2e157ee2732fe2ecc4ff2db", "5e46bbbff12e9792e15d323a8b29c38d6d2eee75849677983d1590f423f83489", "bfbf225fe83b5d0f4862bd61b8ae16e312911fa3a6c9ccd5720e46868c2ed2a0", "04aa000000032d4d28f700"}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40), &(0x7f0000000b80), 0x2c, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = dup(r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000654000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) 20.957598625s ago: executing program 4 (id=1177): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) sync() getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) userfaultfd(0x80001) userfaultfd(0x80001) 9.048945692s ago: executing program 3 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x0) 8.851880902s ago: executing program 3 (id=1223): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="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", 0xfb}], 0x2, 0x0, 0x0, 0x20044800}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) 8.176932781s ago: executing program 3 (id=1229): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xde, &(0x7f0000007680)=""/222) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078b27a12acf51c89b2f433714da7b7730ef423c41b606e3950b835b2570cb99bb73bbde81d707b6f54db5ffc8c9d48b02d7139870a9e448f6bc6e127fb10e21aa5b612877a37d640837671a1eae432a8e0f27b6b91cddaf37393fb137f5d7d273021b665437d5c3b2045eb8e4331c73ec23074e7f8b7003facda15776d26a82181eba32e0c9978c5cece1f710f880627626fe07a83", 0xd2) 7.989240519s ago: executing program 0 (id=1230): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="e5b5", 0x2}], 0x1, 0x0, 0x0, 0x200488d1}, 0x20000050) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 7.898888004s ago: executing program 0 (id=1231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="80010000000000401e04003100000040000109022400e80000400009040000"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f026, 0x3}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0xb3, 0x0, 0x4, 0x1000, 0xa, {0x77359400}, {0x2, 0x0, 0x4, 0x8, 0x4, 0x1, "cfa56184"}, 0x1, 0x2, {&(0x7f0000000300)=[{0x1, 0xffff, {&(0x7f0000000140)}, 0x80}, {0x7fffffff, 0x9c86, {&(0x7f0000000380)}, 0x9}]}}) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, r8, 0x0, [0x2, 0x2]}, {r7, 0x0, 0x3, [0x0, 0x4]}, 0x2000000, [0x1]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000440)={r7, &(0x7f0000000180), &(0x7f00000003c0)}) syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x87f80c43e0b39625}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x40) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.544464233s ago: executing program 3 (id=1239): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0x10, 0xd, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000140005"], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 5.497067861s ago: executing program 3 (id=1240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280), 0x8) 4.867985987s ago: executing program 0 (id=1244): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) 3.752156255s ago: executing program 0 (id=1245): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000580), 0xd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x16, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000005c0)="1c1d2873e6a640a30b12fc5f40e5252d383da1af08b0aa408fb2a54053288594f215fb8e57a62f23ea6e7b0c8e12ed08270600c7dcda43511614ca8daf50482b262694da87a6222a8f813348f87b942740fd44ef78c6c3ed054d2f9a3b55ace23d2d765b", 0x1000, r3}, 0x38) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002cc0)={0x0, r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r6 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.677622682s ago: executing program 2 (id=1246): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="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", 0xfb}], 0x2, 0x0, 0x0, 0x20044800}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) 3.630805118s ago: executing program 3 (id=1247): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xde, &(0x7f0000007680)=""/222) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078b27a12acf51c89b2f433714da7b7730ef423c41b606e3950b835b2570cb99bb73bbde81d707b6f54db5ffc8c9d48b02d7139870a9e448f6bc6e127fb10e21aa5b612877a37d640837671a1eae432a8e0f27b6b91cddaf37393fb137f5d7d273021b665437d5c3b2045eb8e4331c73ec23074e7f8b7003facda15776d26a82181eba32e0c9978c5cece1f710f880627626fe07a83", 0xd2) 2.783378163s ago: executing program 2 (id=1248): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0x10, 0xd, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000140005"], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2.442548763s ago: executing program 2 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x700}, 0x0) 1.481815974s ago: executing program 2 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.45560636s ago: executing program 0 (id=1251): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1.250789542s ago: executing program 0 (id=1252): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth1\x00', @ifru_mtu=0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf2515000000040002800c10068004000200041003007b7e62adcb314d9538db71afeb8890ab6367d6995e04a0f8f8d82fe51af5f1d1ada24bcadc1f440d93476842e84dc5f0ecce768a374812fefefa8bf0b86ee24b25239aacd43424615c75337df13331018b66c207a1cdec2b4c1e41d810c12d7bbf76ff46e2c5493dfc745d88037ad48ed8e4be84026e7bbc906d48e8efaecb43bec544a07c5fabd5da2d49e7cbab2b4a8f0e8f4c58acaa0a7451479ea2e1efc85f6fdbf4e7e06ad42159dc897ab503447bd9d31c0776e420c67413a8242d75fd164d18ba818a21e54e86467a80ad7b20555de0c4490e696aa9a89d79ce8ef4eb7143c6318a50d984c5f87feeb75fffed1cfdd3ac4755b010097d5ffb4a7c1b9592626dda59acb1d021416c36c0b0a872e43f549217d46caa345c9223b45942968d2808fa3d6a9682214e3ed8fcc2572541bd7132c072ee922b61c25fedf44e725579959895b12cb9438e5748636f6c955945124718cf29723b9f7ba93bd11785a3fbf7b650a8d70d445aea1c6dcdae30169a491d786cb0389837c2f8d516e0db72896ba002328dadf1384757f80a0f5a2f00bed183fa6505cddad02de6b6b6a2d6ca2780a1e868446a87f4f742630f6e0365ce95577ff950b9277e3ab821993783b96e23165e4fa1ca9a00edfaad498cb8915f8e374441eca946012604eca2e43f6c8803c8a5dff1466ca46875dbcfe3712e95b054a4861d0807623b8e50865fbf3549fa967211732022e69d3e45fad069a8ef6d2329c7264ec9bdceae7c6ddabf05db53e71aac2460e6e899da3b5997e4d53d15c0e4cee6d1914c11799a649e192cca19ad5f2718d6bec462ae3ac99184c7746a02deb8ed8c6444a7fa3acae813bcf2dd796664614eac4e6732cb7d7aec7a9555bbf0a0cfe5733f04125e9e5cd36265263cbd79447f007aab469a06cdaae814a3e814318ca87d2900c5da55347ec9ac9205a85bc27b0057c16117b7420899d1c94e8e14b562ab6004b870dfcfe502abb15ba1bcf6c417b082b48db0711b413d7191921adf0e1383f09cc6f00752fc32dcede21a1c1af32dccd1303731f3ceb9e0af72af53438e0b464965a42e534c227d91be78a876e490ddf092950139925251707a93d8e733ca0acbb442111d826371f8450f16ac94443e7c299cc3379fca2462518455cdfd5fb727cf27cadbab06c866996893df508003707888819cedd8116e5e6f319535ba0edfcad05bf3f2a1ce16b3afd92ef99b0457a3acaf27674e0ab1e51098bee0d002c074620aa2f574d2bf5173c21d244b3cc76984df19459525982b50a5a54160679f950d5c463f80a95515ce741affc58c703270af7a9111c5612e1a9661f7aa9293799d5b3dff502271259b580f4dc8cdd167a1f6692e1f241d0bd9542e870f8598956822fb87e140a31f400c18566a7cfaab21200710ceb5d653e8e8f6eb21148288d20efc1a4e5ac918b61adb37854daa59d3a79322e279fc8b0e32cff51e49ff89c918bba7b669afbf1c5d72e721c5b81541fba37d109ab63932b85caeba482b1f0edb30c0a293ca4143cbc27265d593f7b298f8705b5b6decb6719a418b0e53f7d847b6e5e76e847fd190537cd3f854da9a3a04e25fc5f7ded9fda3ecc84980c57d6bb503bb36255e0a707ea779ab3e1a0c46e0e00a34b68d3844546a35c5d72c089e0ce45e4285c044266369a40ea268269223bbaa82880d025bd85ea6bfc73a1a836b6c6e8a2cc5906843af5fdd5d10f389d5d2550b1212f580cc4f51da2c6fc37458ce555ce1964f5955a832561f9f62130b0f2bca54d4ace8894256305650e0a0eab4a3d35e311564e84eac822b3acadaa7cee39ce9decd19c63b3b3ebe8928b9aa3fd33d1ab882d3497f78d3d6affbe559f91948fbca9f2a71f6d8bd8ba91c93f8d559fe7dd0564cab8a7b8c78625101a9eaa152057a958659cdb8ae3a372606e51beded1ae5952d552b1f7ba1e9f811d9093757e91758b9c41d869fad97ebb8bd6753570a06f58591e72a45721d88b40b80281e87aab4d86ede5ea17a65e5e7f1e7a871ce1f211794d46da63e5fada48be5f6cca1f4f2da5c1e7884d873c31984c589c03637e731547463fd6273e942ebba7720703c5e4f4914b21f51c01b967f4aa4145c85d413a4188c1944b14fddb9edf3ee88313cf59bb510d1eb2dfca9538cb880df2348c6e74ecec662c7ff5a31fb7a050279c8775b93e13ffbc99607daf7f054c28436dd668f090da65f7f91e8c963f049f40db05a590411683fd2f66d3b39bc683bd7b780db72d269acc924a4c68b2f5265b84d37cc9efe144a714d1bf8446a6bbc9470bddf1b63080edfba28c794ea782818642374741e056b01b3b99072e7170575caa1e5e23eb4ef928e35cd0109913cbf51344c30556480f8b975ad13f260ca75774ad3b3f1982dfddd584d42165e8490bc591fe3c19d16a7648a73547a4c738545562f17cc5e73adc8fce48a809f0f358b1d1cbde4c3dfdf9f45a7f09c7f7badddf6c2bff03a5e06fb778a7f5ba295c9287ddadd63464c4f5bc1173078aecc57a05f3fc3b23a12bf1f64fd0f418ee17e21258e0e96007d4a6ac79f86a6ca93e20c26ba703f50ef536bd92f030267b805032cb869367d69d3d8603d264587994d62588daf24b1cb52de0598058d90142461f9d60cc9224a4cb3d9479ae96167c9a19be44fca38df25191cff952e4838d65bacf91edaec30c789f9fc05afa3fafc61e49b484bce00515bacd2d86eb1b630e6c079a36ee7d0828b648ecb7fdae8896bdcafd9a8b8b581a2a31600196cf550cf450382ee29bf33e3f8463a5cfbf3b2e6e8799b84aa9628816ec1cb3d92a42c4963ddcec464492b6a2f4f3b95879495c773486130014b94ea1f6ec6774633531bbb556439551f45f8e21ffb4d7bc3ad5dfdeb801cc3f4f1db40b8e4d26da1a6b4bed7c39c25fe2b43e5eebe45797513d395888c7109eabf36243fc0f6e329e32b20d8dac2ff6b86d2b67e4360883bcbaa1bb8d2ade7cc478cc6542bae76c38ee817695e9b51ad74a56abe19e4b1d9da0bb0c89c6f9022a57daf544c9d6329de25347d244b93cfe6ff110c5458b27f153deab607c4396cc2af535ded4fa3b0aa56bae9adb08aa0f6be96e68f40aa896eb0c2334c0d1ab1f52752efbd1de49335c0377aadeef329039d9be8816bd501660eaf61668afc08795cab8d30b3851458d55b5d97a0efac4ae211e1a8e243076fcd2f461b83b3f6d860383159cdd146e6c913a39dc6b1fa050a9832602642bcab9eef6f46fd6753fd9d45253659d20c80067de0ad1d336a587c4e95323145f2e6fde4d5a42110d3c62827706f5d55ae0130f0536d4f51e98905de15dc3f719106d9eee0c814200566fd5c35dae6f551644984f91c18fa372808a4f7cdda7bce64ed27db1b98ad11ccd9a27affa7c630fb009abe5e9decda8d6d1d35fa1731453605dfa5bc743ae63bc02f140fbb10b88242f554ec842e0c4522ec79a274e9f01203e36a0d5e7bdc7ffc579b732055cfeb6887cefc6f576764cf6fecd91f85ae34d0a58745e6cd19431f9d3016caa4ac5d1308cd3b53bbc3917258b03cd3ad81753c71a3a865a14107f7b5ea505a9973ed3046d3b4035336823cef04b034b55ab1c379ed4c557c339da921984bcd1b928cf0a2715d6fbc9a36f6e38082314d84f2687f196557b35becc73d19d2c5d5713c4adab299086b3b3ef6786305f6f2ea75747852846f9be6d3a873a48c2373c5acc22e52191e3466fe491d578255a9a2af61340415df0ceb1269c088c93a7b228222c5eb784197d954b2c760bf781dd903918926306888ac11b1acdd2cde41147157deba67bcdfc0b8f13f737498f7db629efbc801d45075990b771728193877d92a6c42055f0bf081e9ba708025f92fda9b31243d8c91fde51423bc8a3d4964d4694dc9d2d8b5b319542cf288c94abae947c90f9274c07d72e4d04500e08458d82f251e54320698ff9edd442bfae40724b06392e0cfb4495ed42cad2295c7eb1be93d26db407f7fd13891a20421cf82a13b5109fb597835f7e18314330846a5594ec517b95404fd3efda8e6fc16cc453e6b90f6364dff449c7627d131d73dd9b4891816183569a0f06bdbd4cacedf1e639b31755080713103436f53b1546129a92d42e122484a656761fef3b90e2d611f66f7690d88145d017c2236be14271e0af4e4f675815111b2f0c7891d9d6f47ee5f37a6ce88c246bd152619596aea5c24e69717e0fc0b787e3e0244f1a3e89d65000588dbb270d8c92363ba184755f430755a8fc22a671e6a02491dd4bb837f69b30f0a3e0cbff07448693cae9881cdfcdf9bb693c08105a05f5e73bae9d1975cbc99337cd00f8594573a516580c9cf70ab7f5f0138361918cdc006cca744fbbbc071830da859c39f6f68a86da8cd2c95aa088d5cb61d0aa85092c0e8e189bbe2caf16e7d5b960bf4f4e8f8419589ba75853e44f9898481808c7ad805e732ef9c2d76646c94690649110426a2e6616c0f050d8ee50c1ba727e7c4f185fed954922946a739d6a4362ca57ad1b98f806aabfa19917279c4525379e0282db0ff9c9383466965116725ba269453ac90631c091db251c502eec08fda6ca96f030d99be59ebadf7ede81ee13fc6cc7f6cc66bbf2bec7dc9728bc58a9084233335205986b99b8af84ad678d017e076fc15d0f4d6476d77c61dcd78e2b3bbddd4a674e36bf8a79d8ae4361b101776878df361aac1c9ff9f9387c0906f4fc8ba765eb0a46aa1d0bceb93351b2d3b894b44160c1865098a435cc25c7217cc61f171b763b6735eb99b011c348fef799692a16c3962eb07e945a183f395aad13813f3269dae6ad8181f14aed3e255ad399c6ecdd24ed9da5352a5ec143a3fdbb40848716803a7610e09e85e421388aafcf7f9cba333a2584000fc3dd3e334d48c77e785d4bed63cf04fdf71bd60c97b4b12006a89b326ab995e9fcfb1589196fa5e228caec6b83b9203d23634f204ff2d1efed12cb6c7003a0ef64253507fe03380daadcee5d2b795fa06ddd08d42adc642385a532b4d6ab0110c4a5b886897a0fd146b5dbe540eee3cff88648b8d08cc1548be0298ca030f889a965cb459135c682a7590c7abc751da51036089b4d30ae001cc53e019c53192e752b1a01e77595d07c79575cc7414c8501bb3d0ba80080f8af28460950f154d5b8322d5ee4dec517c7203961f843b6515b00988ede4239e94bdf50d5ae9381a574ac7ecaf16b40644b2c98e0e4a5d61fafeafb4aaa78322b1159dfeadb0ee6bc00568eb631b6be4d8838685fe93c6bd5b9249c8d71dcdce0c71404a441581ead963f23eec435451fa325926e09c1006f308d6fb6a96bd9c4584f8beccc5ca7810eddd5bd9c8f0b31cd725bfdf0ea874e49a797ff5fab1ec0f5a177ae0eb480773ca30240623d5f3f337f7e6ae93d41522747016aefdeb4c8e778767db065fb33fed48f466fab23c185558c0f1b6b1077682b53ef320dfdbd5f0e050f297451b4dddc9ea1a38f63d152225da99b54f29dcbdcb82b7feed5573d7bb6cbd3aebdae61d939683765eddb5fed6f0583dada031919e33ed65d47944dd1cc55f1e24ceedd64179d7b59f99fd446160af2aa623ad8d65f5273961f81c50ca2e98998db9235770c7800b99f5d914cb115d664bf088f4955764f9ad0c5112e6718de7d968414f28f39a1030c0f4aa1faa235d349598ad4647eb26e0c21ecc80330034eeb5f2074315d71f9e050eae879f1fdbceb2d652006606d6bfea7ec00ac717200ea4b1b87ead54820c00098008000100810000001400078008000100090000000800020000020000"], 0x1044}, 0x1, 0x0, 0x0, 0x2008}, 0x45) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x800040, &(0x7f0000000240)=ANY=[@ANYBLOB="6d70632c67727071756f74615f626c6f636b5f686172646c696d698a3d67342d2d377034328e850000000000000000000800000000"]) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) socket$nl_generic(0x11, 0x3, 0x10) getpid() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000013c0)) read$dsp(r6, &(0x7f0000000440)=""/171, 0xab) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000000d4ce000000001100080000000a000000"], 0x28}}, 0x40880) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r7 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xffffffffffffffff, r7) ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000)) 1.130567905s ago: executing program 2 (id=1253): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) 0s ago: executing program 2 (id=1254): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 59.957519][ T5208] cgroup: Unknown subsys name 'net' [ 60.069429][ T5208] cgroup: Unknown subsys name 'cpuset' [ 60.077941][ T5208] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.582377][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.373299][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.399594][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.411857][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.421336][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.429725][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.436983][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.437942][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.452946][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.461851][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.469055][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.469651][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.477432][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.491397][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.499122][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.506431][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.508994][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.521699][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.529230][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.598426][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.609517][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.617954][ T4613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.626597][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.634233][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.642602][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.651253][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.658998][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.666674][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.681022][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.689052][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.697084][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.935213][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 66.070904][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 66.138337][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.147613][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.155169][ T5222] bridge_slave_0: entered allmulticast mode [ 66.163937][ T5222] bridge_slave_0: entered promiscuous mode [ 66.188960][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.196292][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.203466][ T5222] bridge_slave_1: entered allmulticast mode [ 66.210566][ T5222] bridge_slave_1: entered promiscuous mode [ 66.218001][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 66.267221][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 66.309049][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.323907][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.347652][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.354893][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.362602][ T5218] bridge_slave_0: entered allmulticast mode [ 66.369866][ T5218] bridge_slave_0: entered promiscuous mode [ 66.416237][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.424016][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.431600][ T5218] bridge_slave_1: entered allmulticast mode [ 66.439326][ T5218] bridge_slave_1: entered promiscuous mode [ 66.472428][ T5222] team0: Port device team_slave_0 added [ 66.481127][ T5222] team0: Port device team_slave_1 added [ 66.489570][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 66.548327][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.577071][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.584064][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.610694][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.624257][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.652421][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.659824][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.669419][ T5234] bridge_slave_0: entered allmulticast mode [ 66.677163][ T5234] bridge_slave_0: entered promiscuous mode [ 66.693222][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.700421][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.726811][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.760126][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.769816][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.777466][ T5234] bridge_slave_1: entered allmulticast mode [ 66.784311][ T5234] bridge_slave_1: entered promiscuous mode [ 66.809295][ T5218] team0: Port device team_slave_0 added [ 66.815572][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.822786][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.830338][ T5227] bridge_slave_0: entered allmulticast mode [ 66.837530][ T5227] bridge_slave_0: entered promiscuous mode [ 66.845780][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.853075][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.860682][ T5227] bridge_slave_1: entered allmulticast mode [ 66.867502][ T5227] bridge_slave_1: entered promiscuous mode [ 66.895332][ T5218] team0: Port device team_slave_1 added [ 66.941509][ T5222] hsr_slave_0: entered promiscuous mode [ 66.949828][ T5222] hsr_slave_1: entered promiscuous mode [ 66.976364][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.988607][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.000627][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.068031][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.092835][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.100127][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.107719][ T5233] bridge_slave_0: entered allmulticast mode [ 67.114467][ T5233] bridge_slave_0: entered promiscuous mode [ 67.126382][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.133367][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.160559][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.174569][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.181715][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.208644][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.232014][ T5227] team0: Port device team_slave_0 added [ 67.238243][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246227][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.253419][ T5233] bridge_slave_1: entered allmulticast mode [ 67.260307][ T5233] bridge_slave_1: entered promiscuous mode [ 67.277073][ T5234] team0: Port device team_slave_0 added [ 67.285130][ T5227] team0: Port device team_slave_1 added [ 67.321022][ T5234] team0: Port device team_slave_1 added [ 67.372239][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.383301][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.409827][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.423471][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.435799][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.466351][ T5218] hsr_slave_0: entered promiscuous mode [ 67.473261][ T5218] hsr_slave_1: entered promiscuous mode [ 67.479787][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.488015][ T5218] Cannot create hsr debugfs directory [ 67.503548][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.510861][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.537894][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.537948][ T54] Bluetooth: hci2: command tx timeout [ 67.548671][ T5224] Bluetooth: hci0: command tx timeout [ 67.592778][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.599981][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.626832][ T5224] Bluetooth: hci1: command tx timeout [ 67.631326][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.651148][ T5233] team0: Port device team_slave_0 added [ 67.659576][ T5233] team0: Port device team_slave_1 added [ 67.670570][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.683413][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.696197][ T5224] Bluetooth: hci4: command tx timeout [ 67.716187][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.763922][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.771377][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.798556][ T5224] Bluetooth: hci3: command tx timeout [ 67.801262][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.817813][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.824888][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.851248][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.942015][ T5234] hsr_slave_0: entered promiscuous mode [ 67.949496][ T5234] hsr_slave_1: entered promiscuous mode [ 67.956303][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.964068][ T5234] Cannot create hsr debugfs directory [ 67.974364][ T5227] hsr_slave_0: entered promiscuous mode [ 67.980830][ T5227] hsr_slave_1: entered promiscuous mode [ 67.987114][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.994696][ T5227] Cannot create hsr debugfs directory [ 68.063368][ T5222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.078983][ T5233] hsr_slave_0: entered promiscuous mode [ 68.086861][ T5233] hsr_slave_1: entered promiscuous mode [ 68.093206][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.108257][ T5233] Cannot create hsr debugfs directory [ 68.121963][ T5222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.157285][ T5222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.188442][ T5222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.418158][ T5218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.428250][ T5218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.440513][ T5218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.457408][ T5218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.526664][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.542971][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.556184][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.585178][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.622076][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.660503][ T5234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.681512][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.698420][ T5234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.726858][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.734550][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.746518][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.753669][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.766001][ T5234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.776230][ T5234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.847075][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.867724][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.880209][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.891981][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.916072][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.953505][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.980864][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.988019][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.043967][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.051130][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.064950][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.167944][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.182759][ T5218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.198861][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.252065][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.259265][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.280736][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.287922][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.334184][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.414620][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.459960][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.486132][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.504357][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.519054][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.526242][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.540160][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.581104][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.588331][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.621609][ T5224] Bluetooth: hci0: command tx timeout [ 69.625871][ T54] Bluetooth: hci2: command tx timeout [ 69.648062][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.655166][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.673467][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.680712][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.696660][ T54] Bluetooth: hci1: command tx timeout [ 69.745118][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.776993][ T54] Bluetooth: hci4: command tx timeout [ 69.856797][ T54] Bluetooth: hci3: command tx timeout [ 69.903903][ T5222] veth0_vlan: entered promiscuous mode [ 69.933812][ T5222] veth1_vlan: entered promiscuous mode [ 69.953891][ T5218] veth0_vlan: entered promiscuous mode [ 69.973548][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.007457][ T5218] veth1_vlan: entered promiscuous mode [ 70.038261][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.088804][ T5222] veth0_macvtap: entered promiscuous mode [ 70.147701][ T5218] veth0_macvtap: entered promiscuous mode [ 70.164991][ T5222] veth1_macvtap: entered promiscuous mode [ 70.176940][ T5233] veth0_vlan: entered promiscuous mode [ 70.222379][ T5218] veth1_macvtap: entered promiscuous mode [ 70.241038][ T5233] veth1_vlan: entered promiscuous mode [ 70.258257][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.284282][ T5227] veth0_vlan: entered promiscuous mode [ 70.312634][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.324666][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.347262][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.361302][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.378181][ T5227] veth1_vlan: entered promiscuous mode [ 70.390517][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.440853][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.457620][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.469290][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.481890][ T5222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.492391][ T5222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.501656][ T5222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.512075][ T5222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.528757][ T5233] veth0_macvtap: entered promiscuous mode [ 70.542292][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.551887][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.561578][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.571487][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.628853][ T5233] veth1_macvtap: entered promiscuous mode [ 70.705195][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.722593][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.732790][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.744272][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.758191][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.766787][ T5227] veth0_macvtap: entered promiscuous mode [ 70.791985][ T5227] veth1_macvtap: entered promiscuous mode [ 70.806641][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.819885][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.830228][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.840933][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.852096][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.906383][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.915158][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.924973][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.934427][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.951267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.961888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.965741][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.979531][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.990131][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.997895][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.009564][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.020268][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.030647][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.041261][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.052227][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.082591][ T5234] veth0_vlan: entered promiscuous mode [ 71.101825][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.113017][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.123721][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.134385][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.145975][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.156788][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.168431][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.201523][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.210540][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.224533][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233365][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.257625][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.265840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.271148][ T5234] veth1_vlan: entered promiscuous mode [ 71.310966][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.325291][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.423336][ T5234] veth0_macvtap: entered promiscuous mode [ 71.427712][ T5218] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.453005][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.458780][ T5234] veth1_macvtap: entered promiscuous mode [ 71.472154][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.528769][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.544989][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.555374][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.566351][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.576177][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.576270][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.589135][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.599691][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.609563][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.620492][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.631766][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.640732][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.641690][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.655702][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.660816][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676420][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.686945][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.697838][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.708430][ T54] Bluetooth: hci0: command tx timeout [ 71.713873][ T54] Bluetooth: hci2: command tx timeout [ 71.715535][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.734586][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.745165][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.757018][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.786083][ T5224] Bluetooth: hci1: command tx timeout [ 71.811025][ T5304] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.814307][ T5234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.829686][ T5234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.838561][ T5234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.847352][ T5234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.866403][ T5224] Bluetooth: hci4: command tx timeout [ 71.894966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.903035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.936238][ T5224] Bluetooth: hci3: command tx timeout [ 71.945058][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.953915][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.047910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.077145][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.134829][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.142924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.266633][ T5235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.081495][ T5224] Bluetooth: hci2: command tx timeout [ 74.087739][ T5224] Bluetooth: hci0: command tx timeout [ 74.094048][ T5224] Bluetooth: hci1: command tx timeout [ 74.100116][ T5224] Bluetooth: hci4: command tx timeout [ 74.105798][ T54] Bluetooth: hci3: command tx timeout [ 74.225502][ T5235] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.238537][ T5235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.318237][ T5235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.335562][ T5235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.431068][ T5352] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 74.650428][ T5235] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.659726][ T5235] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.904005][ T5235] usb 2-1: Manufacturer: syz [ 74.998444][ T1181] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.276268][ T5235] usb 2-1: config 0 descriptor?? [ 75.298988][ T1181] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.314866][ T1181] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 75.342618][ T1181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.360479][ T1181] usb 1-1: Product: syz [ 75.365138][ T1181] usb 1-1: Manufacturer: syz [ 75.373916][ T1181] usb 1-1: SerialNumber: syz [ 75.882560][ T5235] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 75.892141][ T5235] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 76.012845][ T5235] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 76.135338][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 76.518434][ T5381] ubi0: attaching mtd0 [ 76.522817][ T5381] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 77.435934][ T936] usb 2-1: USB disconnect, device number 2 [ 77.923196][ T1181] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 78.538841][ T1181] usb 1-1: USB disconnect, device number 2 [ 78.616377][ T1181] usblp0: removed [ 79.950863][ T5430] ubi0: attaching mtd0 [ 79.955006][ T5430] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 80.356611][ T1181] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.888496][ T1181] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.899669][ T1181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.912685][ T1181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.924356][ T1181] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.205592][ T5235] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.957976][ T46] cfg80211: failed to load regulatory.db [ 82.518362][ T1181] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 82.527740][ T1181] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 82.556511][ T1181] usb 5-1: config 0 descriptor?? [ 82.562602][ T1181] usb 5-1: can't set config #0, error -71 [ 82.577114][ T1181] usb 5-1: USB disconnect, device number 2 [ 82.670117][ T5235] usb 1-1: config 1 interface 0 has no altsetting 0 [ 82.726185][ T5235] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.752085][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.766492][ T5235] usb 1-1: Product: syz [ 82.770732][ T5235] usb 1-1: Manufacturer: syz [ 82.784940][ T5235] usb 1-1: SerialNumber: syz [ 83.335562][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 84.515596][ T5298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.668100][ T5298] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.683449][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.720446][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.754231][ T5298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 84.967887][ T5235] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 85.016549][ T5298] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.045917][ T5298] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.049641][ T5235] usb 1-1: USB disconnect, device number 3 [ 85.054633][ T5298] usb 4-1: Manufacturer: syz [ 85.119854][ T5235] usblp0: removed [ 85.123386][ T5298] usb 4-1: config 0 descriptor?? [ 85.690729][ T5298] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 85.713492][ T5298] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 85.755880][ T5298] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 87.124448][ T5511] sctp: [Deprecated]: syz.2.73 (pid 5511) Use of int in max_burst socket option deprecated. [ 87.124448][ T5511] Use struct sctp_assoc_value instead [ 88.848200][ T5235] usb 4-1: USB disconnect, device number 2 [ 89.313713][ T1181] IPVS: starting estimator thread 0... [ 89.760665][ T5547] IPVS: using max 16 ests per chain, 38400 per kthread [ 90.835861][ T5562] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.316167][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.360602][ T5578] sctp: [Deprecated]: syz.0.90 (pid 5578) Use of int in max_burst socket option deprecated. [ 92.360602][ T5578] Use struct sctp_assoc_value instead [ 92.505653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.514350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.522764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 92.564955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 92.579477][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 92.595725][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.607056][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.616919][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 92.658140][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 92.675805][ T25] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 92.683971][ T25] usb 2-1: Manufacturer: syz [ 92.716659][ T25] usb 2-1: config 0 descriptor?? [ 93.360742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.484205][ T25] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 93.494824][ T25] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 93.513399][ T25] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 94.815696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.824040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.066127][ T936] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 97.790020][ T5299] usb 2-1: USB disconnect, device number 3 [ 98.622377][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 99.814066][ T5658] sctp: [Deprecated]: syz.0.116 (pid 5658) Use of int in max_burst socket option deprecated. [ 99.814066][ T5658] Use struct sctp_assoc_value instead [ 105.233779][ T5729] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:0 [ 107.886642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.895282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.906390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.173927][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 108.224126][ T5762] Zero length message leads to an empty skb [ 111.916256][ T25] IPVS: starting estimator thread 0... [ 112.384764][ T5793] IPVS: using max 15 ests per chain, 36000 per kthread [ 112.792186][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 113.171673][ T5811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.167'. [ 115.452956][ T5830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.171'. [ 115.614556][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 115.755832][ T5299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.895669][ T5299] usb 1-1: device descriptor read/64, error -71 [ 116.145665][ T5299] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.330593][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 116.342274][ T5299] usb 1-1: device descriptor read/64, error -71 [ 116.457421][ T5299] usb usb1-port1: attempt power cycle [ 117.628124][ T5299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.104614][ T5299] usb 1-1: device descriptor read/8, error -71 [ 118.432584][ T1181] IPVS: starting estimator thread 0... [ 119.194809][ T5871] IPVS: using max 17 ests per chain, 40800 per kthread [ 119.404484][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 123.589542][ T5299] IPVS: starting estimator thread 0... [ 123.847357][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 123.883194][ T5928] Unsupported ieee802154 address type: 0 [ 124.008307][ T5926] IPVS: using max 15 ests per chain, 36000 per kthread [ 124.151243][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 127.267436][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.945559][ T5235] IPVS: starting estimator thread 0... [ 132.093864][ T5978] IPVS: using max 16 ests per chain, 38400 per kthread [ 132.116605][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 133.504878][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.511577][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.566565][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 138.421723][ T6024] sctp: [Deprecated]: syz.0.226 (pid 6024) Use of int in max_burst socket option deprecated. [ 138.421723][ T6024] Use struct sctp_assoc_value instead [ 138.453391][ T6030] fuse: Unknown parameter 'grou00000000000000000000' [ 139.800339][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 147.402303][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 147.474915][ T6085] sctp: [Deprecated]: syz.1.242 (pid 6085) Use of int in max_burst socket option deprecated. [ 147.474915][ T6085] Use struct sctp_assoc_value instead [ 152.661015][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 154.314403][ T6140] sctp: [Deprecated]: syz.3.260 (pid 6140) Use of int in max_burst socket option deprecated. [ 154.314403][ T6140] Use struct sctp_assoc_value instead [ 157.657178][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 160.649449][ T6216] sctp: [Deprecated]: syz.0.279 (pid 6216) Use of int in max_burst socket option deprecated. [ 160.649449][ T6216] Use struct sctp_assoc_value instead [ 160.945674][ T1181] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.331431][ T1181] usb 4-1: Using ep0 maxpacket: 32 [ 162.102466][ T1181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.115600][ T1181] usb 4-1: config 0 has no interfaces? [ 162.795883][ T1181] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 162.856509][ T1181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.915908][ T1181] usb 4-1: Product: syz [ 162.931424][ T1181] usb 4-1: Manufacturer: syz [ 162.977885][ T1181] usb 4-1: SerialNumber: syz [ 163.037621][ T1181] usb 4-1: config 0 descriptor?? [ 163.110130][ T1181] usb 4-1: can't set config #0, error -71 [ 163.273406][ T1181] usb 4-1: USB disconnect, device number 3 [ 165.492919][ T6269] sctp: [Deprecated]: syz.0.296 (pid 6269) Use of int in max_burst socket option deprecated. [ 165.492919][ T6269] Use struct sctp_assoc_value instead [ 166.219033][ T6278] netlink: zone id is out of range [ 166.404723][ T6282] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.300'. [ 166.410256][ T6278] netlink: zone id is out of range [ 166.427066][ T6278] netlink: set zone limit has 4 unknown bytes [ 168.236354][ T6304] fuse: Bad value for 'user_id' [ 168.255430][ T6304] fuse: Bad value for 'user_id' [ 170.787786][ T6337] fuse: Bad value for 'fd' [ 173.250489][ T6348] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.325'. [ 174.294123][ T6370] fuse: Bad value for 'fd' [ 174.464684][ T6371] bridge0: port 3(gretap0) entered blocking state [ 174.480493][ T6371] bridge0: port 3(gretap0) entered disabled state [ 174.496724][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 174.546173][ T6371] gretap0: entered allmulticast mode [ 175.567960][ T6371] gretap0: entered promiscuous mode [ 175.588556][ T6371] bridge0: port 3(gretap0) entered blocking state [ 175.595542][ T6371] bridge0: port 3(gretap0) entered forwarding state [ 178.534987][ T6381] gretap0: left allmulticast mode [ 178.540342][ T6381] gretap0: left promiscuous mode [ 178.546683][ T6381] bridge0: port 3(gretap0) entered disabled state [ 178.933583][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 179.146569][ T6416] fuse: Bad value for 'fd' [ 182.291323][ T6447] fuse: Bad value for 'fd' [ 192.266544][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 192.272655][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 192.949879][ T5231] Bluetooth: hci4: command 0x0406 tx timeout [ 192.956178][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 192.962217][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 194.913709][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.902364][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.043432][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 198.134328][ T6620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.422'. [ 201.498846][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 202.139505][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 203.305247][ T6686] fuse: Unknown parameter 'use00000000000000000000' [ 203.410723][ T4613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.421525][ T4613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.431059][ T4613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.442621][ T4613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.456654][ T4613] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.464972][ T4613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.683228][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 204.727921][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 204.753104][ T6688] chnl_net:caif_netlink_parms(): no params data found [ 204.783195][ T6713] netlink: 'syz.0.458': attribute type 5 has an invalid length. [ 205.164563][ T6725] fuse: Unknown parameter 'use00000000000000000000' [ 205.197622][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.204783][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.282759][ T6688] bridge_slave_0: entered allmulticast mode [ 205.335734][ T6688] bridge_slave_0: entered promiscuous mode [ 205.374762][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.443016][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.457437][ T6688] bridge_slave_1: entered allmulticast mode [ 205.464604][ T6688] bridge_slave_1: entered promiscuous mode [ 205.593873][ T5230] Bluetooth: hci5: command tx timeout [ 205.732259][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 205.809179][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.890157][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.685964][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 206.854114][ T6752] bridge0: port 3(gretap0) entered blocking state [ 206.885071][ T6752] bridge0: port 3(gretap0) entered disabled state [ 206.899147][ T6752] gretap0: entered allmulticast mode [ 206.909510][ T6752] gretap0: entered promiscuous mode [ 206.916738][ T6752] bridge0: port 3(gretap0) entered blocking state [ 206.923345][ T6752] bridge0: port 3(gretap0) entered forwarding state [ 206.946221][ T6688] team0: Port device team_slave_0 added [ 206.954537][ T6688] team0: Port device team_slave_1 added [ 207.131165][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 207.198509][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.238454][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.295418][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.359116][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.415071][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.424020][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.465037][ T6772] netlink: zone id is out of range [ 207.479050][ T6772] netlink: set zone limit has 4 unknown bytes [ 207.506093][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.527912][ T6775] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.481'. [ 207.615575][ T5230] Bluetooth: hci5: command tx timeout [ 207.717639][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.414317][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.958337][ T5230] Bluetooth: hci5: command tx timeout [ 209.992701][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 210.409141][ T6688] hsr_slave_0: entered promiscuous mode [ 210.431649][ T6688] hsr_slave_1: entered promiscuous mode [ 210.464233][ T6688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.498120][ T6688] Cannot create hsr debugfs directory [ 210.579637][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.038938][ T6813] netlink: zone id is out of range [ 211.053341][ T6813] netlink: set zone limit has 4 unknown bytes [ 211.074992][ T6813] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.495'. [ 211.911254][ T68] bridge_slave_1: left allmulticast mode [ 211.917319][ T68] bridge_slave_1: left promiscuous mode [ 211.924082][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.137415][ T5230] Bluetooth: hci5: command tx timeout [ 212.427637][ T68] bridge_slave_0: left allmulticast mode [ 212.437423][ T68] bridge_slave_0: left promiscuous mode [ 213.155732][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.222792][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 214.277964][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.298922][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.310874][ T68] bond0 (unregistering): Released all slaves [ 214.345282][ T6840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.780380][ T6857] netlink: zone id is out of range [ 214.851498][ T6857] netlink: set zone limit has 4 unknown bytes [ 214.997262][ T6857] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.510'. [ 216.405515][ T6861] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 218.468810][ T6688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.551299][ T6915] netlink: zone id is out of range [ 218.562868][ T6915] netlink: set zone limit has 4 unknown bytes [ 218.578412][ T6915] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.523'. [ 218.603307][ T6688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.891168][ T68] hsr_slave_0: left promiscuous mode [ 218.945987][ T68] hsr_slave_1: left promiscuous mode [ 218.955222][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.988501][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.042637][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.057536][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.113478][ T68] veth1_macvtap: left promiscuous mode [ 219.133626][ T68] veth0_macvtap: left promiscuous mode [ 219.155204][ T68] veth1_vlan: left promiscuous mode [ 219.185911][ T68] veth0_vlan: left promiscuous mode [ 219.746938][ T68] team0 (unregistering): Port device team_slave_1 removed [ 219.783203][ T68] team0 (unregistering): Port device team_slave_0 removed [ 220.151433][ T6688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.204911][ T6945] sit0: entered promiscuous mode [ 220.232615][ T6945] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 220.241200][ T6945] netlink: 1 bytes leftover after parsing attributes in process `syz.0.535'. [ 220.266283][ T6688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.314031][ T6947] netlink: zone id is out of range [ 220.324908][ T6947] netlink: set zone limit has 4 unknown bytes [ 220.333531][ T6947] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.537'. [ 220.768944][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.833954][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.850811][ T6964] warning: `syz.1.545' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.944363][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.952377][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.013996][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.021309][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.192530][ T6688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.286682][ T68] IPVS: stop unused estimator thread 0... [ 221.602956][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.643885][ T6688] veth0_vlan: entered promiscuous mode [ 221.674966][ T6993] tipc: Started in network mode [ 221.704325][ T6993] tipc: Node identity 1, cluster identity 4711 [ 221.731458][ T6993] tipc: Node number set to 1 [ 221.904624][ T6688] veth1_vlan: entered promiscuous mode [ 221.937390][ T6688] veth0_macvtap: entered promiscuous mode [ 221.954593][ T6688] veth1_macvtap: entered promiscuous mode [ 222.009194][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 222.030442][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.055466][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.080752][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.098495][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.113642][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.124515][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.149727][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.161019][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.174085][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.192688][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.207177][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.285090][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.322858][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.334800][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.352555][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.363176][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.383907][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.407637][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.467803][ T6688] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.486083][ T6688] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.539825][ T6688] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.587775][ T6688] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.325291][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.368804][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.442475][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.461656][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.810010][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 224.455150][ T7078] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.586'. [ 225.683452][ T7102] Bluetooth: MGMT ver 1.23 [ 225.744189][ T7104] netlink: 52 bytes leftover after parsing attributes in process `syz.4.593'. [ 227.148811][ T7103] wg2: entered promiscuous mode [ 227.153765][ T7103] wg2: entered allmulticast mode [ 227.265164][ T7102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.317986][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'. [ 227.335887][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'. [ 227.350248][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 227.904911][ T7102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.297631][ T7116] pim6reg1: entered promiscuous mode [ 228.303275][ T7116] pim6reg1: entered allmulticast mode [ 228.703034][ T7102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.924615][ T7102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.973058][ T7148] netlink: 80 bytes leftover after parsing attributes in process `syz.0.609'. [ 228.991249][ T7152] netlink: 52 bytes leftover after parsing attributes in process `syz.4.610'. [ 229.044813][ T7156] netlink: 596 bytes leftover after parsing attributes in process `syz.1.611'. [ 229.789354][ T5310] IPVS: starting estimator thread 0... [ 229.965945][ T7170] IPVS: using max 16 ests per chain, 38400 per kthread [ 230.275214][ T7102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.487160][ T7102] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.501909][ T7102] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.518810][ T7102] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.753845][ T7194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.625'. [ 230.761301][ T7189] syzkaller0: entered promiscuous mode [ 230.768885][ T7189] syzkaller0: entered allmulticast mode [ 232.107515][ T7212] fuse: Unknown parameter '0x0000000000000003' [ 233.768997][ T7236] fuse: Unknown parameter '0x0000000000000003' [ 233.844010][ T7240] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 233.875057][ T7240] netlink: 1 bytes leftover after parsing attributes in process `syz.0.643'. [ 233.959492][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 234.494692][ T7268] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 234.523332][ T7272] fuse: Unknown parameter '0x0000000000000003' [ 234.528129][ T7268] netlink: 1 bytes leftover after parsing attributes in process `syz.0.656'. [ 235.047765][ T7296] fuse: Unknown parameter '0x0000000000000003' [ 236.525589][ T7319] netlink: 596 bytes leftover after parsing attributes in process `syz.1.678'. [ 236.702362][ T7333] fuse: Unknown parameter 'fd0x0000000000000003' [ 236.867709][ T7342] Illegal XDP return value 4294967274 on prog (id 164) dev N/A, expect packet loss! [ 236.892211][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 236.901776][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 236.911202][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.687'. [ 236.996000][ T5230] block nbd0: Receive control failed (result -107) [ 237.172075][ T7354] syz.3.694[7354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.172183][ T7354] syz.3.694[7354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.184164][ T7354] syz.3.694[7354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.280391][ T7356] netlink: 596 bytes leftover after parsing attributes in process `syz.4.693'. [ 237.320103][ T7362] fuse: Unknown parameter 'fd0x0000000000000003' [ 237.919875][ T7386] fuse: Unknown parameter 'fd0x0000000000000003' [ 237.963083][ T7388] netlink: 596 bytes leftover after parsing attributes in process `syz.2.709'. [ 238.606724][ T7417] netlink: 596 bytes leftover after parsing attributes in process `syz.0.721'. [ 238.853583][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 239.017687][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 239.349097][ T7447] netlink: 596 bytes leftover after parsing attributes in process `syz.3.734'. [ 239.720402][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 239.851236][ T7467] pim6reg1: entered promiscuous mode [ 239.881165][ T7467] pim6reg1: entered allmulticast mode [ 241.622637][ T7546] __nla_validate_parse: 5 callbacks suppressed [ 241.622662][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 242.152142][ T7559] netlink: 596 bytes leftover after parsing attributes in process `syz.0.786'. [ 248.061080][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 249.963100][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 251.796952][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 253.525226][ T7762] fuse: Bad value for 'fd' [ 253.970807][ T7755] Â: renamed from pim6reg1 [ 255.760710][ T7804] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 256.314671][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.321786][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.436591][ T7820] capability: warning: `syz.3.885' uses deprecated v2 capabilities in a way that may be insecure [ 257.617777][ T5235] libceph: connect (1)[c::]:6789 error -101 [ 257.624125][ T5235] libceph: mon0 (1)[c::]:6789 connect error [ 257.698026][ T5235] libceph: connect (1)[c::]:6789 error -101 [ 257.704540][ T7824] ceph: No mds server is up or the cluster is laggy [ 257.728345][ T5235] libceph: mon0 (1)[c::]:6789 connect error [ 257.807649][ T5230] Bluetooth: hci5: unexpected event for opcode 0x080d [ 259.456876][ T7871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 261.472398][ T7868] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 261.565522][ T7868] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 261.574556][ T7868] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 262.113738][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 262.148653][ T7904] netlink: 868 bytes leftover after parsing attributes in process `syz.4.913'. [ 263.052895][ T5235] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 263.191325][ T5235] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 263.271771][ T5235] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 263.763630][ T7939] netlink: 868 bytes leftover after parsing attributes in process `syz.0.924'. [ 264.735271][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 265.356308][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 266.707275][ T7978] netlink: 868 bytes leftover after parsing attributes in process `syz.3.939'. [ 266.821289][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 267.145597][ T8002] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.948'. [ 267.158228][ T8002] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.948'. [ 267.385059][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'. [ 267.416707][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'. [ 268.346541][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 268.460314][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 269.341070][ T8048] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.962'. [ 269.352354][ T8048] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.962'. [ 269.683546][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 270.907192][ T8085] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.978'. [ 271.665675][ T5235] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.825581][ T5235] usb 2-1: Using ep0 maxpacket: 8 [ 271.840600][ T5235] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.905458][ T5235] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 271.925554][ T5235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 271.948480][ T5235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 271.962464][ T5235] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 271.971656][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.995680][ T5235] hub 2-1:1.0: bad descriptor, ignoring hub [ 272.001682][ T5235] hub 2-1:1.0: probe with driver hub failed with error -5 [ 272.009846][ T5235] cdc_wdm 2-1:1.0: skipping garbage [ 272.015110][ T5235] cdc_wdm 2-1:1.0: skipping garbage [ 272.056774][ T5235] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 272.062783][ T5235] cdc_wdm 2-1:1.0: Unknown control protocol [ 272.435815][ T8114] sit0: entered promiscuous mode [ 272.486150][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.591615][ T8114] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 272.609065][ T8114] __nla_validate_parse: 2 callbacks suppressed [ 272.609119][ T8114] netlink: 1 bytes leftover after parsing attributes in process `syz.4.986'. [ 272.635486][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.479047][ T8132] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.992'. [ 274.662261][ T5270] usb 2-1: USB disconnect, device number 4 [ 274.818196][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 275.495059][ T8157] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1004'. [ 275.595876][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 276.012968][ T8178] netlink: 'syz.0.1011': attribute type 29 has an invalid length. [ 276.097331][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 276.137959][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 277.052964][ T8193] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1016'. [ 277.064901][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 277.261570][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 277.458334][ T8208] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 278.229939][ T8211] random: crng reseeded on system resumption [ 278.659308][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 279.746248][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 279.823273][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 280.164514][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 280.362397][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 280.427772][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 281.845031][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1045'. [ 282.088864][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 283.109647][ T8306] random: crng reseeded on system resumption [ 284.886350][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 286.936037][ T5298] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 287.854457][ T5298] usb 5-1: config 1 interface 0 has no altsetting 0 [ 287.946960][ T5298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 287.973676][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.005472][ T5298] usb 5-1: Product: syz [ 288.009691][ T5298] usb 5-1: Manufacturer: syz [ 288.014293][ T5298] usb 5-1: SerialNumber: syz [ 288.077393][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 289.403053][ T5298] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 290.103029][ T5298] usb 5-1: USB disconnect, device number 3 [ 290.421611][ T8350] usblp0: removed [ 290.990582][ T8402] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1091'. [ 291.176544][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 291.185837][ T8406] nbd: nbd0 already in use [ 294.304964][ T8460] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1115'. [ 294.365520][ T1181] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 294.400935][ T8460] netlink: zone id is out of range [ 294.445673][ T8460] netlink: zone id is out of range [ 294.497300][ T8460] netlink: zone id is out of range [ 294.518231][ T1181] usb 3-1: config 1 interface 0 has no altsetting 0 [ 294.535717][ T8460] netlink: zone id is out of range [ 294.546529][ T1181] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.575477][ T8460] netlink: zone id is out of range [ 294.588452][ T1181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.605737][ T8460] netlink: zone id is out of range [ 294.714851][ T8460] netlink: zone id is out of range [ 294.726803][ T1181] usb 3-1: Product: syz [ 294.788556][ T8460] netlink: zone id is out of range [ 294.797393][ T1181] usb 3-1: Manufacturer: syz [ 294.892606][ T1181] usb 3-1: SerialNumber: syz [ 294.917159][ T8460] netlink: zone id is out of range [ 294.999905][ T8460] netlink: zone id is out of range [ 296.579121][ T1181] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 297.032286][ T5299] usb 3-1: USB disconnect, device number 2 [ 297.248080][ T8449] usblp0: removed [ 297.364246][ T8511] binder: 8510:8511 ioctl c018620c 20000600 returned -1 [ 298.623134][ T8527] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1138'. [ 299.841470][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 299.850779][ T8546] lo: Master is either lo or non-ether device [ 301.036032][ T8574] capability: warning: `syz.3.1151' uses 32-bit capabilities (legacy support in use) [ 301.050224][ T8574] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1151'. [ 301.467366][ T1181] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 302.185437][ T1181] usb 1-1: config 1 interface 0 has no altsetting 0 [ 302.935560][ T1181] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 302.944774][ T1181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.953348][ T1181] usb 1-1: Product: syz [ 302.957673][ T1181] usb 1-1: Manufacturer: syz [ 302.962401][ T1181] usb 1-1: SerialNumber: syz [ 303.073071][ T8595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1163'. [ 303.736745][ T1181] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 303.963805][ T8606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1166'. [ 305.658032][ T25] usb 1-1: USB disconnect, device number 8 [ 305.686574][ T29] audit: type=1326 audit(1727835434.943:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8632 comm="syz.1.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa8417dff9 code=0x0 [ 305.720199][ T25] usblp0: removed [ 306.737940][ T8640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1176'. [ 309.155566][ T5298] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 309.346108][ T5298] usb 1-1: config 1 interface 0 has no altsetting 0 [ 309.370321][ T5298] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.873788][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.928860][ T5298] usb 1-1: Product: syz [ 309.954536][ T5298] usb 1-1: Manufacturer: syz [ 309.976994][ T5298] usb 1-1: SerialNumber: syz [ 310.953516][ T5298] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 311.955276][ T5299] usb 1-1: USB disconnect, device number 9 [ 312.186064][ T8666] usblp0: removed [ 312.957255][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 314.819537][ T8740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.830597][ T8740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 314.852045][ T8740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.859320][ T8740] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 314.872243][ T8740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.878710][ T8740] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 314.892631][ T8740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 314.902234][ T8740] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 314.916657][ T8740] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 314.922818][ T8740] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 314.936058][ T8740] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 314.977079][ T5299] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 315.143995][ T5299] usb 1-1: config 1 interface 0 has no altsetting 0 [ 315.160080][ T5299] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 315.180280][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.200497][ T5299] usb 1-1: Product: syz [ 315.212617][ T5299] usb 1-1: Manufacturer: syz [ 315.224620][ T5299] usb 1-1: SerialNumber: syz [ 316.364316][ T5299] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 316.895598][ T8742] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 316.902336][ T5230] Bluetooth: hci4: command 0x0406 tx timeout [ 316.908652][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 316.915663][ T5230] Bluetooth: hci1: command 0x0406 tx timeout [ 316.972199][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.980116][ T5224] Bluetooth: hci5: command 0x0405 tx timeout [ 316.988719][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.002112][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.011256][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.012325][ T1181] usb 1-1: USB disconnect, device number 10 [ 317.021523][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.046806][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.052136][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.055162][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 317.072311][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.072595][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.087235][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.095831][ T5221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.272451][ T8738] usblp0: removed [ 317.307825][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.314421][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.610412][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 317.734963][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 317.968005][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.991560][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.022620][ T8763] bridge_slave_0: entered allmulticast mode [ 318.050749][ T8763] bridge_slave_0: entered promiscuous mode [ 318.114828][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.134803][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.152055][ T8763] bridge_slave_1: entered allmulticast mode [ 318.162388][ T8795] net_ratelimit: 21 callbacks suppressed [ 318.162403][ T8795] netlink: zone id is out of range [ 318.174307][ T8763] bridge_slave_1: entered promiscuous mode [ 318.209747][ T8795] netlink: zone id is out of range [ 318.244033][ T8795] netlink: set zone limit has 4 unknown bytes [ 318.267254][ T8799] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1224'. [ 318.592688][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.687000][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.712005][ T8763] team0: Port device team_slave_0 added [ 318.721383][ T8763] team0: Port device team_slave_1 added [ 318.758124][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.771406][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.885922][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.896860][ T5299] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 318.907592][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.929980][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.957164][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.975591][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 318.981764][ T5224] Bluetooth: hci4: command 0x0406 tx timeout [ 318.988839][ T5221] Bluetooth: hci1: command 0x0406 tx timeout [ 319.008195][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.020998][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.028684][ T8769] bridge_slave_0: entered allmulticast mode [ 319.042872][ T8769] bridge_slave_0: entered promiscuous mode [ 319.067896][ T8763] hsr_slave_0: entered promiscuous mode [ 319.074171][ T8763] hsr_slave_1: entered promiscuous mode [ 319.081764][ T5299] usb 4-1: config 1 interface 0 has no altsetting 0 [ 319.089792][ T8763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.097637][ T8763] Cannot create hsr debugfs directory [ 319.104215][ T5299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.113886][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.125531][ T5298] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 319.138669][ T5299] usb 4-1: Product: syz [ 319.151196][ T5299] usb 4-1: Manufacturer: syz [ 319.156437][ T5221] Bluetooth: hci5: command 0x0405 tx timeout [ 319.162459][ T5221] Bluetooth: hci3: command tx timeout [ 319.168765][ T5221] Bluetooth: hci6: command tx timeout [ 319.182865][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.192673][ T5299] usb 4-1: SerialNumber: syz [ 319.199968][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.211123][ T8769] bridge_slave_1: entered allmulticast mode [ 319.221014][ T8769] bridge_slave_1: entered promiscuous mode [ 319.281192][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.300564][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.329514][ T5298] usb 1-1: config 0 has too many interfaces: 232, using maximum allowed: 32 [ 319.351652][ T5298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.362876][ T5298] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 232 [ 319.377713][ T5298] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 319.391681][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 319.403922][ T5298] usb 1-1: Product: syz [ 319.420689][ T5298] usb 1-1: config 0 descriptor?? [ 319.620519][ T8769] team0: Port device team_slave_0 added [ 319.714794][ T8769] team0: Port device team_slave_1 added [ 319.882424][ T5299] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 319.901482][ T8763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.981254][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.989230][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.028454][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.071850][ T8763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.093195][ T8826] netlink: zone id is out of range [ 320.100472][ T8826] netlink: zone id is out of range [ 320.116055][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.132808][ T8826] netlink: set zone limit has 4 unknown bytes [ 320.139319][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.167966][ T8827] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1234'. [ 320.201996][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.289671][ T8763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.418664][ T8763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.452756][ T8769] hsr_slave_0: entered promiscuous mode [ 320.473823][ T8833] overlayfs: missing 'lowerdir' [ 320.486568][ T5310] usb 4-1: USB disconnect, device number 4 [ 320.500339][ T8769] hsr_slave_1: entered promiscuous mode [ 320.537482][ T8769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.567512][ T8769] Cannot create hsr debugfs directory [ 320.731097][ T8814] usblp0: removed [ 320.887561][ T8763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.913223][ T8763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.957687][ T8769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.980475][ T8763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.008969][ T8763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.088900][ T8769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.196817][ T8769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.216439][ T5230] Bluetooth: hci6: command tx timeout [ 321.221909][ T5221] Bluetooth: hci3: command tx timeout [ 321.229361][ T5224] Bluetooth: hci5: command 0x0405 tx timeout [ 321.492942][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.545075][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.582627][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.589777][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.630019][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.638138][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.832614][ T8769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.891717][ T8859] netlink: zone id is out of range [ 321.902025][ T5298] usb 1-1: USB disconnect, device number 11 [ 321.948219][ T8859] netlink: zone id is out of range [ 322.003983][ T8859] netlink: set zone limit has 4 unknown bytes [ 322.209849][ T8863] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1243'. [ 323.284940][ T8769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.296481][ T5230] Bluetooth: hci6: command tx timeout [ 323.301952][ T5221] Bluetooth: hci3: command tx timeout [ 323.375405][ T8769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.869861][ T5298] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 323.877938][ T8769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.895017][ T8769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.943538][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.046654][ T5298] usb 4-1: config 1 interface 0 has no altsetting 0 [ 324.066710][ T5298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.082090][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.092370][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.132738][ T5298] usb 4-1: Product: syz [ 324.161226][ T5298] usb 4-1: Manufacturer: syz [ 324.172058][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.179751][ T5298] usb 4-1: SerialNumber: syz [ 324.220770][ T8769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.231253][ T8769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.248297][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.255493][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.266418][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.273600][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.676653][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.870438][ T5298] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 324.949058][ T8763] veth0_vlan: entered promiscuous mode [ 324.959507][ T8763] veth1_vlan: entered promiscuous mode [ 324.977496][ T8763] veth0_macvtap: entered promiscuous mode [ 324.985963][ T8763] veth1_macvtap: entered promiscuous mode [ 324.999060][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.009677][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.019608][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.030144][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.040281][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.050832][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.060910][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.071426][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.081330][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.091987][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.103165][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.112261][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.122777][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.132706][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.143373][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.153252][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.163697][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.173801][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.184338][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.194439][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.205018][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.216153][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.225815][ T8763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.234521][ T8763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.243299][ T8763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.252060][ T8763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.388200][ T5230] Bluetooth: hci6: command tx timeout [ 325.393710][ T5230] Bluetooth: hci3: command tx timeout [ 325.481505][ T8769] veth0_vlan: entered promiscuous mode [ 325.503759][ T8769] veth1_vlan: entered promiscuous mode [ 325.544102][ T8769] veth0_macvtap: entered promiscuous mode [ 325.553018][ T8769] veth1_macvtap: entered promiscuous mode [ 325.568534][ T8] usb 4-1: USB disconnect, device number 5 [ 325.651808][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.711915][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.762165][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.788836][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.951314][ T8907] ======================================================= [ 325.951314][ T8907] WARNING: The mand mount option has been deprecated and [ 325.951314][ T8907] and is ignored by this kernel. Remove the mand [ 325.951314][ T8907] option from the mount to silence this warning. [ 325.951314][ T8907] ======================================================= [ 325.991461][ T8870] usblp0: removed [ 325.992137][ T8907] tmpfs: Unknown parameter 'mpc' [ 326.773212][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.818119][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.832949][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.860127][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.882094][ T8914] netlink: zone id is out of range [ 326.887454][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.904041][ T8914] netlink: zone id is out of range [ 326.933352][ T8914] netlink: set zone limit has 4 unknown bytes [ 326.939881][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.955859][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.971677][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.984751][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.002274][ T8914] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1254'. [ 327.020727][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.047353][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.071179][ T8912] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 327.083802][ T8912] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 327.092242][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.0.1252 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 327.103029][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.113102][ T8912] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 327.119005][ T8912] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 c7 9e 19 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 aa 9e 19 00 4c 8b 23 48 c7 c0 6c [ 327.138616][ T8912] RSP: 0018:ffffc9000d627100 EFLAGS: 00010202 [ 327.144697][ T8912] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 327.152668][ T8912] RDX: ffffc90009a89000 RSI: 00000000000018aa RDI: ffffc9000d6271e0 [ 327.160650][ T8912] RBP: ffffc9000d627290 R08: ffffc9000d627311 R09: 0000000000000000 [ 327.168618][ T8912] R10: ffffc9000d6272f0 R11: fffff52001ac4e63 R12: dffffc0000000000 [ 327.176588][ T8912] R13: 1ffff110058f9e02 R14: ffffc9000d6272e0 R15: ffff88802c7cf000 [ 327.184553][ T8912] FS: 00007fa22f78c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 327.193477][ T8912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.200055][ T8912] CR2: 0000001b31f1dff8 CR3: 00000000286bc000 CR4: 00000000003526f0 [ 327.208037][ T8912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.216012][ T8912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.224003][ T8912] Call Trace: [ 327.227283][ T8912] [ 327.230213][ T8912] ? __die_body+0x5f/0xb0 [ 327.234544][ T8912] ? die_addr+0xb0/0xe0 [ 327.238715][ T8912] ? exc_general_protection+0x3dd/0x5d0 [ 327.244298][ T8912] ? asm_exc_general_protection+0x26/0x30 [ 327.250025][ T8912] ? follow_pfnmap_start+0x1a7/0xfd0 [ 327.255401][ T8912] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 327.261065][ T8912] ? __pfx_validate_chain+0x10/0x10 [ 327.266270][ T8912] ? __pfx_validate_chain+0x10/0x10 [ 327.271469][ T8912] get_pat_info+0x182/0x3f0 [ 327.275973][ T8912] ? __pfx_get_pat_info+0x10/0x10 [ 327.280995][ T8912] untrack_pfn+0x327/0x640 [ 327.285406][ T8912] ? __pfx_untrack_pfn+0x10/0x10 [ 327.290335][ T8912] ? unmap_vmas+0x1f1/0x5f0 [ 327.294854][ T8912] ? __pfx_lock_release+0x10/0x10 [ 327.299886][ T8912] unmap_single_vma+0x1f6/0x2b0 [ 327.304733][ T8912] unmap_vmas+0x3cc/0x5f0 [ 327.309063][ T8912] ? __pfx_unmap_vmas+0x10/0x10 [ 327.313904][ T8912] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.319896][ T8912] ? tlb_gather_mmu+0x24e/0x310 [ 327.324759][ T8912] unmap_region+0x214/0x380 [ 327.329266][ T8912] ? __pfx_unmap_region+0x10/0x10 [ 327.334296][ T8912] ? __mas_set_range+0x133/0x3c0 [ 327.339761][ T8912] ? fput+0x1a8/0x230 [ 327.343756][ T8912] mmap_region+0x22f9/0x2990 [ 327.348385][ T8912] ? __pfx_mmap_region+0x10/0x10 [ 327.353327][ T8912] ? __asan_memset+0x23/0x50 [ 327.357913][ T8912] ? process_measurement+0x3ca/0x1fb0 [ 327.363303][ T8912] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 327.369208][ T8912] ? bpf_lsm_mmap_addr+0x9/0x10 [ 327.374072][ T8912] ? security_mmap_addr+0x6f/0x250 [ 327.379188][ T8912] ? __get_unmapped_area+0x2ed/0x350 [ 327.384471][ T8912] do_mmap+0x8f0/0x1000 [ 327.388632][ T8912] ? __pfx_do_mmap+0x10/0x10 [ 327.393234][ T8912] ? __pfx_down_write_killable+0x10/0x10 [ 327.398877][ T8912] ? __pfx_lock_acquire+0x10/0x10 [ 327.403907][ T8912] vm_mmap_pgoff+0x1dd/0x3d0 [ 327.408521][ T8912] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 327.413645][ T8912] ? __fget_files+0x29/0x470 [ 327.418243][ T8912] ? __fget_files+0x3f3/0x470 [ 327.422922][ T8912] ? __fget_files+0x29/0x470 [ 327.427519][ T8912] ksys_mmap_pgoff+0x4eb/0x720 [ 327.432279][ T8912] ? __x64_sys_mmap+0x7f/0x140 [ 327.437035][ T8912] do_syscall_64+0xf3/0x230 [ 327.441534][ T8912] ? clear_bhb_loop+0x35/0x90 [ 327.446206][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.452107][ T8912] RIP: 0033:0x7fa22e97dff9 [ 327.456530][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.476133][ T8912] RSP: 002b:00007fa22f78c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 327.484543][ T8912] RAX: ffffffffffffffda RBX: 00007fa22eb36058 RCX: 00007fa22e97dff9 [ 327.492513][ T8912] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 327.500496][ T8912] RBP: 00007fa22e9f0296 R08: 0000000000000008 R09: 0000000000000000 [ 327.508473][ T8912] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 327.516448][ T8912] R13: 0000000000000000 R14: 00007fa22eb36058 R15: 00007fff4b6f74d8 [ 327.524447][ T8912] [ 327.527492][ T8912] Modules linked in: [ 327.532966][ T8912] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 327.716126][ T8912] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 327.722104][ T8912] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 c7 9e 19 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 aa 9e 19 00 4c 8b 23 48 c7 c0 6c [ 327.880336][ T8912] RSP: 0018:ffffc9000d627100 EFLAGS: 00010202 [ 327.897381][ T8912] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 327.955717][ T8912] RDX: ffffc90009a89000 RSI: 00000000000018aa RDI: ffffc9000d6271e0 [ 327.983314][ T8912] RBP: ffffc9000d627290 R08: ffffc9000d627311 R09: 0000000000000000 [ 328.032454][ T8912] R10: ffffc9000d6272f0 R11: fffff52001ac4e63 R12: dffffc0000000000 [ 328.076570][ T8912] R13: 1ffff110058f9e02 R14: ffffc9000d6272e0 R15: ffff88802c7cf000 [ 328.084592][ T8912] FS: 00007fa22f78c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 328.094540][ T5227] syz-executor (5227) used greatest stack depth: 18544 bytes left [ 328.126771][ T8912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.133389][ T8912] CR2: 00005634a1082058 CR3: 00000000286bc000 CR4: 00000000003526f0 [ 328.167090][ T8912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.175131][ T8912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.192462][ T8912] Kernel panic - not syncing: Fatal exception [ 328.198984][ T8912] Kernel Offset: disabled [ 328.203327][ T8912] Rebooting in 86400 seconds..