last executing test programs: 2m34.299743374s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 1m52.938623478s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 1m34.273667261s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 1m9.138741483s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 33.236098043s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 11.788099302s ago: executing program 0 (id=2889): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000000000), 0x214782, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, &(0x7f0000000040)="c67032476eed1abbc36525172ae208d8645971078fa72622e8532db4a96e1f054df377dfcf566ac3cdd48a6c344a922cca234b32c23f6fbd7aa641d1"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r2, &(0x7f0000000140)="7c20487a3da5ff4510979543dc74ea2de80f7ec4bf13", 0x16, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000100)={0x8, r1}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x12, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r6 = dup2(r4, r3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000001380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000013c0)={0x48, 0xa, r7, 0x0, r8}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r9 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f00000001c0)={0xd, @output}) 6.271997345s ago: executing program 1 (id=2905): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}, {0x0, 0x3}], 0x2, &(0x7f0000000880)}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.256463605s ago: executing program 2 (id=2906): syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x85, 0xf1, 0xc, 0x8, 0x4e6, 0xb, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0xaf}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x765, 0x20}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0xe0}, {0x9}, {0x1, 0x5}, {0x40}, {0xde, 0x9}, {0x1, 0x3}, {0x1f, 0x3}, {0xff, 0x2}, {0x3f, 0x3}, {0x3, 0x6}], "a63221d61af24221"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0xff}, {0x1f, 0x5}, {0x7, 0x2}, {0x19, 0x7}, {0x54, 0x7}], "4867fc08815e5732"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x4}, {0x2}, {0x8, 0x2}, {0x1, 0x3}, {0x8}, {0xff}, {0x3f, 0x2}], "6f103ba642a23ae5"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040084}, 0x20004000) fsmount(0xffffffffffffffff, 0x0, 0xa2) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x60, &(0x7f0000000040), 0x50) 6.231420955s ago: executing program 0 (id=2907): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0]}, &(0x7f0000000040)='GPL\x00'}, 0x90) unshare(0x20000400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 6.11816871s ago: executing program 0 (id=2908): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r2, &(0x7f0000000100)=@unlock_all, 0xb) acct(0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 5.892009885s ago: executing program 3 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 5.820041654s ago: executing program 3 (id=2910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=""/70, &(0x7f00000001c0)=0x46) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.663338879s ago: executing program 3 (id=2911): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0xc2, @tick, {0x0, 0x1}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = socket$alg(0x26, 0x5, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000000480)=""/160, 0xa0}], 0x2}}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000000ec0)=""/253, 0xfd}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/252, 0xfc}], 0x9}}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000fc0)=""/214, 0xd6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001140)=""/206, 0xce}, {0x0}, {&(0x7f0000001300)=""/161, 0xa1}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/233, 0xe9}], 0x5, &(0x7f00000015c0)=""/246, 0xf6}}], 0x4, 0x0, 0x0) 5.072319937s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000140)={0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r6]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) read$FUSE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000002500)) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x6000) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 3.1812747s ago: executing program 1 (id=2912): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 3.178830436s ago: executing program 2 (id=2913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000000)) 3.175502527s ago: executing program 3 (id=2914): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xe}) 3.050223161s ago: executing program 0 (id=2915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040), 0x4) 3.049170217s ago: executing program 3 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x905, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8}]}, 0x24}}, 0x0) 2.963574448s ago: executing program 2 (id=2917): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x21) truncate(0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)="11", 0x1}], 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r3, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x1, 0x0, 0x0, @time, {0xc}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x3, 0x2, 0x3b, 0x7f, @tick=0x826, {0xc, 0x8}, {0xff, 0x57}, @note={0x2, 0x6, 0x7, 0xfd}}], 0xc4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) read$snapshot(r3, 0x0, 0xffffffbf) r4 = socket(0x80000000000000a, 0x2, 0x0) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x48}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r8, 0x6, 0x24, 0x0, &(0x7f00000000c0)=0x3) 2.922717673s ago: executing program 1 (id=2918): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0]}, &(0x7f0000000040)='GPL\x00'}, 0x90) unshare(0x20000400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 2.838475345s ago: executing program 0 (id=2919): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 2.715147358s ago: executing program 1 (id=2920): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@volatile, @restrict, @typedef, @restrict, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, 0x9630}]}]}}, 0x0, 0x92}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 2.408753989s ago: executing program 2 (id=2921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 2.312122151s ago: executing program 1 (id=2922): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x80000001, 0x7ffffe02, 0xb, 0x1fd, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c114}, 0x8085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x8, @pix_mp={0x3, 0x708, 0x0, 0x4, 0x1, [{0x6, 0x1}, {0x0, 0x75f7eb8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x20}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) syz_io_uring_setup(0x4237, &(0x7f0000000100)={0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f00000001c0)) r4 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r4, 0x80079a0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r5, r4, 0x0, 0xffff) 2.297335389s ago: executing program 2 (id=2923): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}, {0x0, 0x3}], 0x2, &(0x7f0000000880)}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.3898364s ago: executing program 0 (id=2924): syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x85, 0xf1, 0xc, 0x8, 0x4e6, 0xb, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0xaf}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x765, 0x20}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0xe0}, {0x9}, {0x1, 0x5}, {0x40}, {0xde, 0x9}, {0x1, 0x3}, {0x1f, 0x3}, {0xff, 0x2}, {0x3f, 0x3}, {0x3, 0x6}], "a63221d61af24221"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0xff}, {0x1f, 0x5}, {0x7, 0x2}, {0x19, 0x7}, {0x54, 0x7}], "4867fc08815e5732"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x4}, {0x2}, {0x8, 0x2}, {0x1, 0x3}, {0x8}, {0xff}, {0x3f, 0x2}], "6f103ba642a23ae5"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040084}, 0x20004000) fsmount(0xffffffffffffffff, 0x0, 0xa2) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x60, &(0x7f0000000040), 0x50) 1.350837398s ago: executing program 1 (id=2925): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="6b6ca2b9e41a876a0318020000fc38ffff000000008b0f6472850000002300000095000700000000003f395dc650abdf4b80b6cdebf6856240d0c44c57290dcb3ac3d744a7b5f1dbbd9ef1cbc592f438e28b2927d7070fac984bda0794cf1f2c2b78e4caaf7b98677b88845fb4b087b545501991ed6e07fce500000000bfaf7750f82247c470359795f2c022cc28dd2a6ed35a1c6112e0182e43b94d8645c748e5620d65b98b13", @ANYRES64=0x0, @ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x20}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x1800000000000060, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x66, 0x79, &(0x7f0000000000)="32daaee8db9d7d7fd85b538e9611eef900aacc29ecb18774bff813d207be59dd846b0df16b6ad2a11edc6b7afbfe6109088f75a26de85394d2a4bcda8411772c8518f699a8e5f17c4f55af08c55f3288a0ac7e3b725f6534173ad6931a04cf8cf6a048be825c", &(0x7f0000000100)=""/121, 0xffffff7b, 0x0, 0x66, 0x1, &(0x7f0000000300)="c7ce0d12282f874b38920d6f7e44dd6946762c40ac8c61db78b5e43887902ebb2d75c5bee5373a90f8a62887b9a9062618cf43babfcc5adbd54ca161b81535fe4e8559f21c4b28fe5192f5b4ad20ea9309036de7e0bf058b2eb6a1ae6a031b4990ac6a470ce6", &(0x7f0000000080)="a8", 0x0, 0x0, 0x10001}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r5, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001380)={r6, 0x0, 0x2, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x2f, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35e1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c9a929}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x3, 0xe, 0x0, 0x4ea}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[r8, r9, r5, r5], &(0x7f0000001400)=[{0x0, 0x3, 0x10, 0x4}, {0x0, 0x5, 0x9, 0x2}]}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002e00)=@bloom_filter={0x1e, 0x9, 0x5, 0x6, 0x8, r9, 0x7f, '\x00', r3, r9, 0x9, 0x2, 0x3, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x10, 0x31, &(0x7f0000002b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x39}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @exit, @jmp={0x5, 0x1, 0x7, 0x9, 0x5, 0xfffffffffffffff0, 0x1}, @generic={0x7f, 0xb, 0x0, 0x1, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002d40)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000002e80)=[0xffffffffffffffff, r9, 0xffffffffffffffff, r5, r5, r5, 0xffffffffffffffff, r9, r11, r7], &(0x7f0000002ec0)=[{0x4, 0x5, 0xc, 0xa}, {0x2, 0x4, 0x6}, {0x1, 0x3, 0xa, 0xb}, {0x4, 0x1, 0x5, 0xc}], 0x10, 0xffffff91}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b40)={r9, 0xe0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002940)=[{}, {}], 0x10, 0x10, &(0x7f0000002980), &(0x7f00000029c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r10, 0x2e, 0x0, 0x0, @prog_id=r14, r13}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={r5, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002700), 0x4) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r17, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r17, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x2f, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d754ada}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x11, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000016c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001700)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, r16, 0x8, &(0x7f0000002740)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[r9, r8, r12, r17, r12, 0xffffffffffffffff], 0x0, 0x10, 0xb1}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r4, 0x20, 0x4010, 0x0, @prog_fd=r6, r13}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@ifindex=r3, r2, 0x64, 0x9, r2, @link_fd, r13}, 0x20) 830.099072ms ago: executing program 2 (id=2926): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r2, &(0x7f0000000100)=@unlock_all, 0xb) acct(0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 0s ago: executing program 3 (id=2927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r3, 0x0, 0x1) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x0, 0x200}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008009f0024000280040001001c0003800c00018008000100070000000c0001800800010007000000180001801400020073797a5f74756e"], 0x50}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) kernel console output (not intermixed with test programs): 99024][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.321325][T13951] chnl_net:caif_netlink_parms(): no params data found [ 636.334091][T13767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.349246][T13987] ip6gretap0 speed is unknown, defaulting to 1000 [ 636.373198][T13767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 636.457386][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.270975][ T5111] Bluetooth: hci1: command tx timeout [ 637.277446][ T5111] Bluetooth: hci3: command tx timeout [ 637.383981][T13952] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.425742][T13952] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.433081][T13952] bridge_slave_0: entered allmulticast mode [ 637.471205][T13952] bridge_slave_0: entered promiscuous mode [ 637.522454][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.540519][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.554921][T13951] bridge_slave_0: entered allmulticast mode [ 637.574822][T13951] bridge_slave_0: entered promiscuous mode [ 637.596352][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.613910][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.623076][T13951] bridge_slave_1: entered allmulticast mode [ 637.641413][T13951] bridge_slave_1: entered promiscuous mode [ 637.671529][T13952] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.696739][T13952] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.721120][T13952] bridge_slave_1: entered allmulticast mode [ 637.734934][T13952] bridge_slave_1: entered promiscuous mode [ 637.988513][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.019669][T13952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.042864][T13952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.118854][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.230531][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 638.367462][T13951] team0: Port device team_slave_0 added [ 638.410906][T13952] team0: Port device team_slave_0 added [ 638.481748][T13952] team0: Port device team_slave_1 added [ 638.850501][ T35] team0: left allmulticast mode [ 638.910410][ T35] team_slave_0: left allmulticast mode [ 639.004102][ T35] team_slave_1: left allmulticast mode [ 639.135869][ T35] bridge0: port 3(team0) entered disabled state [ 639.206472][ T35] bridge_slave_1: left allmulticast mode [ 639.212181][ T35] bridge_slave_1: left promiscuous mode [ 639.244586][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.305856][ T35] bridge_slave_0: left allmulticast mode [ 639.311559][ T35] bridge_slave_0: left promiscuous mode [ 639.325558][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.336265][ T5111] Bluetooth: hci3: command tx timeout [ 639.341753][ T5111] Bluetooth: hci1: command tx timeout [ 639.351501][ T35] bridge_slave_1: left allmulticast mode [ 639.365604][ T35] bridge_slave_1: left promiscuous mode [ 639.383493][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.394813][ T35] bridge_slave_0: left allmulticast mode [ 639.399814][T14046] Bluetooth: MGMT ver 1.23 [ 639.412146][ T35] bridge_slave_0: left promiscuous mode [ 639.422618][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.252934][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.264048][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.275207][ T35] bond0 (unregistering): (slave bond2): Releasing backup interface [ 640.284396][ T35] bond0 (unregistering): Released all slaves [ 640.302988][ T35] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 640.322091][ T35] bond1 (unregistering): Released all slaves [ 640.482850][ T35] bond2 (unregistering): Released all slaves [ 640.657909][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.674333][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.685222][ T35] bond0 (unregistering): Released all slaves [ 640.699826][T13951] team0: Port device team_slave_1 added [ 640.771847][T13952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.784350][T13952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.811222][T13952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.926781][T14043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2440'. [ 640.958211][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.975439][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.062340][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.093652][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.105536][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.143135][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.168501][T13952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.185021][T13952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.223980][T13952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.365664][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 641.405177][T14062] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2442'. [ 641.420195][ T5111] Bluetooth: hci1: command tx timeout [ 641.425990][T13307] Bluetooth: hci3: command tx timeout [ 642.197073][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 642.213222][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 642.224987][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 642.230234][T13952] hsr_slave_0: entered promiscuous mode [ 642.235667][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.258100][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.361132][T13952] hsr_slave_1: entered promiscuous mode [ 642.411810][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.421554][T13952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.445899][T13952] Cannot create hsr debugfs directory [ 642.628751][ T8] usb 2-1: config 0 descriptor?? [ 642.702682][T13951] hsr_slave_0: entered promiscuous mode [ 642.724625][T13951] hsr_slave_1: entered promiscuous mode [ 642.768150][T13951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.832768][T13951] Cannot create hsr debugfs directory [ 642.961954][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.159888][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 643.184879][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 643.206623][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 643.250548][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 643.478127][ T46] usb 2-1: USB disconnect, device number 27 [ 643.570632][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.918312][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.925790][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.292148][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.299360][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.487615][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 644.950841][ T35] hsr_slave_0: left promiscuous mode [ 645.005901][ T35] hsr_slave_1: left promiscuous mode [ 645.021243][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.049226][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.779365][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.835450][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.876878][ T35] hsr_slave_0: left promiscuous mode [ 645.917316][ T35] hsr_slave_1: left promiscuous mode [ 645.967289][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.990898][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.009642][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.026688][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.176617][ T35] veth1_macvtap: left promiscuous mode [ 646.182915][ T35] veth0_macvtap: left promiscuous mode [ 646.197166][ T35] veth1_vlan: left promiscuous mode [ 646.203138][ T35] veth0_vlan: left promiscuous mode [ 646.216888][ T35] veth1_macvtap: left promiscuous mode [ 646.222517][ T35] veth0_macvtap: left promiscuous mode [ 646.229005][ T35] veth1_vlan: left promiscuous mode [ 646.234416][ T35] veth0_vlan: left promiscuous mode [ 646.583930][ T35] infiniband syz1: set down [ 647.545240][ T35] team_slave_1 (unregistering): left promiscuous mode [ 647.562138][ T35] team0 (unregistering): Port device team_slave_1 removed [ 647.624274][ T35] team_slave_0 (unregistering): left promiscuous mode [ 647.635231][ T35] team0 (unregistering): Port device team_slave_0 removed [ 648.413311][ T3841] smc: removing ib device syz1 [ 649.576341][ T35] team0 (unregistering): Port device team_slave_1 removed [ 649.728863][ T35] team0 (unregistering): Port device team_slave_0 removed [ 650.352419][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2451'. [ 650.384796][T11380] lo speed is unknown, defaulting to 1000 [ 650.526969][T13951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.542760][T13951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.643970][T14172] geneve2: entered promiscuous mode [ 650.654284][T14172] geneve2: entered allmulticast mode [ 650.719162][T13951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.755799][T13951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.811380][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.373426][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.438730][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.451972][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.466031][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.476572][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.487307][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 651.509671][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.542458][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.602520][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.609834][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.637014][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.644283][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.768814][T14187] ip6gretap0 speed is unknown, defaulting to 1000 [ 651.780390][T13952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.800085][T13952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 651.831525][T13951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.852834][T13951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.882412][T13952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 651.903152][T13952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 652.017887][T13767] veth0_vlan: entered promiscuous mode [ 652.193553][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.206813][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.243952][T13767] veth1_vlan: entered promiscuous mode [ 652.354526][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.369297][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.562973][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.573735][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.624397][T13767] veth0_macvtap: entered promiscuous mode [ 652.652594][ T5111] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 652.692484][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.724650][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.739813][T14212] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 652.807440][T13767] veth1_macvtap: entered promiscuous mode [ 652.879563][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.959081][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.971275][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.983092][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.994968][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.005398][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.019191][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.039469][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.131306][T13952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.195781][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.216350][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.233179][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.253357][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.275511][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.286357][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.312397][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.436001][T14187] chnl_net:caif_netlink_parms(): no params data found [ 653.479466][T13767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.493094][T13767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.503514][T13767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.512917][T13767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.576336][ T5111] Bluetooth: hci2: command tx timeout [ 653.594663][T13952] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.725241][T13951] veth0_vlan: entered promiscuous mode [ 653.787367][ T35] team0: left allmulticast mode [ 653.792316][ T35] team_slave_0: left allmulticast mode [ 653.798000][ T35] team_slave_1: left allmulticast mode [ 653.804420][ T35] bridge0: port 3(team0) entered disabled state [ 653.822348][ T35] bridge_slave_1: left allmulticast mode [ 653.830740][ T35] bridge_slave_1: left promiscuous mode [ 653.838410][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.858516][ T35] bridge_slave_0: left allmulticast mode [ 653.864288][ T35] bridge_slave_0: left promiscuous mode [ 653.870600][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.132227][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.143802][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.156618][ T35] bond0 (unregistering): Released all slaves [ 655.192121][ T5179] ip6gretap0 speed is unknown, defaulting to 1000 [ 655.203728][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.210886][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.302580][T13951] veth1_vlan: entered promiscuous mode [ 655.325180][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.332413][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.414301][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.432631][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.440891][T14187] bridge_slave_0: entered allmulticast mode [ 655.449317][T14187] bridge_slave_0: entered promiscuous mode [ 655.486254][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.509710][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.518550][T14187] bridge_slave_1: entered allmulticast mode [ 655.526540][T14187] bridge_slave_1: entered promiscuous mode [ 655.588522][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.604613][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.637386][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.656317][ T5111] Bluetooth: hci2: command tx timeout [ 655.693815][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.718339][ T35] hsr_slave_0: left promiscuous mode [ 655.724443][ T35] hsr_slave_1: left promiscuous mode [ 655.730966][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.739722][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.748640][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.757464][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.779253][ T35] veth1_macvtap: left promiscuous mode [ 655.787632][ T35] veth0_macvtap: left promiscuous mode [ 655.793364][ T35] veth1_vlan: left promiscuous mode [ 655.798937][ T35] veth0_vlan: left promiscuous mode [ 656.236372][T11380] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 656.416317][T11380] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 656.425807][T11380] usb 2-1: config 0 has no interfaces? [ 656.448966][T11380] usb 2-1: config 0 has no interfaces? [ 656.472888][T11380] usb 2-1: config 0 has no interfaces? [ 656.482188][T11380] usb 2-1: config 0 has no interfaces? [ 656.492237][ T35] team_slave_1 (unregistering): left promiscuous mode [ 656.492861][T11380] usb 2-1: config 0 has no interfaces? [ 656.509245][T11380] usb 2-1: config 0 has no interfaces? [ 656.516133][T11380] usb 2-1: config 0 has no interfaces? [ 656.516549][ T35] team0 (unregistering): Port device team_slave_1 removed [ 656.522784][T11380] usb 2-1: config 0 has no interfaces? [ 656.534512][T11380] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 656.544221][T11380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.554659][T11380] usb 2-1: config 0 descriptor?? [ 656.600357][ T35] team_slave_0 (unregistering): left promiscuous mode [ 656.610989][ T35] team0 (unregistering): Port device team_slave_0 removed [ 656.825506][T11380] usb 2-1: USB disconnect, device number 28 [ 657.349954][T14187] team0: Port device team_slave_0 added [ 657.413525][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.445861][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.478906][T14187] team0: Port device team_slave_1 added [ 657.599153][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.610889][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.639179][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.654940][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.698189][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.733582][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.759239][ T5111] Bluetooth: hci2: command tx timeout [ 657.826553][T13951] veth0_macvtap: entered promiscuous mode [ 657.973986][T13951] veth1_macvtap: entered promiscuous mode [ 658.038620][T14187] hsr_slave_0: entered promiscuous mode [ 658.052224][T14187] hsr_slave_1: entered promiscuous mode [ 658.059757][T14187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.068768][T14187] Cannot create hsr debugfs directory [ 658.213858][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.225412][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.255515][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.267225][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.277569][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.296325][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.318210][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.353043][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.374977][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.386500][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.405440][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.415306][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.427398][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.439090][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.480405][T13951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.490161][T13951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.499342][T13951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.508140][T13951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.611690][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.771756][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.835280][T13952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.904375][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.058286][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.246474][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.254435][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.261653][T13952] veth0_vlan: entered promiscuous mode [ 659.302702][T13952] veth1_vlan: entered promiscuous mode [ 659.434114][ C1] eth0: bad gso: type: 1, size: 1408 [ 659.505642][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.523163][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.560784][T13952] veth0_macvtap: entered promiscuous mode [ 659.677287][T13952] veth1_macvtap: entered promiscuous mode [ 659.693432][ T35] bridge_slave_1: left allmulticast mode [ 659.705387][ T35] bridge_slave_1: left promiscuous mode [ 659.730712][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.777921][ T35] bridge_slave_0: left allmulticast mode [ 659.783909][ T35] bridge_slave_0: left promiscuous mode [ 659.814130][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.829025][T13307] Bluetooth: hci2: command tx timeout [ 659.843593][T13307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.862572][T13307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.874869][T13307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.893528][T13307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.907483][T13307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 659.915010][T13307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.469239][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.495890][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.529257][ T35] bond0 (unregistering): Released all slaves [ 660.590829][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'. [ 660.634664][T14294] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2478'. [ 660.648183][T14294] vlan0: entered allmulticast mode [ 660.653685][T14294] veth0_vlan: entered allmulticast mode [ 661.027823][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.071477][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.082550][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.099619][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.111631][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.134959][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.299918][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.461765][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.552162][T13952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.735837][T14187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.764437][T14187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.842641][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.855904][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.865835][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.876410][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.886322][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.905413][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.925312][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.965410][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.978209][T13307] Bluetooth: hci0: command tx timeout [ 662.029876][T14316] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 662.038983][T14316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 662.162642][T13952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.579247][T14187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 662.676568][T14187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 662.904924][T13952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.926310][T13952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.935659][T13952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.944386][T13952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.045252][ T35] hsr_slave_0: left promiscuous mode [ 663.057700][ T35] hsr_slave_1: left promiscuous mode [ 663.074467][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.089342][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.100579][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.111610][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.171465][ T35] veth1_macvtap: left promiscuous mode [ 663.177380][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 663.177639][ T35] veth0_macvtap: left promiscuous mode [ 663.192636][ T35] veth1_vlan: left promiscuous mode [ 663.198222][ T35] veth0_vlan: left promiscuous mode [ 664.066369][T13307] Bluetooth: hci0: command tx timeout [ 664.114006][ T35] team0 (unregistering): Port device team_slave_1 removed [ 664.204668][ T35] team0 (unregistering): Port device team_slave_0 removed [ 665.151121][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.193404][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.422857][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.509756][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.517699][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.562331][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.569574][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.573755][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.617439][T14287] chnl_net:caif_netlink_parms(): no params data found [ 665.645860][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.653086][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.877883][T13307] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 666.051870][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2501'. [ 666.074839][T14382] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2501'. [ 666.085088][T14382] vlan0: entered allmulticast mode [ 666.090711][T14382] veth0_vlan: entered allmulticast mode [ 666.135901][T13307] Bluetooth: hci0: command tx timeout [ 666.345602][ T5179] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 666.471000][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.512052][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.536677][T14287] bridge_slave_0: entered allmulticast mode [ 666.580959][T14287] bridge_slave_0: entered promiscuous mode [ 666.606488][ T5179] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 666.632324][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.645657][ T5179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.649507][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.661406][T14287] bridge_slave_1: entered allmulticast mode [ 666.668788][T14287] bridge_slave_1: entered promiscuous mode [ 666.686870][ T5179] usb 4-1: config 0 descriptor?? [ 666.725751][ T5179] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 666.753321][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.795165][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.922658][T14399] netlink: 'syz.0.2508': attribute type 23 has an invalid length. [ 666.950252][T14287] team0: Port device team_slave_0 added [ 667.008098][T14287] team0: Port device team_slave_1 added [ 667.081425][ C1] eth0: bad gso: type: 1, size: 1408 [ 667.177663][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.205526][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.241914][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.293567][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.323845][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.449100][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.522393][ T5179] gspca_sonixj: reg_r err -71 [ 667.535868][ T5179] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 667.555093][ T5179] usb 4-1: USB disconnect, device number 19 [ 667.577994][T14287] hsr_slave_0: entered promiscuous mode [ 667.603690][T14287] hsr_slave_1: entered promiscuous mode [ 667.623324][T14287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.646808][T14287] Cannot create hsr debugfs directory [ 667.860750][T14187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.991159][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 668.215851][T13307] Bluetooth: hci0: command tx timeout [ 668.369257][T14187] veth0_vlan: entered promiscuous mode [ 668.679839][T14187] veth1_vlan: entered promiscuous mode [ 669.637080][T14187] veth0_macvtap: entered promiscuous mode [ 669.683730][T14187] veth1_macvtap: entered promiscuous mode [ 669.784120][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.844395][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.865494][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.895676][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.907832][T13307] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 669.921991][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.967785][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.989885][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.015552][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.034887][T14187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.122370][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.161255][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.200790][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.211586][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.221918][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.232480][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.242629][T14187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.253371][T14187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.275799][T14187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.296992][ T5147] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 670.343001][T14187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.394554][T14187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.408247][T14187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.426335][T14187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.487622][ T5147] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 670.505527][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.531918][ T5147] usb 4-1: config 0 descriptor?? [ 670.556895][ T5147] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 670.656157][T14497] netlink: 'syz.1.2530': attribute type 23 has an invalid length. [ 670.768841][T14287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 670.891979][T14499] netlink: 'syz.0.2531': attribute type 4 has an invalid length. [ 670.909529][T14287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 670.964621][T14287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.005305][T14287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.101208][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.132178][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.243736][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.270045][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.629109][T14522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.977146][ T5147] gspca_sonixj: reg_r err -110 [ 672.180421][ T5147] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 672.291088][T14287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.315527][ T5147] usb 4-1: USB disconnect, device number 20 [ 672.334982][T14287] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.437340][T11380] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.444455][T11380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.470322][T11380] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.477497][T11380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.762559][T13307] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 672.911177][T14535] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 673.300924][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.992250][T14566] syz.2.2546 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 674.168858][T14287] veth0_vlan: entered promiscuous mode [ 674.189238][T14287] veth1_vlan: entered promiscuous mode [ 674.230922][T14287] veth0_macvtap: entered promiscuous mode [ 674.287674][T14287] veth1_macvtap: entered promiscuous mode [ 674.332092][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.343479][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.353441][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.364709][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.374643][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.411724][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.430165][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.441250][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.451955][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.463422][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.494663][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.568750][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.613008][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.648115][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.660478][T14584] netlink: 'syz.1.2552': attribute type 7 has an invalid length. [ 674.668802][T14584] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 674.677403][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.677545][T14584] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2552'. [ 674.696671][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.716925][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.732819][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.750435][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.762863][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.773767][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.803426][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.842148][T14287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.877401][T14287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.887165][T14287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.902968][T14287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.171849][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.201651][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.298508][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.308201][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.792020][T14617] misc userio: The device must be registered before sending interrupts [ 677.682551][ T4420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.239104][ T4420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.298040][ T4420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.374018][ T4420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.534596][ T4420] bridge_slave_1: left allmulticast mode [ 678.540536][ T4420] bridge_slave_1: left promiscuous mode [ 678.546937][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.562451][ T4420] bridge_slave_0: left allmulticast mode [ 678.569889][ T4420] bridge_slave_0: left promiscuous mode [ 678.580145][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.443121][T14668] misc userio: The device must be registered before sending interrupts [ 679.533819][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.572056][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.582380][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.590523][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.602180][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 679.609991][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.689039][T14675] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 679.714965][T14675] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 680.013284][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.066377][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.110156][ T4420] bond0 (unregistering): Released all slaves [ 680.183157][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 680.889754][T14692] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.957028][T14692] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 681.136717][ T4420] hsr_slave_0: left promiscuous mode [ 681.163490][ T4420] hsr_slave_1: left promiscuous mode [ 681.193872][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.219034][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.241028][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.249769][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.365869][ T4420] veth1_macvtap: left promiscuous mode [ 681.393844][ T4420] veth0_macvtap: left promiscuous mode [ 681.420530][ T4420] veth1_vlan: left promiscuous mode [ 681.442160][ T4420] veth0_vlan: left promiscuous mode [ 681.747270][T13307] Bluetooth: hci0: command tx timeout [ 682.501267][T14727] input: syz1 as /devices/virtual/input/input30 [ 682.543652][T14727] input: syz0 as /devices/virtual/input/input31 [ 683.006069][T14740] smb3: Unknown parameter '*z‚«¼' [ 683.360677][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 683.717453][T14747] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 683.827404][T13307] Bluetooth: hci0: command tx timeout [ 684.017683][T14756] netlink: 'syz.2.2601': attribute type 2 has an invalid length. [ 684.025741][T14756] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 684.039080][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 684.270877][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 684.374120][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 685.236150][T14670] chnl_net:caif_netlink_parms(): no params data found [ 685.445126][T14778] smb3: Unknown parameter '*z‚«¼' [ 685.796305][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.915509][T13307] Bluetooth: hci0: command tx timeout [ 686.155427][T14780] bio_check_eod: 2 callbacks suppressed [ 686.155462][T14780] syz.3.2609: attempt to access beyond end of device [ 686.155462][T14780] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 686.174475][T14780] hfsplus: unable to find HFS+ superblock [ 686.209647][T14780] zonefs (nbd3) ERROR: Not a zoned block device [ 686.253114][T14781] No such timeout policy "syz1" [ 686.500924][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.541010][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.583397][T14670] bridge_slave_0: entered allmulticast mode [ 686.608413][T14670] bridge_slave_0: entered promiscuous mode [ 686.638149][T14670] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.662704][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.705661][T14670] bridge_slave_1: entered allmulticast mode [ 686.713554][T14670] bridge_slave_1: entered promiscuous mode [ 686.841661][T14807] input: syz1 as /devices/virtual/input/input32 [ 686.901570][T14807] input: syz0 as /devices/virtual/input/input33 [ 686.953744][T14670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.991631][T14670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.184332][T14670] team0: Port device team_slave_0 added [ 687.240406][T14670] team0: Port device team_slave_1 added [ 687.375536][T14670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.411764][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.485450][T14670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.559838][T14670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.581144][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.609850][T14670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.830619][T14670] hsr_slave_0: entered promiscuous mode [ 687.849109][T14670] hsr_slave_1: entered promiscuous mode [ 687.870570][T14670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.884562][T14670] Cannot create hsr debugfs directory [ 687.975861][T13307] Bluetooth: hci0: command tx timeout [ 688.488311][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 688.523761][T14860] overlayfs: failed to resolve './file2': -2 [ 689.439850][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 689.439867][ T29] audit: type=1326 audit(1721652529.113:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.467609][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.538564][ T29] audit: type=1326 audit(1721652529.113:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.589373][ T29] audit: type=1326 audit(1721652529.143:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.675572][ T29] audit: type=1326 audit(1721652529.153:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.715042][T14670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.743049][T14670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 689.750684][ T29] audit: type=1326 audit(1721652529.153:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.815229][T14670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.823655][ T29] audit: type=1326 audit(1721652529.153:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.878849][T14670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 689.888572][ T29] audit: type=1326 audit(1721652529.153:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 689.987051][ T29] audit: type=1326 audit(1721652529.153:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 690.045717][ T29] audit: type=1326 audit(1721652529.153:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 690.354760][ T29] audit: type=1326 audit(1721652529.163:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14898 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80df75f19 code=0x7ffc0000 [ 690.777026][T14670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.817842][T14921] ptrace attach of "./syz-executor exec"[14187] was attempted by ""[14921] [ 690.870794][T14670] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.908779][T14920] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 690.999029][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.006360][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.084417][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.091657][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.665579][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 691.867705][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 691.925906][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 692.006922][ T3841] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 692.149549][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.173977][ T8] usb 4-1: config 0 descriptor?? [ 692.184063][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 692.199512][ T8] pvrusb2: ********** [ 692.203541][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 692.214354][ T8] pvrusb2: Important functionality might not be entirely working. [ 692.222934][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 692.244798][ T8] pvrusb2: ********** [ 692.836798][T14670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.948361][ T5111] Bluetooth: hci5: command 0x0406 tx timeout [ 693.014496][T14965] syz.2.2658: attempt to access beyond end of device [ 693.014496][T14965] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 693.038750][T14965] hfsplus: unable to find HFS+ superblock [ 693.100414][T14965] zonefs (nbd2) ERROR: Not a zoned block device [ 693.433518][T14984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.835267][T13307] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 694.130219][T13307] Bluetooth: hci1: Injecting HCI hardware error event [ 694.144272][ T5111] Bluetooth: hci1: hardware error 0x00 [ 694.205846][ T8] usb 4-1: USB disconnect, device number 21 [ 694.213137][ T8] pvrusb2: Device being rendered inoperable [ 694.287000][T14991] netlink: 'syz.1.2662': attribute type 6 has an invalid length. [ 694.294897][T14991] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2662'. [ 694.404107][T14992] ptrace attach of "./syz-executor exec"[13951] was attempted by ""[14992] [ 695.596574][T14670] veth0_vlan: entered promiscuous mode [ 695.658552][T14670] veth1_vlan: entered promiscuous mode [ 697.548146][ T5111] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 697.623384][T14670] veth0_macvtap: entered promiscuous mode [ 697.738874][T14670] veth1_macvtap: entered promiscuous mode [ 697.790332][T15040] netlink: 'syz.3.2674': attribute type 25 has an invalid length. [ 697.851345][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.891144][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.916281][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.934247][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.962417][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.992375][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.016615][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.016638][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.016657][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.016668][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.019003][T14670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.673932][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.674380][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.683188][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.683547][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.689995][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.690504][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.719250][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.719357][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.719379][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.725134][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.831175][T14670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.916954][T14670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.916995][T14670] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.917022][T14670] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.917049][T14670] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.392670][T15084] netlink: 'syz.0.2687': attribute type 25 has an invalid length. [ 699.404724][T15083] No such timeout policy "syz1" [ 699.654454][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.684736][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.736752][T15096] binder: 15095:15096 ioctl 4018620d 0 returned -22 [ 699.763981][T15096] binder: 15095:15096 ioctl c0306201 0 returned -14 [ 699.850749][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.195842][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.952430][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.130871][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.988072][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.101305][T15122] usb usb8: usbfs: process 15122 (syz.2.2699) did not claim interface 0 before use [ 702.191563][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.068634][T13307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.089497][T13307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.103411][T13307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.112334][T13307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.120381][T13307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 703.137126][T13307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 703.269946][ T52] bridge_slave_1: left allmulticast mode [ 703.285588][ T52] bridge_slave_1: left promiscuous mode [ 703.292545][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.346011][ T52] bridge_slave_0: left allmulticast mode [ 703.356194][ T52] bridge_slave_0: left promiscuous mode [ 703.362019][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.990823][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.002514][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.015545][ T52] bond0 (unregistering): Released all slaves [ 704.705005][T15130] chnl_net:caif_netlink_parms(): no params data found [ 704.856605][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.870008][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.879999][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.890366][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.900001][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 704.910037][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.025662][ T52] hsr_slave_0: left promiscuous mode [ 705.074975][ T52] hsr_slave_1: left promiscuous mode [ 705.177384][ T5111] Bluetooth: hci0: command tx timeout [ 705.277348][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.491625][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.714642][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.797721][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.833721][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.845692][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.855167][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.887408][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.895246][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 705.902974][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.012670][ T52] veth1_macvtap: left promiscuous mode [ 706.037094][ T52] veth0_macvtap: left promiscuous mode [ 706.077435][ T52] veth1_vlan: left promiscuous mode [ 706.082834][ T52] veth0_vlan: left promiscuous mode [ 707.087645][T13307] Bluetooth: hci1: command tx timeout [ 707.175763][T13307] Bluetooth: hci5: command 0x0406 tx timeout [ 707.241498][T15201] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2710'. [ 707.255664][T13307] Bluetooth: hci0: command tx timeout [ 707.680695][ T4420] Bluetooth: hci4: Frame reassembly failed (-90) [ 707.978198][ T5111] Bluetooth: hci3: command tx timeout [ 708.471695][ T52] team0 (unregistering): Port device team_slave_1 removed [ 708.569106][ T52] team0 (unregistering): Port device team_slave_0 removed [ 709.178159][ T5111] Bluetooth: hci1: command tx timeout [ 709.335690][ T5111] Bluetooth: hci0: command tx timeout [ 709.735545][T13307] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 709.737875][ T5111] Bluetooth: hci4: command 0xfc11 tx timeout [ 710.062619][T13307] Bluetooth: hci3: command tx timeout [ 710.272672][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.281869][T15130] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.289752][T15130] bridge_slave_0: entered allmulticast mode [ 710.309313][T15130] bridge_slave_0: entered promiscuous mode [ 710.345747][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.354129][T15130] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.363422][T15130] bridge_slave_1: entered allmulticast mode [ 710.371215][T15130] bridge_slave_1: entered promiscuous mode [ 710.474897][T15130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.531886][T15130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.695220][T15130] team0: Port device team_slave_0 added [ 710.736835][T15130] team0: Port device team_slave_1 added [ 710.848605][T15130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.865522][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.894581][T15130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.983979][T15130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.019078][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.079060][T15130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.132090][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.187410][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.199382][T15239] Bluetooth: MGMT ver 1.23 [ 711.204452][T15239] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 711.215624][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.232723][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.242339][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 711.252470][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.255791][ T5101] Bluetooth: hci1: command tx timeout [ 711.416735][ T5101] Bluetooth: hci0: command tx timeout [ 711.431688][T15130] hsr_slave_0: entered promiscuous mode [ 711.438938][T15130] hsr_slave_1: entered promiscuous mode [ 711.453329][T15130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.461837][T15130] Cannot create hsr debugfs directory [ 711.598743][T15250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2722'. [ 711.637159][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.896949][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.114919][ T11] Bluetooth: hci4: Frame reassembly failed (-90) [ 712.136158][ T5111] Bluetooth: hci3: command tx timeout [ 712.497677][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.608207][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.699872][T15175] chnl_net:caif_netlink_parms(): no params data found [ 712.764373][T15184] chnl_net:caif_netlink_parms(): no params data found [ 713.254744][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.275308][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.283325][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.291007][T15175] bridge_slave_0: entered allmulticast mode [ 713.298854][T15175] bridge_slave_0: entered promiscuous mode [ 713.312608][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.321887][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.329350][T15175] bridge_slave_1: entered allmulticast mode [ 713.335639][ T5111] Bluetooth: hci2: command tx timeout [ 713.336961][ T5111] Bluetooth: hci1: command tx timeout [ 713.342958][T15175] bridge_slave_1: entered promiscuous mode [ 713.476164][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.579785][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.612872][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.652717][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.668868][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.676190][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.683380][T15184] bridge_slave_0: entered allmulticast mode [ 713.690679][T15184] bridge_slave_0: entered promiscuous mode [ 713.768869][T15175] team0: Port device team_slave_0 added [ 713.776274][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.783440][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.792706][T15184] bridge_slave_1: entered allmulticast mode [ 713.800936][T15184] bridge_slave_1: entered promiscuous mode [ 713.862889][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.891043][T15175] team0: Port device team_slave_1 added [ 713.971375][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.992480][T15236] chnl_net:caif_netlink_parms(): no params data found [ 714.056064][ T5101] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 714.239038][ T5101] Bluetooth: hci3: command tx timeout [ 714.266005][T15184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.346396][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.353406][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.382096][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.420985][T15130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 714.625119][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.633323][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.661765][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.683924][T15130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 714.830860][T15130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 714.863394][T15130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 714.910262][T15184] team0: Port device team_slave_0 added [ 715.188089][T15175] hsr_slave_0: entered promiscuous mode [ 715.199979][T15175] hsr_slave_1: entered promiscuous mode [ 715.208059][T15175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.216399][T15175] Cannot create hsr debugfs directory [ 715.264871][T15184] team0: Port device team_slave_1 added [ 715.348234][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.362849][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.370557][T15236] bridge_slave_0: entered allmulticast mode [ 715.383238][T15236] bridge_slave_0: entered promiscuous mode [ 715.415965][ T5101] Bluetooth: hci2: command tx timeout [ 715.488517][T15184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.497925][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.531516][T15184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.546917][T15184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.554047][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.580639][T15184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.680353][T15184] hsr_slave_0: entered promiscuous mode [ 715.697833][T15184] hsr_slave_1: entered promiscuous mode [ 715.714911][T15184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.724132][T15184] Cannot create hsr debugfs directory [ 715.753488][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.760802][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.768481][T15236] bridge_slave_1: entered allmulticast mode [ 715.776112][T15236] bridge_slave_1: entered promiscuous mode [ 716.707331][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.774074][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.811410][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.972215][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.217733][T15236] team0: Port device team_slave_0 added [ 717.281257][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.370850][T15236] team0: Port device team_slave_1 added [ 717.496845][ T5101] Bluetooth: hci2: command tx timeout [ 717.654583][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.723270][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.735911][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.763147][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.802513][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.825491][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.873434][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.282366][T15236] hsr_slave_0: entered promiscuous mode [ 718.334688][T15236] hsr_slave_1: entered promiscuous mode [ 718.356752][T15236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.374470][T15236] Cannot create hsr debugfs directory [ 718.416416][T15130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.748162][T15130] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.775035][ T52] bridge_slave_1: left allmulticast mode [ 718.805612][ T52] bridge_slave_1: left promiscuous mode [ 718.811524][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.863752][ T52] bridge_slave_0: left allmulticast mode [ 718.876063][ T52] bridge_slave_0: left promiscuous mode [ 718.881913][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.920257][ T52] bridge_slave_1: left allmulticast mode [ 718.946491][ T52] bridge_slave_1: left promiscuous mode [ 718.952286][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.986269][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 718.986285][ T29] audit: type=1326 audit(1721652558.663:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.015137][ T52] bridge_slave_0: left allmulticast mode [ 719.021184][T15361] 9pnet_fd: Insufficient options for proto=fd [ 719.024322][T15361] 9pnet_fd: Insufficient options for proto=fd [ 719.041018][ T52] bridge_slave_0: left promiscuous mode [ 719.041038][ T29] audit: type=1326 audit(1721652558.693:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.046890][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.080935][ T29] audit: type=1326 audit(1721652558.693:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.081574][ T52] bridge_slave_1: left allmulticast mode [ 719.109859][ T52] bridge_slave_1: left promiscuous mode [ 719.115124][ T29] audit: type=1326 audit(1721652558.693:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.115690][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.146884][ T52] bridge_slave_0: left allmulticast mode [ 719.152115][ T29] audit: type=1326 audit(1721652558.693:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.152554][ T52] bridge_slave_0: left promiscuous mode [ 719.182357][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.185671][ T29] audit: type=1326 audit(1721652558.693:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.212004][ T29] audit: type=1326 audit(1721652558.693:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.233803][ T29] audit: type=1326 audit(1721652558.693:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.255495][ T29] audit: type=1326 audit(1721652558.693:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.282321][ T29] audit: type=1326 audit(1721652558.693:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x7ffc0000 [ 719.575820][ T5101] Bluetooth: hci2: command tx timeout [ 720.353716][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.371144][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.381822][ T52] bond0 (unregistering): Released all slaves [ 720.553591][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.564637][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.576949][ T52] bond0 (unregistering): Released all slaves [ 720.589473][ T52] bond1 (unregistering): Released all slaves [ 720.753705][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.765181][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.776510][ T52] bond0 (unregistering): Released all slaves [ 720.804248][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.811496][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.963060][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.970288][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.285177][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'. [ 721.480195][T15184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.606862][T15130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.689161][T15184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 721.738040][T15184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.531010][T15184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.701239][T15399] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 723.720455][T15130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.253455][T15184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.286789][ T52] hsr_slave_0: left promiscuous mode [ 724.293780][ T52] hsr_slave_1: left promiscuous mode [ 724.306902][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.314389][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.325122][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.333834][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.350715][ T52] hsr_slave_0: left promiscuous mode [ 724.357950][ T52] hsr_slave_1: left promiscuous mode [ 724.363831][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.371811][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.380674][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.388463][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.401184][ T52] hsr_slave_0: left promiscuous mode [ 724.407269][ T52] hsr_slave_1: left promiscuous mode [ 724.413227][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.420852][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.428989][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.437610][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.492492][ T52] veth1_macvtap: left promiscuous mode [ 724.499214][ T52] veth0_macvtap: left promiscuous mode [ 724.504946][ T52] veth1_vlan: left promiscuous mode [ 724.510501][ T52] veth0_vlan: left promiscuous mode [ 724.520274][ T52] veth1_macvtap: left promiscuous mode [ 724.526029][ T52] veth0_macvtap: left promiscuous mode [ 724.531615][ T52] veth1_vlan: left promiscuous mode [ 724.539078][ T52] veth1_macvtap: left promiscuous mode [ 724.544627][ T52] veth0_macvtap: left promiscuous mode [ 724.551091][ T52] veth1_vlan: left promiscuous mode [ 724.556543][ T52] veth0_vlan: left promiscuous mode [ 725.369953][ T52] team0 (unregistering): Port device team_slave_1 removed [ 725.449020][ T52] team0 (unregistering): Port device team_slave_0 removed [ 726.542177][ T52] team0 (unregistering): Port device team_slave_1 removed [ 726.599836][ T52] team0 (unregistering): Port device team_slave_0 removed [ 727.733029][ T52] team0 (unregistering): Port device team_slave_1 removed [ 727.794264][ T52] team0 (unregistering): Port device team_slave_0 removed [ 728.411268][T15175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.430968][T15175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.540955][T15175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 728.576326][T15175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.673359][T15184] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.950990][T15130] veth0_vlan: entered promiscuous mode [ 728.989544][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.996805][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.047877][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.055053][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.103618][T15130] veth1_vlan: entered promiscuous mode [ 729.616653][T15130] veth0_macvtap: entered promiscuous mode [ 729.730003][T15130] veth1_macvtap: entered promiscuous mode [ 729.758562][T15130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.776967][T15130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.794267][T15130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.811722][T15130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.839111][T15130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.924883][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.976494][T15130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.005438][T15130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.033934][T15130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.066049][T15130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.087172][T15130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.139760][T15130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.167736][T15130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.182890][T15130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.203366][T15130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.231402][T15236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.242160][T15236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.329159][T15236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.408422][T15236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 730.481336][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.527311][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.534682][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.628073][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.635411][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.853987][T15184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.884375][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.910426][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.028956][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.044255][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.180338][T15184] veth0_vlan: entered promiscuous mode [ 731.302451][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.386269][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.416431][T15184] veth1_vlan: entered promiscuous mode [ 731.480938][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.488218][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.572331][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.579550][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.691785][T15175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.699813][T15487] gfs2: gfs2 mount does not exist [ 731.748767][T15184] veth0_macvtap: entered promiscuous mode [ 731.844205][T15184] veth1_macvtap: entered promiscuous mode [ 731.967731][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.995797][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.026970][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.056857][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.087255][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.128978][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.157451][T15184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.214925][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.255581][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.331310][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.385471][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.474683][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.517416][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.529679][T15184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.981283][T15184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.151769][T15184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.179525][T15184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.245612][T15184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.752325][T15175] veth0_vlan: entered promiscuous mode [ 733.920881][T15175] veth1_vlan: entered promiscuous mode [ 734.063876][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.116922][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.138668][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.234020][T15175] veth0_macvtap: entered promiscuous mode [ 734.310102][T15175] veth1_macvtap: entered promiscuous mode [ 734.379635][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.406848][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.421181][T15548] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 734.521866][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.545666][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.571783][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.600062][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.645633][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.667407][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.683932][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.705152][ T5111] Bluetooth: hci0: command tx timeout [ 734.739403][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.767723][T15175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.894866][T15236] veth0_vlan: entered promiscuous mode [ 734.929163][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.973583][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.983557][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.995872][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.005905][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.019201][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.029252][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.042116][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.187626][T15175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.595255][T15175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.636937][T15175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.696272][T15175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.742021][T15175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.791489][T15236] veth1_vlan: entered promiscuous mode [ 735.952132][T15576] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 736.039679][T15236] veth0_macvtap: entered promiscuous mode [ 736.070901][T15578] netlink: 'syz.1.2771': attribute type 28 has an invalid length. [ 736.094403][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.100078][T15236] veth1_macvtap: entered promiscuous mode [ 736.138485][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.229252][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.257894][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.267749][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.310042][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2775'. [ 736.314058][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.344309][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.365508][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.378584][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.390047][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.400161][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.410928][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.427428][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.449039][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.479932][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.575142][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.590125][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.600388][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.611219][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.069578][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.320595][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.361456][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.396830][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.422149][T15599] gfs2: gfs2 mount does not exist [ 737.428436][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.438984][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.450640][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.470451][T15236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.497163][T15236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.521966][T15236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.534106][T15236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.754396][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 737.754414][ T29] audit: type=1326 audit(1721652577.413:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15606 comm="syz.3.2782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c5d75f19 code=0x0 [ 738.160774][ T4430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.228121][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.248870][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.434348][ T4430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.583949][ T4430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.659991][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.684513][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.755058][ T4430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.064321][ T4430] bridge_slave_1: left allmulticast mode [ 739.076550][ T4430] bridge_slave_1: left promiscuous mode [ 739.082368][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.093132][ T4430] bridge_slave_0: left allmulticast mode [ 739.102001][ T4430] bridge_slave_0: left promiscuous mode [ 739.108389][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.971824][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'. [ 741.801522][T15659] netlink: 'syz.3.2788': attribute type 28 has an invalid length. [ 741.810166][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.935595][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.016175][ T4430] bond0 (unregistering): Released all slaves [ 742.123765][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.153019][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.164426][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.175972][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.186208][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 742.193719][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.227768][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2798'. [ 742.271489][T15684] Process accounting resumed [ 744.296220][ T5111] Bluetooth: hci1: command tx timeout [ 744.587449][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 744.808825][ T4430] hsr_slave_0: left promiscuous mode [ 744.857132][ T4430] hsr_slave_1: left promiscuous mode [ 744.883846][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.906466][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.929072][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.944273][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.048775][ T4430] veth1_macvtap: left promiscuous mode [ 745.054448][ T4430] veth0_macvtap: left promiscuous mode [ 745.074849][ T4430] veth1_vlan: left promiscuous mode [ 745.085938][ T4430] veth0_vlan: left promiscuous mode [ 746.405845][ T5111] Bluetooth: hci1: command tx timeout [ 747.177538][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.712339][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 747.819813][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 748.456769][ T5111] Bluetooth: hci1: command tx timeout [ 749.335991][ T5111] Bluetooth: hci5: command 0x0406 tx timeout [ 749.464269][ T29] audit: type=1326 audit(1721652589.123:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15782 comm="syz.1.2822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad85575f19 code=0x0 [ 749.505970][T15674] chnl_net:caif_netlink_parms(): no params data found [ 750.002055][T15674] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.027327][T15674] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.072791][T15674] bridge_slave_0: entered allmulticast mode [ 750.131123][T15674] bridge_slave_0: entered promiscuous mode [ 750.203837][T15674] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.245232][T15674] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.264991][T15674] bridge_slave_1: entered allmulticast mode [ 750.276422][T15674] bridge_slave_1: entered promiscuous mode [ 750.625698][ T5101] Bluetooth: hci1: command tx timeout [ 751.523206][T15674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.617655][T15674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.890915][T15674] team0: Port device team_slave_0 added [ 751.930065][T15674] team0: Port device team_slave_1 added [ 752.111654][T15853] netlink: 'syz.2.2842': attribute type 32 has an invalid length. [ 752.190164][T15674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.197801][T15674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.261531][T15674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.324543][T15674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.348848][T15674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.430038][T15674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.716699][T15674] hsr_slave_0: entered promiscuous mode [ 752.786081][T15674] hsr_slave_1: entered promiscuous mode [ 752.811494][T15674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.842570][T15674] Cannot create hsr debugfs directory [ 752.949570][ T5101] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 753.662120][T15900] IPv6: addrconf: prefix option has invalid lifetime [ 753.909938][T15908] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 754.749359][T15919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2862'. [ 755.219310][T15674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.242355][T15674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.249783][T15455] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 755.300365][T15674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.358387][T15674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.399643][T15941] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2871'. [ 755.466087][T15455] usb 3-1: Using ep0 maxpacket: 32 [ 755.473070][T15455] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 755.516439][T15455] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16698, setting to 1024 [ 755.558978][T15455] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 755.590634][T15455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.611953][T15674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.627220][T15455] hub 3-1:4.0: USB hub found [ 755.660432][T15674] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.684994][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.692189][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.761629][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.768907][ T5205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.980395][T15455] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 755.982124][T15674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.060553][T15455] usb 3-1: USB disconnect, device number 38 [ 756.211588][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2874'. [ 756.517037][T15958] xt_CONNSECMARK: invalid mode: 0 [ 757.247295][T15674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.009535][T16015] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2885'. [ 758.029560][T16015] unsupported nla_type 14345 [ 758.035520][ T5207] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 758.132302][T15674] veth0_vlan: entered promiscuous mode [ 758.215143][T15674] veth1_vlan: entered promiscuous mode [ 758.236916][ T5207] usb 3-1: Using ep0 maxpacket: 8 [ 758.255751][T15674] veth0_macvtap: entered promiscuous mode [ 758.266316][T15674] veth1_macvtap: entered promiscuous mode [ 758.279238][ T5207] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 758.290222][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.306842][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.513779][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.736011][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.903913][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.977168][ T5207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.985746][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.985772][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.985789][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.985805][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.985818][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.987966][T15674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.053207][ T5207] usb 3-1: config 0 descriptor?? [ 759.109295][ T5207] usb-storage 3-1:0.0: USB Mass Storage device detected [ 759.300287][ T5207] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 000b: 4 [ 759.319347][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.332040][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.705581][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.755690][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.829455][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.871941][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.901402][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.931866][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.960851][T15674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.973325][T15674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.984898][T15674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.044982][T15674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.055714][ T5207] usb 3-1: USB disconnect, device number 39 [ 762.068435][T15674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.092470][T15674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.106852][T15674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.254987][T15403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.272624][T15403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.323556][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.332728][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.457886][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.490671][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.502588][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.539452][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.563500][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.581784][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.600234][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.610785][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.622942][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.630953][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.650170][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.658147][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.673021][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.681415][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.703950][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.714466][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.725715][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.733174][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.746769][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.754208][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.768542][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.797996][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.814238][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.829437][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.841403][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.853564][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.872701][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.883940][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.901859][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.928157][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.953429][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.962428][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.970493][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.984833][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 762.993030][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.642595][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.665447][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.706277][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.776756][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.818792][T16076] vxcan1: tx address claim with dest, not broadcast [ 763.824148][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.855545][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.875848][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.890296][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.899668][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.934058][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.948344][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.969076][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.998010][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.018514][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.063869][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.073981][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.089498][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.103609][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.786766][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.826702][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.834159][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.943572][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.972616][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.982733][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 764.990554][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.001095][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.010932][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.020355][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.028410][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.038251][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.056721][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.064376][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.078484][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.083008][T16099] Process accounting resumed [ 765.089108][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.106641][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.114125][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.129018][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.137913][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.145375][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.154631][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.162554][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.170455][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.177930][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.185767][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.193187][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.200637][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.208331][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.215957][ T5207] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 765.228244][ T5207] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 765.245571][T11380] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 765.325152][T16101] nftables ruleset with unbound chain [ 765.445676][T11380] usb 3-1: Using ep0 maxpacket: 8 [ 765.458262][T11380] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 765.467701][T11380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.478863][T11380] usb 3-1: config 0 descriptor?? [ 765.485935][T11380] usb-storage 3-1:0.0: USB Mass Storage device detected [ 765.506000][T11380] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 000b: 4 [ 765.767316][ T5207] usb 3-1: USB disconnect, device number 40 [ 766.599984][T15403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.726568][T15403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.800183][T15403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.881886][T15403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.025609][T15403] bridge_slave_1: left allmulticast mode [ 767.034566][T15403] bridge_slave_1: left promiscuous mode [ 767.041863][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.053600][T15403] bridge_slave_0: left allmulticast mode [ 767.067237][T15403] bridge_slave_0: left promiscuous mode [ 767.073059][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.674089][T15403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.687841][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.701053][T15403] bond0 (unregistering): Released all slaves [ 768.123869][T16149] vxcan1: tx address claim with dest, not broadcast [ 768.175596][T15403] hsr_slave_0: left promiscuous mode [ 768.244686][T15403] hsr_slave_1: left promiscuous mode [ 768.296474][T15403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.327964][T15403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.354496][T15403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.404169][T15403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.463224][T16164] misc userio: Invalid payload size [ 768.499335][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.518121][T16164] sg_write: data in/out 155/14 bytes for SCSI command 0x0-- guessing data in; [ 768.518121][T16164] program syz.2.2917 not setting count and/or reply_len properly [ 768.542903][T15403] veth1_macvtap: left promiscuous mode [ 768.544569][T16167] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2920'. [ 768.549551][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.565295][T15403] veth0_macvtap: left promiscuous mode [ 768.570998][T15403] veth1_vlan: left promiscuous mode [ 768.577632][T15403] veth0_vlan: left promiscuous mode [ 768.585232][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.592904][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.601269][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 768.615802][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.643020][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.657624][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.665252][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.674776][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.683946][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.695181][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.702727][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.715456][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.725985][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 768.732262][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.741841][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.743919][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.757242][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.771726][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.834287][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.862202][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.885712][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.904917][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.921459][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.933909][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.971869][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 768.995285][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.011188][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.020343][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.034706][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.048177][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.058375][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.067938][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.075905][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.088005][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.096894][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.110025][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.121820][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.132611][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.149265][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.161592][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.176561][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.186887][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.199457][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.209349][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.225679][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.233365][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.247871][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.260570][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.269626][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.280661][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.292245][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.301585][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.311823][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.322634][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.332345][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.342697][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.353506][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.363322][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.373452][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.384147][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.396710][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.407088][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.416591][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.425053][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.437033][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.444883][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.455816][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.463469][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.471808][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.479932][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.488175][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.504456][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.513729][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.522781][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.538138][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.546055][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.554813][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.563969][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.573046][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.581063][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.589366][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.599486][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.610814][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.619073][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.627230][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.634750][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.644167][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.654863][T11380] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 769.666860][T11380] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 770.303309][T15403] team0 (unregistering): Port device team_slave_1 removed [ 770.394648][T16189] Process accounting resumed [ 770.417221][T15403] team0 (unregistering): Port device team_slave_0 removed [ 770.665556][T11380] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 770.856760][ T5101] Bluetooth: hci1: command tx timeout [ 770.884414][T11380] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 770.892894][T11380] usb 3-1: config 179 has no interface number 0 [ 770.899456][T11380] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 770.910677][T11380] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 770.921806][T11380] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 770.933114][T11380] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 770.946654][T11380] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 770.959994][T11380] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 770.969120][T11380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.991510][T16189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 770.999961][T16189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 771.253059][ T46] usb 3-1: USB disconnect, device number 41 [ 771.253129][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 771.267299][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 771.276747][ C0] ================================================================== [ 771.284835][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8d1/0x980 [ 771.292935][ C0] Read of size 1 at addr ffff88806a539891 by task kworker/u8:8/3841 [ 771.300925][ C0] [ 771.303247][ C0] CPU: 0 UID: 0 PID: 3841 Comm: kworker/u8:8 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 771.313749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 771.323793][ C0] Workqueue: bat_events batadv_nc_worker [ 771.329423][ C0] Call Trace: [ 771.332687][ C0] [ 771.335517][ C0] dump_stack_lvl+0x241/0x360 [ 771.340190][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.345387][ C0] ? __pfx__printk+0x10/0x10 [ 771.350090][ C0] ? _printk+0xd5/0x120 [ 771.354250][ C0] ? __virt_addr_valid+0x183/0x530 [ 771.359362][ C0] ? __virt_addr_valid+0x183/0x530 [ 771.364469][ C0] print_report+0x169/0x550 [ 771.368970][ C0] ? __virt_addr_valid+0x183/0x530 [ 771.374065][ C0] ? __virt_addr_valid+0x183/0x530 [ 771.379157][ C0] ? __virt_addr_valid+0x45f/0x530 [ 771.384256][ C0] ? __phys_addr+0xba/0x170 [ 771.388741][ C0] ? register_lock_class+0x8d1/0x980 [ 771.394019][ C0] kasan_report+0x143/0x180 [ 771.398520][ C0] ? register_lock_class+0x8d1/0x980 [ 771.403805][ C0] register_lock_class+0x8d1/0x980 [ 771.408935][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 771.414588][ C0] ? __lock_acquire+0x137a/0x2040 [ 771.419620][ C0] __lock_acquire+0xf0/0x2040 [ 771.424308][ C0] lock_acquire+0x1ed/0x550 [ 771.428802][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 771.434198][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 771.439215][ C0] ? __usb_hcd_giveback_urb+0x42c/0x6e0 [ 771.444750][ C0] ? __pfx_lock_release+0x10/0x10 [ 771.449776][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 771.454969][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 771.460418][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 771.465699][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 771.471061][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 771.477034][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 771.482919][ C0] __wake_up_common_lock+0x25/0x1e0 [ 771.488110][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 771.493473][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 771.499367][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 771.504578][ C0] dummy_timer+0x830/0x45a0 [ 771.509101][ C0] ? __pfx_lock_release+0x10/0x10 [ 771.514126][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 771.520452][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 771.525810][ C0] ? __pfx_lock_release+0x10/0x10 [ 771.530825][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 771.536010][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 771.540957][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 771.545915][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 771.551119][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 771.557097][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 771.562806][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 771.568866][ C0] hrtimer_interrupt+0x396/0x990 [ 771.573800][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 771.579772][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 771.585394][ C0] [ 771.588312][ C0] [ 771.591228][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.597226][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 771.602607][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0a e5 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 771.622231][ C0] RSP: 0018:ffffc9000be879e0 EFLAGS: 00000206 [ 771.628301][ C0] RAX: 0000000000000001 RBX: 1ffff920017d0f48 RCX: 65a904a181daff00 [ 771.636261][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c1fd0c0 [ 771.644223][ C0] RBP: ffffc9000be87b40 R08: ffffffff92fcf807 R09: 1ffffffff25f9f00 [ 771.652183][ C0] R10: dffffc0000000000 R11: fffffbfff25f9f01 R12: 1ffff920017d0f44 [ 771.660143][ C0] R13: dffffc0000000000 R14: ffffc9000be87a40 R15: 0000000000000246 [ 771.668117][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 771.673139][ C0] ? batadv_nc_worker+0xcb/0x610 [ 771.678072][ C0] ? __pfx_lock_release+0x10/0x10 [ 771.683091][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.689069][ C0] batadv_nc_worker+0xec/0x610 [ 771.693816][ C0] ? batadv_nc_worker+0xcb/0x610 [ 771.698741][ C0] ? batadv_nc_worker+0xcb/0x610 [ 771.703669][ C0] ? process_scheduled_works+0x945/0x1830 [ 771.709383][ C0] process_scheduled_works+0xa2c/0x1830 [ 771.714929][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.721073][ C0] ? assign_work+0x364/0x3d0 [ 771.725656][ C0] worker_thread+0x86d/0xd40 [ 771.730240][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 771.736125][ C0] ? __kthread_parkme+0x169/0x1d0 [ 771.741140][ C0] ? __pfx_worker_thread+0x10/0x10 [ 771.746244][ C0] kthread+0x2f0/0x390 [ 771.750297][ C0] ? __pfx_worker_thread+0x10/0x10 [ 771.755396][ C0] ? __pfx_kthread+0x10/0x10 [ 771.759970][ C0] ret_from_fork+0x4b/0x80 [ 771.764382][ C0] ? __pfx_kthread+0x10/0x10 [ 771.768953][ C0] ret_from_fork_asm+0x1a/0x30 [ 771.773710][ C0] [ 771.776716][ C0] [ 771.779022][ C0] Allocated by task 11380: [ 771.783415][ C0] kasan_save_track+0x3f/0x80 [ 771.788082][ C0] __kasan_kmalloc+0x98/0xb0 [ 771.792742][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 771.798102][ C0] xpad_probe+0x3c8/0x1b90 [ 771.802509][ C0] usb_probe_interface+0x645/0xbb0 [ 771.807608][ C0] really_probe+0x2b8/0xad0 [ 771.812099][ C0] __driver_probe_device+0x1a2/0x390 [ 771.817372][ C0] driver_probe_device+0x50/0x430 [ 771.822383][ C0] __device_attach_driver+0x2d6/0x530 [ 771.827827][ C0] bus_for_each_drv+0x24e/0x2e0 [ 771.832659][ C0] __device_attach+0x333/0x520 [ 771.837406][ C0] bus_probe_device+0x189/0x260 [ 771.842248][ C0] device_add+0x856/0xbf0 [ 771.846562][ C0] usb_set_configuration+0x1976/0x1fb0 [ 771.852005][ C0] usb_generic_driver_probe+0x88/0x140 [ 771.857452][ C0] usb_probe_device+0x1b8/0x380 [ 771.862285][ C0] really_probe+0x2b8/0xad0 [ 771.866773][ C0] __driver_probe_device+0x1a2/0x390 [ 771.872041][ C0] driver_probe_device+0x50/0x430 [ 771.877049][ C0] __device_attach_driver+0x2d6/0x530 [ 771.882405][ C0] bus_for_each_drv+0x24e/0x2e0 [ 771.887240][ C0] __device_attach+0x333/0x520 [ 771.891988][ C0] bus_probe_device+0x189/0x260 [ 771.896908][ C0] device_add+0x856/0xbf0 [ 771.901239][ C0] usb_new_device+0x104a/0x19a0 [ 771.906082][ C0] hub_event+0x2d6a/0x5150 [ 771.910481][ C0] process_scheduled_works+0xa2c/0x1830 [ 771.916038][ C0] worker_thread+0x86d/0xd40 [ 771.920616][ C0] kthread+0x2f0/0x390 [ 771.924665][ C0] ret_from_fork+0x4b/0x80 [ 771.929068][ C0] ret_from_fork_asm+0x1a/0x30 [ 771.933818][ C0] [ 771.936122][ C0] Freed by task 46: [ 771.939904][ C0] kasan_save_track+0x3f/0x80 [ 771.944562][ C0] kasan_save_free_info+0x40/0x50 [ 771.949573][ C0] poison_slab_object+0xe0/0x150 [ 771.954595][ C0] __kasan_slab_free+0x37/0x60 [ 771.959341][ C0] kfree+0x149/0x360 [ 771.963223][ C0] xpad_disconnect+0x359/0x490 [ 771.967972][ C0] usb_unbind_interface+0x25e/0x940 [ 771.973192][ C0] device_release_driver_internal+0x503/0x7c0 [ 771.979260][ C0] bus_remove_device+0x34f/0x420 [ 771.984179][ C0] device_del+0x57a/0x9b0 [ 771.988494][ C0] usb_disable_device+0x3bf/0x850 [ 771.993501][ C0] usb_disconnect+0x340/0x950 [ 771.998166][ C0] hub_event+0x1eb9/0x5150 [ 772.002569][ C0] process_scheduled_works+0xa2c/0x1830 [ 772.008101][ C0] worker_thread+0x86d/0xd40 [ 772.012677][ C0] kthread+0x2f0/0x390 [ 772.016741][ C0] ret_from_fork+0x4b/0x80 [ 772.021156][ C0] ret_from_fork_asm+0x1a/0x30 [ 772.025920][ C0] [ 772.028239][ C0] The buggy address belongs to the object at ffff88806a539800 [ 772.028239][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 772.042274][ C0] The buggy address is located 145 bytes inside of [ 772.042274][ C0] freed 1024-byte region [ffff88806a539800, ffff88806a539c00) [ 772.056136][ C0] [ 772.058447][ C0] The buggy address belongs to the physical page: [ 772.064846][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a538 [ 772.073588][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 772.082069][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 772.089604][ C0] page_type: 0xfdffffff(slab) [ 772.094263][ C0] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 772.102916][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 772.111482][ C0] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 772.120138][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 772.128904][ C0] head: 00fff00000000003 ffffea0001a94e01 ffffffffffffffff 0000000000000000 [ 772.137556][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 772.146206][ C0] page dumped because: kasan: bad access detected [ 772.152619][ C0] page_owner tracks the page as allocated [ 772.158314][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 52, tgid 52 (kworker/u8:3), ts 770999439682, free_ts 770969550385 [ 772.178790][ C0] post_alloc_hook+0x1f3/0x230 [ 772.183543][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 772.189085][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 772.194267][ C0] alloc_slab_page+0x5f/0x120 [ 772.198929][ C0] allocate_slab+0x5a/0x2f0 [ 772.203418][ C0] ___slab_alloc+0xcd1/0x14b0 [ 772.208078][ C0] __slab_alloc+0x58/0xa0 [ 772.212393][ C0] __kmalloc_noprof+0x25a/0x400 [ 772.217239][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 772.223033][ C0] ieee80211_inform_bss+0x15f/0x1080 [ 772.228305][ C0] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 772.234533][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 772.240165][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 772.246234][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 772.251863][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 772.258012][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 772.263212][ C0] page last free pid 4533 tgid 4533 stack trace: [ 772.269533][ C0] free_unref_page+0xd19/0xea0 [ 772.274379][ C0] __put_partials+0xeb/0x130 [ 772.278979][ C0] put_cpu_partial+0x17c/0x250 [ 772.283728][ C0] __slab_free+0x2ea/0x3d0 [ 772.288126][ C0] qlist_free_all+0x9e/0x140 [ 772.292699][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 772.298169][ C0] __kasan_slab_alloc+0x23/0x80 [ 772.303013][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 772.308893][ C0] __alloc_skb+0x1c3/0x440 [ 772.313304][ C0] alloc_skb_with_frags+0xc3/0x770 [ 772.318420][ C0] sock_alloc_send_pskb+0x91a/0xa60 [ 772.323617][ C0] unix_dgram_sendmsg+0x6d3/0x1f80 [ 772.328901][ C0] __sock_sendmsg+0x221/0x270 [ 772.333580][ C0] __sys_sendto+0x3a4/0x4f0 [ 772.338078][ C0] __x64_sys_sendto+0xde/0x100 [ 772.342860][ C0] do_syscall_64+0xf3/0x230 [ 772.347375][ C0] [ 772.349694][ C0] Memory state around the buggy address: [ 772.355320][ C0] ffff88806a539780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 772.363388][ C0] ffff88806a539800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 772.371450][ C0] >ffff88806a539880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 772.379510][ C0] ^ [ 772.384120][ C0] ffff88806a539900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 772.392170][ C0] ffff88806a539980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 772.400307][ C0] ================================================================== [ 772.408380][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 772.415731][ C0] CPU: 0 UID: 0 PID: 3841 Comm: kworker/u8:8 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 772.426219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 772.436282][ C0] Workqueue: bat_events batadv_nc_worker [ 772.441933][ C0] Call Trace: [ 772.445214][ C0] [ 772.448174][ C0] dump_stack_lvl+0x241/0x360 [ 772.452862][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.458061][ C0] ? __pfx__printk+0x10/0x10 [ 772.462727][ C0] ? rcu_is_watching+0x15/0xb0 [ 772.467484][ C0] ? lock_release+0xbf/0xa30 [ 772.472066][ C0] ? vscnprintf+0x5d/0x90 [ 772.476477][ C0] panic+0x349/0x860 [ 772.480360][ C0] ? check_panic_on_warn+0x21/0xb0 [ 772.485454][ C0] ? __pfx_panic+0x10/0x10 [ 772.489858][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 772.495045][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 772.500957][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 772.507277][ C0] ? print_report+0x502/0x550 [ 772.511942][ C0] check_panic_on_warn+0x86/0xb0 [ 772.516867][ C0] ? register_lock_class+0x8d1/0x980 [ 772.522145][ C0] end_report+0x77/0x160 [ 772.526381][ C0] kasan_report+0x154/0x180 [ 772.530876][ C0] ? register_lock_class+0x8d1/0x980 [ 772.537027][ C0] register_lock_class+0x8d1/0x980 [ 772.542166][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 772.547791][ C0] ? __lock_acquire+0x137a/0x2040 [ 772.552808][ C0] __lock_acquire+0xf0/0x2040 [ 772.557484][ C0] lock_acquire+0x1ed/0x550 [ 772.561976][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 772.567360][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 772.572428][ C0] ? __usb_hcd_giveback_urb+0x42c/0x6e0 [ 772.578021][ C0] ? __pfx_lock_release+0x10/0x10 [ 772.583051][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 772.588253][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 772.593807][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 772.599606][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 772.604969][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 772.610853][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 772.616739][ C0] __wake_up_common_lock+0x25/0x1e0 [ 772.621930][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 772.627298][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 772.633186][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 772.638388][ C0] dummy_timer+0x830/0x45a0 [ 772.642881][ C0] ? __pfx_lock_release+0x10/0x10 [ 772.648019][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 772.654338][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 772.659696][ C0] ? __pfx_lock_release+0x10/0x10 [ 772.664716][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 772.669991][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 772.674919][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 772.679845][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 772.685032][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 772.691010][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 772.696724][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 772.702787][ C0] hrtimer_interrupt+0x396/0x990 [ 772.707722][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 772.713694][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 772.719322][ C0] [ 772.722240][ C0] [ 772.725161][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.731142][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 772.736420][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0a e5 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 772.756033][ C0] RSP: 0018:ffffc9000be879e0 EFLAGS: 00000206 [ 772.762105][ C0] RAX: 0000000000000001 RBX: 1ffff920017d0f48 RCX: 65a904a181daff00 [ 772.770151][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c1fd0c0 [ 772.778133][ C0] RBP: ffffc9000be87b40 R08: ffffffff92fcf807 R09: 1ffffffff25f9f00 [ 772.786115][ C0] R10: dffffc0000000000 R11: fffffbfff25f9f01 R12: 1ffff920017d0f44 [ 772.794080][ C0] R13: dffffc0000000000 R14: ffffc9000be87a40 R15: 0000000000000246 [ 772.802056][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 772.807097][ C0] ? batadv_nc_worker+0xcb/0x610 [ 772.812046][ C0] ? __pfx_lock_release+0x10/0x10 [ 772.817078][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 772.823059][ C0] batadv_nc_worker+0xec/0x610 [ 772.827812][ C0] ? batadv_nc_worker+0xcb/0x610 [ 772.832739][ C0] ? batadv_nc_worker+0xcb/0x610 [ 772.837669][ C0] ? process_scheduled_works+0x945/0x1830 [ 772.843381][ C0] process_scheduled_works+0xa2c/0x1830 [ 772.848939][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 772.854911][ C0] ? assign_work+0x364/0x3d0 [ 772.859491][ C0] worker_thread+0x86d/0xd40 [ 772.864071][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 772.869984][ C0] ? __kthread_parkme+0x169/0x1d0 [ 772.875003][ C0] ? __pfx_worker_thread+0x10/0x10 [ 772.880102][ C0] kthread+0x2f0/0x390 [ 772.884156][ C0] ? __pfx_worker_thread+0x10/0x10 [ 772.889257][ C0] ? __pfx_kthread+0x10/0x10 [ 772.893829][ C0] ret_from_fork+0x4b/0x80 [ 772.898236][ C0] ? __pfx_kthread+0x10/0x10 [ 772.902809][ C0] ret_from_fork_asm+0x1a/0x30 [ 772.907569][ C0] [ 772.910836][ C0] Kernel Offset: disabled [ 772.915145][ C0] Rebooting in 86400 seconds..