last executing test programs: 5.133461793s ago: executing program 3 (id=573): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x20, 0xb, 0x9, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7, 0x7800, 0x1ff, 0x5d}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0xfffff8cb, 0x3317272b, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x4c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff1) open(0x0, 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000002500)}}, &(0x7f0000000200)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000000000000000000014000300"], 0x38}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 4.943097056s ago: executing program 2 (id=578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) 4.779935412s ago: executing program 2 (id=580): socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 4.702986751s ago: executing program 4 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.686590061s ago: executing program 1 (id=582): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004fc0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='I', 0x7ffff000}, {&(0x7f00000000c0)='U', 0x1}], 0x2}], 0x4924bd8, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8}}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 3.797299596s ago: executing program 3 (id=584): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = getuid() quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="6be685d4017ff044e2fdcf42478cfdd1", &(0x7f00000000c0)=@udp=r4}, 0x20) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000740)=ANY=[], 0xff67) sendfile(r6, r7, &(0x7f0000000000), 0xfffb) fcntl$addseals(r7, 0x409, 0x8) lseek(r7, 0x0, 0x4) write(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.947180278s ago: executing program 2 (id=585): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x64}}, 0x0) 2.946625187s ago: executing program 4 (id=586): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.713992128s ago: executing program 2 (id=588): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) 2.689909911s ago: executing program 3 (id=589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a580000001e0a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001105000300000000000900010073797a30"], 0x80}}, 0x0) 2.605706283s ago: executing program 2 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000080a0504000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/84], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1, &(0x7f0000000540)={0x0, 0x4000000, 0x200}, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto(r1, &(0x7f00000003c0)="ce4b3261f0a17bd615ccf514abe0203f552470ad7ce7ff8dfe238ddedb3fb8acc81f1d2f451a09e14177e4d3a9bdf1c7bcabc473a85006de892156ce86c7202b450a13e141780575d0f025", 0x4b, 0x90, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x10001, @local, 0x7}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4900330080000000ffffffffffff0802110000005050505050857600000000000000000000e33e6a1191"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.498930775s ago: executing program 3 (id=591): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3e, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000001000000000000e0fff7ffffffffff180001801400000008000100ac1414bb08000200ac0314bb24000280140001"], 0x50}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 2.272215587s ago: executing program 3 (id=592): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8008662c, 0x0) 2.189572729s ago: executing program 3 (id=593): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102e6020d00000905820900000000000000030200020000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080d0f8", 0x4, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000028c0)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x7}, 0x5}}, 0x18) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1b01"], 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000003c0)={0x20, 0x24, 0xa6, {0xa6, 0x3, "8f0b4d88983d01e2858aefd614b1e2d92aaf9c3eff7cb4ec9c451be0371b8eaa66aac53bd92824f4ebd4cdfb83a8c87d505cd4a5e6839e863685fce86c48eab37fcbbd9caf5c6a104fe4106ea2470d2bb0474a1fde815c404270c26adda3176f49d7a4ad454b695514a9c4e9124585c3a8c8656b9c8dd18b5bd50d2d235b4791f7b6bdcc470b3f5391ceb2a70257684b2461f06a0209324adc348727a5bf422e01086444"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="0000e8000000395bd7daa89ae0a68f239a20fc00797d7ef704dae79d9e706dbff351b368afee7be8ae2235851babe65f91c649c9f2ddee003136f6d1dc5c865c60512765966b03b1a964fa5b35ba063860c191cf739d0dc040e17a0089b163fe546a74238eb2e24791018eb4d36e9eaa8b9f62abffb703db55f9af419b58e882ff211fa5aae41d0b99d60f49ffcd8a3a8cd379e1ba8535adfdf4e09a8d155dda036efbf1635f72d0943ab38f52cb5183b8addd6759e5dd1b53885289b77bda36a87635fd93fb120c7878ed1e44498f47da6f43a0834b3fb040ade81c4f27f145743548da4fa517e5eec7539fc03b"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x349, 0x2, 0xfff7, 0x9, 0xa69b, 0xf4d, 0xcef, 0x6, 0xd902, 0x7ff, 0xffff}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xe1}, &(0x7f0000000680)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) io_setup(0x800, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}]) read$FUSE(r4, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) r8 = getegid() write$FUSE_CREATE_OPEN(r4, &(0x7f00000000c0)={0xa0, 0x0, r7, {{0x5, 0x1, 0x6, 0xffffffffffffffff, 0x40, 0x27921e49, {0x3, 0x8, 0x74, 0x200, 0x7, 0x8, 0x7, 0x8001, 0x669, 0x8000, 0xff, 0xee00, r8, 0x90, 0x9}}}}, 0xa0) socket$inet(0x2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 1.96228761s ago: executing program 4 (id=594): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 1.82557925s ago: executing program 4 (id=595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000000007d09e6d9ff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003007866726d30"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) futex(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2d1b120d105021061c5e101030109023400010000000009049b00022128e400090503000000000009080bcc0ded7a058909050000000000000408"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r4, &(0x7f0000000480)="ccd089f9ff864fc5ed7a5981342865cdd4895469b189619e1622c41011a94119422f7eeb05003d6ebf394b04048195d49822aa263b56fb4b7a465e2b176095e44bfc91d995a4a99282ab37a5443bc1d3e9036496458a724051b5adb093052a91d6eb61dc931cce225d00c1cca5c2749b4e1d4bdc713bb434e33ddf7723834a012474c1c90ffc911a311a3cc5adbcffa7b58ab5e2b82421dc3628997045a44ce56be10bff41240000000000", 0xfffffffffffffffb, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 1.822462148s ago: executing program 1 (id=596): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4b, 0x10000000000004) 1.646819774s ago: executing program 1 (id=597): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close(r1) 1.585435918s ago: executing program 2 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01s\xd1\xe4RM\xc0x\a\x83\xe2eA\x81x\x00E\xe2\xb1\xaa\xed\xb58\xc6\xc7\xc0\x01\x04\xebbO\xbd<\x1f\x81\x94', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x800, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYBLOB="7f00330080000000ffffffffffff080211000000505050505050000000000000000000000000000000000100030100040600007f100000050300000025030000002a03003c04000000002d1a00000000000000000000020000000000000000000000000000007206030303030303710720000000000000760600000000000000080026006c09000008002700"], 0xac}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xdf}]}]}, 0x30}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000300)='\x15') syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000010902200001000000000904000000ef0101000a"], 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000940)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0xfff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="5b50fe2babb362e9b86c330a3cec8f5010388c528150d668a6c3a70210f33dc862", 0x21}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x6, @local}, 0x1c, &(0x7f00000003c0), 0x0, &(0x7f0000001680)=[@dstopts={{0x48, 0x29, 0x37, {0x2e, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x9, 0x7, [0x813, 0x2]}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x5e, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @enc_lim={0x4, 0x1, 0x2}, @generic={0xc2, 0xb8, "9ef040197ef19de311cd7fab73fa5b278edc670d9eda0c61d8f8ed2b4d0e6ed68272dcdaeab6f288fe4024c93ed50ab1b319cd5f0c49967689836d92994a1911132bc443bba184b11ac7d5f7344da3e04c53da1f0b3fefa93fc416a0221b1c56b38f3cb49b85f259134826211e1fbea25b3c4607f38d41dd38abd452af5d4197e675d8d3415e9a8109ec4f9f8246c0f903891c9405dedc49f592eda38e2ab4edfdca7f3f27631fa4e58fcc63dcdb578ed98222d2f96c6c25"}, @generic={0x3}]}}}, @tclass={{0x14}}, @dstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x178}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x48, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000005c0)="30e716b744c4a876d4bd6cb4058626ff72adc90533c8794858e27e5e2508af9007d82fa5f4f2dfb10988b3b44d04b7baac7e5b3db29ce9b630863c70406c7cee2e77f92f", 0x44}, {&(0x7f0000000640)="92459846431a7774492d98c4d99af4e34f8e1fc60a21ce022adab1ed", 0x1c}], 0x2}}, {{&(0x7f00000006c0)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000700)="7ed6c3b9873c1e7c6b3c4787afdff8edaf54357856a71ccd65137f1b4f83a89bd03a5d36b5ab00066c9bb9b94c4f8f40341ac110087583684474a89571a2ed76d07754e173895c3b1551f01aac87a94151b5aa28436bb4bc5a91dd925088986e49475b3f63b90bcb1287609726e5f0dad94db8090313181aaae155b4991e4e00f37f55b69ba1eef3e8894007b55427d6a349f2ab192e325f9ed852561e382e17dc1ee5652ab3007203bb1b59ecfb8fa63d104f0ca91c57753033e2a87831f4c8ca9b64d7afddd7d8c78f145d58f43b8ef0b0dd661a7c686f955f59adaf5e324c7952796fe1d2082d1006239fbfa00eec7f6d64f93b2a1697", 0xf8}, {&(0x7f0000000800)="dc1cb5fc1afa0f17514e1f527b4e857fa8e0c4577438a2a0018e92eed195399c53d1465581701de6cec36fb930f829563abcd435c263a5319284598b4d5a46bac5f83cf9ce054abbe42b24cc36f78028441a63fc01bef7987301312cb8", 0x5d}, {&(0x7f0000000880)="e4a8ed64e2ed2507598685039b3132641ef1eb0aa25a98e7de8523b30e542f1c6576022ee66cc6f04634b70015e42a217d17b9c2348fc0e33192f330c7750a5c39742279d74e4fcba323e7d917f3fdc9ba933c824ac8681fb5", 0x59}], 0x3}}], 0x4, 0x40) socketpair$unix(0x1, 0x0, 0x0, 0x0) 1.095557542s ago: executing program 1 (id=599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 1.035234961s ago: executing program 1 (id=600): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x2, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 936.64357ms ago: executing program 0 (id=601): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 805.021378ms ago: executing program 0 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0051ff028008003a"], 0x3c}}, 0x0) 671.030321ms ago: executing program 0 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) splice(r0, 0xfffffffffffffffe, r1, 0x0, 0x8, 0x0) 654.231122ms ago: executing program 0 (id=604): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa4}}, 0x0) 557.109555ms ago: executing program 0 (id=605): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 133.579643ms ago: executing program 4 (id=606): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 72.520174ms ago: executing program 1 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000100001c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f00000002c0)=""/255}, 0x20) 56.720692ms ago: executing program 0 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000080a0504000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/84], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1, &(0x7f0000000540)={0x0, 0x4000000, 0x200}, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto(r1, &(0x7f00000003c0)="ce4b3261f0a17bd615ccf514abe0203f552470ad7ce7ff8dfe238ddedb3fb8acc81f1d2f451a09e14177e4d3a9bdf1c7bcabc473a85006de892156ce86c7202b450a13e141780575d0f025", 0x4b, 0x90, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x10001, @local, 0x7}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4900330080000000ffffffffffff0802110000005050505050857600000000000000000000e33e6a1191"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 0s ago: executing program 4 (id=609): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 68.493518][ T5204] cgroup: Unknown subsys name 'net' [ 68.662400][ T5204] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.196415][ T5204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.497481][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504062][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.653408][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.661862][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.672125][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.675265][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.680393][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.694717][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.702074][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.710781][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.711731][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.725761][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.733265][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.739176][ T5226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.740431][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.756186][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.784271][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.794123][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.796043][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.801967][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.808837][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.815832][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.822645][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.837803][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.839950][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.846191][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.862114][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.872433][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.881669][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.895116][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.922717][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.930980][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.328221][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 73.405743][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 73.653312][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 73.667046][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.674320][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.681613][ T5216] bridge_slave_0: entered allmulticast mode [ 73.689854][ T5216] bridge_slave_0: entered promiscuous mode [ 73.702105][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.709264][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.716482][ T5216] bridge_slave_1: entered allmulticast mode [ 73.723490][ T5216] bridge_slave_1: entered promiscuous mode [ 73.730701][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.738014][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.745268][ T5215] bridge_slave_0: entered allmulticast mode [ 73.752235][ T5215] bridge_slave_0: entered promiscuous mode [ 73.781446][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 73.829765][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.837041][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.844829][ T5215] bridge_slave_1: entered allmulticast mode [ 73.851720][ T5215] bridge_slave_1: entered promiscuous mode [ 73.903195][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.942331][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 73.954913][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.969355][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.017393][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.117623][ T5216] team0: Port device team_slave_0 added [ 74.126817][ T5215] team0: Port device team_slave_0 added [ 74.138755][ T5216] team0: Port device team_slave_1 added [ 74.156032][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.163315][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.170574][ T5218] bridge_slave_0: entered allmulticast mode [ 74.178763][ T5218] bridge_slave_0: entered promiscuous mode [ 74.186046][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.193162][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.200703][ T5227] bridge_slave_0: entered allmulticast mode [ 74.209279][ T5227] bridge_slave_0: entered promiscuous mode [ 74.222879][ T5215] team0: Port device team_slave_1 added [ 74.259178][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.269634][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.277434][ T5218] bridge_slave_1: entered allmulticast mode [ 74.284664][ T5218] bridge_slave_1: entered promiscuous mode [ 74.291221][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.299158][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.306565][ T5227] bridge_slave_1: entered allmulticast mode [ 74.313406][ T5227] bridge_slave_1: entered promiscuous mode [ 74.336934][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.344203][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.370214][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.423419][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.433095][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.459908][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.471955][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.479256][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.505373][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.550292][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.571735][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.579044][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.605027][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.638142][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.650314][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.669995][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.677657][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.685512][ T5214] bridge_slave_0: entered allmulticast mode [ 74.692287][ T5214] bridge_slave_0: entered promiscuous mode [ 74.722420][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.744281][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.751470][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.759502][ T5214] bridge_slave_1: entered allmulticast mode [ 74.766833][ T5214] bridge_slave_1: entered promiscuous mode [ 74.799352][ T5215] hsr_slave_0: entered promiscuous mode [ 74.806055][ T5215] hsr_slave_1: entered promiscuous mode [ 74.826844][ T5218] team0: Port device team_slave_0 added [ 74.835321][ T5218] team0: Port device team_slave_1 added [ 74.867808][ T5216] hsr_slave_0: entered promiscuous mode [ 74.875586][ T5216] hsr_slave_1: entered promiscuous mode [ 74.881936][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.890124][ T5216] Cannot create hsr debugfs directory [ 74.921822][ T5227] team0: Port device team_slave_0 added [ 74.934926][ T54] Bluetooth: hci2: command tx timeout [ 74.937755][ T5225] Bluetooth: hci4: command tx timeout [ 74.946631][ T5225] Bluetooth: hci1: command tx timeout [ 74.955471][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.962418][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.988354][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.001942][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.014238][ T54] Bluetooth: hci3: command tx timeout [ 75.018652][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.019797][ T5225] Bluetooth: hci0: command tx timeout [ 75.050708][ T5227] team0: Port device team_slave_1 added [ 75.070130][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.077284][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.103426][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.159403][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.166726][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.193350][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.222790][ T5214] team0: Port device team_slave_0 added [ 75.252543][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.259814][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.285776][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.305083][ T5214] team0: Port device team_slave_1 added [ 75.354471][ T5218] hsr_slave_0: entered promiscuous mode [ 75.360976][ T5218] hsr_slave_1: entered promiscuous mode [ 75.367828][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.375550][ T5218] Cannot create hsr debugfs directory [ 75.491444][ T5227] hsr_slave_0: entered promiscuous mode [ 75.498533][ T5227] hsr_slave_1: entered promiscuous mode [ 75.508157][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.515753][ T5227] Cannot create hsr debugfs directory [ 75.521814][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.532246][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.558601][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.623523][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.630882][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.657008][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.827612][ T5214] hsr_slave_0: entered promiscuous mode [ 75.834934][ T5214] hsr_slave_1: entered promiscuous mode [ 75.841029][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.848732][ T5214] Cannot create hsr debugfs directory [ 75.996150][ T5215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.007994][ T5215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.028264][ T5215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.038830][ T5215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.126542][ T5216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.143836][ T5216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.153563][ T5216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.172223][ T5216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.297694][ T5214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.308692][ T5214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.358897][ T5214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.381644][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.397851][ T5214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.414600][ T5218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.439261][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.451244][ T5218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.472858][ T5218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.485785][ T5218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.513737][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.521042][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.566759][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.574083][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.627234][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.683093][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.698771][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.710787][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.735389][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.742258][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.802760][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.810013][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.852695][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.859870][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.964768][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.017324][ T5225] Bluetooth: hci1: command tx timeout [ 77.017341][ T54] Bluetooth: hci4: command tx timeout [ 77.022733][ T5225] Bluetooth: hci2: command tx timeout [ 77.039616][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.052659][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.094301][ T5225] Bluetooth: hci0: command tx timeout [ 77.099750][ T5225] Bluetooth: hci3: command tx timeout [ 77.131406][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.138556][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.148452][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.155594][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.190468][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.213375][ T5216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.225162][ T5216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.252603][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.307880][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.315085][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.368802][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.375985][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.489384][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.577708][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.602882][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.668884][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.676057][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.688291][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.695545][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.711707][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.923850][ T5215] veth0_vlan: entered promiscuous mode [ 77.947767][ T5215] veth1_vlan: entered promiscuous mode [ 77.972281][ T5216] veth0_vlan: entered promiscuous mode [ 78.031498][ T5216] veth1_vlan: entered promiscuous mode [ 78.053196][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.129243][ T5215] veth0_macvtap: entered promiscuous mode [ 78.141441][ T5215] veth1_macvtap: entered promiscuous mode [ 78.176281][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.197676][ T5216] veth0_macvtap: entered promiscuous mode [ 78.211875][ T5216] veth1_macvtap: entered promiscuous mode [ 78.229279][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.268170][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.303166][ T5215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.312227][ T5215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.322272][ T5215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331203][ T5215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.343464][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.351295][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.362761][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.375394][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.400761][ T5218] veth0_vlan: entered promiscuous mode [ 78.409005][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.420345][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.433707][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.476930][ T5216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.486323][ T5216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.497451][ T5216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.506376][ T5216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.543667][ T5218] veth1_vlan: entered promiscuous mode [ 78.562521][ T5214] veth0_vlan: entered promiscuous mode [ 78.625009][ T5214] veth1_vlan: entered promiscuous mode [ 78.698390][ T5227] veth0_vlan: entered promiscuous mode [ 78.705584][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.716229][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.723587][ T5227] veth1_vlan: entered promiscuous mode [ 78.753500][ T5218] veth0_macvtap: entered promiscuous mode [ 78.799068][ T5218] veth1_macvtap: entered promiscuous mode [ 78.819603][ T5214] veth0_macvtap: entered promiscuous mode [ 78.847492][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.862132][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.872868][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.883356][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.896490][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.913552][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.918710][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.933370][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.935761][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.947847][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.963688][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.975751][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.983662][ T5214] veth1_macvtap: entered promiscuous mode [ 79.048022][ T5227] veth0_macvtap: entered promiscuous mode [ 79.066115][ T5218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.075495][ T5218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.084715][ T5218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.093436][ T5218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.106903][ T5225] Bluetooth: hci4: command tx timeout [ 79.112334][ T5225] Bluetooth: hci1: command tx timeout [ 79.118208][ T54] Bluetooth: hci2: command tx timeout [ 79.133573][ T5227] veth1_macvtap: entered promiscuous mode [ 79.140884][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.150826][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.175660][ T5235] Bluetooth: hci0: command tx timeout [ 79.180505][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.181168][ T54] Bluetooth: hci3: command tx timeout [ 79.191732][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.217480][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.231524][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.242603][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.253234][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.265971][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.338249][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.346644][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.348965][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.372161][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.388768][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.412814][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.431049][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.442741][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.455670][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.512862][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.533246][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.545085][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.561720][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.572642][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.591380][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.601858][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.619328][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.633306][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.659686][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.676904][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.700351][ T2511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.716397][ T2511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.723660][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.743038][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.756694][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.770786][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.781517][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.807339][ T5305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.887436][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.942308][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.012217][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.088137][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.139724][ T5214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189050][ T5214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.238893][ T5214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331549][ T5214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.503777][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.564010][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.574527][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.584603][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.660013][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.684940][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.896691][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.913659][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.021695][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.050619][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.076708][ T2556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.120786][ T2556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.153506][ T2511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.173218][ T2511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.189515][ T54] Bluetooth: hci2: command tx timeout [ 81.189535][ T5235] Bluetooth: hci4: command tx timeout [ 81.254317][ T5235] Bluetooth: hci3: command tx timeout [ 81.255282][ T54] Bluetooth: hci0: command tx timeout [ 81.729497][ T5333] ubi0: attaching mtd0 [ 81.742647][ T5333] ubi0: scanning is finished [ 81.748247][ T5333] ubi0: empty MTD device detected [ 81.814889][ T5334] netlink: 92 bytes leftover after parsing attributes in process `syz.2.12'. [ 82.432242][ T5333] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 82.845791][ T5347] usb usb8: usbfs: process 5347 (syz.0.16) did not claim interface 0 before use [ 83.494482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.734454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.747095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.849301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.951801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.984497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.053531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.135021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.156841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.629676][ T5372] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.681924][ T54] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 85.690803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.247602][ T5382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.095898][ T25] cfg80211: failed to load regulatory.db [ 87.438691][ C0] eth0: bad gso: type: 1, size: 1408 [ 87.439341][ T5377] kvm: emulating exchange as write [ 87.596160][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.823715][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.848650][ T5400] usb usb8: usbfs: process 5400 (syz.3.31) did not claim interface 0 before use [ 87.862090][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 87.888095][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.919629][ T9] usb 1-1: Product: syz [ 87.923837][ T9] usb 1-1: Manufacturer: syz [ 87.939516][ T9] usb 1-1: SerialNumber: syz [ 87.973154][ T9] usb 1-1: config 0 descriptor?? [ 88.030695][ T9] gspca_main: spca500-2.14.0 probing 8086:0630 [ 88.306304][ T5316] usb 1-1: USB disconnect, device number 2 [ 91.045297][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 91.055834][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 91.155960][ T54] Bluetooth: hci2: hardware error 0x00 [ 91.415866][ T5418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.227169][ C0] eth0: bad gso: type: 1, size: 1408 [ 92.611898][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.874847][ T5459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.964717][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 93.013526][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 93.814705][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.111051][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.134032][ T9] usb 1-1: config 1 has no interface number 1 [ 94.140273][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 94.170652][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.194481][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.203555][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.237052][ T9] usb 1-1: Product: syz [ 94.241257][ T9] usb 1-1: Manufacturer: syz [ 94.248480][ T5472] dccp_close: ABORT with 1 bytes unread [ 94.254153][ T9] usb 1-1: SerialNumber: syz [ 94.552871][ T9] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 94.642210][ T9] usb 1-1: USB disconnect, device number 3 [ 95.146939][ T5496] mmap: syz.3.65 (5496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.174476][ T5228] udevd[5228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.704261][ T5270] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.912121][ C0] eth0: bad gso: type: 1, size: 1408 [ 97.954046][ T5270] usb 1-1: Using ep0 maxpacket: 16 [ 97.966896][ T5270] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.010970][ T5270] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.024846][ T5270] usb 1-1: config 1 has no interface number 1 [ 98.031115][ T5270] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.056125][ T5270] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.095649][ T5270] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.114229][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.133772][ T5270] usb 1-1: Product: syz [ 98.149770][ T5270] usb 1-1: Manufacturer: syz [ 98.165098][ T5270] usb 1-1: SerialNumber: syz [ 98.400747][ T29] audit: type=1326 audit(1721922918.693:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5553 comm="syz.1.90" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a97775f19 code=0x0 [ 98.452443][ T5270] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 98.480480][ T5562] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.556539][ T5270] usb 1-1: USB disconnect, device number 4 [ 98.859702][ T5228] udevd[5228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.023963][ T5266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.251541][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 99.276090][ T5266] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 99.300501][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.341621][ T5266] usb 3-1: config 0 descriptor?? [ 99.371137][ T5266] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 99.387964][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 99.426351][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 99.457032][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 99.478807][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 99.489851][ T5590] dccp_close: ABORT with 1 bytes unread [ 99.501780][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 99.530296][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 99.559436][ T5266] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 99.613699][ T5266] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 99.689725][ T5266] usb 3-1: USB disconnect, device number 2 [ 99.766751][ T5266] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 99.808825][ T5266] keyspan 3-1:0.0: device disconnected [ 100.991872][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 101.074076][ T5616] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.953445][ T29] audit: type=1800 audit(1721922926.253:3): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.132" name="/" dev="fuse" ino=1 res=0 errno=0 [ 105.989347][ T5316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.245767][ T5316] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.283307][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.480307][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.220123][ T5316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.325041][ T5316] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.353905][ T5316] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.376870][ T5316] usb 5-1: Manufacturer: syz [ 108.415459][ T5316] usb 5-1: config 0 descriptor?? [ 108.585861][ T5726] netlink: 'syz.1.141': attribute type 3 has an invalid length. [ 108.603728][ T29] audit: type=1326 audit(1721922928.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.0.140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x0 [ 108.638748][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 108.874783][ T5316] usbhid 5-1:0.0: can't add hid device: -71 [ 108.881202][ T5316] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.895995][ T5316] usb 5-1: USB disconnect, device number 2 [ 110.705600][ T5763] ALSA: mixer_oss: invalid OSS volume '' [ 111.501355][ T5772] netlink: 172 bytes leftover after parsing attributes in process `syz.0.156'. [ 111.667996][ T5778] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 112.553386][ T1169] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.171886][ T1169] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.283671][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.373014][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.404071][ T1169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.432968][ T1169] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.464440][ T1169] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.634732][ T1169] usb 3-1: Manufacturer: syz [ 113.677440][ T1169] usb 3-1: config 0 descriptor?? [ 114.473832][ T5801] ipt_REJECT: TCP_RESET invalid for non-tcp [ 114.600276][ T5804] ALSA: mixer_oss: invalid OSS volume '' [ 114.606515][ T1169] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 114.619782][ T1169] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 114.642473][ T1169] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 115.013365][ T29] audit: type=1326 audit(1721922935.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5803 comm="syz.3.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e4175f19 code=0x0 [ 116.060275][ T58] usb 3-1: USB disconnect, device number 3 [ 116.291110][ T5270] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.518242][ T5270] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 116.564817][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.655771][ T5270] usb 1-1: config 0 descriptor?? [ 116.696743][ T5270] pwc: Creative Labs Webcam Pro Ex detected. [ 117.426328][ T5270] pwc: Failed to set LED on/off time (-71) [ 117.433675][ T5270] pwc: send_video_command error -71 [ 117.441801][ T5270] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 117.450654][ T5270] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 117.468848][ T5270] usb 1-1: USB disconnect, device number 5 [ 117.778697][ T5849] xt_CHECKSUM: unsupported CHECKSUM operation 2 [ 117.911999][ T5849] netlink: 166 bytes leftover after parsing attributes in process `syz.2.182'. [ 118.187560][ T29] audit: type=1800 audit(1721922938.493:6): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.183" name="/" dev="fuse" ino=1 res=0 errno=0 [ 118.206417][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.395018][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.411717][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.419430][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.433646][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.443173][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.452686][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.498083][ T29] audit: type=1326 audit(1721922938.803:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5857 comm="syz.2.185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd7375f19 code=0x0 [ 119.551405][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.741050][ T5881] netlink: 112 bytes leftover after parsing attributes in process `syz.3.191'. [ 119.799580][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 119.908250][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.074065][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.110182][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.288398][ T25] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 120.320935][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.336539][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.373782][ T25] usb 1-1: config 0 descriptor?? [ 120.394386][ T25] pwc: Creative Labs Webcam Pro Ex detected. [ 120.535883][ T54] Bluetooth: hci4: command tx timeout [ 120.599879][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 120.662175][ T25] pwc: Failed to set LED on/off time (-71) [ 120.694496][ T25] pwc: send_video_command error -71 [ 120.718199][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 120.799430][ T25] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 120.869963][ T25] usb 1-1: USB disconnect, device number 6 [ 121.059699][ T12] bridge_slave_1: left allmulticast mode [ 121.092407][ T12] bridge_slave_1: left promiscuous mode [ 121.986632][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.115470][ T12] bridge_slave_0: left allmulticast mode [ 122.134945][ T12] bridge_slave_0: left promiscuous mode [ 122.161596][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.620390][ T54] Bluetooth: hci4: command tx timeout [ 123.253182][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.362237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.524294][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 123.547729][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.627712][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.858254][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.884807][ T12] bond0 (unregistering): Released all slaves [ 123.912511][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.951937][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.012536][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.041744][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.300194][ T5957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.331246][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.346973][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.366650][ T5862] bridge_slave_0: entered allmulticast mode [ 124.399389][ T5862] bridge_slave_0: entered promiscuous mode [ 124.423545][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.441779][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.453536][ T5862] bridge_slave_1: entered allmulticast mode [ 124.524234][ T5862] bridge_slave_1: entered promiscuous mode [ 124.694090][ T54] Bluetooth: hci4: command tx timeout [ 125.327409][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.338538][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 125.354134][ T9] usbtmc 5-1:16.0: can't read capabilities [ 125.371690][ T9] usb 5-1: USB disconnect, device number 3 [ 125.603146][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.704927][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 125.764197][ T12] hsr_slave_0: left promiscuous mode [ 125.814081][ T12] hsr_slave_1: left promiscuous mode [ 125.835669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.843155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.930483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.962207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.060195][ T12] veth1_macvtap: left promiscuous mode [ 126.096256][ T12] veth0_macvtap: left promiscuous mode [ 126.111423][ T12] veth1_vlan: left promiscuous mode [ 126.125334][ T12] veth0_vlan: left promiscuous mode [ 126.213091][ T5998] fuse: Unknown parameter '.K0OΏNA-IeKm' [ 126.784158][ T54] Bluetooth: hci4: command tx timeout [ 127.825143][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 128.222200][ T5980] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 128.844062][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.900974][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.949342][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.044254][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 129.071349][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.089559][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.106678][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.119714][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.133931][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.143080][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.388872][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 129.398521][ T9] usbtmc 5-1:16.0: can't read capabilities [ 129.482033][ T5984] Falling back ldisc for ptm0. [ 129.652772][ T5270] usb 5-1: USB disconnect, device number 4 [ 129.747685][ T5862] team0: Port device team_slave_0 added [ 129.791164][ T5862] team0: Port device team_slave_1 added [ 129.893401][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.911204][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.982756][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.040204][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.047423][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.079030][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.110214][ T29] audit: type=1400 audit(1721922950.413:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6031 comm="syz.0.233" dest=20002 netif=wpan0 [ 130.260944][ T5862] hsr_slave_0: entered promiscuous mode [ 130.292712][ T5862] hsr_slave_1: entered promiscuous mode [ 130.323823][ T29] audit: type=1326 audit(1721922950.623:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x7ffc0000 [ 130.346738][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.364093][ T5862] Cannot create hsr debugfs directory [ 130.403686][ T29] audit: type=1326 audit(1721922950.623:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x7ffc0000 [ 130.425710][ T6037] bridge_slave_1: left allmulticast mode [ 130.438209][ T6042] MPI: mpi too large (185152 bits) [ 130.442403][ T6037] bridge_slave_1: left promiscuous mode [ 130.495448][ T29] audit: type=1326 audit(1721922950.663:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f851bd75f19 code=0x7ffc0000 [ 130.522000][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.583924][ T29] audit: type=1326 audit(1721922950.663:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x7ffc0000 [ 130.674120][ T29] audit: type=1326 audit(1721922950.663:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x7ffc0000 [ 130.754187][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.163950][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.324994][ T6068] fuse: Unknown parameter '.K0OΏNA-IeKm' [ 131.387553][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 131.409370][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.429065][ T25] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 131.445057][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.473919][ T25] usb 1-1: Product: syz [ 131.488417][ T25] usb 1-1: Manufacturer: syz [ 131.493100][ T25] usb 1-1: SerialNumber: syz [ 131.516477][ T25] usb 1-1: config 0 descriptor?? [ 131.542128][ T25] as10x_usb: device has been detected [ 131.563511][ T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 131.622560][ T29] audit: type=1400 audit(1721922951.923:14): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6073 comm="syz.4.243" dest=20002 netif=wpan0 [ 131.652283][ T25] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 131.738293][ T25] as10x_usb: error during firmware upload part1 [ 131.775201][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.244'. [ 131.785271][ T25] Registered device Abilis Systems DVB-Titan [ 131.915804][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.030252][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.168174][ T6085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.346766][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.571937][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.745846][ T6057] warning: `syz.0.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.937498][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 132.996337][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.003485][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.070360][ T58] usb 1-1: USB disconnect, device number 7 [ 134.159679][ T58] Unregistered device Abilis Systems DVB-Titan [ 134.173728][ T58] as10x_usb: device has been disconnected [ 135.335251][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 135.344767][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 135.352243][ T54] Bluetooth: hci1: hardware error 0x00 [ 136.132250][ T6136] No such timeout policy "syz1" [ 137.001497][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.030277][ T6139] capability: warning: `syz.4.260' uses deprecated v2 capabilities in a way that may be insecure [ 137.063611][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.070708][ T29] audit: type=1400 audit(1721922957.363:15): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=6138 comm="syz.4.260" name="57" dev="tmpfs" ino=311 [ 137.127918][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.135679][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.188981][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.196144][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.358660][ T6148] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.264'. [ 137.499546][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 137.515729][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 138.776639][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 138.856082][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.815681][ T5862] veth0_vlan: entered promiscuous mode [ 139.869326][ T5862] veth1_vlan: entered promiscuous mode [ 141.462163][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 143.982364][ T5862] veth0_macvtap: entered promiscuous mode [ 144.008338][ T5862] veth1_macvtap: entered promiscuous mode [ 144.050401][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.084234][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.093992][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.110204][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.122535][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.134980][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.147623][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.157528][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.169362][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.192325][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.212945][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.224406][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.240248][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.259973][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.293234][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.321958][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.340026][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.349868][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.362976][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.235495][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.246984][ T25] usb 5-1: SerialNumber: syz [ 145.253374][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.271261][ T25] cdc_ether 5-1:1.0: skipping garbage [ 145.278969][ T25] usb 5-1: bad CDC descriptors [ 145.305968][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.383574][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.387867][ T6219] nfs4: Unexpected value for 'rdma' [ 145.404712][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.413445][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.437177][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.708728][ T58] usb 5-1: USB disconnect, device number 5 [ 147.949825][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.994375][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.094076][ T2511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.125134][ T2511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.422748][ T6262] netlink: 96 bytes leftover after parsing attributes in process `syz.3.300'. [ 149.139422][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 149.145365][ T6277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.307'. [ 149.190537][ T6277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.307'. [ 149.220460][ T6277] netlink: 81 bytes leftover after parsing attributes in process `syz.0.307'. [ 149.331651][ T54] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 149.332049][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 149.412977][ T6278] syz.0.307 (6278): attempted to duplicate a private mapping with mremap. This is not supported. [ 149.534059][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.782242][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.810522][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.846436][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.886868][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.918962][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.965012][ T25] usb 3-1: config 0 descriptor?? [ 150.032065][ T6301] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 150.135108][ T5270] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.336770][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.411887][ T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.424091][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.454492][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 150.473012][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.515216][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.540035][ T5270] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.560442][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 150.591779][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.644972][ T5270] usb 1-1: config 0 descriptor?? [ 150.650730][ T6296] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.797230][ T6310] netlink: 'syz.3.320': attribute type 3 has an invalid length. [ 150.824985][ T25] usb 3-1: USB disconnect, device number 4 [ 151.028893][ T6321] netlink: 104 bytes leftover after parsing attributes in process `syz.3.322'. [ 151.055801][ T6321] netlink: 104 bytes leftover after parsing attributes in process `syz.3.322'. [ 151.088678][ T6321] netlink: 81 bytes leftover after parsing attributes in process `syz.3.322'. [ 151.113090][ T5270] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 151.140059][ T5270] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 151.170227][ T5270] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.191605][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 151.461208][ T25] usb 1-1: USB disconnect, device number 8 [ 151.732388][ T6339] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 152.361132][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.336'. [ 152.647976][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.693855][ C1] Adjusting tsc more than 11% (8579265 vs 8464875) [ 152.715329][ T6372] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 152.830304][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.875445][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.903912][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.903942][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.903964][ T25] usb 1-1: SerialNumber: syz [ 153.101223][ T25] usb 1-1: 0:2 : does not exist [ 153.117495][ T25] usb 1-1: unit 255 not found! [ 153.162298][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 153.171306][ T25] usb 1-1: USB disconnect, device number 9 [ 153.246600][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.523320][ T29] audit: type=1326 audit(1721922973.936:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.3.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e4175f19 code=0x0 [ 153.743850][ T29] audit: type=1326 audit(1721922974.179:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6405 comm="syz.0.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x0 [ 155.950568][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.363'. [ 156.079976][ T6448] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 156.240705][ T6448] batman_adv: batadv0: Adding interface: team0 [ 156.248197][ T6448] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.273597][ T6448] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 156.284661][ T6451] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 156.292490][ T6451] netlink: 2 bytes leftover after parsing attributes in process `syz.0.368'. [ 156.301481][ T6451] team0: entered promiscuous mode [ 156.324446][ T6451] team_slave_0: entered promiscuous mode [ 156.399994][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 156.409819][ T6451] team_slave_1: entered promiscuous mode [ 156.419038][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.426337][ T6451] batman_adv: batadv0: Interface activated: team0 [ 156.432923][ T6451] batman_adv: batadv0: Interface deactivated: team0 [ 156.439700][ T6451] batman_adv: batadv0: Removing interface: team0 [ 156.637419][ T6451] bridge0: port 3(team0) entered blocking state [ 156.644513][ T6451] bridge0: port 3(team0) entered disabled state [ 156.652128][ T6451] team0: entered allmulticast mode [ 156.657366][ T6451] team_slave_0: entered allmulticast mode [ 156.663239][ T6451] team_slave_1: entered allmulticast mode [ 156.673578][ T6451] bridge0: port 3(team0) entered blocking state [ 156.680970][ T6451] bridge0: port 3(team0) entered forwarding state [ 157.221547][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 157.665765][ T6462] netlink: 104 bytes leftover after parsing attributes in process `syz.2.372'. [ 157.703540][ T6462] netlink: 104 bytes leftover after parsing attributes in process `syz.2.372'. [ 157.788010][ T6462] netlink: 81 bytes leftover after parsing attributes in process `syz.2.372'. [ 157.926144][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 158.179386][ T5272] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.402809][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 158.430572][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 158.487506][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.517876][ T5272] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 158.530528][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.560560][ T5272] usb 5-1: Product: syz [ 158.581819][ T5272] usb 5-1: Manufacturer: syz [ 158.614036][ T5272] usb 5-1: SerialNumber: syz [ 158.662185][ T5272] usb 5-1: config 0 descriptor?? [ 159.075806][ T58] usb 5-1: USB disconnect, device number 6 [ 159.515116][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.381'. [ 161.296206][ T6527] fuse: Unknown parameter 'use00000000000000000000' [ 161.841483][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 161.955780][ T29] audit: type=1326 audit(1721923440.610:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6551 comm="syz.0.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x0 [ 162.018173][ T6550] netlink: 96 bytes leftover after parsing attributes in process `syz.4.393'. [ 163.401484][ T6554] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 163.610239][ T6575] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 163.617039][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.651254][ T6575] vhci_hcd vhci_hcd.0: Device attached [ 163.843033][ T6576] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 164.196929][ T52] vhci_hcd: stop threads [ 164.239349][ T25] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 164.259802][ T52] vhci_hcd: release socket [ 164.337193][ T54] Bluetooth: hci0: unexpected event for opcode 0x203c [ 164.522119][ T52] vhci_hcd: disconnect device [ 164.913747][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 164.947778][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 165.023962][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'. [ 165.150905][ T6621] fuse: Unknown parameter 'use00000000000000000000' [ 165.691925][ T29] audit: type=1326 audit(1721923444.352:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e4175f19 code=0x7ffc0000 [ 165.733834][ T29] audit: type=1326 audit(1721923444.352:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e4175f19 code=0x7ffc0000 [ 165.787289][ T29] audit: type=1326 audit(1721923444.362:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f34e4175f19 code=0x7ffc0000 [ 165.857989][ T29] audit: type=1326 audit(1721923444.372:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e4175f19 code=0x7ffc0000 [ 165.878307][ T5270] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.090417][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.134415][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.155912][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.172555][ T5270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.182248][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.193807][ T5270] usb 2-1: config 0 descriptor?? [ 166.636808][ T5270] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 166.661510][ T5270] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 166.724469][ T5270] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 166.812496][ T29] audit: type=1326 audit(1721923445.452:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.4.423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe589175f19 code=0x0 [ 167.075786][ T1169] usb 2-1: USB disconnect, device number 2 [ 167.255543][ T6702] vlan2: entered promiscuous mode [ 167.270729][ T6702] veth0_to_team: entered promiscuous mode [ 167.285029][ T6702] veth0_to_team: left promiscuous mode [ 167.373008][ T6682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.388788][ T6682] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 167.460826][ T6682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.466743][ T6682] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 168.042195][ T6730] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 168.057668][ T6730] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.432'. [ 168.069152][ T6730] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 168.120063][ T6682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.147273][ T6682] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 168.230060][ T29] audit: type=1326 audit(1721923446.893:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6735 comm="syz.0.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x0 [ 168.535348][ T6741] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 168.788052][ T5272] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.544735][ T6741] batman_adv: batadv0: Adding interface: team0 [ 169.551217][ T6741] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.578467][ T6741] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 169.736934][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 169.806988][ T25] vhci_hcd: vhci_device speed not set [ 169.808922][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 169.824118][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.856473][ T6740] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 169.866456][ T6740] netlink: 2 bytes leftover after parsing attributes in process `syz.2.436'. [ 169.875374][ T6740] team0: entered promiscuous mode [ 169.886159][ T5272] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 169.904122][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.918025][ T6740] team_slave_0: entered promiscuous mode [ 169.926765][ T5272] usb 5-1: Product: syz [ 169.934795][ T6740] team_slave_1: entered promiscuous mode [ 169.950205][ T5272] usb 5-1: Manufacturer: syz [ 169.963796][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.971074][ T5272] usb 5-1: SerialNumber: syz [ 169.980081][ T5272] usb 5-1: config 0 descriptor?? [ 169.985521][ T6740] batman_adv: batadv0: Interface activated: team0 [ 170.012478][ T6740] batman_adv: batadv0: Interface deactivated: team0 [ 170.044059][ T6740] batman_adv: batadv0: Removing interface: team0 [ 170.062060][ T6740] bridge0: port 3(team0) entered blocking state [ 170.071424][ T6740] bridge0: port 3(team0) entered disabled state [ 170.091874][ T6740] team0: entered allmulticast mode [ 170.100351][ T6740] team_slave_0: entered allmulticast mode [ 170.112710][ T6740] team_slave_1: entered allmulticast mode [ 170.132711][ T6740] bridge0: port 3(team0) entered blocking state [ 170.139171][ T6740] bridge0: port 3(team0) entered forwarding state [ 171.037367][ T5266] usb 5-1: USB disconnect, device number 7 [ 171.532497][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.590598][ T6779] team0: Port device bond0 added [ 171.632266][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 172.507879][ T6806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.961032][ T6828] bridge0: entered promiscuous mode [ 173.134162][ T6804] bridge0: left promiscuous mode [ 173.315107][ T6813] syz.1.451 (6813) used greatest stack depth: 18480 bytes left [ 173.567277][ T25] IPVS: starting estimator thread 0... [ 173.695020][ T6847] IPVS: using max 24 ests per chain, 57600 per kthread [ 173.782518][ T6855] netlink: 96 bytes leftover after parsing attributes in process `syz.3.460'. [ 174.135954][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.262277][ T6872] 9pnet_fd: p9_fd_create_tcp (6872): problem connecting socket to 127.0.0.1 [ 174.334241][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 174.363304][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.402132][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=f3.0c [ 174.422001][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 174.432215][ T25] usb 3-1: Product: syz [ 174.442329][ T25] usb 3-1: Manufacturer: syz [ 174.452442][ T25] usb 3-1: SerialNumber: syz [ 174.476781][ T25] usb 3-1: config 0 descriptor?? [ 174.500846][ T25] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 174.519807][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 174.538025][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 174.572401][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 174.618371][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 174.654413][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 174.688795][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 174.734491][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 174.745674][ T25] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 174.779127][ T25] usb 3-1: USB disconnect, device number 5 [ 175.103793][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 175.357375][ T25] keyspan 3-1:0.0: device disconnected [ 175.667768][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 175.747767][ T6918] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.013662][ T6932] netlink: 'syz.0.480': attribute type 6 has an invalid length. [ 176.027373][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 176.039183][ T6933] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 176.070099][ T6933] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 176.099071][ T6933] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.479'. [ 176.284930][ T29] audit: type=1326 audit(1721923454.947:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851bd75f19 code=0x0 [ 177.662068][ T5269] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 177.747505][ T6963] Process accounting resumed [ 177.875383][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.898399][ T5269] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.915297][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.950543][ T5269] usb 4-1: config 0 descriptor?? [ 177.991878][ T6975] 9pnet_fd: p9_fd_create_tcp (6975): problem connecting socket to 127.0.0.1 [ 178.797509][ T5269] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 178.839154][ T5269] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input6 [ 179.064173][ T5269] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 179.222419][ T1169] usb 4-1: USB disconnect, device number 2 [ 179.309460][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 179.400416][ T7002] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.500'. [ 180.651191][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 180.746647][ T7028] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 180.774176][ T7028] netlink: 'syz.0.511': attribute type 2 has an invalid length. [ 180.821032][ T7028] netlink: 1 bytes leftover after parsing attributes in process `syz.0.511'. [ 180.851474][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.512'. [ 180.951292][ T7032] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.972659][ T7032] netlink: 1 bytes leftover after parsing attributes in process `syz.3.512'. [ 181.040509][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 181.048845][ T29] audit: type=1326 audit(1721923459.710:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe589175f19 code=0x0 [ 182.125001][ T7063] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.517'. [ 182.289293][ T7071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.076273][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 185.261676][ T7125] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.538'. [ 185.559539][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.679864][ T7137] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.997611][ T7143] process 'syz.0.546' launched './file0' with NULL argv: empty string added [ 187.444366][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 187.599743][ T7163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.552'. [ 187.880381][ T7177] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 187.963056][ T7177] bridge0: port 3(team0) entered disabled state [ 188.081740][ T7177] team0: left allmulticast mode [ 188.086637][ T7177] team_slave_0: left allmulticast mode [ 188.131799][ T7177] team_slave_1: left allmulticast mode [ 188.143385][ T7177] team0: left promiscuous mode [ 188.187211][ T7177] team_slave_0: left promiscuous mode [ 188.193136][ T7177] team_slave_1: left promiscuous mode [ 188.199308][ T7177] bridge0: port 3(team0) entered disabled state [ 188.250032][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'. [ 188.362633][ T7177] batman_adv: batadv0: Adding interface: team0 [ 188.427331][ T7177] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.452781][ T7177] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.468630][ T7180] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 188.499842][ T7180] netlink: 2 bytes leftover after parsing attributes in process `syz.0.554'. [ 188.509035][ T7180] team0: entered promiscuous mode [ 188.514318][ T7180] team_slave_0: entered promiscuous mode [ 188.520484][ T7180] team_slave_1: entered promiscuous mode [ 188.532512][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.539747][ T7180] batman_adv: batadv0: Interface activated: team0 [ 188.546427][ T7180] batman_adv: batadv0: Interface deactivated: team0 [ 188.553316][ T7180] batman_adv: batadv0: Removing interface: team0 [ 188.728956][ T7180] bridge0: port 3(team0) entered blocking state [ 188.735761][ T7180] bridge0: port 3(team0) entered disabled state [ 188.744549][ T7180] team0: entered allmulticast mode [ 188.758863][ T7180] team_slave_0: entered allmulticast mode [ 188.764713][ T7180] team_slave_1: entered allmulticast mode [ 188.782659][ T7180] bridge0: port 3(team0) entered blocking state [ 188.789098][ T7180] bridge0: port 3(team0) entered forwarding state [ 188.836818][ T5269] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.846877][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.019199][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 189.190071][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 189.245769][ T5269] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 189.259400][ T58] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 189.278472][ T58] usb 5-1: config 0 has no interface number 0 [ 189.284609][ T58] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 190.066237][ T5269] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.086262][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.094385][ T5269] usb 3-1: SerialNumber: syz [ 190.130463][ T58] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 190.208442][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.231216][ T58] usb 5-1: Product: syz [ 190.242447][ T58] usb 5-1: Manufacturer: syz [ 190.248798][ T58] usb 5-1: SerialNumber: syz [ 190.255875][ T58] usb 5-1: config 0 descriptor?? [ 190.461960][ T9] usb 3-1: USB disconnect, device number 6 [ 190.805882][ T58] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.023128][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 191.039018][ T58] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.068029][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 191.101517][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.125090][ T5269] usb 5-1: USB disconnect, device number 8 [ 191.156035][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.185426][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.219584][ T58] usb 2-1: config 0 descriptor?? [ 191.236048][ T7213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.270879][ T58] hub 2-1:0.0: USB hub found [ 191.284121][ T7222] kvm: kvm [7221]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x6b6e696c6e [ 191.496470][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 191.827760][ T58] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 193.205787][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 193.232605][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.322913][ T58] usb 2-1: USB disconnect, device number 3 [ 193.578986][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.573'. [ 193.671044][ T7246] netlink: 1 bytes leftover after parsing attributes in process `syz.3.573'. [ 193.721471][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 194.014884][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.022371][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.143752][ T29] audit: type=1326 audit(1721923472.806:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7261 comm="syz.1.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd870775f19 code=0x0 [ 195.418034][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 196.009977][ T7287] netlink: 'syz.3.589': attribute type 4 has an invalid length. [ 196.028433][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 196.161808][ T7291] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.590'. [ 196.223157][ T1169] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 196.245869][ T7292] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 196.253898][ T7292] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.591'. [ 196.266904][ T7292] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 196.279896][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 196.415755][ T1169] usb 1-1: Using ep0 maxpacket: 32 [ 196.470296][ T1169] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.489593][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 196.516254][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.540702][ T1169] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.551663][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.634778][ T1169] usb 1-1: config 0 descriptor?? [ 196.640470][ T7283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.688749][ T1169] hub 1-1:0.0: USB hub found [ 196.783365][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.886764][ T1169] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 196.985299][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.003665][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.018119][ T58] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.059930][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.073335][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.091778][ T58] usb 4-1: Product: syz [ 197.098523][ T1169] usbhid 1-1:0.0: can't add hid device: -71 [ 197.100128][ T58] usb 4-1: Manufacturer: syz [ 197.114032][ T1169] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.116716][ T58] usb 4-1: SerialNumber: syz [ 197.142698][ T5270] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.163724][ T1169] usb 1-1: USB disconnect, device number 10 [ 197.342716][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 197.359607][ T5270] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 197.368295][ T5270] usb 5-1: config 0 has no interface number 0 [ 197.381685][ T5270] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.392322][ T5270] usb 5-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.413912][ T5270] usb 5-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 197.433462][ T5270] usb 5-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 197.444881][ T5270] usb 5-1: Product: syz [ 197.449095][ T5270] usb 5-1: Manufacturer: syz [ 197.458815][ T5270] usb 5-1: SerialNumber: syz [ 197.469466][ T5270] usb 5-1: config 0 descriptor?? [ 197.482158][ T5270] ftdi_sio 5-1:0.155: FTDI USB Serial Device converter detected [ 197.492495][ T5272] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.493610][ T5270] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 197.685306][ T5272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.700177][ T5272] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 197.721169][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.600'. [ 197.741270][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.761590][ T5272] usb 3-1: config 0 descriptor?? [ 197.786186][ T5272] rndis_host 3-1:0.0: skipping garbage [ 197.801162][ T5272] usb 3-1: bad CDC descriptors [ 197.872750][ T5272] usb 5-1: USB disconnect, device number 9 [ 197.880969][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 197.883093][ T5272] ftdi_sio 5-1:0.155: device disconnected [ 198.028056][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 198.156755][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 198.193380][ T58] cdc_ncm 4-1:1.0: bind() failure [ 198.207113][ T58] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 198.217466][ T58] cdc_ncm 4-1:1.1: bind() failure [ 198.634491][ C0] Oops: general protection fault, probably for non-canonical address 0xe3fffa22008be594: 0000 [#1] PREEMPT SMP KASAN PTI [ 198.647126][ C0] KASAN: maybe wild-memory-access in range [0x1ffff110045f2ca0-0x1ffff110045f2ca7] [ 198.656435][ C0] CPU: 0 UID: 0 PID: 7332 Comm: syz.4.606 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 198.666680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 198.676746][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 198.681877][ C0] Code: 48 89 ef e8 e7 9f 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 b5 9f 3b 00 48 8b 03 48 89 44 [ 198.701499][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010202 [ 198.707579][ C0] RAX: dffffc0000000000 RBX: 1ffff110045f2ca0 RCX: ffff888022f95a00 [ 198.715550][ C0] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc90003bf7810 [ 198.723533][ C0] RBP: ffffc90003bf7810 R08: ffffffff89854f0a R09: 1ffffffff1fecdb5 [ 198.731501][ C0] R10: dffffc0000000000 R11: fffffbfff1fecdb6 R12: 0000000000000000 [ 198.739467][ C0] R13: 03fffe22008be594 R14: 0000000000000000 R15: ffffc90003bf7810 [ 198.747437][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 198.756367][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.762944][ C0] CR2: 00007fff390eee08 CR3: 000000000e534000 CR4: 00000000003506f0 [ 198.770926][ C0] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.778896][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.786873][ C0] Call Trace: [ 198.790150][ C0] [ 198.793002][ C0] ? __die_body+0x88/0xe0 [ 198.797348][ C0] ? die_addr+0x108/0x140 [ 198.801681][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 198.807238][ C0] ? asm_exc_general_protection+0x26/0x30 [ 198.812959][ C0] ? xdp_do_check_flushed+0x10a/0x240 [ 198.818351][ C0] ? __dev_flush+0x5b/0x160 [ 198.822856][ C0] xdp_do_check_flushed+0x129/0x240 [ 198.828068][ C0] __napi_poll+0xe4/0x490 [ 198.832394][ C0] net_rx_action+0x89b/0x1240 [ 198.837113][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 198.842232][ C0] ? sched_clock+0x4a/0x70 [ 198.846663][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.852996][ C0] handle_softirqs+0x2c4/0x970 [ 198.857759][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 198.862520][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 198.867800][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 198.872996][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 198.877597][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 198.882811][ C0] irq_exit_rcu+0x9/0x30 [ 198.887053][ C0] common_interrupt+0xaa/0xd0 [ 198.891734][ C0] [ 198.894668][ C0] [ 198.897593][ C0] asm_common_interrupt+0x26/0x40 [ 198.902616][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 198.908678][ C0] Code: 8b 3d 2c 40 74 0c 48 89 de 5b e9 f3 62 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d7 03 00 65 8b 15 10 54 70 7e f7 c2 00 01 ff 00 [ 198.928271][ C0] RSP: 0018:ffffc90003bf7ab8 EFLAGS: 00000246 [ 198.934340][ C0] RAX: ffffffff815698c8 RBX: ffffc90003bf0000 RCX: ffff888022f95a00 [ 198.942308][ C0] RDX: 0000000000000000 RSI: ffffffff8beae720 RDI: ffffc90003bf3b18 [ 198.950269][ C0] RBP: ffffc90003bf7c20 R08: ffffffff8ff66daf R09: 1ffffffff1fecdb5 [ 198.958234][ C0] R10: dffffc0000000000 R11: fffffbfff1fecdb6 R12: 0000000000003b18 [ 198.966194][ C0] R13: 1ffff110045f2c04 R14: 0000000000000000 R15: dffffc0000000000 [ 198.974165][ C0] ? do_exit+0x1d48/0x27f0 [ 198.978582][ C0] do_exit+0x1d48/0x27f0 [ 198.982821][ C0] ? __pfx_do_exit+0x10/0x10 [ 198.987403][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.992772][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.998753][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.005082][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 199.010201][ C0] do_group_exit+0x207/0x2c0 [ 199.014785][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.019988][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 199.025192][ C0] get_signal+0x1695/0x1730 [ 199.029709][ C0] ? __pfx_get_signal+0x10/0x10 [ 199.034560][ C0] arch_do_signal_or_restart+0x96/0x860 [ 199.040110][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 199.046262][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.052256][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 199.057989][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 199.063530][ C0] do_syscall_64+0x100/0x230 [ 199.068112][ C0] ? clear_bhb_loop+0x35/0x90 [ 199.072785][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.078674][ C0] RIP: 0033:0x7fe589175f19 [ 199.083098][ C0] Code: Unable to access opcode bytes at 0x7fe589175eef. [ 199.090104][ C0] RSP: 002b:00007fe588bff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.098513][ C0] RAX: fffffffffffffe00 RBX: 00007fe589305f68 RCX: 00007fe589175f19 [ 199.106496][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe589305f68 [ 199.114465][ C0] RBP: 00007fe589305f60 R08: 00007fe588bff6c0 R09: 00007fe588bff6c0 [ 199.122430][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe589305f6c [ 199.130391][ C0] R13: 000000000000000b R14: 00007fff390f02c0 R15: 00007fff390f03a8 [ 199.138364][ C0] [ 199.141412][ C0] Modules linked in: [ 199.145400][ C0] ---[ end trace 0000000000000000 ]--- [ 199.150887][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 199.156067][ C0] Code: 48 89 ef e8 e7 9f 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 b5 9f 3b 00 48 8b 03 48 89 44 [ 199.175721][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010202 [ 199.181822][ C0] RAX: dffffc0000000000 RBX: 1ffff110045f2ca0 RCX: ffff888022f95a00 [ 199.189806][ C0] RDX: 0000000080000100 RSI: 0000000000000000 RDI: ffffc90003bf7810 [ 199.197812][ C0] RBP: ffffc90003bf7810 R08: ffffffff89854f0a R09: 1ffffffff1fecdb5 [ 199.205838][ C0] R10: dffffc0000000000 R11: fffffbfff1fecdb6 R12: 0000000000000000 [ 199.213861][ C0] R13: 03fffe22008be594 R14: 0000000000000000 R15: ffffc90003bf7810 [ 199.214047][ T58] usb 3-1: USB disconnect, device number 7 [ 199.221861][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 199.221884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.221899][ C0] CR2: 00007fff390eee08 CR3: 000000000e534000 CR4: 00000000003506f0 [ 199.221916][ C0] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.221929][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.267168][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 199.274579][ C0] Kernel Offset: disabled [ 199.278896][ C0] Rebooting in 86400 seconds..