last executing test programs: 28.525075124s ago: executing program 4: r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) (async) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x90) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x24, 0x14, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) (async) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000040)=0x9) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800000a0300050200f5000000000000545e0e0002d58838068b91"], 0x4e) 28.145885867s ago: executing program 4: getpid() r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x13c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x112, 0x2a, [@cf={0x4, 0x6, {0x7, 0xa8, 0x0, 0x39b1}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x6}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @random_vendor={0xdd, 0xf9, "268cba7556020d8eadf42ea9c4c4891306f81fc7c47bdb507c20b11cc487ddd6255f090777c715daad337d02db74df1308e5913e983bb85db8fbad39d40b914def1e5e544d12a07e56dffd65ec24f0f7e81c926534a78da429ab58e057a07cb83d30ebc6d568c7dc6b3dd116b7f734d329854669bb196720dfd8a4b29a5cc726548b6aac8fa169f81bdc4f8e8612a4d997103e14fe9b4334fd51e359f03fd6e2acee78b4028afd2ee828dde6e973016b911ff56d89b6f94b0796e552dfdf78ba8692f80df998b385a5f7d2482ebc1a5b2dcd46106eac61006b46bfac5def6a8468c03b971205931a27db8f55cb3c85b0da8d7be1eec6645887"}]}]}, 0x13c}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r7, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"ac1cc31ea2b6b562e185e66e23f11adb"}}}}, 0xa0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50, 0x0, r9}, 0x50) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x305c00, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r8, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x36, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}) r11 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r11, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0x3e80000000}], 0x1, 0x3f00, 0x0, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17.38489521s ago: executing program 4: getpid() r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x13c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x112, 0x2a, [@cf={0x4, 0x6, {0x7, 0xa8, 0x0, 0x39b1}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x6}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @random_vendor={0xdd, 0xf9, "268cba7556020d8eadf42ea9c4c4891306f81fc7c47bdb507c20b11cc487ddd6255f090777c715daad337d02db74df1308e5913e983bb85db8fbad39d40b914def1e5e544d12a07e56dffd65ec24f0f7e81c926534a78da429ab58e057a07cb83d30ebc6d568c7dc6b3dd116b7f734d329854669bb196720dfd8a4b29a5cc726548b6aac8fa169f81bdc4f8e8612a4d997103e14fe9b4334fd51e359f03fd6e2acee78b4028afd2ee828dde6e973016b911ff56d89b6f94b0796e552dfdf78ba8692f80df998b385a5f7d2482ebc1a5b2dcd46106eac61006b46bfac5def6a8468c03b971205931a27db8f55cb3c85b0da8d7be1eec6645887"}]}]}, 0x13c}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r7, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"ac1cc31ea2b6b562e185e66e23f11adb"}}}}, 0xa0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50, 0x0, r9}, 0x50) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x305c00, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r8, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x36, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}) r11 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r11, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0x3e80000000}], 0x1, 0x3f00, 0x0, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 14.19459885s ago: executing program 4: socket$rxrpc(0x21, 0x2, 0xa) r0 = socket(0x1d, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 14.016175482s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000048eb200b5a7b3cbbdc1e4a385c05bc08e916f4c173d7a38671", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'veth0_to_bridge\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000014000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="1400038004000500040008000200000000047d05fca72614d0d72c5f8a688f47d7914418cf10ef0c5880c8f9bdf2ac7a835b6d308215f5443b064bc69d106d5483056b4e25e650c3c2544e524649839677295e0b0fb8fd35693ea282fa17"], 0x3c}}, 0x0) 13.559876677s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c000480380001800d00010073796e70726f7879008000002400028008000340000000080500020002000000080003400000000c050002008100000014000000110001"], 0xec}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000001c0)={0xfeff, 0x0, 0x8, 0x8001, 0x8, 0x7}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001080)={0xc, 0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f00000010c0)={0x0, 0xb7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd2, 0xd6, 0xe7, 0x40, 0x61d, 0xc150, 0x798a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9e, 0x93, 0xf}}]}}]}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x20, 0x10, 0x4, 0x1, 0x0, 0x0, 0x7, 0x10001}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x141}, 0x4000024) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r9, r10, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) close_range(r0, 0xffffffffffffffff, 0x0) 13.208567477s ago: executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b47, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x4, 0x0, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="5d7d57acc2a06464979ca32d52ad96349a559739e634e6cf6029ea96a64ed033a978f5f87569a33db0a705947ed80d0bfe3f8b0799c45f9fd0d091399da4c020963679ec2712236e5f22c4a31d606ac69c7a43d7c0dc4072c98edd2b6396a3aadb23b1c8030a64a5788eab8f4493fe3f685bb34e8a08d9f5ccf5a57b7ad8ad44e27b3103823b13715750e07b6cf8f3b5cb365e260387e9e3ac52f0d6d9fb8eba68fba27b3e3e5c068d63d6ad251ab6", 0xaf}], 0x1, &(0x7f0000000780)=[{0xb8, 0x115, 0x766f, "1362a76408a0773941ae9ca9acd2cc029720f2b1c6c1fee3269621e47239fff235d32a0e48f6049bc8bad7f94bef7ef015bcb206cd3228e3513af2889123b58712e172824376b77229076becc12689d7d266d628d462e3301d98813a459eee6b7d7e8257e0392b5285590196ec549eb5eab5abbb65c1dc09ef829f0fa415fe18e010dd7ecad6fa73c321db0c6d911a11659c0ae0bc9ad6118e3a1fa052fe282f298f3f"}, {0x78, 0x107, 0x6, "04f5c1dd358d2824f2337f2debbbf5104c7091a150f914159bec67abcb8c8c471c0f9012ec164c869779b72d1a8b630dffdb8d590c4b61cf0485d9566d7d463d31cc7b2b5af78c5d7dc15e16d10fecba1c1a0fb958ddbd6981645d29ae36b7a5b40666d44941"}, {0x50, 0x117, 0x6, "fea217e20b9a52fad71076a67183389f5d0aae5dd32d8f00ba7f45025c4c0cc7943c9c4bc28591a037edf9cbd3a85a32f1a64edfb71ffaafdf275e82ac"}, {0x100, 0x29, 0x4, "0d8c324bb67dd3af05a934ce220c8aa5226b5934b3beeda03a7b46e19b815927f4eadf713d127fb06ba9c5dac19620fa7eebab96de77940133c040778fbd48cc8021ff6ead3267724ee833c285c1c92567abe891519b8be74e36389e3ad22e0392c730e32732803ace1d576fd02d5892d9743abc383c052930073da6c68bd83d5fa905d8d9f1bea9c377c678089de30b3d10764f683499e0dce1dba89fdd23fa96c2233aecc260537fb95c826a6da768c642763052cf2ab19052f9e8e1064cc35dc8793a737730334431b36e4d41329ddae3babdc997475d332d1772a9ff4f6ccd5cc00ca8d8097127"}, {0xd0, 0x112, 0x1000, "e1c2ea530395bab0871b289b2718690d1f55351a92dd323f62ef94ab0b6f59e2d76146e8049b6aa14d1bd39c270621ef8ab7398fb86b5b9e4d8826591dce30ab309b11d32131d7bb33186370355dd49e4a635528bd9813de65e61d2e64511c072e6cad113d54b0410819a95f93fe6eeb5331783bedeb2353e58e94c46ed11f65c642244fcc363880adab2369d3e8fedd134973bb4b18a342d06b95d836ba9313f99210a8eba7ef0747d0a9246f372744a933ffe5d1a3b8de2d"}, {0x88, 0x3a, 0x6, "a0f04afdd36482bc04b2aa21fcdf5c71cda0e20bd5f752d35ad67fa655ffda3d3320bf0d7b98a201a25fbd112a46dd858e00a943cda08bace98fbad7ddb7c5c38d428db34c464f607121c2932ef099679e5a6a6903f2a9d1307e4aaf1ed46c9334bda9c03edab4e96bbb8216ca661000a4"}, {0x80, 0x111, 0x6, "087d3b977ecdcc54b71e23de285e47169a04548acd037a6f108eda2ec8439894e08127912831c3dd0950ac4ef3a961b00799dadd7256460b77bdcbad3b14b8c8b12cd9f36bf382cf86a4ad0c837fa3df0f32e576aece14a7f7cea0a8290e156ac67572157d34fbc3a7618a9d"}, {0x110, 0x0, 0x0, "dbae2cb0d06d38550c0089c2cf9081351e70dd8b0c30980e1dad6884a6e3868ef85f1b2a2cf75b313f6ee35e02098d780b46a997ad35b27c60af599713a89db5f998c7ab5fa4e01219ae2545c427ba676aa84821f09a226e0dcaa7993e0b447de9c5f721f3af15a3e751156358a12ab997424b6f50b5069aa9b9bd264e08b1c4e82bf70170788ecc25794bae11c3442ebc655cf88d3aab774e2815e187acbffdc6bfbd4915149b8dc8c6d07cc63eded198342098aa03caef5c01a200d65dabbb0ef51d6b3f40f9ff19ba92dffb21c576f2b0acc5d89e4a631bdab73ce31283235fde6dd42cd465a04dd48b3fcdf74acfffeb622be704195f6b"}, {0xb8, 0x3a, 0x5, "0c47a8cc5008f3ac9533287d1e4d8cf034c97acccc537aebddf348cc6e2141c3c319a1f406e03d132ec7cb3253c530dfc9d64f602f193d4cf7a775c4d891af887a02430de836f4c2532a2450895ce9a00f7c08c84f4a40f2ce78c30c8b0a238776273788edaf5ef05051afac34c8e7985ba3b0b3c74e094ef4bfc96fca9ca31742c22310dc194f0fbc008c3bd283f6a690a4721aed8a36a4928c975144d7ff32fd"}], 0x620}, 0x40800) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = dup(r1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in=@multicast2, {@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8000000000000001, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000016fc90b25532adb6e7d9dfc99bfac53f000000e800000200020094cd00"/70, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000c000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r10 = dup(r1) sendfile(r10, r3, 0x0, 0x89ffc) 13.207815701s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x6020400) ioctl$RTC_SET_TIME(r1, 0x7005, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000300)=0x100005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x480000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000037000000fe80"], 0x28}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f00000001c0)=""/224, &(0x7f0000000080)=0xe0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000020301020000000000000000000000050800010001000000090002"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="dbc6b6a8d05c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800110}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x136c, 0x14, 0x804, 0x70bd26, 0x25dfdbfb, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "55864597f7da9f9a8d7c02a47157b38af50e72e70ede0a28a6e36d0454c84d593eebfa61ca91da3fe5b81f649bd2884ab79e27a342b333dc923a1d3fb145b2dc2fdab0b53b56bababfd6ced7b182a38cc070c7b9fa4271b04662de71b4b3d30d771fcc576b0e63e549f18b9f3d4739ca6f0360bf0100ff2786718466f4b205a67bde193c03a28e986a4db5c166c1b35272449961b7d5c158e3f7e21ceacfe4786120878cf362ca5643fd376685173bc37f5136f46b5ad6a90993cf48a69414a3"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "4f6456a47be06219508b1f9992b2bd23fc2160c44b919566cd38a97d6e2113da6d5fc29422e6cbf118938cc571bbc76cce50f7e22812bb6cbf90093995133336f27243c27ab203967e3bf2a33306a610e83cae56247974c90a5586f86a56a1abc7dde1f82439a18af9773ed5200d76928d473b58a0fb59b540f6f78ccbc9e02cef3fbe3d6348181e8ec39a058cae54263d8a6186127bfc946c9f09524bd41bec0ade0426928911d0b6679f1b43f037368c3d3ffa6bd7eb8ebda9ac10cfbf8416ce2587fbed15528b42df743611846b5ad16e989d14f9"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "658682b39209eefdc1b174029a9c07619e45f9f32e"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "9952850559563d388df0727b6979ec26c42945341ec4b98e6ab610a017d3"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "fa9947f1668baa160906887dd7fbb2eb17ae393bd587ec7adbd4312575a90c1f88c7942ab3d284bf4552e868536c3dda3bd19178362eaa13090dac071cf0173cd8743aca3a0f718380beb3b4f3e57527d42f3f128436ee962932922f45a8f7f47e01ab5c8f9e883eae55724e1c4a20e4de284cc09f864f83f17cf03de7a96f7bd94e19a69490f4c83bf2c7518f01790129f3b0b52a"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "de5e0233f97c662036a7560ffc9ccfc431c8781833e071a35f43df55889bcfa793444e4a3cb2c5ef6b4b2f334787c931dfa91a0b18785ab32c63edb96b637c741423fa819fc6c9c5fba148540590f1dcb5931abc"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "f6421da19e5da3a30e60c242c74ef0fc97a0bfd53d8259588ee0a0222a0afff16a148ccfed56802b6b35c1215a792bef385c4529fa826e2ceb700fb6e4d481d2ce19a3615e436d40986f6cb74cdd320bc49408641f4e32644a1a6594815f8fe6d982810826273b17b14c197ffe1beb395d2b987985671ac4be"}]}, 0x136c}, 0x1, 0x0, 0x0, 0xf48cdd6bd379ece3}, 0x48001) 13.107255267s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000300)='9', 0x1}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000a400)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x0, 0x0, 0x7}}, 0x50) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000003c0)="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") fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x80041, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYBLOB="ee941372a80aaadc5f232a83bcb901347a330e6705bdd494db4d934df1718c5f24f9d769c685d17f65a64255c7f8de2b3a995d5db0d651f6561fb9908611ba88462b7c344ba19031d4e262463998cc0276", @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b"], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x20008800}, 0x0) 12.197058656s ago: executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = socket(0x1d, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 11.665073912s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x5452, 0x0) 11.338681903s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x6020400) ioctl$RTC_SET_TIME(r1, 0x7005, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000300)=0x100005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x480000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000037000000fe80"], 0x28}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f00000001c0)=""/224, &(0x7f0000000080)=0xe0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000020301020000000000000000000000050800010001000000090002"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="dbc6b6a8d05c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800110}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x136c, 0x14, 0x804, 0x70bd26, 0x25dfdbfb, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "55864597f7da9f9a8d7c02a47157b38af50e72e70ede0a28a6e36d0454c84d593eebfa61ca91da3fe5b81f649bd2884ab79e27a342b333dc923a1d3fb145b2dc2fdab0b53b56bababfd6ced7b182a38cc070c7b9fa4271b04662de71b4b3d30d771fcc576b0e63e549f18b9f3d4739ca6f0360bf0100ff2786718466f4b205a67bde193c03a28e986a4db5c166c1b35272449961b7d5c158e3f7e21ceacfe4786120878cf362ca5643fd376685173bc37f5136f46b5ad6a90993cf48a69414a3"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "4f6456a47be06219508b1f9992b2bd23fc2160c44b919566cd38a97d6e2113da6d5fc29422e6cbf118938cc571bbc76cce50f7e22812bb6cbf90093995133336f27243c27ab203967e3bf2a33306a610e83cae56247974c90a5586f86a56a1abc7dde1f82439a18af9773ed5200d76928d473b58a0fb59b540f6f78ccbc9e02cef3fbe3d6348181e8ec39a058cae54263d8a6186127bfc946c9f09524bd41bec0ade0426928911d0b6679f1b43f037368c3d3ffa6bd7eb8ebda9ac10cfbf8416ce2587fbed15528b42df743611846b5ad16e989d14f9"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "658682b39209eefdc1b174029a9c07619e45f9f32e"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "9952850559563d388df0727b6979ec26c42945341ec4b98e6ab610a017d3"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "fa9947f1668baa160906887dd7fbb2eb17ae393bd587ec7adbd4312575a90c1f88c7942ab3d284bf4552e868536c3dda3bd19178362eaa13090dac071cf0173cd8743aca3a0f718380beb3b4f3e57527d42f3f128436ee962932922f45a8f7f47e01ab5c8f9e883eae55724e1c4a20e4de284cc09f864f83f17cf03de7a96f7bd94e19a69490f4c83bf2c7518f01790129f3b0b52a"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "de5e0233f97c662036a7560ffc9ccfc431c8781833e071a35f43df55889bcfa793444e4a3cb2c5ef6b4b2f334787c931dfa91a0b18785ab32c63edb96b637c741423fa819fc6c9c5fba148540590f1dcb5931abc"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "f6421da19e5da3a30e60c242c74ef0fc97a0bfd53d8259588ee0a0222a0afff16a148ccfed56802b6b35c1215a792bef385c4529fa826e2ceb700fb6e4d481d2ce19a3615e436d40986f6cb74cdd320bc49408641f4e32644a1a6594815f8fe6d982810826273b17b14c197ffe1beb395d2b987985671ac4be"}]}, 0x136c}, 0x1, 0x0, 0x0, 0xf48cdd6bd379ece3}, 0x48001) 6.895217624s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x6, 0xfffffffd, 0xcf1}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}]}}}]}, 0x48}}, 0x0) 6.566468311s ago: executing program 2: socket$rxrpc(0x21, 0x2, 0xa) r0 = socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 6.297825618s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) 6.201503891s ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r3 = dup3(r0, r1, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x52, 0x2, 0x0, "b43ddddde5dbbbe40f00f401bbf689000000c67f00000000008000"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000048eb200b5a7b3cbbdc1e4a385c05bc08e916f4c173d7a38671", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000014000180080003000100000008000100", @ANYRES32, @ANYBLOB="1400038004000500040008000200000000047d05fca72614d0d72c5f8a688f47d7914418cf10ef0c5880c8f9bdf2ac7a835b6d308215f5443b064bc69d106d5483056b4e25e650c3c2544e524649839677295e0b0fb8fd35693ea282fa17"], 0x3c}}, 0x0) 3.006727258s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffd, @private2}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x5242, &(0x7f0000006b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x72, &(0x7f0000000240)=""/210, &(0x7f0000000100)=0xd2) r3 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x0, 0x0) r4 = dup2(r3, r3) mq_notify(r4, &(0x7f0000000040)={0x20000000}) read$FUSE(r4, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x240cc3, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r8 = openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b522abec44fa8f218d52e570", 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r9 = creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r9, r7, 0x0, 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) 2.958390509s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x24000000}, 0x0) r5 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x46c) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r5) tkill(r5, 0x13) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x102, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffff8d, &(0x7f0000002800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000029000000360000000018000000000000"], 0x18}}], 0x2, 0x0) 2.831829301s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) unshare(0x22020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setns(r2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.621247934s ago: executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, r1+10000000}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000000)={0xf010002, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x3455d9a4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) 1.723694309s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010006", 0x4d}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) 1.546945096s ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r1, 0x0) (async) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) (async) 1.303291798s ago: executing program 3: io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.132370377s ago: executing program 3: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) io_setup(0x6, &(0x7f0000000180)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x300, 0x0, 0x0, 0x0, r7, 0x0}]) syz_io_uring_setup(0x5186, &(0x7f0000000000)={0x0, 0xf282, 0x800, 0x0, 0x200191, 0x0, r7}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) write$P9_RATTACH(r7, &(0x7f0000000200)={0x14, 0x69, 0x1, {0x8, 0x4, 0x1}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x4, 0x1, 0x0, 0x1}, {0x5b3, 0x9, 0x9, 0xf6}, {0x5652, 0x7, 0x7f, 0x7}, {0x5e, 0x3f, 0x0, 0x7}]}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 960.757578ms ago: executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) listen(r1, 0x0) close(r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x9) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000040)) mmap(&(0x7f0000c6a000/0x3000)=nil, 0x3000, 0x100000a, 0x2010, r2, 0x31011000) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x0, 0x0, &(0x7f0000000700)) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, '{[\x1d'}, {0x20, '/^/-}\\.@[\\^'}, {0x20, '#! '}, {0x20, '\x00\x80\x00\xa4]\xb4\xcc\x1c\xac\x006\x03x\x8e\xf0'}], 0xa, "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"}, 0x193) ioctl$TCSETSW2(r0, 0x5435, 0x0) 161.80813ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000048eb200b5a7b3cbbdc1e4a385c05bc08e916f4c173d7a38671", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000014000180080003000100000008000100", @ANYRES32, @ANYBLOB="1400038004000500040008000200000000047d05fca72614d0d72c5f8a688f47d7914418cf10ef0c5880c8f9bdf2ac7a835b6d308215f5443b064bc69d106d5483056b4e25e650c3c2544e524649839677295e0b0fb8fd35693ea282fa17"], 0x3c}}, 0x0) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffd, @private2}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x5242, &(0x7f0000006b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x72, &(0x7f0000000240)=""/210, &(0x7f0000000100)=0xd2) r3 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x0, 0x0) r4 = dup2(r3, r3) mq_notify(r4, &(0x7f0000000040)={0x20000000}) read$FUSE(r4, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x240cc3, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r8 = openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b522abec44fa8f218d52e570", 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r9 = creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r9, r7, 0x0, 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): tadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.947733][ T5130] team0: Port device team_slave_1 added [ 56.956365][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.968993][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.001883][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.009177][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.035605][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.055157][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.073999][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.093993][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.101306][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.127763][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.141279][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.148507][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.174470][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.237060][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.244040][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.270346][ T5130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.284500][ T5129] team0: Port device team_slave_0 added [ 57.294679][ T5129] team0: Port device team_slave_1 added [ 57.325106][ T5128] team0: Port device team_slave_0 added [ 57.332176][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.339698][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.366771][ T5130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.366869][ T5112] Bluetooth: hci0: command tx timeout [ 57.382932][ T5119] Bluetooth: hci3: command tx timeout [ 57.383037][ T4492] Bluetooth: hci1: command tx timeout [ 57.388711][ T5119] Bluetooth: hci2: command tx timeout [ 57.432672][ T5126] hsr_slave_0: entered promiscuous mode [ 57.438391][ T5119] Bluetooth: hci4: command tx timeout [ 57.445103][ T5126] hsr_slave_1: entered promiscuous mode [ 57.455517][ T5128] team0: Port device team_slave_1 added [ 57.485402][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.492742][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.519564][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.547183][ T5125] hsr_slave_0: entered promiscuous mode [ 57.553736][ T5125] hsr_slave_1: entered promiscuous mode [ 57.560554][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.568451][ T5125] Cannot create hsr debugfs directory [ 57.594118][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.601460][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.627563][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.668945][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.675927][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.702324][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.718100][ T5130] hsr_slave_0: entered promiscuous mode [ 57.724681][ T5130] hsr_slave_1: entered promiscuous mode [ 57.731340][ T5130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.739668][ T5130] Cannot create hsr debugfs directory [ 57.777848][ T5129] hsr_slave_0: entered promiscuous mode [ 57.784456][ T5129] hsr_slave_1: entered promiscuous mode [ 57.791534][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.799242][ T5129] Cannot create hsr debugfs directory [ 57.805362][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.812984][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.839518][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.002715][ T5128] hsr_slave_0: entered promiscuous mode [ 58.009083][ T5128] hsr_slave_1: entered promiscuous mode [ 58.015260][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.023628][ T5128] Cannot create hsr debugfs directory [ 58.370683][ T5126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.381349][ T5126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.403576][ T5126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.414182][ T5126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.480805][ T5125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.491635][ T5125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.505714][ T5125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.521127][ T5125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.606578][ T5130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.617487][ T5130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.647910][ T5130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.671220][ T5130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.741402][ T5128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.753711][ T5128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.765129][ T5128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.791891][ T5128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.881714][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.892890][ T5129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.907283][ T5129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.925729][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.938688][ T5129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.950029][ T5129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.991957][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.021535][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.056996][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.064440][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.075698][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.082836][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.093757][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.100882][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.130274][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.137474][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.228785][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.260279][ T5126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.301817][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.333095][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.340294][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.393934][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.413927][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.421113][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.436858][ T5112] Bluetooth: hci1: command tx timeout [ 59.442323][ T4492] Bluetooth: hci2: command tx timeout [ 59.448001][ T5121] Bluetooth: hci3: command tx timeout [ 59.456850][ T5119] Bluetooth: hci0: command tx timeout [ 59.469218][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.489311][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.503448][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.516806][ T5119] Bluetooth: hci4: command tx timeout [ 59.571534][ T5125] veth0_vlan: entered promiscuous mode [ 59.593905][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.601124][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.639898][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.647054][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.685223][ T5125] veth1_vlan: entered promiscuous mode [ 59.737876][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.814135][ T5125] veth0_macvtap: entered promiscuous mode [ 59.823893][ T5125] veth1_macvtap: entered promiscuous mode [ 59.837561][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.854417][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.865583][ T5126] veth0_vlan: entered promiscuous mode [ 59.879443][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.916765][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.923919][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.943599][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.950739][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.968044][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.984476][ T5126] veth1_vlan: entered promiscuous mode [ 60.009355][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.041577][ T5125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.050781][ T5125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.059845][ T5125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.069170][ T5125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.090858][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.182538][ T5130] veth0_vlan: entered promiscuous mode [ 60.200457][ T5130] veth1_vlan: entered promiscuous mode [ 60.240346][ T5126] veth0_macvtap: entered promiscuous mode [ 60.287065][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.295081][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.295905][ T5126] veth1_macvtap: entered promiscuous mode [ 60.359011][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.365088][ T5128] veth0_vlan: entered promiscuous mode [ 60.373154][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.405099][ T5128] veth1_vlan: entered promiscuous mode [ 60.421433][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.432715][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.448448][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.464926][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.475864][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.498920][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.521655][ T5126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.532268][ T5126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.541148][ T5126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.561760][ T5126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.635552][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.653292][ T5130] veth0_macvtap: entered promiscuous mode [ 60.682426][ T5130] veth1_macvtap: entered promiscuous mode [ 60.695928][ T5128] veth0_macvtap: entered promiscuous mode [ 60.745173][ T5128] veth1_macvtap: entered promiscuous mode [ 60.784776][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.793800][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.816913][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.828248][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.842104][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.853133][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.865205][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.881983][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.893192][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.903687][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.914738][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.924893][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.938552][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.951116][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.974647][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.985501][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.995741][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.006777][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.018966][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.051227][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.063319][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.073424][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.084093][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.094140][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.104839][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.115936][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.130444][ T5128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.139859][ T5128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.150122][ T5128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.159621][ T5128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.174523][ T5130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.183414][ T5130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.192586][ T5130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.204637][ T5130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.227203][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.235067][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.265081][ T5129] veth0_vlan: entered promiscuous mode [ 61.466711][ T5129] veth1_vlan: entered promiscuous mode [ 61.508258][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.518061][ T5119] Bluetooth: hci1: command tx timeout [ 61.518316][ T5112] Bluetooth: hci2: command tx timeout [ 61.523472][ T5119] Bluetooth: hci3: command tx timeout [ 61.529125][ T4492] Bluetooth: hci0: command tx timeout [ 61.556976][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.593086][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.601637][ T5112] Bluetooth: hci4: command tx timeout [ 61.661516][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.665980][ T5183] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.867385][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.883430][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.893434][ T5129] veth0_macvtap: entered promiscuous mode [ 61.901398][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.904111][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.995666][ T5129] veth1_macvtap: entered promiscuous mode [ 62.033315][ T5193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.065523][ T5193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.092311][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.104419][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.115240][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.128748][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.139130][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.150818][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.172424][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.191387][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.216032][ T5199] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.229341][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.272990][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.338860][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.388623][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.423483][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.437991][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.448714][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.460807][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.472374][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.487013][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.523116][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.563890][ T5129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.591064][ T5129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.601455][ T5129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.629144][ T5129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.656654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.698142][ T5214] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.863993][ T5219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.998347][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.025809][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.093368][ T5227] input: syz1 as /devices/virtual/input/input6 [ 63.202224][ T5231] mmap: syz-executor.2 (5231) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.235115][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.241773][ T5233] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 63.251687][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.596571][ T5112] Bluetooth: hci3: command tx timeout [ 63.602906][ T5112] Bluetooth: hci2: command tx timeout [ 63.608496][ T4492] Bluetooth: hci1: command tx timeout [ 63.613924][ T4492] Bluetooth: hci0: command tx timeout [ 63.676795][ T5112] Bluetooth: hci4: command tx timeout [ 63.722745][ T5247] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.443723][ T5278] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 64.819128][ T5294] ALSA: mixer_oss: invalid OSS volume '›' [ 64.836711][ T5294] ALSA: mixer_oss: invalid OSS volume '$¿’¾­´ Ít˜ÝK÷;1YWi‡­`Åî—j' [ 65.156742][ T5309] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.344464][ T5318] input: syz0 as /devices/virtual/input/input7 [ 65.468108][ T5321] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.576406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.916701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.664405][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.697054][ T5356] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 66.742695][ T5356] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.752100][ T5356] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.760993][ T5356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.769812][ T5356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.787831][ T5356] vxlan0: entered promiscuous mode [ 67.211910][ T5368] ipvlan2: entered promiscuous mode [ 67.232408][ T5368] ipvlan2: entered allmulticast mode [ 67.260590][ T5368] ip6gretap0: entered allmulticast mode [ 67.422215][ T5383] input: syz0 as /devices/virtual/input/input8 [ 67.980469][ T5401] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 68.279405][ T5406] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004 [ 68.333464][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.900172][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.027388][ T5453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.354531][ T5465] loop7: detected capacity change from 0 to 1036 [ 69.515902][ T5468] IPVS: Unknown mcast interface: netpci0 [ 69.712276][ T29] audit: type=1326 audit(1716967897.659:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x0 [ 69.845910][ T29] audit: type=1326 audit(1716967897.789:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x0 [ 69.883222][ T5481] Cannot find add_set index 0 as target [ 70.161318][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.302774][ T5113] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.506780][ T5113] usb 1-1: Using ep0 maxpacket: 8 [ 70.534321][ T5113] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.572102][ T5113] usb 1-1: config 0 has no interface number 0 [ 70.609006][ T5113] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.643243][ T5113] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 70.662111][ T5113] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.684024][ T5113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.726999][ T5113] usb 1-1: config 0 descriptor?? [ 70.764769][ T5499] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 70.811983][ T5113] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 70.955630][ T2481] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.030899][ T5486] iowarrior 1-1:0.1: Error -90 while submitting URB [ 71.050219][ T5507] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 71.110819][ T5486] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.164943][ T5510] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 71.193688][ T8] usb 1-1: USB disconnect, device number 2 [ 71.251615][ T8] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 71.356487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.364949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.373508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.394088][ T2481] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.564411][ T5515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.586559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 71.692007][ T2481] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.767284][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.775034][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.922083][ T2481] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.111919][ T5519] vivid-000: disconnect [ 72.181296][ T5518] vivid-000: reconnect [ 72.198713][ T4492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.209166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 72.219661][ T4492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.227443][ T4492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.241965][ T4492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.250333][ T4492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.259384][ T4492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.355074][ T5528] tipc: Started in network mode [ 72.375802][ T5528] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.477933][ T5528] tipc: Enabled bearer , priority 10 [ 72.592657][ T2481] bridge_slave_1: left allmulticast mode [ 72.626862][ T2481] bridge_slave_1: left promiscuous mode [ 72.634200][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.777189][ T2481] bridge_slave_0: left allmulticast mode [ 72.782899][ T2481] bridge_slave_0: left promiscuous mode [ 72.829735][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.945371][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.967333][ T5542] kvm: emulating exchange as write [ 73.496443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.592793][ T5167] tipc: Node number set to 2886997162 [ 73.756375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.009801][ T29] audit: type=1326 audit(1716967901.959:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.069154][ T29] audit: type=1326 audit(1716967901.989:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.151986][ T29] audit: type=1326 audit(1716967901.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.178222][ T29] audit: type=1326 audit(1716967901.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.201473][ T29] audit: type=1326 audit(1716967901.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.224672][ T29] audit: type=1326 audit(1716967901.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.270138][ T29] audit: type=1326 audit(1716967901.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.319258][ T4492] Bluetooth: hci1: command tx timeout [ 74.325762][ T29] audit: type=1326 audit(1716967901.989:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.470683][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.503414][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.539177][ T2481] bond0 (unregistering): Released all slaves [ 74.683699][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.726181][ T5161] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.736769][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.784667][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 74.784687][ T29] audit: type=1326 audit(1716967902.729:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 74.888568][ T29] audit: type=1326 audit(1716967902.729:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bbc7cee9 code=0x7ffc0000 [ 75.141171][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.178673][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.196398][ T5161] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.217384][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.246456][ T5161] usb 1-1: config 0 descriptor?? [ 75.288381][ T5592] tipc: Started in network mode [ 75.296212][ T5592] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.333525][ T5592] tipc: Enabled bearer , priority 10 [ 75.800843][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.982587][ T5526] chnl_net:caif_netlink_parms(): no params data found [ 76.181509][ T5161] usb 1-1: string descriptor 0 read error: -71 [ 76.210892][ T5161] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 76.255964][ T5161] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 76.278649][ T5161] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 76.338647][ T2481] hsr_slave_0: left promiscuous mode [ 76.341224][ T5161] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 76.376673][ T2481] hsr_slave_1: left promiscuous mode [ 76.386377][ T5161] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 76.396329][ T4492] Bluetooth: hci1: command tx timeout [ 76.430524][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.446284][ T5163] tipc: Node number set to 2886997162 [ 76.476548][ T5161] usb 1-1: USB disconnect, device number 3 [ 76.480442][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.519741][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.553225][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.648928][ T2481] veth1_macvtap: left promiscuous mode [ 76.662939][ T2481] veth0_macvtap: left promiscuous mode [ 76.674841][ T2481] veth1_vlan: left promiscuous mode [ 76.687035][ T2481] veth0_vlan: left promiscuous mode [ 76.885589][ T783] cfg80211: failed to load regulatory.db [ 77.724217][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 77.806974][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 78.476552][ T4492] Bluetooth: hci1: command tx timeout [ 78.551952][ T5526] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.592685][ T5650] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.603690][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.631998][ T5526] bridge_slave_0: entered allmulticast mode [ 78.652714][ T5526] bridge_slave_0: entered promiscuous mode [ 78.677861][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.685025][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.700323][ T5526] bridge_slave_1: entered allmulticast mode [ 78.711797][ T5526] bridge_slave_1: entered promiscuous mode [ 78.725564][ T5653] tipc: Enabling of bearer rejected, already enabled [ 78.822806][ T5526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.879829][ T5526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.049899][ T5661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.070332][ T5526] team0: Port device team_slave_0 added [ 79.091253][ T5526] team0: Port device team_slave_1 added [ 79.254655][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.288602][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.376720][ T5526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.444276][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.458817][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.551553][ T5526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.729080][ T5526] hsr_slave_0: entered promiscuous mode [ 79.754519][ T5526] hsr_slave_1: entered promiscuous mode [ 79.785361][ T5526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.809120][ T5526] Cannot create hsr debugfs directory [ 80.556289][ T4492] Bluetooth: hci1: command tx timeout [ 80.798596][ T5682] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 81.350728][ T5526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.423942][ T5526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.467192][ T5526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.500695][ T5526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.783567][ T5526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.847056][ T5526] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.889402][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.896644][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.982532][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.989759][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.091094][ T5526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.160022][ T5711] tipc: Can't bind to reserved service type 0 [ 82.221325][ T5526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.358849][ T5526] veth0_vlan: entered promiscuous mode [ 82.377328][ T5714] tipc: Enabling of bearer rejected, already enabled [ 82.437457][ T5526] veth1_vlan: entered promiscuous mode [ 82.564336][ T5526] veth0_macvtap: entered promiscuous mode [ 82.616680][ T5526] veth1_macvtap: entered promiscuous mode [ 82.698644][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.741517][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.776208][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.805031][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.832802][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.866311][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.886498][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.916203][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.947809][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.999013][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.037571][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.081773][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.116615][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.133434][ T5731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.136139][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.178496][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.211672][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.236160][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.265100][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.319557][ T5526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.356253][ T5526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.368607][ T5738] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 83.393603][ T5738] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.396142][ T5526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444707][ T5526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701526][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.729159][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.774830][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.799037][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.532251][ T5764] x_tables: duplicate underflow at hook 4 [ 84.626973][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.004885][ T5777] loop0: detected capacity change from 0 to 7 [ 85.061935][ T5777] Dev loop0: unable to read RDB block 7 [ 85.073174][ T5777] loop0: AHDI p2 p3 [ 85.092436][ T5777] loop0: partition table partially beyond EOD, truncated [ 85.143089][ T5777] loop0: p2 start 6514546 is beyond EOD, truncated [ 86.134813][ T5815] loop0: detected capacity change from 0 to 7 [ 86.174865][ T5815] Dev loop0: unable to read RDB block 7 [ 86.217148][ T5815] loop0: AHDI p2 p3 [ 86.227440][ T5815] loop0: partition table partially beyond EOD, truncated [ 86.256442][ T5815] loop0: p2 start 6514546 is beyond EOD, truncated [ 86.634761][ T5834] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 86.669224][ T5834] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.795598][ T5842] bridge_slave_1: left allmulticast mode [ 86.826446][ T5842] bridge_slave_1: left promiscuous mode [ 86.836131][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.934608][ T4492] Bluetooth: hci1: ISO packet too small [ 86.946924][ T5846] dccp_invalid_packet: invalid packet type [ 87.633570][ T5876] loop0: detected capacity change from 0 to 7 [ 87.681033][ T5876] Dev loop0: unable to read RDB block 7 [ 87.690400][ T5876] loop0: AHDI p2 p3 [ 87.699012][ T5876] loop0: partition table partially beyond EOD, truncated [ 87.717853][ T5876] loop0: p2 start 6514546 is beyond EOD, truncated [ 87.935014][ T29] audit: type=1326 audit(1716967915.879:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54fee7cee9 code=0x0 [ 88.142577][ T5896] Zero length message leads to an empty skb [ 88.309264][ T5904] bridge_slave_1: left allmulticast mode [ 88.314974][ T5904] bridge_slave_1: left promiscuous mode [ 88.359862][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.491727][ T4492] Bluetooth: hci3: ISO packet too small [ 89.478825][ T5944] loop0: detected capacity change from 0 to 7 [ 89.524124][ T5944] Dev loop0: unable to read RDB block 7 [ 89.544010][ T5944] loop0: AHDI p2 p3 [ 89.552923][ T5944] loop0: partition table partially beyond EOD, truncated [ 89.562776][ T5944] loop0: p2 start 6514546 is beyond EOD, truncated [ 89.981678][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.454244][ T5982] loop0: detected capacity change from 0 to 7 [ 91.473362][ T5982] Dev loop0: unable to read RDB block 7 [ 91.490820][ T5982] loop0: AHDI p2 p3 [ 91.514493][ T5982] loop0: partition table partially beyond EOD, truncated [ 91.541497][ T5982] loop0: p2 start 6514546 is beyond EOD, truncated [ 91.572664][ T4548] Dev loop0: unable to read RDB block 7 [ 91.602240][ T4548] loop0: AHDI p2 p3 [ 91.606452][ T4548] loop0: partition table partially beyond EOD, truncated [ 91.613680][ T4548] loop0: p2 start 6514546 is beyond EOD, truncated [ 91.897471][ T5997] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 91.920565][ T5997] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 91.948466][ T5997] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 92.897350][ T6024] loop0: detected capacity change from 0 to 7 [ 92.932363][ T6024] Dev loop0: unable to read RDB block 7 [ 92.956687][ T6024] loop0: unable to read partition table [ 92.992484][ T6024] loop0: partition table beyond EOD, truncated [ 92.999289][ T6024] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 92.999289][ T6024] ) failed (rc=-5) [ 93.139823][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.159521][ T6027] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.220085][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.238425][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.338402][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.378485][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.416211][ T25] usb 1-1: New USB device found, idVendor=1751, idProduct=0032, bcdDevice= 0.00 [ 93.444119][ T1084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.454028][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.489943][ T25] usb 1-1: config 0 descriptor?? [ 93.699650][ T1084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.902586][ T1084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.934014][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 93.962365][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.006986][ T25] usb 1-1: USB disconnect, device number 4 [ 94.049309][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.063283][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.079737][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.095568][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.103903][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.115210][ T1084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.126368][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.623294][ T1084] bridge_slave_1: left allmulticast mode [ 94.655049][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.675428][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.676255][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.694099][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.703472][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.711307][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.711342][ T1084] bridge_slave_1: left promiscuous mode [ 94.719312][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.776349][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.841961][ T1084] bridge_slave_0: left allmulticast mode [ 94.848043][ T1084] bridge_slave_0: left promiscuous mode [ 94.853932][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.071785][ T6070] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.560968][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.574581][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.587090][ T1084] bond0 (unregistering): Released all slaves [ 95.784748][ T6080] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 96.091350][ T6087] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.156602][ T5112] Bluetooth: hci1: command tx timeout [ 96.356281][ T783] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.358393][ T1084] hsr_slave_0: left promiscuous mode [ 96.408790][ T1084] hsr_slave_1: left promiscuous mode [ 96.430345][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.453576][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.479190][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.498094][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.551863][ T1084] veth1_macvtap: left promiscuous mode [ 96.564760][ T1084] veth0_macvtap: left promiscuous mode [ 96.570796][ T783] usb 3-1: Using ep0 maxpacket: 32 [ 96.580570][ T1084] veth1_vlan: left promiscuous mode [ 96.587825][ T1084] veth0_vlan: left promiscuous mode [ 96.597789][ T783] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 96.607243][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.627586][ T783] usb 3-1: config 0 descriptor?? [ 96.635552][ T783] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 96.796464][ T5112] Bluetooth: hci2: command tx timeout [ 96.893069][ T783] gspca_nw80x: reg_r err -71 [ 96.907814][ T783] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 96.963584][ T783] usb 3-1: USB disconnect, device number 2 [ 97.590675][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 97.638822][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 98.236278][ T5112] Bluetooth: hci1: command tx timeout [ 98.383922][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 98.757212][ T783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.779605][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 98.808805][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.816038][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.836400][ T6042] bridge_slave_0: entered allmulticast mode [ 98.863822][ T6042] bridge_slave_0: entered promiscuous mode [ 98.876367][ T5112] Bluetooth: hci2: command tx timeout [ 98.924200][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.976685][ T783] usb 1-1: Using ep0 maxpacket: 16 [ 98.985479][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.013598][ T783] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 99.031275][ T6042] bridge_slave_1: entered allmulticast mode [ 99.042044][ T783] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.070156][ T6042] bridge_slave_1: entered promiscuous mode [ 99.086672][ T783] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 99.146216][ T783] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 99.169018][ T783] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 99.197519][ T783] usb 1-1: config 1 interface 0 has no altsetting 0 [ 99.216148][ T783] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 99.227368][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.268750][ T783] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 99.380630][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.474633][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.484392][ T783] scsi host1: usb-storage 1-1:1.0 [ 99.510843][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.528467][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.624856][ T783] usb 1-1: USB disconnect, device number 5 [ 99.649037][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.686798][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.694067][ T6058] bridge_slave_0: entered allmulticast mode [ 99.765831][ T6058] bridge_slave_0: entered promiscuous mode [ 99.855234][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.866859][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.874201][ T6058] bridge_slave_1: entered allmulticast mode [ 99.882342][ T6058] bridge_slave_1: entered promiscuous mode [ 99.911026][ T6042] team0: Port device team_slave_0 added [ 99.953658][ T6042] team0: Port device team_slave_1 added [ 100.022191][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.070783][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.085685][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.163188][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.193240][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.249943][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.286839][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.326265][ T5112] Bluetooth: hci1: command tx timeout [ 100.360575][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.472001][ T6058] team0: Port device team_slave_0 added [ 100.555548][ T1084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.614769][ T6058] team0: Port device team_slave_1 added [ 100.804383][ T1084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.959963][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.962955][ T5112] Bluetooth: hci2: command tx timeout [ 100.981585][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.008836][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.033938][ T1084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.053599][ T6042] hsr_slave_0: entered promiscuous mode [ 101.060514][ T6042] hsr_slave_1: entered promiscuous mode [ 101.067545][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.085614][ T6042] Cannot create hsr debugfs directory [ 101.135477][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.150632][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.176335][ T5161] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.205303][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.241210][ T1084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.371005][ T5161] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.397716][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.412892][ T5161] usb 3-1: Product: syz [ 101.423299][ T5161] usb 3-1: Manufacturer: syz [ 101.431603][ T5161] usb 3-1: SerialNumber: syz [ 101.460918][ T5161] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.512000][ T5163] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.539928][ T6058] hsr_slave_0: entered promiscuous mode [ 101.562737][ T6058] hsr_slave_1: entered promiscuous mode [ 101.574048][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.582707][ T6058] Cannot create hsr debugfs directory [ 102.110138][ T1084] bridge_slave_0: left allmulticast mode [ 102.115885][ T1084] bridge_slave_0: left promiscuous mode [ 102.146519][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.186470][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.195270][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.249426][ T29] audit: type=1400 audit(1716967930.199:53): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A544850656C696769626C653A2020202020202020202020300A566D466C6167733A206D72206D77206D65207364200A32303030303030302D323130303030303020727778702030303030303030302030303A30302030200A53697A653A20202020202020202020202020203136333834206B420A4B65726E656C5061676553697A653A202020202020202034206B420A4D4D555061676553697A653A202020202020202020202034206B420A5273733A2020202020202020202020202020202020202038206B420A5073733A2020202020202020202020202020202020202038206B420A5073735F44697274793A pid=6227 comm="syz-executor.0" [ 102.396357][ T5112] Bluetooth: hci1: command tx timeout [ 102.566478][ T5163] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 102.574016][ T5163] ath9k_htc: Failed to initialize the device [ 102.679926][ T5163] usb 3-1: ath9k_htc: USB layer deinitialized [ 103.041085][ T5112] Bluetooth: hci2: command tx timeout [ 103.128403][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.150585][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.168838][ T1084] bond0 (unregistering): Released all slaves [ 103.233380][ T5113] usb 3-1: USB disconnect, device number 3 [ 104.067493][ T1084] hsr_slave_0: left promiscuous mode [ 104.073299][ T1084] hsr_slave_1: left promiscuous mode [ 104.084559][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.092045][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.099959][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.107986][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.125533][ T1084] veth1_macvtap: left promiscuous mode [ 104.131312][ T1084] veth0_macvtap: left promiscuous mode [ 104.137291][ T1084] veth1_vlan: left promiscuous mode [ 104.144102][ T1084] veth0_vlan: left promiscuous mode [ 104.249437][ T5126] syz-executor.1 (5126) used greatest stack depth: 18192 bytes left [ 104.623711][ T4492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.634707][ T4492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.658374][ T4492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.671284][ T4492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.681073][ T4492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.688995][ T4492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.813336][ T5112] Bluetooth: hci3: link tx timeout [ 104.819235][ T5112] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 104.935854][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 104.973813][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 105.633917][ T6042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.712530][ T6042] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.724179][ T6042] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.834360][ T6042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.161786][ T2466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.176721][ T2466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.222304][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 106.274687][ T2466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.291163][ T2466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.477923][ T2466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.496605][ T2466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.579359][ T2466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.606724][ T2466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.716792][ T4492] Bluetooth: hci0: command tx timeout [ 106.755262][ T6058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.857212][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.864478][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.873111][ T6270] bridge_slave_0: entered allmulticast mode [ 106.881145][ T4492] Bluetooth: hci3: command 0x0406 tx timeout [ 106.890147][ T6270] bridge_slave_0: entered promiscuous mode [ 106.912651][ T6058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.944869][ T6058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.974589][ T6058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.025704][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.051681][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.065824][ T6270] bridge_slave_1: entered allmulticast mode [ 107.078391][ T6270] bridge_slave_1: entered promiscuous mode [ 107.180308][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.272535][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.340866][ T6342] xt_TCPMSS: Only works on TCP SYN packets [ 107.393268][ T6270] team0: Port device team_slave_0 added [ 107.418574][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.480343][ T6270] team0: Port device team_slave_1 added [ 107.590527][ T2466] bridge_slave_1: left allmulticast mode [ 107.603152][ T2466] bridge_slave_1: left promiscuous mode [ 107.618458][ T2466] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.649003][ T2466] bridge_slave_0: left allmulticast mode [ 107.666999][ T2466] bridge_slave_0: left promiscuous mode [ 107.678439][ T2466] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.684798][ T29] audit: type=1326 audit(1716967935.629:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54fee7cee9 code=0x0 [ 107.939870][ T5166] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.031209][ T2466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.042974][ T2466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.053977][ T2466] bond0 (unregistering): Released all slaves [ 108.075114][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.085932][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.123151][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.145771][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.155782][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.184295][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.190284][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.213251][ T5166] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.240284][ T2466] tipc: Disabling bearer [ 108.251466][ T2466] tipc: Left network mode [ 108.260152][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.263966][ T5166] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.292423][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.317996][ T5166] usb 3-1: config 0 descriptor?? [ 108.386012][ T6270] hsr_slave_0: entered promiscuous mode [ 108.400479][ T6270] hsr_slave_1: entered promiscuous mode [ 108.409036][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.417259][ T6270] Cannot create hsr debugfs directory [ 108.492049][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.499272][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.601582][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.608815][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.767378][ T5166] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 108.796483][ T5112] Bluetooth: hci0: command tx timeout [ 108.807054][ T5166] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.961662][ T2466] hsr_slave_0: left promiscuous mode [ 108.980250][ T2466] hsr_slave_1: left promiscuous mode [ 108.991577][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.007399][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.025605][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.045028][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.097624][ T2466] veth1_macvtap: left promiscuous mode [ 109.109997][ T2466] veth0_macvtap: left promiscuous mode [ 109.121893][ T2466] veth1_vlan: left promiscuous mode [ 109.132970][ T2466] veth0_vlan: left promiscuous mode [ 109.791339][ T2466] team0 (unregistering): Port device team_slave_1 removed [ 109.859384][ T2466] team0 (unregistering): Port device team_slave_0 removed [ 110.008826][ T5163] usb 3-1: USB disconnect, device number 4 [ 110.504812][ T6042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.528129][ T6042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.610463][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.886731][ T5112] Bluetooth: hci0: command tx timeout [ 111.110548][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.163170][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.312080][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.391975][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.399196][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.572809][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.580040][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.780436][ T6042] veth0_vlan: entered promiscuous mode [ 111.807030][ T5166] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.812258][ T6042] veth1_vlan: entered promiscuous mode [ 111.922432][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.940321][ T6270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.963495][ T6270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.981699][ T6270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.001565][ T6270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.040302][ T5166] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=eb.57 [ 112.071448][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.098646][ T5166] usb 3-1: Product: syz [ 112.113019][ T5166] usb 3-1: Manufacturer: syz [ 112.121103][ T5166] usb 3-1: SerialNumber: syz [ 112.131260][ T6042] veth0_macvtap: entered promiscuous mode [ 112.149781][ T5166] usb 3-1: config 0 descriptor?? [ 112.168559][ T5166] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 112.178065][ T6042] veth1_macvtap: entered promiscuous mode [ 112.189077][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 112.213726][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 112.224460][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 112.228919][ T6058] veth0_vlan: entered promiscuous mode [ 112.251048][ T5166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 112.284529][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 112.290012][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.303257][ T5166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 112.308568][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.324176][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.332195][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 112.335462][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.354549][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.365227][ T6058] veth1_vlan: entered promiscuous mode [ 112.381638][ T5166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 112.392869][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.403158][ T5166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 112.408641][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.422850][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.434385][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.443693][ T5166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 112.457868][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.482272][ T6042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.496771][ T6042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.510812][ T6042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.532561][ T6042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.775223][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.808668][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.861386][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.868612][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.911693][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.921367][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.928567][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.948646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.956794][ T5112] Bluetooth: hci0: command tx timeout [ 112.974122][ T6480] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 112.984507][ T6480] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 113.091210][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.102661][ T6058] veth0_macvtap: entered promiscuous mode [ 113.114394][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.138472][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.175110][ T6058] veth1_macvtap: entered promiscuous mode [ 113.304244][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.334517][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.345103][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.362676][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.375300][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.387886][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.415147][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.441156][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.464578][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.475233][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.488757][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.498888][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.509541][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.541527][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.575752][ T6058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.592054][ T6058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.619541][ T6058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.628508][ T6058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.662779][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.900897][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.925789][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.063859][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.093470][ T6270] veth0_vlan: entered promiscuous mode [ 114.106255][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.173264][ T6270] veth1_vlan: entered promiscuous mode [ 114.306853][ T6270] veth0_macvtap: entered promiscuous mode [ 114.379896][ T6270] veth1_macvtap: entered promiscuous mode [ 114.445172][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.489771][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.501783][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.518591][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.550501][ T5167] usb 3-1: USB disconnect, device number 5 [ 114.556873][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.556897][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.556907][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.575623][ T5167] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 114.631373][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.664580][ T5167] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 114.690929][ T5167] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 114.722788][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.741963][ T5167] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 114.788990][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.821975][ T5167] keyspan 3-1:0.0: device disconnected [ 114.856412][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.884652][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.902293][ T6538] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.949557][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.012225][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.046819][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.069504][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.097906][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.151779][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.194324][ T6270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.206825][ T6270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.218694][ T6270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.232673][ T6270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.558691][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.588097][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.671763][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.714622][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.212947][ T6580] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 116.238533][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.346224][ T5161] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.477025][ T783] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.548181][ T5161] usb 5-1: Using ep0 maxpacket: 8 [ 116.573560][ T5161] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 116.602779][ T5161] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.629082][ T5161] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.649607][ T5161] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.671337][ T5161] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.689100][ T5161] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.703330][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.710593][ T783] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=eb.57 [ 116.739368][ T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.788296][ T783] usb 3-1: Product: syz [ 116.800391][ T783] usb 3-1: Manufacturer: syz [ 116.815152][ T783] usb 3-1: SerialNumber: syz [ 116.845327][ T783] usb 3-1: config 0 descriptor?? [ 116.885990][ T783] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 116.908263][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 116.933248][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 116.964769][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 117.009526][ T783] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 117.065160][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 117.090202][ T6608] IPv6: Can't replace route, no match found [ 117.121770][ T783] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 117.158772][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 117.184730][ T783] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 117.226563][ T783] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 117.243564][ T5161] usb 5-1: GET_CAPABILITIES returned 0 [ 117.260218][ T783] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 117.267432][ T5161] usbtmc 5-1:16.0: can't read capabilities [ 117.468709][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.529626][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.774478][ T6636] x_tables: unsorted entry at hook 2 [ 117.936198][ T25] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 118.136564][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 118.296603][ T25] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 118.516266][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 118.522339][ T25] usb usb4-port1: attempt power cycle [ 118.595548][ T6677] IPv6: Can't replace route, no match found [ 118.960747][ T25] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 119.009816][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 119.025031][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.034847][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.084827][ T5161] usb 5-1: USB disconnect, device number 2 [ 119.166335][ T25] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 119.212640][ T6697] binder: BINDER_SET_CONTEXT_MGR already set [ 119.216250][ T5163] usb 3-1: USB disconnect, device number 6 [ 119.236487][ T6697] binder: 6695:6697 ioctl 4018620d 20000040 returned -16 [ 119.245933][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 119.266843][ T25] usb usb4-port1: unable to enumerate USB device [ 119.275466][ T5163] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 119.334674][ T5163] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 119.389306][ T5163] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 119.450014][ T5163] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 119.497165][ T5163] keyspan 3-1:0.0: device disconnected [ 119.578515][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.605434][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.760161][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.794067][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.828369][ T6719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.890627][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.985965][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.016527][ T5163] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.077770][ T4492] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 120.087302][ T4492] Bluetooth: hci3: Injecting HCI hardware error event [ 120.095089][ T4492] Bluetooth: hci3: hardware error 0x00 [ 120.098035][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.113663][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.127304][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.136032][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.151467][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.159895][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.167174][ T5161] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.206227][ T5163] usb 2-1: Using ep0 maxpacket: 32 [ 120.218969][ T5163] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 120.228734][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.240298][ T5163] usb 2-1: config 0 descriptor?? [ 120.253645][ T5163] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 120.361237][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.375337][ T5161] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 120.412738][ T5161] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 120.439903][ T51] bridge_slave_1: left allmulticast mode [ 120.456636][ T51] bridge_slave_1: left promiscuous mode [ 120.462619][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.486689][ T51] bridge_slave_0: left allmulticast mode [ 120.493389][ T5112] Bluetooth: hci4: unknown advertising packet type: 0xff [ 120.493468][ T5112] Bluetooth: hci4: unknown advertising packet type: 0xfa [ 120.501299][ T5112] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 120.508764][ T5112] Bluetooth: hci4: unknown advertising packet type: 0x0b [ 120.515896][ T5112] Bluetooth: hci4: Dropping invalid advertising data [ 120.528509][ T51] bridge_slave_0: left promiscuous mode [ 120.530914][ T5112] Bluetooth: hci4: Malformed LE Event: 0x02 [ 120.557106][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.622643][ T5161] usb 1-1: string descriptor 0 read error: -71 [ 120.652084][ T5161] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.669034][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.682012][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.689754][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 120.697640][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.705192][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.713673][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.729398][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.760400][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.776705][ T5161] usb 1-1: can't set config #1, error -71 [ 120.786485][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.793319][ T5161] usb 1-1: USB disconnect, device number 6 [ 120.817249][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.837081][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.859019][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.880910][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.898664][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.917079][ T5166] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.933784][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.943691][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.953580][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.961503][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.969504][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.977466][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.985043][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.993193][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 121.001092][ T5167] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 121.026822][ T5167] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 121.088901][ T5163] gspca_sunplus: reg_w_riv err -71 [ 121.095036][ T5163] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 121.119746][ T5163] usb 2-1: USB disconnect, device number 2 [ 121.133850][ T5166] usb 3-1: config index 0 descriptor too short (expected 9341, got 36) [ 121.158905][ T5166] usb 3-1: config 11 has too many interfaces: 39, using maximum allowed: 32 [ 121.168017][ T5166] usb 3-1: config 11 has an invalid descriptor of length 135, skipping remainder of the config [ 121.189925][ T5166] usb 3-1: config 11 has 0 interfaces, different from the descriptor's value: 39 [ 121.212056][ T5166] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 121.225950][ T5166] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 121.247572][ T5166] usb 3-1: Product: syz [ 121.258538][ T5166] usb 3-1: Manufacturer: syz [ 121.270341][ T5166] usb 3-1: SerialNumber: syz [ 121.340340][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.357039][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.369712][ T51] bond0 (unregistering): Released all slaves [ 121.485415][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.750506][ T29] audit: type=1326 audit(1716967949.699:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f090627cee9 code=0x0 [ 122.179707][ T4492] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 122.186531][ T5166] usb 3-1: USB disconnect, device number 7 [ 122.246350][ T4492] Bluetooth: hci2: command tx timeout [ 122.381532][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.448300][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.510959][ T51] hsr_slave_0: left promiscuous mode [ 122.595261][ T51] hsr_slave_1: left promiscuous mode [ 122.672889][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.700800][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.781200][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.808520][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.919761][ T51] veth1_macvtap: left promiscuous mode [ 122.925323][ T51] veth0_macvtap: left promiscuous mode [ 123.011122][ T51] veth1_vlan: left promiscuous mode [ 123.041905][ T51] veth0_vlan: left promiscuous mode [ 123.127425][ T6795] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 123.816575][ T5161] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.006151][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 124.019342][ T5161] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 124.029410][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.055125][ T5161] usb 4-1: config 0 descriptor?? [ 124.071249][ T5161] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 124.244717][ T51] team0 (unregistering): Port device team_slave_1 removed [ 124.290150][ T51] team0 (unregistering): Port device team_slave_0 removed [ 124.316342][ T4492] Bluetooth: hci2: command tx timeout [ 124.322677][ T930] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 124.478117][ T930] usb 1-1: device descriptor read/64, error -71 [ 124.735559][ T6726] chnl_net:caif_netlink_parms(): no params data found [ 124.750311][ T930] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 124.803156][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.814572][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.905265][ T5161] gspca_sunplus: reg_w_riv err -71 [ 124.910980][ T930] usb 1-1: device descriptor read/64, error -71 [ 124.917567][ T5161] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 124.931560][ T5161] usb 4-1: USB disconnect, device number 6 [ 125.040248][ T930] usb usb1-port1: attempt power cycle [ 125.266941][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.284290][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.307182][ T6726] bridge_slave_0: entered allmulticast mode [ 125.328104][ T6726] bridge_slave_0: entered promiscuous mode [ 125.357544][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.382133][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.399653][ T6726] bridge_slave_1: entered allmulticast mode [ 125.420211][ T6726] bridge_slave_1: entered promiscuous mode [ 125.466221][ T930] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 125.540286][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.555779][ T930] usb 1-1: device descriptor read/8, error -71 [ 125.606338][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.877470][ T6726] team0: Port device team_slave_0 added [ 125.886212][ T930] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 125.917604][ T6726] team0: Port device team_slave_1 added [ 125.932412][ T930] usb 1-1: device descriptor read/8, error -71 [ 126.050056][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.078343][ T930] usb usb1-port1: unable to enumerate USB device [ 126.104252][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.191177][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.228507][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.245599][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.292885][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.305245][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.320020][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.396243][ T4492] Bluetooth: hci2: command tx timeout [ 126.615838][ T6726] hsr_slave_0: entered promiscuous mode [ 126.637273][ T6726] hsr_slave_1: entered promiscuous mode [ 126.817423][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.871343][ T6897] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 127.036648][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 127.052547][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 127.075425][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.102237][ T9] usb 4-1: config 0 descriptor?? [ 127.122186][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 127.126413][ T930] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.346255][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 127.378280][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 127.404295][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 127.428690][ T930] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 127.447769][ T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.456452][ T930] usb 2-1: Product: syz [ 127.460940][ T930] usb 2-1: Manufacturer: syz [ 127.465860][ T930] usb 2-1: SerialNumber: syz [ 127.483089][ T930] usb 2-1: config 0 descriptor?? [ 127.521319][ T930] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 127.540105][ T930] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 127.728993][ T930] usb 2-1: USB disconnect, device number 3 [ 127.785954][ T930] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 127.802387][ T6726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.809906][ T930] kobil_sct 2-1:0.0: device disconnected [ 127.827915][ T6726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.844855][ T6726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.857673][ T6922] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.877649][ T6922] openvswitch: netlink: Message has 3 unknown bytes. [ 127.893459][ T6726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.963223][ T9] gspca_sunplus: reg_w_riv err -71 [ 127.982643][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 128.015710][ T9] usb 4-1: USB disconnect, device number 7 [ 128.148848][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.235053][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.336834][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.344029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.370236][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.377479][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.433356][ T6933] vlan2: entered promiscuous mode [ 128.476354][ T4492] Bluetooth: hci2: command tx timeout [ 128.485432][ T6933] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 128.497171][ T6933] vlan2: entered allmulticast mode [ 128.520692][ T6933] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 128.759818][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.952689][ T6726] veth0_vlan: entered promiscuous mode [ 129.024913][ T6726] veth1_vlan: entered promiscuous mode [ 129.184696][ T6726] veth0_macvtap: entered promiscuous mode [ 129.229763][ T6726] veth1_macvtap: entered promiscuous mode [ 129.311264][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.342142][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.370463][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.404371][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.433038][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.467844][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.479342][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.490151][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.522322][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.575666][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.615910][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.652884][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.680401][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.693728][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.705886][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.718156][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.734249][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.767664][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.816906][ T6726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.827887][ T6726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.874447][ T6726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.912194][ T6726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.958202][ T6983] QAT: failed to copy from user cfg_data. [ 130.195375][ T6995] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.217906][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.226351][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.243897][ T6995] openvswitch: netlink: Message has 3 unknown bytes. [ 130.350851][ T930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.374117][ T930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.903466][ T930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.116931][ T930] usb 5-1: Using ep0 maxpacket: 8 [ 131.135480][ T930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.168596][ T7034] No such timeout policy "syz0" [ 131.169131][ T930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.193496][ T930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.225654][ T930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.242603][ T930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.276517][ T930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.296618][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.799607][ T930] usb 5-1: GET_CAPABILITIES returned 0 [ 131.823397][ T930] usbtmc 5-1:16.0: can't read capabilities [ 132.085462][ T7066] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.416269][ T930] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.636416][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 132.655925][ T930] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 132.686227][ T930] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.713003][ T930] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.753149][ T930] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.789092][ T930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.838988][ T930] usb 1-1: config 0 has no interface number 0 [ 132.872979][ T930] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 132.923731][ T930] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.962712][ T930] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.997684][ T930] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.074832][ T930] usb 1-1: config 0 interface 125 has no altsetting 0 [ 133.092985][ T930] usb 1-1: config 0 interface 125 has no altsetting 2 [ 133.121834][ T930] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.134675][ T7087] lo: entered promiscuous mode [ 133.158351][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.175338][ T7087] tunl0: entered promiscuous mode [ 133.195895][ T930] usb 1-1: Product: syz [ 133.201954][ T7087] gre0: entered promiscuous mode [ 133.215472][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.223427][ T930] usb 1-1: Manufacturer: syz [ 133.230645][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.237182][ T7087] gretap0: entered promiscuous mode [ 133.247472][ T930] usb 1-1: SerialNumber: syz [ 133.254236][ T930] usb 1-1: config 0 descriptor?? [ 133.262563][ T930] usb 1-1: selecting invalid altsetting 2 [ 133.309487][ T7087] erspan0: entered promiscuous mode [ 133.315782][ T7087] ip_vti0: entered promiscuous mode [ 133.350933][ T7087] ip6_vti0: entered promiscuous mode [ 133.420422][ T7087] sit0: entered promiscuous mode [ 133.449748][ T7087] ip6tnl0: entered promiscuous mode [ 133.478889][ T7087] ip6gre0: entered promiscuous mode [ 133.587040][ T7087] syz_tun: entered promiscuous mode [ 133.596539][ T7087] ip6gretap0: entered promiscuous mode [ 133.606230][ T7087] bridge0: entered promiscuous mode [ 133.618449][ T7087] vcan0: entered promiscuous mode [ 133.627319][ T7087] bond0: entered promiscuous mode [ 133.633761][ T7087] bond_slave_0: entered promiscuous mode [ 133.647643][ T7087] bond_slave_1: entered promiscuous mode [ 133.664038][ T7087] team0: entered promiscuous mode [ 133.674768][ T7087] team_slave_0: entered promiscuous mode [ 133.703922][ T7087] team_slave_1: entered promiscuous mode [ 133.746130][ T5166] usb 5-1: USB disconnect, device number 3 [ 133.807718][ C1] usb 1-1: async_complete: urb error -71 [ 133.813458][ C1] usb 1-1: async_complete: urb error -71 [ 133.825192][ T930] get_1284_register: usb error -71 [ 133.830501][ T930] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 133.864912][ T7087] dummy0: entered promiscuous mode [ 133.899619][ T930] usb 1-1: USB disconnect, device number 11 [ 133.933344][ T7087] nlmon0: entered promiscuous mode [ 134.021807][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.039836][ T7087] caif0: entered promiscuous mode [ 134.045730][ T7087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.550627][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.740071][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.856406][ T5113] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.921278][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.047447][ T5113] usb 2-1: Using ep0 maxpacket: 32 [ 135.070371][ T5113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.089209][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.107776][ T5113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.133631][ T5113] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.148860][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.165984][ T5113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.182675][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.199764][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.201916][ T7134] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20001 [ 135.215979][ T5113] usb 2-1: config 0 descriptor?? [ 135.227777][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.237948][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.248291][ T5113] hub 2-1:0.0: USB hub found [ 135.257132][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.264760][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.473015][ T51] bridge_slave_1: left allmulticast mode [ 135.479251][ T51] bridge_slave_1: left promiscuous mode [ 135.486589][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.497206][ T51] bridge_slave_0: left allmulticast mode [ 135.502887][ T51] bridge_slave_0: left promiscuous mode [ 135.511123][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.653848][ T5113] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 135.666890][ T5163] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.674057][ T5113] usbhid 2-1:0.0: can't add hid device: -71 [ 135.690370][ T5113] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.728821][ T5113] usb 2-1: USB disconnect, device number 4 [ 135.866191][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 135.873781][ T5163] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 135.890824][ T5163] usb 4-1: config 0 has no interface number 0 [ 135.901912][ T5163] usb 4-1: config 0 interface 5 has no altsetting 0 [ 135.912766][ T5163] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 135.922505][ T5163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.934762][ T5163] usb 4-1: Product: syz [ 135.941449][ T5163] usb 4-1: Manufacturer: syz [ 135.949483][ T5163] usb 4-1: SerialNumber: syz [ 135.960129][ T5163] usb 4-1: config 0 descriptor?? [ 135.982292][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.996208][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.012136][ T51] bond0 (unregistering): Released all slaves [ 136.197370][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.209111][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.222394][ T5163] dvb_usb_m920x 4-1:0.5: probe with driver dvb_usb_m920x failed with error -71 [ 136.296602][ T5163] usb 4-1: USB disconnect, device number 8 [ 136.498873][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 136.513076][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.821779][ T51] hsr_slave_0: left promiscuous mode [ 136.837966][ T51] hsr_slave_1: left promiscuous mode [ 136.851781][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.859439][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.925511][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.943868][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.050309][ T51] veth1_macvtap: left promiscuous mode [ 137.055903][ T51] veth0_macvtap: left promiscuous mode [ 137.106318][ T51] veth1_vlan: left promiscuous mode [ 137.111783][ T51] veth0_vlan: left promiscuous mode [ 137.194678][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.212292][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.220880][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.232322][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.240562][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.248421][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.356531][ T4492] Bluetooth: hci2: command tx timeout [ 137.672296][ T51] team0 (unregistering): Port device team_slave_1 removed [ 137.713698][ T51] team0 (unregistering): Port device team_slave_0 removed [ 138.070610][ T7158] lo: entered promiscuous mode [ 138.077589][ T7158] tunl0: entered promiscuous mode [ 138.083176][ T7158] gre0: entered promiscuous mode [ 138.095972][ T7158] gretap0: entered promiscuous mode [ 138.104001][ T7158] erspan0: entered promiscuous mode [ 138.126917][ T7158] ip_vti0: entered promiscuous mode [ 138.141004][ T7158] ip6_vti0: entered promiscuous mode [ 138.147977][ T7158] sit0: entered promiscuous mode [ 138.157399][ T7158] ip6tnl0: entered promiscuous mode [ 138.163508][ T7158] ip6gre0: entered promiscuous mode [ 138.169639][ T7158] syz_tun: entered promiscuous mode [ 138.175665][ T7158] ip6gretap0: entered promiscuous mode [ 138.183426][ T7158] bridge0: entered promiscuous mode [ 138.190088][ T7158] vcan0: entered promiscuous mode [ 138.198421][ T7158] bond0: entered promiscuous mode [ 138.203860][ T7158] bond_slave_0: entered promiscuous mode [ 138.215700][ T7158] bond_slave_1: entered promiscuous mode [ 138.233412][ T7158] team0: entered promiscuous mode [ 138.244155][ T7158] team_slave_0: entered promiscuous mode [ 138.252653][ T7158] team_slave_1: entered promiscuous mode [ 138.265061][ T7158] dummy0: entered promiscuous mode [ 138.273037][ T7158] nlmon0: entered promiscuous mode [ 138.286953][ T7158] caif0: entered promiscuous mode [ 138.303897][ T7158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.321743][ T29] audit: type=1326 audit(1716967966.279:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f090627cee9 code=0x0 [ 138.444354][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.470751][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.487154][ T7135] bridge_slave_0: entered allmulticast mode [ 138.495617][ T7135] bridge_slave_0: entered promiscuous mode [ 138.530212][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.547824][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.573611][ T7135] bridge_slave_1: entered allmulticast mode [ 138.587275][ T7135] bridge_slave_1: entered promiscuous mode [ 138.678521][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.743555][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.945102][ T7135] team0: Port device team_slave_0 added [ 138.957339][ T7135] team0: Port device team_slave_1 added [ 139.141588][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.163731][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.238189][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.247334][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.276827][ T4492] Bluetooth: hci4: command tx timeout [ 139.295010][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.306766][ T5113] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.334222][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.402316][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.446710][ T4492] Bluetooth: hci2: command tx timeout [ 139.521215][ T5113] usb 3-1: Using ep0 maxpacket: 8 [ 139.545432][ T5113] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 139.567954][ T5113] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.640054][ T5113] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.650603][ T5113] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.664963][ T5113] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.696627][ T5113] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.720745][ T5113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.779928][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.813264][ T7135] hsr_slave_0: entered promiscuous mode [ 139.835716][ T7135] hsr_slave_1: entered promiscuous mode [ 139.911964][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.940632][ T5113] usb 3-1: usb_control_msg returned -32 [ 139.956253][ T5113] usbtmc 3-1:16.0: can't read capabilities [ 140.058313][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.086332][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 140.159886][ T51] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 140.167333][ T51] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 140.235561][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.327499][ T7229] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 140.365261][ T9] usb 3-1: USB disconnect, device number 8 [ 140.370914][ T7233] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.382172][ T7233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 140.458202][ T7235] can: request_module (can-proto-0) failed. [ 140.647768][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.654917][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.665863][ T7173] bridge_slave_0: entered allmulticast mode [ 140.673358][ T7173] bridge_slave_0: entered promiscuous mode [ 140.713491][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.730262][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.739624][ T7173] bridge_slave_1: entered allmulticast mode [ 140.767081][ T7173] bridge_slave_1: entered promiscuous mode [ 140.845159][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.949417][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.008170][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.184086][ T7173] team0: Port device team_slave_0 added [ 141.195771][ T7173] team0: Port device team_slave_1 added [ 141.357388][ T4492] Bluetooth: hci4: command tx timeout [ 141.426415][ T51] bridge_slave_1: left allmulticast mode [ 141.432103][ T51] bridge_slave_1: left promiscuous mode [ 141.451500][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.494838][ T51] bridge_slave_0: left allmulticast mode [ 141.512748][ T51] bridge_slave_0: left promiscuous mode [ 141.521697][ T4492] Bluetooth: hci2: command tx timeout [ 141.539391][ T7280] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.546340][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.552016][ T7280] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 141.557547][ T7274] can: request_module (can-proto-0) failed. [ 142.084226][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.095650][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.107579][ T51] bond0 (unregistering): Released all slaves [ 142.122533][ T51] bond1 (unregistering): Released all slaves [ 142.215860][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.225109][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.255427][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.306924][ T51] tipc: Disabling bearer [ 142.323391][ T51] tipc: Left network mode [ 142.329568][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.364727][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.404643][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.535279][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.553880][ T7173] hsr_slave_0: entered promiscuous mode [ 142.563261][ T7173] hsr_slave_1: entered promiscuous mode [ 142.570712][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.594311][ T7173] Cannot create hsr debugfs directory [ 142.834013][ T51] hsr_slave_0: left promiscuous mode [ 142.850832][ T51] hsr_slave_1: left promiscuous mode [ 142.861912][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.876535][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.899245][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.927287][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.952210][ T29] audit: type=1326 audit(1716967970.899:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80de7cee9 code=0x0 [ 142.969880][ T51] veth1_macvtap: left promiscuous mode [ 142.994184][ T51] veth0_macvtap: left promiscuous mode [ 143.006901][ T51] veth1_vlan: left promiscuous mode [ 143.012533][ T51] veth0_vlan: left promiscuous mode [ 143.440035][ T4492] Bluetooth: hci4: command tx timeout [ 143.596471][ T4492] Bluetooth: hci2: command tx timeout [ 144.064725][ T51] team0 (unregistering): Port device team_slave_1 removed [ 144.155706][ T51] team0 (unregistering): Port device team_slave_0 removed [ 144.252077][ T7332] can: request_module (can-proto-0) failed. [ 144.435609][ T7337] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.454427][ T7337] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.491641][ T7337] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.911899][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.986458][ T7135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.028279][ T7135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.055837][ T7135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.156108][ T7135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.192251][ T7354] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 145.516445][ T4492] Bluetooth: hci4: command tx timeout [ 145.762110][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.890621][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.972611][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.979797][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.003604][ T7173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.022317][ T7173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.040678][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.047836][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.099280][ T7173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.136996][ T7173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.442216][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.593990][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.684095][ T7135] veth0_vlan: entered promiscuous mode [ 146.723040][ T7135] veth1_vlan: entered promiscuous mode [ 146.824018][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.893063][ T7386] loop0: detected capacity change from 0 to 16384 [ 146.909016][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.916203][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.940940][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.948112][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.078935][ T7135] veth0_macvtap: entered promiscuous mode [ 147.142340][ T7135] veth1_macvtap: entered promiscuous mode [ 147.236673][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.274337][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.308824][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.334708][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.356010][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.383087][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.408848][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.429133][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.495521][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.519857][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.547377][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.578974][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.606705][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.625304][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.651572][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.680687][ T7135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.721780][ T7135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.756662][ T7135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.765415][ T7135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.853113][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.973213][ T7390] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 147.985852][ T7390] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 147.994287][ T7390] CPU: 1 PID: 7390 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 147.996315][ T7173] veth0_vlan: entered promiscuous mode [ 148.004694][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 148.020223][ T7390] RIP: 0010:__lock_acquire+0x6a/0x1fd0 [ 148.025707][ T7390] Code: df 0f b6 04 30 84 c0 0f 85 4b 16 00 00 83 3d 28 1b 3b 0e 00 0f 84 1c 11 00 00 83 3d 0f ad ad 0c 00 74 2c 4c 89 e0 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 e7 e8 b8 7a 89 00 48 be 00 00 00 00 00 fc [ 148.032059][ T7173] veth1_vlan: entered promiscuous mode [ 148.045309][ T7390] RSP: 0018:ffffc90002ffed10 EFLAGS: 00010006 [ 148.045341][ T7390] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.045353][ T7390] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 148.072917][ T7390] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 148.080904][ T7390] R10: dffffc0000000000 R11: fffffbfff1f5a88e R12: 0000000000000018 [ 148.088875][ T7390] R13: 0000000000000000 R14: ffff888023b23c00 R15: 0000000000000000 [ 148.096837][ T7390] FS: 00007fd80ecb96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 148.105757][ T7390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.112331][ T7390] CR2: 0000001b33238000 CR3: 000000006a1c2000 CR4: 00000000003526f0 [ 148.120296][ T7390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.128262][ T7390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.136222][ T7390] Call Trace: [ 148.139508][ T7390] [ 148.142426][ T7390] ? __die_body+0x88/0xe0 [ 148.146757][ T7390] ? die_addr+0x108/0x140 [ 148.151083][ T7390] ? exc_general_protection+0x3dd/0x5d0 [ 148.156636][ T7390] ? asm_exc_general_protection+0x26/0x30 [ 148.162351][ T7390] ? __lock_acquire+0x6a/0x1fd0 [ 148.167202][ T7390] lock_acquire+0x1ed/0x550 [ 148.171697][ T7390] ? __pte_offset_map_lock+0x1ba/0x300 [ 148.177149][ T7390] ? mark_lock+0x9a/0x350 [ 148.181476][ T7390] ? __pfx_lock_acquire+0x10/0x10 [ 148.186501][ T7390] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.192484][ T7390] ? rcu_is_watching+0x15/0xb0 [ 148.197241][ T7390] ? __pte_offset_map+0x2c4/0x380 [ 148.202260][ T7390] ? __pfx___pte_offset_map+0x10/0x10 [ 148.207634][ T7390] _raw_spin_lock+0x2e/0x40 [ 148.212133][ T7390] ? __pte_offset_map_lock+0x1ba/0x300 [ 148.217584][ T7390] __pte_offset_map_lock+0x1ba/0x300 [ 148.222863][ T7390] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 148.228666][ T7390] ? zap_huge_pmd+0x874/0xc40 [ 148.233342][ T7390] unmap_page_range+0xa54/0x4d00 [ 148.238289][ T7390] ? mark_lock+0x9a/0x350 [ 148.242609][ T7390] ? mark_lock+0x9a/0x350 [ 148.246929][ T7390] ? __lock_acquire+0x1346/0x1fd0 [ 148.251946][ T7390] ? __pfx_unmap_page_range+0x10/0x10 [ 148.257313][ T7390] ? __pfx_lock_acquire+0x10/0x10 [ 148.262329][ T7390] ? zap_page_range_single+0x397/0x630 [ 148.267779][ T7390] ? __pfx_lock_release+0x10/0x10 [ 148.272793][ T7390] ? uprobe_munmap+0x183/0x410 [ 148.277552][ T7390] ? unmap_single_vma+0x1bd/0x2b0 [ 148.282576][ T7390] zap_page_range_single+0x45c/0x630 [ 148.287875][ T7390] ? __pfx_zap_page_range_single+0x10/0x10 [ 148.293676][ T7390] ? down_read+0x82b/0xa40 [ 148.298093][ T7390] ? __pfx_lock_acquire+0x10/0x10 [ 148.303111][ T7390] ? vma_interval_tree_iter_next+0x31b/0x340 [ 148.309086][ T7390] unmap_mapping_range+0x236/0x290 [ 148.314194][ T7390] ? __pfx_unmap_mapping_range+0x10/0x10 [ 148.319828][ T7390] shmem_fallocate+0x412/0x11f0 [ 148.324682][ T7390] ? __pfx_shmem_fallocate+0x10/0x10 [ 148.329975][ T7390] vfs_fallocate+0x564/0x6c0 [ 148.334570][ T7390] do_madvise+0x1d0e/0x4590 [ 148.339072][ T7390] ? futex_wait_queue+0x27/0x1d0 [ 148.344009][ T7390] ? futex_unqueue+0xcb/0xf0 [ 148.348596][ T7390] ? __pfx_do_madvise+0x10/0x10 [ 148.353441][ T7390] ? mark_lock+0x9a/0x350 [ 148.357762][ T7390] ? __pfx___futex_wait+0x10/0x10 [ 148.362777][ T7390] ? __lock_acquire+0x1346/0x1fd0 [ 148.367802][ T7390] ? __pfx___might_resched+0x10/0x10 [ 148.373079][ T7390] ? __might_fault+0xaa/0x120 [ 148.377752][ T7390] ? __pfx_lock_release+0x10/0x10 [ 148.382766][ T7390] ? do_futex+0x33b/0x560 [ 148.387086][ T7390] ? security_bpf+0x87/0xb0 [ 148.391593][ T7390] ? __might_fault+0xaa/0x120 [ 148.396270][ T7390] ? rcu_is_watching+0x15/0xb0 [ 148.401027][ T7390] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 148.407092][ T7390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.413411][ T7390] ? do_syscall_64+0x100/0x230 [ 148.418173][ T7390] __x64_sys_madvise+0xa6/0xc0 [ 148.422934][ T7390] do_syscall_64+0xf3/0x230 [ 148.427436][ T7390] ? clear_bhb_loop+0x35/0x90 [ 148.432112][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.438000][ T7390] RIP: 0033:0x7fd80de7cee9 [ 148.442414][ T7390] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 148.462019][ T7390] RSP: 002b:00007fd80ecb90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 148.470434][ T7390] RAX: ffffffffffffffda RBX: 00007fd80dfb3fa0 RCX: 00007fd80de7cee9 [ 148.478398][ T7390] RDX: 0000000000000009 RSI: 0000000000600013 RDI: 0000000020000000 [ 148.486365][ T7390] RBP: 00007fd80dec947f R08: 0000000000000000 R09: 0000000000000000 [ 148.494331][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.502298][ T7390] R13: 000000000000000b R14: 00007fd80dfb3fa0 R15: 00007fd80e0dfa98 [ 148.510270][ T7390] [ 148.513388][ T7390] Modules linked in: [ 148.517289][ T7390] ---[ end trace 0000000000000000 ]--- [ 148.522736][ T7390] RIP: 0010:__lock_acquire+0x6a/0x1fd0 [ 148.528192][ T7390] Code: df 0f b6 04 30 84 c0 0f 85 4b 16 00 00 83 3d 28 1b 3b 0e 00 0f 84 1c 11 00 00 83 3d 0f ad ad 0c 00 74 2c 4c 89 e0 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 e7 e8 b8 7a 89 00 48 be 00 00 00 00 00 fc [ 148.547878][ T7390] RSP: 0018:ffffc90002ffed10 EFLAGS: 00010006 [ 148.553937][ T7390] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.561902][ T7390] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 148.569866][ T7390] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 148.577831][ T7390] R10: dffffc0000000000 R11: fffffbfff1f5a88e R12: 0000000000000018 [ 148.585815][ T7390] R13: 0000000000000000 R14: ffff888023b23c00 R15: 0000000000000000 [ 148.593882][ T7390] FS: 00007fd80ecb96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 148.602827][ T7390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.609411][ T7390] CR2: 0000001b33238000 CR3: 000000006a1c2000 CR4: 00000000003526f0 [ 148.617383][ T7390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.625342][ T7390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.633307][ T7390] Kernel panic - not syncing: Fatal exception [ 148.639496][ T7390] Kernel Offset: disabled [ 148.643804][ T7390] Rebooting in 86400 seconds..