last executing test programs: 11m56.028623674s ago: executing program 0 (id=212): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 11m54.393117782s ago: executing program 0 (id=215): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2a) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000004, 0x100010, 0xffffffffffffffff, 0xb0e55000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) readv(r2, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 11m52.380759838s ago: executing program 0 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000301010200000000000000000200000608001a40491973070800034000000006080008"], 0x34}, 0x1, 0x0, 0x0, 0x20800}, 0x8000) 11m49.087573112s ago: executing program 0 (id=226): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) 11m48.459214854s ago: executing program 0 (id=230): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x10d, 0x0) ptrace$setopts(0x4200, r0, 0x8000, 0x2) 11m46.988052513s ago: executing program 0 (id=237): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 11m46.858651472s ago: executing program 32 (id=237): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 8m29.690918043s ago: executing program 4 (id=1124): chdir(&(0x7f0000000540)='./cgroup\x00') mkdir(0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 8m29.627756854s ago: executing program 4 (id=1127): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='wchan\x00') socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) 8m29.515871421s ago: executing program 4 (id=1129): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 8m29.460151818s ago: executing program 4 (id=1130): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 8m29.233008387s ago: executing program 4 (id=1135): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x2a8, 0x1b8, 0x1b8, 0x0, 0x2a8, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private, 0x0, 0x20}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ad0b470d6b8e31678af6936f5c62fbdd2b453a55b5e6779d955e73fb09389aa88b89e10b29beee5e6fa6b0ca2491e7ccdf803c329b7bffb68352f051004a2a7f8a291ef3e3682217f7c98f361d05342fa1ad25983de2414894436bdba7990b593e88abc41d2e0d1ef3", @ANYRES32, @ANYBLOB], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 8m28.543961458s ago: executing program 4 (id=1141): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0xce, 0x5, 0x3d, 0x761b309e}]}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) 8m28.059875013s ago: executing program 33 (id=1141): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0xce, 0x5, 0x3d, 0x761b309e}]}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) 6.945611668s ago: executing program 6 (id=4186): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.755767945s ago: executing program 6 (id=4190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.208879425s ago: executing program 6 (id=4196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 5.788835122s ago: executing program 6 (id=4199): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08000a00a0"], 0x44}}, 0x0) 5.680887815s ago: executing program 1 (id=4200): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.874480802s ago: executing program 6 (id=4201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x7055, &(0x7f0000000040)={0x0, 0x3ffffffe}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x2, 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) 4.681387472s ago: executing program 2 (id=4202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x882}}], 0x1, 0x0) 4.589475437s ago: executing program 5 (id=4204): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0xc78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc4c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_POLICE={0xc38, 0x6, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x84, 0x7, 0x9, 0x3, 0x7ac, 0xa, 0x3, 0xc, 0xd3, 0x3, 0x8000, 0x3, 0x4, 0xe471, 0x0, 0x1, 0x200, 0x2, 0xffffff01, 0x40, 0x2, 0x7, 0x6, 0x9, 0xffffff7f, 0x1, 0x9, 0x6, 0x2, 0x6, 0x8, 0xfffffeff, 0x7, 0xc026, 0xff, 0xb793, 0x0, 0x4, 0xc, 0x4, 0x2, 0x8001, 0x6, 0x6, 0x7, 0x9, 0x8, 0x2, 0x0, 0x9, 0x5, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x1, 0x8, 0xb7, 0x8, 0x1, 0xf21, 0x381, 0xfffffffe, 0x10000, 0x2, 0x123, 0x2, 0x3, 0x7, 0x5, 0x7, 0x7, 0x9, 0x3, 0x667, 0x9, 0x8, 0xae, 0x0, 0x5, 0x7, 0x9, 0x1, 0xd43, 0xfff, 0xfffff60e, 0xfffffff7, 0x80000001, 0x9, 0x7ff, 0x10000, 0x6, 0x5, 0x2, 0x1, 0x80, 0x2, 0x200, 0x2, 0x9, 0x7, 0x7f, 0x10000, 0xd0, 0x6e, 0x6123, 0x8, 0xfffffff8, 0x44e2e001, 0x6, 0xc489, 0x10, 0xfffffffe, 0x973, 0x400, 0x2, 0xb4b, 0x496, 0xe2, 0x20000000, 0xa, 0x5, 0x6, 0x514d6f81, 0x5, 0x7, 0x7f, 0x100, 0x98, 0xd, 0x9, 0x3, 0x5, 0x6231, 0x3, 0x5f8e, 0x2, 0x80000000, 0x6, 0x0, 0x0, 0x101, 0xfff, 0x3, 0x6, 0x7fff, 0x1, 0x1, 0xe, 0x8, 0x1, 0xfffffb39, 0x8000000, 0x1, 0x1, 0x10000, 0x80, 0xffffffff, 0x5, 0x6, 0x1, 0x1f9b, 0x8, 0x1, 0x7be, 0x4967, 0x5, 0x6, 0xfffffff7, 0x0, 0xd, 0x0, 0xc2e, 0xb, 0x3, 0xb, 0x3344, 0x1, 0x3, 0x4, 0x2, 0x9, 0x1, 0x6, 0xfffffff9, 0x7, 0x322, 0x2, 0x7, 0x2, 0x6, 0x1, 0x6, 0x9, 0xc9, 0x7, 0x8, 0x8f, 0x3, 0x1efa, 0x9, 0x4, 0x20000000, 0x9, 0x9, 0x5, 0x4, 0x9, 0x1, 0x1, 0xfffffff8, 0x17, 0x7ff, 0xffffb21a, 0x5, 0x1ff, 0x5d, 0x6d4, 0x5, 0x6, 0x8, 0x5, 0x8, 0xfffffffd, 0x4aa21142, 0x8f, 0x200, 0x6, 0x5, 0x6, 0x9, 0x7, 0x5, 0x4, 0x8, 0x6, 0x5, 0x4, 0x6, 0x0, 0x4, 0xff, 0xd, 0x8, 0x3ff, 0x0, 0xc, 0x10001, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xdb4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x3, 0x4, 0xdf0e, 0x9c8, 0x8, 0x6, 0x1ff, 0x6, 0x5, 0x1, 0x9dc3, 0x7, 0x9, 0x81, 0x9, 0x1, 0x2, 0x7, 0x0, 0xfffffffb, 0x6f69734e, 0x5, 0x6, 0x8, 0x1, 0xa32, 0x2, 0xffff, 0xd47, 0x5, 0xd, 0x6, 0x6, 0x7, 0x5, 0x3, 0xb2b, 0x8, 0x3, 0xc, 0x2, 0xe2, 0x2af0, 0x1, 0xfffffffa, 0x355, 0x5, 0x8, 0x0, 0x6, 0x5, 0x6, 0x9, 0x0, 0x101, 0x10000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x6, 0x4, 0x1, 0xc8, 0x1, 0x3, 0xfffffffd, 0xd, 0x6, 0xe36a978, 0xfffffffb, 0xfff, 0xe4a5, 0x3c5ef600, 0x7f, 0x8, 0x7, 0x40, 0x1000, 0x988, 0x3, 0x9, 0xf0b, 0x200, 0x300, 0x1, 0x4, 0x0, 0xfffffffe, 0x7fff, 0x8001, 0x80000001, 0xfffffffb, 0x4, 0x2, 0x80, 0x7, 0xfffffffd, 0x8, 0x10000, 0x1000, 0xe0, 0x5, 0x7, 0x2, 0x8007, 0x8fd5, 0xfff, 0x7ff, 0xded, 0xfffffff9, 0x8000, 0xe1, 0x4, 0x9, 0x81, 0x6, 0x6, 0x689, 0x4, 0x0, 0x1, 0x81000000, 0x6, 0xd, 0x10001, 0x10000, 0x8e71484e, 0x5, 0x10001, 0x9, 0x3, 0x1, 0x7, 0x7, 0x2, 0x2, 0x1, 0x2, 0x6191, 0x0, 0x8000, 0xb, 0x1, 0x1, 0x2, 0x401, 0xdf, 0x8, 0x80000001, 0x6, 0x7, 0x8, 0x6, 0xe, 0x7, 0x8, 0x7, 0x181, 0x2, 0xde0d, 0x2, 0x8001, 0x0, 0xfffffffb, 0x1, 0x10, 0xf0, 0x482, 0x27, 0x3869, 0x10, 0x1ff, 0x200, 0x0, 0xef25, 0x480000, 0x9, 0x2, 0xfffffff9, 0x1, 0x3, 0x8001, 0xff, 0x2, 0x3ff, 0x5, 0x0, 0xfffffffa, 0x9305, 0x80000001, 0xbf4, 0x7, 0x2, 0xde6, 0x6, 0x7, 0x7fff, 0x5, 0x9, 0x5, 0x5, 0x100, 0x5, 0xd808, 0xffffff00, 0x6, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x7ff, 0x6, 0xb, 0xe, 0xfffffff7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x8, 0x80000001, 0xffffff8a, 0x400, 0x5, 0x5, 0x4, 0x7fff, 0x1, 0x80, 0x100, 0x24e81b4f, 0xfffffffe, 0xc5e3, 0x10000, 0x1222, 0x0, 0x0, 0x7, 0x0, 0x6, 0x4, 0x4, 0xa000000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x31, 0x55b0, 0xdb2, 0x4, 0x7, 0x800, 0x85, 0x4, 0x9b97, 0x6, 0x6, 0x2, 0x9, 0x4, 0x6a, 0x1, 0x8, 0xfb, 0x6, 0x23a, 0x0, 0xb, 0x1, 0x2, 0x5, 0x9, 0x9, 0x2, 0xc3e5, 0x1, 0x7, 0x8, 0x9, 0x0, 0x4, 0x2, 0x1556f9ee, 0x2, 0x8, 0xfffffffa, 0x4, 0x51, 0xa26, 0x3, 0x9, 0x6, 0x4, 0xacdb, 0x2, 0x40000006, 0xfffffff7, 0x4, 0x6, 0x2, 0x200, 0xfffff800, 0xfff, 0x5e9, 0x10001, 0x8, 0x3, 0x3, 0x1, 0x9, 0x3, 0x80000001, 0x4, 0x9, 0x101, 0x6, 0x145f, 0x5, 0xdab, 0x4, 0x5, 0xafa, 0x3, 0x1, 0x9, 0x8, 0x8, 0x1, 0x2, 0x7, 0x7, 0x1, 0x6, 0x5a90, 0x1, 0x8, 0xb5, 0x93, 0x4, 0x69, 0xfe, 0xfffffffb, 0x1, 0x6, 0x1, 0x67, 0x1a23836f, 0x962, 0x5, 0x7f, 0x1, 0x80000001, 0xffffffff, 0xfffff000, 0xfff, 0x5, 0xfffffffe, 0xf95, 0x8000, 0x1, 0xffff, 0x9, 0x97, 0x57, 0x0, 0x1, 0x18e, 0x6, 0x9, 0x9, 0x5, 0x6, 0x91, 0x200, 0x2, 0x10001, 0x10000, 0x1000, 0xfffffff9, 0x1000, 0xa, 0x6, 0x8001, 0x49, 0x4, 0x81, 0x7, 0x5, 0xeb45, 0x2, 0x8, 0x7, 0x200, 0x2, 0x6, 0x5, 0xbbe4, 0xffffffff, 0x80000000, 0x1, 0x100, 0x5, 0x7, 0x9, 0x7fffffff, 0x47e, 0x7, 0x6cb, 0x316c, 0x2, 0x1, 0x4, 0x0, 0x2, 0x5, 0x7, 0x4, 0x80000000, 0x100000, 0x4, 0x9, 0x9, 0x1, 0x8, 0x0, 0xffffff79, 0xe, 0xfffffe00, 0x2, 0x6, 0xc, 0x4, 0xbd, 0xa, 0xb, 0x4, 0x10, 0x9, 0x0, 0x2, 0x4, 0x64, 0x7, 0xfffffff9, 0xfffffffa, 0xfffff001, 0x8, 0x9, 0x8, 0x8, 0x4e5, 0xffffffff, 0xffffffff, 0x0, 0x2, 0x6, 0x0, 0x3, 0x6, 0x200000, 0x5, 0x80, 0x36, 0x3, 0x8, 0x0, 0x5, 0x70, 0x1, 0x1, 0x1ff, 0x0, 0x1, 0x2, 0x652, 0x200, 0x9, 0xfffffff8, 0x4, 0x3, 0xbe4d960c, 0x3, 0x7, 0x101, 0x4, 0xfffffffd, 0xfffffe01, 0xff, 0x0, 0x2, 0x10, 0xffff, 0x6, 0x800, 0x0, 0x8a17, 0x9, 0x7, 0xfffffffd, 0x6, 0xa3d1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xc78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.58916051s ago: executing program 1 (id=4205): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 4.53441055s ago: executing program 2 (id=4206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)='H', 0x1}, {&(0x7f0000000a80)="ce", 0x1}], 0x2}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r2, 0x4b32, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = syz_io_uring_setup(0x7ed2, &(0x7f0000000080)={0x0, 0x1061, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x20, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000200)=@int=0xf9b, 0x4) memfd_create(0x0, 0x2) landlock_create_ruleset(&(0x7f0000000000)={0xc8816fc025bfa06a, 0x1, 0x3}, 0x18, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "f93670335b092d31d4f25cc48cb13a383332ea"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) gettid() 3.335992806s ago: executing program 6 (id=4207): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 3.306061749s ago: executing program 1 (id=4208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x1, 0x3, 0x100000001, 0x0, 0x7, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x0, 0xdffffffe, 0x1000000000000, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) 2.715325706s ago: executing program 3 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.605751664s ago: executing program 2 (id=4210): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.604108405s ago: executing program 5 (id=4211): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08000a00a0"], 0x44}}, 0x0) 2.445988172s ago: executing program 3 (id=4213): open(0x0, 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x6, 0x7fff}) dup3(0xffffffffffffffff, r0, 0x0) 2.400270563s ago: executing program 5 (id=4214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@broadcast, @dev={0xac, 0x14, 0x14, 0x40}}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@remote, @loopback, @empty}, 0xc) listen(r2, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r4, 0x0, &(0x7f0000000180)={0x6, 0x2}, &(0x7f0000000280)) r5 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x91bd, 0x20, 0x5, 0xd1e5}, &(0x7f0000000040)=0x18) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000380)="32c087363b376005583909551ee4eb79bf57d7f6dfb0545fbb7be46e375eb547f96dfd9026ad9f1f4c115742858178dcf6e836dc87c66587a764119b4017776a503e2c7813067cf5c6c325fb48d596710a8c5b43f96ec5597e66e3ebca6a059fd283dafd2d2781e018ddb3b721aee4313b9d0713c4651d1ca09549ab0c54dc2fa3d341601fa80937fdbfd9698372710a2fba40", 0x93) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000300), 0x0, r1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000440)={0x5, 0x8d8d, 0x2, 0x80800}) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.310788427s ago: executing program 3 (id=4215): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) setpriority(0x2, 0x0, 0x6) 1.695960008s ago: executing program 1 (id=4216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r4], 0x3c}}, 0x0) 1.662488307s ago: executing program 3 (id=4217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x7055, &(0x7f0000000040)={0x0, 0x3ffffffe}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x2, 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) 1.533292427s ago: executing program 2 (id=4218): r0 = socket$phonet(0x23, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) 1.487032017s ago: executing program 5 (id=4219): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x48, r0, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.407542562s ago: executing program 1 (id=4220): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000280)="b8", 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)=""/8, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(r3, 0x3, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000)="de", 0xfdef}]) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x18) 768.444336ms ago: executing program 5 (id=4221): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0xc78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc4c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_POLICE={0xc38, 0x6, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x84, 0x7, 0x9, 0x3, 0x7ac, 0xa, 0x3, 0xc, 0xd3, 0x3, 0x8000, 0x3, 0x4, 0xe471, 0x0, 0x1, 0x200, 0x2, 0xffffff01, 0x40, 0x2, 0x7, 0x6, 0x9, 0xffffff7f, 0x1, 0x9, 0x6, 0x2, 0x6, 0x8, 0xfffffeff, 0x7, 0xc026, 0xff, 0xb793, 0x0, 0x4, 0xc, 0x4, 0x2, 0x8001, 0x6, 0x6, 0x7, 0x9, 0x8, 0x2, 0x0, 0x9, 0x5, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x1, 0x8, 0xb7, 0x8, 0x1, 0xf21, 0x381, 0xfffffffe, 0x10000, 0x2, 0x123, 0x2, 0x3, 0x7, 0x5, 0x7, 0x7, 0x9, 0x3, 0x667, 0x9, 0x8, 0xae, 0x0, 0x5, 0x7, 0x9, 0x1, 0xd43, 0xfff, 0xfffff60e, 0xfffffff7, 0x80000001, 0x9, 0x7ff, 0x10000, 0x6, 0x5, 0x2, 0x1, 0x80, 0x2, 0x200, 0x2, 0x9, 0x7, 0x7f, 0x10000, 0xd0, 0x6e, 0x6123, 0x8, 0xfffffff8, 0x44e2e001, 0x6, 0xc489, 0x10, 0xfffffffe, 0x973, 0x400, 0x2, 0xb4b, 0x496, 0xe2, 0x20000000, 0xa, 0x5, 0x6, 0x514d6f81, 0x5, 0x7, 0x7f, 0x100, 0x98, 0xd, 0x9, 0x3, 0x5, 0x6231, 0x3, 0x5f8e, 0x2, 0x80000000, 0x6, 0x0, 0x0, 0x101, 0xfff, 0x3, 0x6, 0x7fff, 0x1, 0x1, 0xe, 0x8, 0x1, 0xfffffb39, 0x8000000, 0x1, 0x1, 0x10000, 0x80, 0xffffffff, 0x5, 0x6, 0x1, 0x1f9b, 0x8, 0x1, 0x7be, 0x4967, 0x5, 0x6, 0xfffffff7, 0x0, 0xd, 0x0, 0xc2e, 0xb, 0x3, 0xb, 0x3344, 0x1, 0x3, 0x4, 0x2, 0x9, 0x1, 0x6, 0xfffffff9, 0x7, 0x322, 0x2, 0x7, 0x2, 0x6, 0x1, 0x6, 0x9, 0xc9, 0x7, 0x8, 0x8f, 0x3, 0x1efa, 0x9, 0x4, 0x20000000, 0x9, 0x9, 0x5, 0x4, 0x9, 0x1, 0x1, 0xfffffff8, 0x17, 0x7ff, 0xffffb21a, 0x5, 0x1ff, 0x5d, 0x6d4, 0x5, 0x6, 0x8, 0x5, 0x8, 0xfffffffd, 0x4aa21142, 0x8f, 0x200, 0x6, 0x5, 0x6, 0x9, 0x7, 0x5, 0x4, 0x8, 0x6, 0x5, 0x4, 0x6, 0x0, 0x4, 0xff, 0xd, 0x8, 0x3ff, 0x0, 0xc, 0x10001, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xdb4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x3, 0x4, 0xdf0e, 0x9c8, 0x8, 0x6, 0x1ff, 0x6, 0x5, 0x1, 0x9dc3, 0x7, 0x9, 0x81, 0x9, 0x1, 0x2, 0x7, 0x0, 0xfffffffb, 0x6f69734e, 0x5, 0x6, 0x8, 0x1, 0xa32, 0x2, 0xffff, 0xd47, 0x5, 0xd, 0x6, 0x6, 0x7, 0x5, 0x3, 0xb2b, 0x8, 0x3, 0xc, 0x2, 0xe2, 0x2af0, 0x1, 0xfffffffa, 0x355, 0x5, 0x8, 0x0, 0x6, 0x5, 0x6, 0x9, 0x0, 0x101, 0x10000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x6, 0x4, 0x1, 0xc8, 0x1, 0x3, 0xfffffffd, 0xd, 0x6, 0xe36a978, 0xfffffffb, 0xfff, 0xe4a5, 0x3c5ef600, 0x7f, 0x8, 0x7, 0x40, 0x1000, 0x988, 0x3, 0x9, 0xf0b, 0x200, 0x300, 0x1, 0x4, 0x0, 0xfffffffe, 0x7fff, 0x8001, 0x80000001, 0xfffffffb, 0x4, 0x2, 0x80, 0x7, 0xfffffffd, 0x8, 0x10000, 0x1000, 0xe0, 0x5, 0x7, 0x2, 0x8007, 0x8fd5, 0xfff, 0x7ff, 0xded, 0xfffffff9, 0x8000, 0xe1, 0x4, 0x9, 0x81, 0x6, 0x6, 0x689, 0x4, 0x0, 0x1, 0x81000000, 0x6, 0xd, 0x10001, 0x10000, 0x8e71484e, 0x5, 0x10001, 0x9, 0x3, 0x1, 0x7, 0x7, 0x2, 0x2, 0x1, 0x2, 0x6191, 0x0, 0x8000, 0xb, 0x1, 0x1, 0x2, 0x401, 0xdf, 0x8, 0x80000001, 0x6, 0x7, 0x8, 0x6, 0xe, 0x7, 0x8, 0x7, 0x181, 0x2, 0xde0d, 0x2, 0x8001, 0x0, 0xfffffffb, 0x1, 0x10, 0xf0, 0x482, 0x27, 0x3869, 0x10, 0x1ff, 0x200, 0x0, 0xef25, 0x480000, 0x9, 0x2, 0xfffffff9, 0x1, 0x3, 0x8001, 0xff, 0x2, 0x3ff, 0x5, 0x0, 0xfffffffa, 0x9305, 0x80000001, 0xbf4, 0x7, 0x2, 0xde6, 0x6, 0x7, 0x7fff, 0x5, 0x9, 0x5, 0x5, 0x100, 0x5, 0xd808, 0xffffff00, 0x6, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x1ff, 0x8, 0x4, 0x7ff, 0x6, 0xb, 0xe, 0xfffffff7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x8, 0x80000001, 0xffffff8a, 0x400, 0x5, 0x5, 0x4, 0x7fff, 0x1, 0x80, 0x100, 0x24e81b4f, 0xfffffffe, 0xc5e3, 0x10000, 0x1222, 0x0, 0x0, 0x7, 0x0, 0x6, 0x4, 0x4, 0xa000000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x31, 0x55b0, 0xdb2, 0x4, 0x7, 0x800, 0x85, 0x4, 0x9b97, 0x6, 0x6, 0x2, 0x9, 0x4, 0x6a, 0x1, 0x8, 0xfb, 0x6, 0x23a, 0x0, 0xb, 0x1, 0x2, 0x5, 0x9, 0x9, 0x2, 0xc3e5, 0x1, 0x7, 0x8, 0x9, 0x0, 0x4, 0x2, 0x1556f9ee, 0x2, 0x8, 0xfffffffa, 0x4, 0x51, 0xa26, 0x3, 0x9, 0x6, 0x4, 0xacdb, 0x2, 0x40000006, 0xfffffff7, 0x4, 0x6, 0x2, 0x200, 0xfffff800, 0xfff, 0x5e9, 0x10001, 0x8, 0x3, 0x3, 0x1, 0x9, 0x3, 0x80000001, 0x4, 0x9, 0x101, 0x6, 0x145f, 0x5, 0xdab, 0x4, 0x5, 0xafa, 0x3, 0x1, 0x9, 0x8, 0x8, 0x1, 0x2, 0x7, 0x7, 0x1, 0x6, 0x5a90, 0x1, 0x8, 0xb5, 0x93, 0x4, 0x69, 0xfe, 0xfffffffb, 0x1, 0x6, 0x1, 0x67, 0x1a23836f, 0x962, 0x5, 0x7f, 0x1, 0x80000001, 0xffffffff, 0xfffff000, 0xfff, 0x5, 0xfffffffe, 0xf95, 0x8000, 0x1, 0xffff, 0x9, 0x97, 0x57, 0x0, 0x1, 0x18e, 0x6, 0x9, 0x9, 0x5, 0x6, 0x91, 0x200, 0x2, 0x10001, 0x10000, 0x1000, 0xfffffff9, 0x1000, 0xa, 0x6, 0x8001, 0x49, 0x4, 0x81, 0x7, 0x5, 0xeb45, 0x2, 0x8, 0x7, 0x200, 0x2, 0x6, 0x5, 0xbbe4, 0xffffffff, 0x80000000, 0x1, 0x100, 0x5, 0x7, 0x9, 0x7fffffff, 0x47e, 0x7, 0x6cb, 0x316c, 0x2, 0x1, 0x4, 0x0, 0x2, 0x5, 0x7, 0x4, 0x80000000, 0x100000, 0x4, 0x9, 0x9, 0x1, 0x8, 0x0, 0xffffff79, 0xe, 0xfffffe00, 0x2, 0x6, 0xc, 0x4, 0xbd, 0xa, 0xb, 0x4, 0x10, 0x9, 0x0, 0x2, 0x4, 0x64, 0x7, 0xfffffff9, 0xfffffffa, 0xfffff001, 0x8, 0x9, 0x8, 0x8, 0x4e5, 0xffffffff, 0xffffffff, 0x0, 0x2, 0x6, 0x0, 0x3, 0x6, 0x200000, 0x5, 0x80, 0x36, 0x3, 0x8, 0x0, 0x5, 0x70, 0x1, 0x1, 0x1ff, 0x0, 0x1, 0x2, 0x652, 0x200, 0x9, 0xfffffff8, 0x4, 0x3, 0xbe4d960c, 0x3, 0x7, 0x101, 0x4, 0xfffffffd, 0xfffffe01, 0xff, 0x0, 0x2, 0x10, 0xffff, 0x6, 0x800, 0x0, 0x8a17, 0x9, 0x7, 0xfffffffd, 0x6, 0xa3d1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xc78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 350.383045ms ago: executing program 3 (id=4222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 268.124264ms ago: executing program 2 (id=4223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08000a00a0"], 0x44}}, 0x0) 224.414433ms ago: executing program 2 (id=4224): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 176.006797ms ago: executing program 3 (id=4225): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000340)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)}}], 0x2, 0x8011) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x4, 0x1, @scatter={0x0, 0x3, 0x0}, &(0x7f00000002c0)="5ca8633a", 0x0, 0xfffffffd, 0x0, 0x2, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2e68}}, 0xffff, 0x100, 0xfffeffff, 0x40, 0x40}, &(0x7f0000000100)=0x98) 56.226608ms ago: executing program 1 (id=4226): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 0s ago: executing program 5 (id=4227): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) kernel console output (not intermixed with test programs): strongly recommended to keep mac addresses unique to avoid problems! [ 646.613718][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.641614][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.670233][T14491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.829379][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.876693][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.892171][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.905713][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.399496][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.540630][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.550601][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.561544][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.595416][T14491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.757430][T14491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.809053][T14491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.817993][T14491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.827824][T14491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.276122][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 648.285574][ T755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.302764][ T755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.309721][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 648.408020][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.441679][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.758085][T14801] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2868'. [ 648.770591][T14797] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 650.090073][ T5869] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 650.279824][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 650.685079][ T5869] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.692612][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 650.704374][ T5869] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.716724][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.728013][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 650.750691][ T5869] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.760688][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 650.772077][ T5869] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.786293][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.797888][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 650.817111][ T5869] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.829704][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 650.862130][T14835] pim6reg: entered allmulticast mode [ 650.868410][ T5869] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.880448][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.899973][ T5869] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 650.912165][T14825] pim6reg: left allmulticast mode [ 650.979484][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 651.011520][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 651.031434][ T5869] usb 2-1: string descriptor 0 read error: -22 [ 651.033984][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 651.037707][ T5869] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 651.079965][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 651.079985][ T29] audit: type=1326 audit(1733900790.621:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.158531][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.192562][ T5869] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 651.224327][ T29] audit: type=1326 audit(1733900790.621:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.235517][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 651.255583][ T5825] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 651.263004][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 651.312207][ T29] audit: type=1326 audit(1733900790.621:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.334585][ T29] audit: type=1326 audit(1733900790.621:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.357078][ T29] audit: type=1326 audit(1733900790.621:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.380024][ T29] audit: type=1326 audit(1733900790.621:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.403724][ T29] audit: type=1326 audit(1733900790.621:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.473919][ T29] audit: type=1326 audit(1733900790.621:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.496334][ T29] audit: type=1326 audit(1733900790.621:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.519206][ T29] audit: type=1326 audit(1733900790.621:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6777ff19 code=0x7ffc0000 [ 651.742783][T12563] bond0: (slave syz_tun): Releasing backup interface [ 651.778629][ T120] usb 2-1: USB disconnect, device number 32 [ 652.017468][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2880'. [ 652.117360][T14837] chnl_net:caif_netlink_parms(): no params data found [ 652.405272][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.417020][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.422582][T14869] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2882'. [ 652.447659][T14837] bridge_slave_0: entered allmulticast mode [ 652.478209][T14837] bridge_slave_0: entered promiscuous mode [ 652.577783][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.595723][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.636248][T14837] bridge_slave_1: entered allmulticast mode [ 652.683726][T14837] bridge_slave_1: entered promiscuous mode [ 653.328963][ T5825] Bluetooth: hci5: command tx timeout [ 653.515297][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.551588][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.569801][ T5868] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 654.709878][ T5868] usb 2-1: device descriptor read/64, error -71 [ 654.950685][ T5868] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 655.110091][ T5868] usb 2-1: device descriptor read/64, error -71 [ 655.215635][T14837] team0: Port device team_slave_0 added [ 655.242553][ T5868] usb usb2-port1: attempt power cycle [ 655.262457][T14837] team0: Port device team_slave_1 added [ 655.389952][ T5825] Bluetooth: hci5: command tx timeout [ 655.402026][T14918] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 655.443926][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.509101][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.629750][ T5868] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 655.690538][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.692472][ T5868] usb 2-1: device descriptor read/8, error -71 [ 655.749111][T14924] macsec1: entered allmulticast mode [ 655.756393][T14924] veth1_macvtap: entered allmulticast mode [ 655.775457][T14924] veth1_macvtap: left allmulticast mode [ 655.970865][ T5868] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 655.993241][T14942] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2894'. [ 656.013117][ T5868] usb 2-1: device descriptor read/8, error -71 [ 656.034096][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.042415][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.072660][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.157823][ T5868] usb usb2-port1: unable to enumerate USB device [ 656.182564][T14837] hsr_slave_0: entered promiscuous mode [ 656.189126][T14837] hsr_slave_1: entered promiscuous mode [ 656.196675][T14837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.205692][T14837] Cannot create hsr debugfs directory [ 656.292403][T14949] sctp: [Deprecated]: syz.6.2896 (pid 14949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.292403][T14949] Use struct sctp_sack_info instead [ 657.469754][ T5825] Bluetooth: hci5: command tx timeout [ 657.538732][T14837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.647448][T14970] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2904'. [ 658.100177][ T5822] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 658.319985][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 658.329190][T14837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.341343][ T5822] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 658.349572][ T5822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.377777][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 658.390485][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.409015][T14974] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2905'. [ 658.418857][ T5822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.435844][ T5822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 658.448926][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.466993][T14978] Bluetooth: MGMT ver 1.23 [ 658.478876][T14837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.577982][T14837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.790254][ T5822] usb 2-1: usb_control_msg returned -32 [ 658.796409][ T5822] usbtmc 2-1:16.0: can't read capabilities [ 658.839015][T14837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.850543][T14837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.878972][T14837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.915381][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 658.966399][T14837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.550347][ T5825] Bluetooth: hci5: command tx timeout [ 659.598648][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.622220][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.639290][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.646454][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.690905][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.698040][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.718561][T14990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2910'. [ 659.734148][T14990] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 660.054912][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.096695][T14837] veth0_vlan: entered promiscuous mode [ 660.815975][T14837] veth1_vlan: entered promiscuous mode [ 660.893054][ T5869] usb 2-1: USB disconnect, device number 37 [ 660.938130][T14837] veth0_macvtap: entered promiscuous mode [ 661.054466][T14837] veth1_macvtap: entered promiscuous mode [ 661.107311][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.129824][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.145042][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.155796][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.165849][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.176830][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.189746][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.200328][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.210220][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.220778][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.231913][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.271965][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.282684][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.287383][T15008] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2915'. [ 661.292747][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.292769][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.292788][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.292801][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.292818][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.292831][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.292848][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.292862][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.293934][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.334229][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 661.346017][T14837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.409560][T14837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.418349][T14837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.427131][T14837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.455925][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2914'. [ 661.468539][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2914'. [ 661.503987][T15007] batadv0: entered promiscuous mode [ 661.541367][T15007] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 661.608084][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.620696][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.821820][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.821942][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2921'. [ 661.833496][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.851419][T15019] openvswitch: netlink: Flow key attr not present in new flow. [ 663.101307][T15043] : renamed from vxcan1 (while UP) [ 663.888656][T15069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.896371][T15069] IPv6: NLM_F_CREATE should be set when creating new route [ 663.930753][T15073] pim6reg: left allmulticast mode [ 664.319892][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 664.469909][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 664.476655][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 664.485793][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 664.504012][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.518683][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.537633][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.561559][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 664.569010][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 664.604004][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.615845][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.627238][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.647274][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 664.655074][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 664.674574][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.687121][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.698679][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.713385][ T5867] usb 3-1: string descriptor 0 read error: -22 [ 664.726225][ T5867] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 664.746781][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.776072][ T5867] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 665.051111][ T5822] usb 3-1: USB disconnect, device number 21 [ 665.183867][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2962'. [ 665.526962][T15121] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2966'. [ 665.579470][T15121] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 665.657634][T14496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 665.687558][T14496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 665.697057][T14496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 665.705954][T14496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 665.717750][T14496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 665.725502][T14496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 665.735076][T12704] bond0: (slave syz_tun): Releasing backup interface [ 666.044012][T15124] chnl_net:caif_netlink_parms(): no params data found [ 666.222863][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2973'. [ 666.397378][T15124] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.422476][T15124] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.444986][T15124] bridge_slave_0: entered allmulticast mode [ 666.465868][T15124] bridge_slave_0: entered promiscuous mode [ 666.474794][T15124] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.493938][T15124] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.503940][T15124] bridge_slave_1: entered allmulticast mode [ 666.511835][T15124] bridge_slave_1: entered promiscuous mode [ 666.599834][T15124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.627041][T15124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.693603][T15124] team0: Port device team_slave_0 added [ 666.709051][T15124] team0: Port device team_slave_1 added [ 666.744860][T15124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.758330][T15124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.787448][T15124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.807801][T15124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.815702][T15124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.852350][T15124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.962915][T15124] hsr_slave_0: entered promiscuous mode [ 666.979479][T15124] hsr_slave_1: entered promiscuous mode [ 666.986259][T15124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.005124][T15124] Cannot create hsr debugfs directory [ 667.171163][T15174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 667.372659][T15124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.480525][T15124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.678616][T15124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.789851][T14496] Bluetooth: hci0: command tx timeout [ 667.798974][T15124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.659349][T15124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 668.671980][T15124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 668.681732][T15124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 668.693723][T15124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 668.749257][T15124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.768684][T15124] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.785465][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.792674][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.804480][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.811723][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.880242][ T5870] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 668.956703][T15124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.991221][T15124] veth0_vlan: entered promiscuous mode [ 669.001820][T15124] veth1_vlan: entered promiscuous mode [ 669.032342][T15124] veth0_macvtap: entered promiscuous mode [ 669.039793][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 669.040688][T15124] veth1_macvtap: entered promiscuous mode [ 669.056105][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 669.064263][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 669.064623][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.080622][ T5870] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.093467][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.100556][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.108590][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.131315][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.141487][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.142376][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.152755][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.172196][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 669.174672][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.186801][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 669.192692][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.211208][ T5870] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.213965][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.235533][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.235567][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.236719][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 669.248703][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.276471][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 669.276508][ T5870] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.288727][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.307870][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.310353][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.328799][ T5870] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.333442][T15124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.353201][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.363725][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.373621][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.384142][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.394106][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.404640][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.414573][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.425063][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.435588][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.446823][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.456724][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.467276][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.479066][T15124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.502609][ T5870] usb 3-1: string descriptor 0 read error: -22 [ 669.508877][ T5870] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 669.519286][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.522156][T15124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.537452][T15124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.547059][T15124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.547302][ T5870] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 669.555822][T15124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.651187][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.659052][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.686728][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.694711][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.852864][ T5870] usb 3-1: USB disconnect, device number 22 [ 669.870278][T14496] Bluetooth: hci0: command tx timeout [ 669.963307][T15212] netlink: 'syz.1.2998': attribute type 1 has an invalid length. [ 670.133928][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3002'. [ 670.493435][T15233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3008'. [ 670.506413][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3008'. [ 670.562996][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 670.585539][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 671.015578][T15247] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 671.298074][T15256] netlink: 'syz.6.3018': attribute type 1 has an invalid length. [ 671.360465][T15256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.468612][T15262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.512482][T15262] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 671.576954][T15262] bond1: (slave vcan1): Error -95 calling set_mac_address [ 671.723794][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3023'. [ 671.742203][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3023'. [ 671.764460][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 671.786588][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.809031][T15272] dummy0: entered promiscuous mode [ 671.819461][T15272] ip6gretap0: entered promiscuous mode [ 671.835246][T15272] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 671.846720][T15272] Cannot create hsr debugfs directory [ 671.950717][ T5825] Bluetooth: hci0: command tx timeout [ 672.693135][T15303] netlink: 'syz.6.3036': attribute type 2 has an invalid length. [ 672.713756][T15304] Bluetooth: MGMT ver 1.23 [ 672.719927][T15301] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 673.219249][T15318] Cannot find add_set index 0 as target [ 673.581998][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3044'. [ 674.032251][ T5825] Bluetooth: hci0: command tx timeout [ 674.053736][T15331] netlink: 'syz.3.3047': attribute type 2 has an invalid length. [ 674.764406][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 674.894156][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 674.906807][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.927810][T15353] bridge0: port 3(vlan2) entered blocking state [ 674.952546][T15353] bridge0: port 3(vlan2) entered disabled state [ 674.959062][T15353] vlan2: entered allmulticast mode [ 674.983429][T15353] dummy0: entered allmulticast mode [ 675.015604][T15353] vlan2: entered promiscuous mode [ 675.061942][T15364] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3059'. [ 675.083083][T15353] bridge0: port 3(vlan2) entered blocking state [ 675.089927][T15353] bridge0: port 3(vlan2) entered forwarding state [ 675.838779][T15373] sctp: [Deprecated]: syz.2.3065 (pid 15373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.838779][T15373] Use struct sctp_sack_info instead [ 675.921131][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3066'. [ 675.940440][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3066'. [ 676.110154][T14496] Bluetooth: hci0: command 0x0c20 tx timeout [ 676.445029][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 676.474499][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 676.602775][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 676.618330][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 676.639043][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3075'. [ 676.795813][T15402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3073'. [ 678.008386][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3086'. [ 678.308852][T14496] Bluetooth: hci0: command 0x0c20 tx timeout [ 678.854638][T15437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3087'. [ 680.138406][T10044] udevd[10044]: setting mode of /dev/loop11 to 060660 failed: Read-only file system [ 680.279488][T10044] udevd[10044]: setting owner of /dev/loop11 to uid=0, gid=6 failed: Read-only file system [ 680.977813][T15458] netlink: 'syz.1.3096': attribute type 2 has an invalid length. [ 681.004009][T15451] __nla_validate_parse: 1 callbacks suppressed [ 681.004028][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 681.058818][T15451] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.942455][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3100'. [ 682.145315][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3101'. [ 682.878660][T15490] netlink: 'syz.5.3108': attribute type 2 has an invalid length. [ 684.134534][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3116'. [ 684.266260][T15519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3117'. [ 684.311003][T15519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3117'. [ 684.468186][T15521] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 685.246548][T15537] netlink: 'syz.2.3126': attribute type 2 has an invalid length. [ 685.367445][T15543] netlink: 'syz.5.3125': attribute type 1 has an invalid length. [ 685.420015][T15543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.440612][T15546] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 686.035117][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.041821][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.423037][T15588] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 686.520852][T15588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.576763][T15593] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 686.978534][T15610] netlink: 'syz.5.3153': attribute type 2 has an invalid length. [ 687.026853][T15612] team_slave_0: entered promiscuous mode [ 687.034228][T15612] team_slave_1: entered promiscuous mode [ 687.042353][T15612] vlan2: entered promiscuous mode [ 687.048306][T15612] team0: entered promiscuous mode [ 687.058009][T15612] team0: Device vlan2 is already an upper device of the team interface [ 687.069869][T15612] team0: left promiscuous mode [ 687.080459][T15612] team_slave_0: left promiscuous mode [ 687.085924][T15612] team_slave_1: left promiscuous mode [ 688.489153][T15636] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 688.521566][T15636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3164'. [ 688.571772][T15638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.621301][T15644] netlink: 'syz.5.3167': attribute type 2 has an invalid length. [ 688.683928][T15640] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 688.822174][T15652] netlink: 'syz.5.3171': attribute type 10 has an invalid length. [ 688.844938][T15652] syz_tun: entered promiscuous mode [ 688.866874][T15652] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 688.886138][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 688.912634][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 690.008978][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 690.040866][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 690.139885][ T5822] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 690.187899][T15700] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 690.211848][T15700] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3193'. [ 690.299924][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 690.307137][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 690.315349][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.367878][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.394749][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.406806][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.420044][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 690.429160][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.444154][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.466264][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.498227][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.523617][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 690.540368][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.552483][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.565407][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.578453][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.669834][ T5822] usb 3-1: string descriptor 0 read error: -22 [ 690.676477][ T5822] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 690.690002][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.743497][ T5822] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 690.966963][ T5822] usb 3-1: USB disconnect, device number 23 [ 691.147212][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 691.219940][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 691.728539][T15744] netlink: 'syz.5.3208': attribute type 2 has an invalid length. [ 692.198337][T15744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.217819][T15744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.347758][T15756] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 692.360302][T15756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3211'. [ 692.436469][T15744] geneve0: left allmulticast mode [ 692.472806][T15744] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.488273][T15744] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.506925][T15744] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.518909][T15744] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.680674][T15744] vlan2: left promiscuous mode [ 692.700120][T15742] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 693.712348][ T5825] Bluetooth: hci0: command 0x0c20 tx timeout [ 694.372783][T15801] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 694.409466][T15801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.463279][T15801] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 694.903145][T15822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'. [ 694.994261][T15824] netlink: 'syz.3.3239': attribute type 1 has an invalid length. [ 695.003206][T15824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3239'. [ 695.173868][T15797] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 696.169730][ T120] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 696.283317][T15862] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 696.330710][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 696.341050][ T120] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 696.348540][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 696.395220][ T120] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.425800][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.437971][ T5822] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 696.445686][T14496] Bluetooth: hci0: command 0x0c20 tx timeout [ 696.453667][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 696.454887][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.474860][ T120] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 696.482410][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 696.494056][ T120] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.505837][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.517027][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.542432][ T120] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 696.550145][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 696.561652][ T120] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.574177][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.585907][ T120] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.603346][ T120] usb 2-1: string descriptor 0 read error: -22 [ 696.609979][ T120] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 696.619081][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.634007][ T120] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 696.642031][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 696.650309][ T5822] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 696.658773][ T5822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.669353][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.681117][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.695436][ T5822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.710773][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.716932][T15875] netlink: 'syz.5.3259': attribute type 2 has an invalid length. [ 696.720489][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.849241][T11784] usb 2-1: USB disconnect, device number 38 [ 696.948515][ T5822] usb 4-1: usb_control_msg returned -32 [ 696.955007][ T5822] usbtmc 4-1:16.0: can't read capabilities [ 697.211806][T15885] netlink: 'syz.5.3262': attribute type 1 has an invalid length. [ 697.230820][T15885] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3262'. [ 697.656378][T15898] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 698.558713][T14496] Bluetooth: hci0: command 0x0c20 tx timeout [ 698.564916][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 698.899271][T15907] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 699.254844][ T120] usb 4-1: USB disconnect, device number 30 [ 699.430055][T15936] netlink: 'syz.5.3282': attribute type 1 has an invalid length. [ 699.452906][T15932] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 699.472535][T15936] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3282'. [ 699.696524][T15950] xt_TCPMSS: Only works on TCP SYN packets [ 700.090317][T15964] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3290'. [ 700.170278][ T5822] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 700.322079][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 700.343593][ T5822] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 700.371294][ T5822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.388407][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.409668][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.434231][ T5822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.487576][ T5822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.496824][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.549917][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 702.477774][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3304'. [ 702.607088][ T5822] usb 2-1: usb_control_msg returned -32 [ 702.613727][ T5822] usbtmc 2-1:16.0: can't read capabilities [ 702.621884][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 702.672082][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3304'. [ 702.677432][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 702.769076][T16007] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 702.781470][T16007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3306'. [ 702.798336][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 702.830297][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 702.937896][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 702.971998][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3305'. [ 703.242879][T11784] usb 2-1: USB disconnect, device number 39 [ 703.840922][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 703.840944][ T29] audit: type=1326 audit(1733900843.361:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 703.879932][ T29] audit: type=1326 audit(1733900843.361:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 703.916791][ T29] audit: type=1326 audit(1733900843.361:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 703.939189][ T29] audit: type=1326 audit(1733900843.361:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 703.962168][ T29] audit: type=1326 audit(1733900843.361:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 703.984497][ T29] audit: type=1326 audit(1733900843.361:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 704.006442][ T29] audit: type=1326 audit(1733900843.361:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 704.028350][ T29] audit: type=1326 audit(1733900843.361:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 704.050344][ T29] audit: type=1326 audit(1733900843.361:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 704.072527][ T29] audit: type=1326 audit(1733900843.361:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16030 comm="syz.1.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 704.299441][T16054] xt_TCPMSS: Only works on TCP SYN packets [ 704.586350][T16063] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 704.593597][T16063] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 704.856506][T16072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.340783][T16094] bridge0: port 1(gretap0) entered blocking state [ 705.349495][T16094] bridge0: port 1(gretap0) entered disabled state [ 705.357336][T16094] gretap0: entered allmulticast mode [ 705.371263][T16094] gretap0: entered promiscuous mode [ 705.409335][T16097] __nla_validate_parse: 4 callbacks suppressed [ 705.409353][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 706.139985][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 706.619844][ T5870] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 706.769781][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 706.777716][ T5870] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 706.787373][T16151] netlink: 'syz.3.3370': attribute type 1 has an invalid length. [ 706.791966][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 706.802089][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.825112][ T5870] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.842075][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.854042][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.880767][ T5870] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 706.888494][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.920849][ T5870] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.934379][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.954022][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.969144][ T5870] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 706.977481][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.990571][ T5870] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.003232][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 707.016331][ T5870] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 707.041613][ T5870] usb 2-1: string descriptor 0 read error: -22 [ 707.048127][ T5870] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 707.079846][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.106442][ T5870] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 707.184905][ T5901] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 707.284205][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 707.307346][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 707.321662][ T5870] usb 2-1: USB disconnect, device number 40 [ 707.329721][ T5901] usb 3-1: device descriptor read/64, error -71 [ 707.477115][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3379'. [ 707.599939][ T5901] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 707.638651][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'. [ 707.701746][T16180] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 707.704219][T16179] xt_TCPMSS: Only works on TCP SYN packets [ 707.739726][ T5901] usb 3-1: device descriptor read/64, error -71 [ 707.824211][T16182] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.860375][ T5901] usb usb3-port1: attempt power cycle [ 708.218727][ T5901] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 708.260824][ T5901] usb 3-1: device descriptor read/8, error -71 [ 708.272494][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3394'. [ 708.318748][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3395'. [ 708.469108][T16211] xt_TCPMSS: Only works on TCP SYN packets [ 708.670025][ T5901] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 708.692713][ T5901] usb 3-1: device descriptor read/8, error -71 [ 708.939570][ T5901] usb usb3-port1: unable to enumerate USB device [ 709.344096][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3401'. [ 709.972313][ T5901] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 710.178031][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 710.289979][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 710.300599][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 710.311931][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.323692][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 710.334821][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 710.789708][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 710.797191][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 710.819814][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.831743][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 710.843170][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 710.878451][T16269] xt_TCPMSS: Only works on TCP SYN packets [ 711.062941][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 711.070745][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 711.082144][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.093886][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 711.105028][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 711.119003][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 711.119020][ T29] audit: type=1326 audit(1733900850.681:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.151172][ T29] audit: type=1326 audit(1733900850.681:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.181501][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 711.191932][ T5901] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 711.202236][ T29] audit: type=1326 audit(1733900850.681:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.226469][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.238830][ T29] audit: type=1326 audit(1733900850.681:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.275092][ T5901] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 711.324605][ T29] audit: type=1326 audit(1733900850.681:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.428179][ T29] audit: type=1326 audit(1733900850.721:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.485854][ T5901] usb 4-1: USB disconnect, device number 31 [ 711.557654][ T29] audit: type=1326 audit(1733900850.721:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.635420][ T29] audit: type=1326 audit(1733900850.721:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.819784][ T29] audit: type=1326 audit(1733900850.721:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.854331][ T29] audit: type=1326 audit(1733900850.721:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16266 comm="syz.1.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5b37ff19 code=0x7ffc0000 [ 711.933963][T16279] __nla_validate_parse: 1 callbacks suppressed [ 711.933983][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3425'. [ 712.518729][T16296] xt_TCPMSS: Only works on TCP SYN packets [ 712.813438][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3437'. [ 714.214626][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3449'. [ 714.271176][T16336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 714.319870][T16336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 714.530725][ T5870] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 714.689993][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 714.710044][ T5870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 714.718514][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.772989][ T5870] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.818885][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.865552][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.880798][ T5870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 714.907363][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.936201][ T5870] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.978520][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.011924][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.065549][ T5870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 715.079969][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 715.120060][ T5870] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.149958][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.168282][ T5870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.215683][ T5870] usb 4-1: string descriptor 0 read error: -22 [ 715.226156][ T5870] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 715.256511][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.317041][ T5870] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 715.522862][T11784] usb 4-1: USB disconnect, device number 32 [ 715.600442][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3466'. [ 715.609440][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3466'. [ 715.944952][T14496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.962387][T14496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.983443][T14496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.001069][T14496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.008802][T14496] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 716.016800][T14496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.236371][T12104] bond0: (slave syz_tun): Releasing backup interface [ 716.281203][T12104] syz_tun (unregistering): left promiscuous mode [ 716.807392][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3478'. [ 716.826132][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3478'. [ 717.197138][T16375] chnl_net:caif_netlink_parms(): no params data found [ 717.558870][T16423] sctp: [Deprecated]: syz.6.3485 (pid 16423) Use of int in maxseg socket option. [ 717.558870][T16423] Use struct sctp_assoc_value instead [ 718.193414][T14496] Bluetooth: hci1: command tx timeout [ 718.951902][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3494'. [ 718.961594][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3494'. [ 718.983573][T14933] bond3 (unregistering): (slave bridge3): Releasing active interface [ 719.181922][T14933] bond0 (unregistering): left promiscuous mode [ 719.188149][T14933] bond_slave_1: left promiscuous mode [ 719.196843][T14933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.209291][T14933] bond0 (unregistering): Released all slaves [ 719.367379][T14933] bond1 (unregistering): Released all slaves [ 719.380710][T14933] bond2 (unregistering): Released all slaves [ 719.529544][T14933] bond3 (unregistering): Released all slaves [ 719.565417][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.573026][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.591237][T16375] bridge_slave_0: entered allmulticast mode [ 719.605152][T16375] bridge_slave_0: entered promiscuous mode [ 719.639139][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.654538][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.667967][T16375] bridge_slave_1: entered allmulticast mode [ 719.686770][T16375] bridge_slave_1: entered promiscuous mode [ 719.726073][T16443] team0: entered promiscuous mode [ 719.731959][T16443] team_slave_0: entered promiscuous mode [ 719.755210][T16443] team_slave_1: entered promiscuous mode [ 719.788930][T16443] syz_tun: entered promiscuous mode [ 719.817919][T16443] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 719.835856][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3497'. [ 719.838592][T16443] Cannot create hsr debugfs directory [ 719.994156][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.083734][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.292649][T14496] Bluetooth: hci1: command tx timeout [ 720.394241][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 720.394258][ T29] audit: type=1326 audit(1733900859.961:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.466943][ T29] audit: type=1326 audit(1733900859.961:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.506232][T16375] team0: Port device team_slave_0 added [ 720.543651][T16375] team0: Port device team_slave_1 added [ 720.557572][ T29] audit: type=1326 audit(1733900859.961:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.606840][ T29] audit: type=1326 audit(1733900859.961:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.678855][ T29] audit: type=1326 audit(1733900859.961:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.701782][ T29] audit: type=1326 audit(1733900859.961:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.754158][ T29] audit: type=1326 audit(1733900859.961:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.788252][ T29] audit: type=1326 audit(1733900859.961:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.830857][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.848084][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.893256][ T29] audit: type=1326 audit(1733900859.961:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 720.942527][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.953821][ T29] audit: type=1326 audit(1733900859.961:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480cf7ff19 code=0x7ffc0000 [ 721.000757][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.007741][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.113204][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.239521][T14933] batadv0: left promiscuous mode [ 721.320717][T14933] hsr_slave_0: left promiscuous mode [ 721.370240][T14933] hsr_slave_1: left promiscuous mode [ 721.393114][T14933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.412840][T16497] netlink: 'syz.2.3512': attribute type 2 has an invalid length. [ 721.424926][T14933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.487168][T16503] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 722.350168][T14496] Bluetooth: hci1: command tx timeout [ 722.589396][T16497] bridge0: port 3(vlan2) entered disabled state [ 722.595908][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.603428][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.633966][T16497] dummy0: left allmulticast mode [ 722.687080][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.698752][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.758413][T16497] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.768294][T16497] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.777352][T16497] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.788377][T16497] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.874081][T16375] hsr_slave_0: entered promiscuous mode [ 722.954680][T16375] hsr_slave_1: entered promiscuous mode [ 722.979328][T16375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.997896][T16375] Cannot create hsr debugfs directory [ 724.396979][T16537] netlink: 'syz.6.3528': attribute type 2 has an invalid length. [ 724.430910][T14496] Bluetooth: hci1: command tx timeout [ 724.473259][T16544] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 725.051625][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.117904][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.368231][T16537] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.377725][T16537] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.387283][T16537] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.396472][T16537] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.818020][T14933] IPVS: stop unused estimator thread 0... [ 725.931729][T16589] syzkaller1: entered promiscuous mode [ 725.949826][T16589] syzkaller1: entered allmulticast mode [ 726.258562][T16603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.335568][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 726.386974][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3546'. [ 726.400625][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3546'. [ 726.436539][T16605] team0: entered promiscuous mode [ 726.450235][T16605] team_slave_0: entered promiscuous mode [ 726.456085][T16605] team_slave_1: entered promiscuous mode [ 726.477510][T16605] syz_tun: entered promiscuous mode [ 726.484214][T16605] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 726.494462][T16605] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 726.632860][T16375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 726.669575][T16375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 726.704180][T16375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.758814][T16375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 726.865457][T16622] netlink: 'syz.1.3554': attribute type 2 has an invalid length. [ 726.873544][T16622] netlink: 'syz.1.3554': attribute type 9 has an invalid length. [ 726.883046][T16622] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3554'. [ 726.981872][T16628] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 727.110459][T16628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.142261][T16637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.152785][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.292796][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.380873][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.388177][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.428627][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.435838][ T7804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.056919][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.078463][T16678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.688897][T16375] veth0_vlan: entered promiscuous mode [ 728.727812][T16375] veth1_vlan: entered promiscuous mode [ 728.818346][T16375] veth0_macvtap: entered promiscuous mode [ 728.842995][T16375] veth1_macvtap: entered promiscuous mode [ 728.891600][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.912176][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.949874][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.977507][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.000105][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.020041][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.051816][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.063122][T16577] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 729.094990][T16718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.099667][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.128934][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.163416][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.191486][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.230720][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.252319][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3582'. [ 729.257256][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.271959][T16577] usb 2-1: Using ep0 maxpacket: 8 [ 729.286031][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.298120][T16577] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 729.311488][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 729.330033][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.349671][T16577] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.362468][T16375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.383177][T16375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.394202][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.412812][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.426742][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.457320][T16577] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 729.467738][T16375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.488437][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 729.507504][T16375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.516394][T16577] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.528668][T16375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.546894][T16375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.565105][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.589241][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.659496][T16577] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 729.680190][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 729.729819][T16577] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.743439][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.765263][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.765738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.802874][T16577] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.809794][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.823674][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.854172][T16577] usb 2-1: string descriptor 0 read error: -22 [ 729.868401][T16577] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 729.910294][T16577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.944276][T16577] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 730.148768][T16577] usb 2-1: USB disconnect, device number 41 [ 731.239152][T16750] ip6gretap0: entered promiscuous mode [ 731.358897][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.492143][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 731.771579][T16763] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 733.790556][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 733.969195][T16794] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 734.947786][T16829] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 735.320921][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3629'. [ 735.414271][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3629'. [ 735.549933][ T5867] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 735.690259][ T5867] usb 4-1: device descriptor read/64, error -71 [ 735.941773][ T5867] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 735.965035][T16847] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 736.099935][ T5867] usb 4-1: device descriptor read/64, error -71 [ 736.230526][ T5867] usb usb4-port1: attempt power cycle [ 736.252709][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3636'. [ 736.269274][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3636'. [ 736.291903][T16855] team0: entered promiscuous mode [ 736.297078][T16855] team_slave_0: entered promiscuous mode [ 736.307754][T16855] team_slave_1: entered promiscuous mode [ 736.325804][T16855] syz_tun: entered promiscuous mode [ 736.593237][T16856] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3635'. [ 736.602734][ T5867] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 736.620492][T16856] openvswitch: netlink: Missing key (keys=40, expected=80) [ 736.644805][ T5867] usb 4-1: device descriptor read/8, error -71 [ 736.910824][ T5867] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 736.950301][ T5867] usb 4-1: device descriptor read/8, error -71 [ 737.081374][ T5867] usb usb4-port1: unable to enumerate USB device [ 737.346501][T16876] netlink: 'syz.5.3645': attribute type 1 has an invalid length. [ 737.360715][T16866] tipc: Started in network mode [ 737.379855][T16866] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 737.394358][T16866] tipc: Enabled bearer , priority 0 [ 738.518240][T16546] tipc: Node number set to 10398378 [ 738.526263][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 738.545098][T16878] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 738.613174][T16888] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3649'. [ 738.770520][T16888] openvswitch: netlink: Missing key (keys=40, expected=80) [ 739.734974][T10044] block device autoloading is deprecated and will be removed. [ 739.752828][T10044] udevd[10044]: setting mode of /dev/loop11 to 060660 failed: Read-only file system [ 739.890925][T10044] udevd[10044]: setting owner of /dev/loop11 to uid=0, gid=6 failed: Read-only file system [ 740.078780][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3658'. [ 740.593338][T10044] udevd[10044]: setting mode of /dev/loop11 to 060660 failed: Read-only file system [ 740.611773][T10044] udevd[10044]: setting owner of /dev/loop11 to uid=0, gid=6 failed: Read-only file system [ 740.728981][T16893] team0 (unregistering): left promiscuous mode [ 740.735355][T16893] team_slave_0: left promiscuous mode [ 740.768947][T16546] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 740.788432][T16893] team_slave_1: left promiscuous mode [ 740.825339][T16893] team0 (unregistering): Port device team_slave_0 removed [ 740.858838][T16893] team0 (unregistering): Port device team_slave_1 removed [ 740.920092][T16546] usb 2-1: Using ep0 maxpacket: 16 [ 740.940079][T16546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.951672][T16546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.972402][T16546] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 740.986493][T16546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.023603][T16546] usb 2-1: config 0 descriptor?? [ 741.344670][T16930] fuse: Bad value for 'rootmode' [ 742.058433][T16546] konepure 0003:1E7D:2DB4.0007: item fetching failed at offset 0/4 [ 742.067006][T16546] konepure 0003:1E7D:2DB4.0007: parse failed [ 742.073343][T16546] konepure 0003:1E7D:2DB4.0007: probe with driver konepure failed with error -22 [ 742.088961][T16546] usb 2-1: USB disconnect, device number 42 [ 745.338887][T16973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3676'. [ 745.348005][T16973] netlink: 'syz.3.3676': attribute type 4 has an invalid length. [ 745.355882][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3676'. [ 746.183751][T16978] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 747.500450][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.507229][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.272798][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 748.616193][T17011] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 748.849865][ T5867] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 748.991242][ T5867] usb 4-1: device descriptor read/64, error -71 [ 749.459914][ T5867] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 749.671394][ T5867] usb 4-1: device descriptor read/64, error -71 [ 749.926896][ T5867] usb usb4-port1: attempt power cycle [ 750.670359][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 750.678386][T17036] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 751.881128][T17089] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 753.469835][ T5867] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 753.991357][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 754.430474][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 754.437649][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.448586][ T5867] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 754.486042][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.519023][ T5867] usb 2-1: config 0 descriptor?? [ 754.558217][ T5867] usb 2-1: bad CDC descriptors [ 754.856660][T17131] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 755.759895][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 755.878511][T16576] usb 2-1: USB disconnect, device number 43 [ 756.138656][T17146] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQNd [ 756.928687][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 757.039426][T17165] fuse: Unknown parameter 'user_i00000000000000000000' [ 758.367973][T17164] XFS (nullb0): Invalid superblock magic number [ 758.414710][T17176] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3754'. [ 758.437163][T17167] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 758.483497][T17176] openvswitch: netlink: Missing key (keys=40, expected=80) [ 758.548350][T17184] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 758.922223][T17196] 9pnet_fd: Insufficient options for proto=fd [ 759.829739][T16575] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 760.440117][T16575] usb 3-1: Using ep0 maxpacket: 32 [ 760.453165][T16575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.470468][T16575] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 760.480233][T16575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.502348][T16575] usb 3-1: config 0 descriptor?? [ 760.665306][T16575] usb 3-1: bad CDC descriptors [ 760.669940][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 760.743444][T17214] fuse: Unknown parameter 'user_i00000000000000000000' [ 761.753123][T17223] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3768'. [ 761.782989][T17223] openvswitch: netlink: Missing key (keys=40, expected=80) [ 762.340113][T16576] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 762.709883][T16546] usb 3-1: USB disconnect, device number 28 [ 762.861967][T16576] usb 2-1: device descriptor read/64, error -71 [ 762.899155][T17229] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 763.152766][T16576] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 763.309937][T16576] usb 2-1: device descriptor read/64, error -71 [ 763.420211][T16576] usb usb2-port1: attempt power cycle [ 763.625631][T17255] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3779'. [ 763.654600][T17255] openvswitch: netlink: Missing key (keys=40, expected=80) [ 763.791447][T16576] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 763.821287][T16576] usb 2-1: device descriptor read/8, error -71 [ 764.480104][T16576] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 764.520321][T16576] usb 2-1: device descriptor read/8, error -71 [ 764.528017][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3786'. [ 764.649455][T16576] usb usb2-port1: unable to enumerate USB device [ 765.028754][T14496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 765.266906][T17268] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 767.070158][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 768.711122][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 768.890818][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3817'. [ 770.572480][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3827'. [ 771.481983][T17393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3835'. [ 773.514151][T17428] fuse: Bad value for 'fd' [ 775.159102][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 775.758015][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3858'. [ 776.588937][T17455] XFS (nullb0): Invalid superblock magic number [ 777.562788][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 777.906271][T17501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3873'. [ 778.630023][T16576] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 778.819437][T16576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.819543][T16576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.822887][T16576] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 778.822993][T16576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.916826][T16576] usb 3-1: config 0 descriptor?? [ 781.226166][T17547] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 781.318942][T16576] usbhid 3-1:0.0: can't add hid device: -71 [ 781.325529][T16576] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 781.335378][T16576] usb 3-1: USB disconnect, device number 29 [ 781.361024][T17547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 781.441767][T17551] overlayfs: failed to resolve './file1': -2 [ 781.538620][T17552] 9pnet_fd: Insufficient options for proto=fd [ 782.557047][T17567] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQNd [ 782.570115][T16570] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 782.742806][T16570] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.755313][T16570] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 782.782302][T16570] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.805738][T16570] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.838770][T16570] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 782.849456][T16570] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 782.884564][T16570] usb 2-1: Product: syz [ 782.901775][T16570] usb 2-1: Manufacturer: syz [ 782.932350][T16570] cdc_wdm 2-1:1.0: skipping garbage [ 782.956671][T16570] cdc_wdm 2-1:1.0: skipping garbage [ 782.985512][T16570] cdc_wdm 2-1:1.0: skipping garbage [ 783.013648][T16570] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 783.480517][T17578] overlayfs: failed to resolve './file1': -2 [ 783.533017][T17581] 9pnet_fd: Insufficient options for proto=fd [ 783.560078][T16575] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 783.637615][T17586] netlink: 'syz.6.3903': attribute type 1 has an invalid length. [ 783.670653][T17586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 783.772517][T16575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.790705][T16575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.834209][T16575] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 783.872463][T16575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.919466][T16575] usb 4-1: config 0 descriptor?? [ 784.127688][T16546] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 784.279793][T16546] usb 3-1: Using ep0 maxpacket: 16 [ 784.295378][T16546] usb 3-1: config 0 has an invalid interface number: 206 but max is 0 [ 784.311772][T16546] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 784.366732][T16575] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 784.367348][T16546] usb 3-1: config 0 has no interface number 0 [ 784.425565][T16575] cm6533_jd 0003:0D8C:0022.0008: item fetching failed at offset 4/5 [ 784.454793][T16546] usb 3-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=71.29 [ 784.467335][T16546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.472620][T16575] cm6533_jd 0003:0D8C:0022.0008: parse failed [ 784.481375][T16546] usb 3-1: Product: syz [ 784.500214][T16546] usb 3-1: Manufacturer: syz [ 784.537084][T16546] usb 3-1: SerialNumber: syz [ 784.550193][T16575] cm6533_jd 0003:0D8C:0022.0008: probe with driver cm6533_jd failed with error -22 [ 784.713660][T16546] usb 3-1: config 0 descriptor?? [ 784.807850][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3909'. [ 784.934368][T16546] usb 3-1: USB disconnect, device number 30 [ 785.810113][T17609] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQNd [ 785.879761][T16570] usb 2-1: USB disconnect, device number 48 [ 786.006276][T16546] usb 4-1: USB disconnect, device number 40 [ 786.571584][T17619] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 786.659087][T17619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.697470][T17636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3921'. [ 788.012150][T16546] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 788.072027][T17613] 9p: Unknown access argument 18446744073709551615: -34 [ 788.110095][T16577] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 788.193292][T16546] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.218184][T16546] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 788.244560][T16546] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.271463][T16546] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.290220][T16577] usb 4-1: Using ep0 maxpacket: 16 [ 788.307323][T16577] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 788.311478][T16546] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.336502][T16577] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 788.340462][T16546] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.374960][T16577] usb 4-1: config 0 has no interface number 0 [ 788.386352][T16546] usb 3-1: Product: syz [ 788.396694][T16546] usb 3-1: Manufacturer: syz [ 788.396836][T16577] usb 4-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=71.29 [ 788.423183][T16546] cdc_wdm 3-1:1.0: skipping garbage [ 788.429470][T16577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.443527][T16546] cdc_wdm 3-1:1.0: skipping garbage [ 788.448776][T16546] cdc_wdm 3-1:1.0: skipping garbage [ 788.469712][T16577] usb 4-1: Product: syz [ 788.473927][T16577] usb 4-1: Manufacturer: syz [ 788.478541][T16577] usb 4-1: SerialNumber: syz [ 788.494260][T16546] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 788.520723][T16577] usb 4-1: config 0 descriptor?? [ 788.575901][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3929'. [ 788.774051][T16577] usb 4-1: USB disconnect, device number 41 [ 791.626328][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3935'. [ 791.961516][T16577] usb 3-1: USB disconnect, device number 31 [ 792.122067][T17688] 9pnet_fd: Insufficient options for proto=fd [ 792.733828][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3938'. [ 792.876350][T17693] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.3939'. [ 792.899802][T16575] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 792.916052][T17693] openvswitch: netlink: Flow key attr not present in new flow. [ 793.041043][T17695] sctp: [Deprecated]: syz.2.3941 (pid 17695) Use of int in max_burst socket option. [ 793.041043][T17695] Use struct sctp_assoc_value instead [ 793.070509][T16575] usb 4-1: Using ep0 maxpacket: 8 [ 793.139111][T16575] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 793.147744][T16575] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 793.158313][T16575] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.171513][T16575] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 793.180929][T16575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.109185][T16575] usbtmc 4-1:16.0: bulk endpoints not found [ 794.486280][ T5867] usb 4-1: USB disconnect, device number 42 [ 795.670728][T17715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3947'. [ 796.132059][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3951'. [ 796.410647][T17727] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.3952'. [ 796.454766][T17727] openvswitch: netlink: Flow key attr not present in new flow. [ 797.378048][T17735] sctp: [Deprecated]: syz.5.3954 (pid 17735) Use of int in max_burst socket option. [ 797.378048][T17735] Use struct sctp_assoc_value instead [ 797.718482][T17748] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3960'. [ 797.739924][T16575] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 798.706002][T17744] syz.3.3957: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 798.723844][T17744] CPU: 1 UID: 0 PID: 17744 Comm: syz.3.3957 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 798.734647][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 798.744765][T17744] Call Trace: [ 798.748065][T17744] [ 798.751026][T17744] dump_stack_lvl+0x241/0x360 [ 798.755741][T17744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.760980][T17744] ? __pfx__printk+0x10/0x10 [ 798.765612][T17744] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 798.772065][T17744] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 798.778616][T17744] warn_alloc+0x278/0x410 [ 798.782982][T17744] ? __pfx_warn_alloc+0x10/0x10 [ 798.787861][T17744] ? vicodec_start_streaming+0x9e4/0x13e0 [ 798.793591][T17744] ? __get_vm_area_node+0x1c8/0x2d0 [ 798.798789][T17744] ? __get_vm_area_node+0x25c/0x2d0 [ 798.803989][T17744] __vmalloc_node_range_noprof+0x62f/0x1380 [ 798.809887][T17744] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 798.815624][T17744] ? rcu_is_watching+0x15/0xb0 [ 798.820390][T17744] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 798.826714][T17744] ? rcu_is_watching+0x15/0xb0 [ 798.831482][T17744] ? trace_kmalloc+0x1f/0xd0 [ 798.836067][T17744] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 798.841520][T17744] ? __kvmalloc_node_noprof+0x72/0x190 [ 798.846983][T17744] __kvmalloc_node_noprof+0x142/0x190 [ 798.852357][T17744] ? vicodec_start_streaming+0x9e4/0x13e0 [ 798.858079][T17744] vicodec_start_streaming+0x9e4/0x13e0 [ 798.863631][T17744] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 798.869615][T17744] vb2_start_streaming+0x129/0x440 [ 798.874796][T17744] vb2_core_streamon+0x2b5/0x4c0 [ 798.879764][T17744] v4l2_m2m_ioctl_streamon+0x136/0x190 [ 798.885235][T17744] __video_do_ioctl+0xc23/0xdd0 [ 798.890107][T17744] ? __pfx___video_do_ioctl+0x10/0x10 [ 798.895489][T17744] ? smack_log+0x123/0x540 [ 798.899917][T17744] ? __might_fault+0xc6/0x120 [ 798.904607][T17744] video_usercopy+0x89b/0x1180 [ 798.909401][T17744] ? __pfx___video_do_ioctl+0x10/0x10 [ 798.914778][T17744] ? __pfx_video_usercopy+0x10/0x10 [ 798.919984][T17744] ? smack_file_ioctl+0x29e/0x3a0 [ 798.925027][T17744] ? __fget_files+0x2a/0x410 [ 798.929617][T17744] ? __fget_files+0x2a/0x410 [ 798.934216][T17744] v4l2_ioctl+0x189/0x1e0 [ 798.938547][T17744] ? __pfx_v4l2_ioctl+0x10/0x10 [ 798.943404][T17744] __se_sys_ioctl+0xf5/0x170 [ 798.948000][T17744] do_syscall_64+0xf3/0x230 [ 798.952507][T17744] ? clear_bhb_loop+0x35/0x90 [ 798.957620][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.963513][T17744] RIP: 0033:0x7f0ad477ff19 [ 798.968027][T17744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.987646][T17744] RSP: 002b:00007f0ad54ad058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.996071][T17744] RAX: ffffffffffffffda RBX: 00007f0ad4946080 RCX: 00007f0ad477ff19 [ 799.004044][T17744] RDX: 0000000020000140 RSI: 0000000040045612 RDI: 0000000000000004 [ 799.012021][T17744] RBP: 00007f0ad47f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 799.019989][T17744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.027954][T17744] R13: 0000000000000000 R14: 00007f0ad4946080 R15: 00007ffdd8331458 [ 799.035933][T17744] [ 800.002666][T17744] Mem-Info: [ 800.005888][T17744] active_anon:346 inactive_anon:11398 isolated_anon:0 [ 800.005888][T17744] active_file:16996 inactive_file:38856 isolated_file:0 [ 800.005888][T17744] unevictable:768 dirty:122 writeback:0 [ 800.005888][T17744] slab_reclaimable:10551 slab_unreclaimable:111765 [ 800.005888][T17744] mapped:30518 shmem:1427 pagetables:1058 [ 800.005888][T17744] sec_pagetables:0 bounce:0 [ 800.005888][T17744] kernel_misc_reclaimable:0 [ 800.005888][T17744] free:1292117 free_pcp:5884 free_cma:0 [ 800.087747][T17766] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.3965'. [ 800.098944][T17766] openvswitch: netlink: Flow key attr not present in new flow. [ 800.562546][T17770] fuse: Unknown parameter '0x0000000000000005' [ 801.005084][T17744] Node 0 active_anon:1384kB inactive_anon:62292kB active_file:67856kB inactive_file:155424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133520kB dirty:484kB writeback:0kB shmem:15572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12504kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no [ 801.329043][T17744] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 801.453696][T16575] usb 3-1: device descriptor read/all, error -71 [ 801.564623][T17744] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.592845][T17744] lowmem_reserve[]: 0 2465 2466 0 0 [ 801.598246][T17744] Node 0 DMA32 free:1259468kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1380kB inactive_anon:55988kB active_file:67084kB inactive_file:155372kB unevictable:1536kB writepending:536kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:2604kB local_pcp:512kB free_cma:0kB [ 801.632409][T17744] lowmem_reserve[]: 0 0 0 0 0 [ 801.637290][T17744] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 801.713747][T17744] lowmem_reserve[]: 0 0 0 0 0 [ 801.718713][T17744] Node 1 Normal free:3904216kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.977819][T17744] lowmem_reserve[]: 0 0 0 0 0 [ 801.986203][T17744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 802.007382][T17744] Node 0 DMA32: 24*4kB (UME) 42*8kB (UME) 13*16kB (UE) 51*32kB (UE) 42*64kB (UME) 85*128kB (UME) 25*256kB (UME) 29*512kB (UME) 16*1024kB (UME) 5*2048kB (M) 287*4096kB (UM) = 1239264kB [ 802.012421][ T5825] Bluetooth: hci5: unexpected event for opcode 0x0803 [ 802.161313][T17744] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 802.174227][T17744] Node 1 Normal: 230*4kB (UME) 50*8kB (UME) 31*16kB (UME) 202*32kB (UME) 88*64kB (UME) 31*128kB (UME) 11*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 944*4096kB (UM) = 3904216kB [ 802.175088][T17782] sctp: [Deprecated]: syz.5.3970 (pid 17782) Use of int in max_burst socket option. [ 802.175088][T17782] Use struct sctp_assoc_value instead [ 802.193320][T17744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.193375][T17744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.193394][T17744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.193411][T17744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.193436][T17744] 60154 total pagecache pages [ 802.193446][T17744] 0 pages in swap cache [ 802.193454][T17744] Free swap = 124568kB [ 802.193462][T17744] Total swap = 124996kB [ 802.193473][T17744] 2097051 pages RAM [ 802.193481][T17744] 0 pages HighMem/MovableOnly [ 802.193489][T17744] 427005 pages reserved [ 802.278422][T17744] 0 pages cma reserved [ 802.780355][T17795] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3976'. [ 802.825033][T17795] openvswitch: netlink: Flow actions attr not present in new flow. [ 803.570072][T16577] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 803.777543][T16577] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.821373][T16577] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 803.847398][T17807] XFS (nullb0): Invalid superblock magic number [ 803.854209][T16577] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.881668][T16577] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 803.895305][T16577] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 803.909987][T16577] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 804.903564][T16577] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.913732][T16577] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.921859][T16577] usb 3-1: Product: syz [ 804.926047][T16577] usb 3-1: Manufacturer: syz [ 804.953366][T16577] cdc_wdm 3-1:1.0: skipping garbage [ 804.958629][T16577] cdc_wdm 3-1:1.0: skipping garbage [ 805.495876][T16577] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 805.615962][T17820] sctp: [Deprecated]: syz.3.3983 (pid 17820) Use of int in max_burst socket option. [ 805.615962][T17820] Use struct sctp_assoc_value instead [ 806.047214][ T5825] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 806.056363][ T5825] Bluetooth: hci5: Injecting HCI hardware error event [ 806.068025][ T5825] Bluetooth: hci5: hardware error 0x00 [ 806.790330][T17847] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3990'. [ 806.813444][T17847] openvswitch: netlink: Flow actions attr not present in new flow. [ 807.273968][T17861] 9pnet_fd: Insufficient options for proto=fd [ 808.047756][T16576] usb 3-1: USB disconnect, device number 34 [ 809.293401][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 809.505816][T17876] 9pnet_fd: Insufficient options for proto=fd [ 809.825455][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.832201][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.352801][T17884] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.4005'. [ 810.369769][T17884] openvswitch: netlink: Flow actions attr not present in new flow. [ 810.380101][T16577] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 810.548829][T16577] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.879867][T16577] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.039167][T16577] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 811.048277][T16577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 811.057204][T16577] usb 4-1: SerialNumber: syz [ 811.169280][T17900] 9pnet_fd: Insufficient options for proto=fd [ 811.825203][T16575] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 811.985877][T16575] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 812.001555][T16575] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 812.012475][T16575] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 812.022830][T16575] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 812.034486][T16575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 812.045778][T16575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 812.898177][T16575] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 812.907984][T16575] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 812.916739][T16575] usb 2-1: Product: syz [ 812.952945][T16575] usb 2-1: Manufacturer: syz [ 813.073942][T16575] cdc_wdm 2-1:1.0: skipping garbage [ 813.081116][T16575] cdc_wdm 2-1:1.0: skipping garbage [ 813.088112][T16575] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 813.200831][T17909] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 813.565140][T16577] usb 4-1: 0:2 : does not exist [ 813.585214][T16577] usb 4-1: unit 5 not found! [ 813.694530][T16577] usb 4-1: USB disconnect, device number 43 [ 813.975910][T17925] tipc: Started in network mode [ 813.981439][T17925] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 813.988910][T17925] tipc: Enabled bearer , priority 0 [ 814.787192][ T5867] usb 2-1: USB disconnect, device number 49 [ 814.807460][T17934] openvswitch: netlink: Flow actions attr not present in new flow. [ 814.979805][T16577] tipc: Node number set to 10398378 [ 816.901842][T17940] XFS (nullb0): Invalid superblock magic number [ 817.242396][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 817.342812][ T5825] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 817.407908][T17961] program syz.6.4025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.533034][T17957] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 818.202500][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 818.202523][ T29] audit: type=1800 audit(1733900957.651:775): pid=17981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4033" name="bus" dev="overlay" ino=2952 res=0 errno=0 [ 818.255554][ T5825] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 822.377149][T15124] block device autoloading is deprecated and will be removed. [ 822.398471][ T8007] udevd[8007]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 823.226460][ T8007] udevd[8007]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 825.386823][T18070] tipc: Enabling of bearer rejected, already enabled [ 827.320193][ T5825] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 827.330892][ T5825] Bluetooth: hci1: Injecting HCI hardware error event [ 827.341990][ T5825] Bluetooth: hci1: hardware error 0x00 [ 827.767248][T15124] block device autoloading is deprecated and will be removed. [ 828.245538][ T8007] udevd[8007]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 828.245624][ T8007] udevd[8007]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 829.849761][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 830.028066][T18119] tty tty26: ldisc open failed (-12), clearing slot 25 [ 830.504855][T15124] block device autoloading is deprecated and will be removed. [ 830.990753][ T8007] udevd[8007]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 831.101507][ T8007] udevd[8007]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 832.085203][ T29] audit: type=1800 audit(1733900971.651:776): pid=18165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.4098" name="bus" dev="overlay" ino=582 res=0 errno=0 [ 832.178837][T18159] XFS (nullb0): Invalid superblock magic number [ 833.066222][T15124] block device autoloading is deprecated and will be removed. [ 833.214731][ T8007] udevd[8007]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 833.224265][ T8007] udevd[8007]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 835.087331][T18201] vlan2: entered promiscuous mode [ 835.093056][T18201] vlan2: entered allmulticast mode [ 835.098213][T18201] hsr_slave_1: entered allmulticast mode [ 835.135821][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4109'. [ 835.264999][T18205] vlan2: entered promiscuous mode [ 835.293575][T18205] vlan2: entered allmulticast mode [ 835.308640][T18205] hsr_slave_1: entered allmulticast mode [ 835.368099][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4112'. [ 837.007900][T18213] hsr_slave_1 (unregistering): left allmulticast mode [ 837.166783][T18213] hsr_slave_1 (unregistering): left promiscuous mode [ 837.342682][T18228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4117'. [ 837.451197][T15124] block device autoloading is deprecated and will be removed. [ 838.026861][ T8007] udevd[8007]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 838.038474][ T8007] udevd[8007]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 838.048846][T16575] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 838.236131][T16575] usb 4-1: device descriptor read/64, error -71 [ 838.245366][T18241] netlink: 'syz.2.4120': attribute type 21 has an invalid length. [ 838.260079][T18241] netlink: 'syz.2.4120': attribute type 20 has an invalid length. [ 838.268649][T18241] IPv6: NLM_F_CREATE should be specified when creating new route [ 838.500580][T16575] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 838.751014][T16575] usb 4-1: device descriptor read/64, error -71 [ 838.803676][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4126'. [ 838.860250][T16575] usb usb4-port1: attempt power cycle [ 839.058025][ T29] audit: type=1326 audit(1733900978.621:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 839.067489][T18257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.268959][ T29] audit: type=1326 audit(1733900978.621:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 839.315538][T16575] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 839.412897][T16575] usb 4-1: device descriptor read/8, error -71 [ 839.680245][T16575] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 839.724154][ T29] audit: type=1326 audit(1733900978.661:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 839.751419][ T29] audit: type=1326 audit(1733900978.661:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 839.775626][T16575] usb 4-1: device descriptor read/8, error -71 [ 839.784887][ T29] audit: type=1326 audit(1733900978.661:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 839.914478][T16575] usb usb4-port1: unable to enumerate USB device [ 839.964400][ T29] audit: type=1326 audit(1733900978.661:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 840.030068][ T29] audit: type=1326 audit(1733900978.671:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 840.075268][T18267] vlan3: entered promiscuous mode [ 840.103693][T18267] vlan3: entered allmulticast mode [ 840.108868][T18267] hsr_slave_1: entered allmulticast mode [ 840.131140][ T29] audit: type=1326 audit(1733900978.671:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18258 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121257ff19 code=0x7ffc0000 [ 840.152710][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.175169][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 840.468040][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4136'. [ 840.509002][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4136'. [ 843.152368][T16575] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 843.500301][T16575] usb 2-1: device descriptor read/64, error -71 [ 843.790065][T16575] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 843.971198][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'. [ 844.069927][T16575] usb 2-1: device descriptor read/64, error -71 [ 844.330555][T16575] usb usb2-port1: attempt power cycle [ 845.299973][T16575] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 845.341667][T16575] usb 2-1: device descriptor read/8, error -71 [ 845.732749][T16575] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 845.762341][T16575] usb 2-1: device descriptor read/8, error -71 [ 845.870004][T16575] usb usb2-port1: unable to enumerate USB device [ 846.630758][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4165'. [ 846.825767][T18363] hsr_slave_1 (unregistering): left allmulticast mode [ 846.929729][T18363] hsr_slave_1 (unregistering): left promiscuous mode [ 847.011736][T18376] overlayfs: failed to resolve './file0': -2 [ 847.740674][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4174'. [ 848.815366][T18415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.821548][T18417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4185'. [ 848.822666][T18415] IPv6: NLM_F_CREATE should be set when creating new route [ 849.603947][T18440] netlink: 'syz.1.4193': attribute type 21 has an invalid length. [ 849.642905][T18440] netlink: 'syz.1.4193': attribute type 20 has an invalid length. [ 849.704152][T18440] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.783042][T18444] XFS (nullb0): Invalid superblock magic number [ 850.423258][T18458] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4199'. [ 850.451404][T18455] fuse: Bad value for 'fd' [ 852.391528][T18478] 9pnet_fd: Insufficient options for proto=fd [ 853.248904][T18491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4211'. [ 853.991469][ T29] audit: type=1326 audit(1733900993.551:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.083265][ T29] audit: type=1326 audit(1733900993.551:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.148285][T18503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4216'. [ 854.198430][ T29] audit: type=1326 audit(1733900993.561:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.234816][ T29] audit: type=1326 audit(1733900993.561:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.257107][ T29] audit: type=1326 audit(1733900993.561:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.279957][ T29] audit: type=1326 audit(1733900993.561:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.302097][ T29] audit: type=1326 audit(1733900993.561:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.441308][ T29] audit: type=1326 audit(1733900993.561:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.463360][ T29] audit: type=1326 audit(1733900993.561:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 854.485682][ T29] audit: type=1326 audit(1733900993.561:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.3.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad477ff19 code=0x7ffc0000 [ 855.116517][T17112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 855.130331][T17112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 855.150055][T17112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 855.167507][T17112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 855.179253][T17112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 855.187911][T17112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 855.273878][T18516] fuse: Bad value for 'fd' [ 855.439328][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4223'. [ 855.769338][T18526] vlan4: entered promiscuous mode [ 856.082240][T18533] [ 856.084607][T18533] ============================================ [ 856.090737][T18533] WARNING: possible recursive locking detected [ 856.096866][T18533] 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 Not tainted [ 856.103950][T18533] -------------------------------------------- [ 856.110085][T18533] syz.3.4225/18533 is trying to acquire lock: [ 856.116124][T18533] ffff88807fbff268 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6e0 [ 856.124984][T18533] [ 856.124984][T18533] but task is already holding lock: [ 856.132324][T18533] ffff888029f2d268 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6e0 [ 856.141167][T18533] [ 856.141167][T18533] other info that might help us debug this: [ 856.149201][T18533] Possible unsafe locking scenario: [ 856.149201][T18533] [ 856.156626][T18533] CPU0 [ 856.159879][T18533] ---- [ 856.163135][T18533] lock(&trie->lock); [ 856.167183][T18533] lock(&trie->lock); [ 856.171410][T18533] [ 856.171410][T18533] *** DEADLOCK *** [ 856.171410][T18533] [ 856.179529][T18533] May be due to missing lock nesting notation [ 856.179529][T18533] [ 856.187823][T18533] 4 locks held by syz.3.4225/18533: [ 856.192994][T18533] #0: ffff888027f97110 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 856.202725][T18533] #1: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 856.212372][T18533] #2: ffff888029f2d268 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6e0 [ 856.221678][T18533] #3: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 856.231067][T18533] [ 856.231067][T18533] stack backtrace: [ 856.236936][T18533] CPU: 1 UID: 0 PID: 18533 Comm: syz.3.4225 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 856.247669][T18533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 856.257711][T18533] Call Trace: [ 856.260979][T18533] [ 856.263896][T18533] dump_stack_lvl+0x241/0x360 [ 856.268558][T18533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.273744][T18533] ? __pfx__printk+0x10/0x10 [ 856.278312][T18533] ? lockdep_unlock+0x16a/0x300 [ 856.283150][T18533] print_deadlock_bug+0x483/0x620 [ 856.288157][T18533] validate_chain+0x15e2/0x5920 [ 856.292994][T18533] ? unwind_next_frame+0x18e6/0x22d0 [ 856.298258][T18533] ? deref_stack_reg+0x17c/0x210 [ 856.303263][T18533] ? is_bpf_text_address+0x285/0x2a0 [ 856.308527][T18533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 856.314682][T18533] ? kernel_text_address+0xa7/0xe0 [ 856.319774][T18533] ? __pfx_validate_chain+0x10/0x10 [ 856.324951][T18533] ? unwind_get_return_address+0x4d/0x90 [ 856.330649][T18533] ? arch_stack_walk+0xfd/0x150 [ 856.335507][T18533] ? validate_chain+0x11e/0x5920 [ 856.340532][T18533] ? validate_chain+0x11e/0x5920 [ 856.345463][T18533] ? __pfx_validate_chain+0x10/0x10 [ 856.350663][T18533] ? mark_lock+0x9a/0x360 [ 856.354974][T18533] ? __pfx_lockdep_unlock+0x10/0x10 [ 856.360151][T18533] __lock_acquire+0x1397/0x2100 [ 856.364985][T18533] lock_acquire+0x1ed/0x550 [ 856.369471][T18533] ? trie_delete_elem+0x96/0x6e0 [ 856.374394][T18533] ? __pfx_lock_acquire+0x10/0x10 [ 856.379591][T18533] ? __lock_acquire+0x1397/0x2100 [ 856.384614][T18533] _raw_spin_lock_irqsave+0xd5/0x120 [ 856.389886][T18533] ? trie_delete_elem+0x96/0x6e0 [ 856.394824][T18533] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 856.400721][T18533] ? __pfx_lock_acquire+0x10/0x10 [ 856.405739][T18533] ? validate_chain+0x11e/0x5920 [ 856.410765][T18533] trie_delete_elem+0x96/0x6e0 [ 856.415548][T18533] ? __pfx___cant_migrate+0x10/0x10 [ 856.420761][T18533] ? bpf_trace_run2+0x1fc/0x540 [ 856.425603][T18533] bpf_prog_1c0c44170264bb34+0x46/0x4a [ 856.431043][T18533] bpf_trace_run2+0x2ec/0x540 [ 856.435705][T18533] ? validate_chain+0x11e/0x5920 [ 856.440623][T18533] ? __pfx_bpf_trace_run2+0x10/0x10 [ 856.445994][T18533] ? validate_chain+0x11e/0x5920 [ 856.450916][T18533] ? __pfx_validate_chain+0x10/0x10 [ 856.456092][T18533] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 856.462360][T18533] __traceiter_contention_end+0x7b/0xb0 [ 856.467922][T18533] trace_contention_end+0x118/0x140 [ 856.473134][T18533] __pv_queued_spin_lock_slowpath+0xb7e/0xdb0 [ 856.479199][T18533] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 856.485789][T18533] queued_spin_lock_slowpath+0x42/0x50 [ 856.491264][T18533] do_raw_spin_lock+0x272/0x370 [ 856.496108][T18533] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 856.501467][T18533] _raw_spin_lock_irqsave+0xe1/0x120 [ 856.506738][T18533] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 856.512617][T18533] ? __pfx_lock_acquire+0x10/0x10 [ 856.517632][T18533] ? __lock_acquire+0x1397/0x2100 [ 856.522655][T18533] trie_delete_elem+0x96/0x6e0 [ 856.527401][T18533] ? __pfx___cant_migrate+0x10/0x10 [ 856.532586][T18533] ? bpf_trace_run2+0x1fc/0x540 [ 856.537432][T18533] bpf_prog_1c0c44170264bb34+0x46/0x4a [ 856.542868][T18533] bpf_trace_run2+0x2ec/0x540 [ 856.547532][T18533] ? __pfx_bpf_trace_run2+0x10/0x10 [ 856.552715][T18533] ? __mutex_trylock_common+0x183/0x2e0 [ 856.558247][T18533] ? __pfx___might_resched+0x10/0x10 [ 856.563526][T18533] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 856.569750][T18533] __traceiter_contention_end+0x7b/0xb0 [ 856.575281][T18533] trace_contention_end+0xf9/0x120 [ 856.580376][T18533] __mutex_lock+0x375/0xee0 [ 856.584863][T18533] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 856.591185][T18533] ? __unix_dgram_recvmsg+0x246/0x12f0 [ 856.596647][T18533] ? __pfx___mutex_lock+0x10/0x10 [ 856.601653][T18533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 856.607624][T18533] ? __lock_acquire+0x1397/0x2100 [ 856.613083][T18533] __unix_dgram_recvmsg+0x246/0x12f0 [ 856.618358][T18533] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 856.624066][T18533] ? iovec_from_user+0x61/0x240 [ 856.628921][T18533] ? __import_iovec+0x3a8/0x870 [ 856.633759][T18533] ? unix_dgram_recvmsg+0xb6/0xe0 [ 856.638765][T18533] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 856.644294][T18533] sock_recvmsg_nosec+0x18e/0x1d0 [ 856.649301][T18533] ____sys_recvmsg+0x3cd/0x480 [ 856.654050][T18533] ? __pfx_____sys_recvmsg+0x10/0x10 [ 856.659320][T18533] ? do_recvmmsg+0x44e/0xab0 [ 856.663893][T18533] ? __might_fault+0xaa/0x120 [ 856.668553][T18533] do_recvmmsg+0x426/0xab0 [ 856.672952][T18533] ? __pfx_do_recvmmsg+0x10/0x10 [ 856.677870][T18533] ? __pfx_futex_wake_mark+0x10/0x10 [ 856.683140][T18533] ? futex_wait+0x285/0x360 [ 856.687643][T18533] ? __pfx_futex_wait+0x10/0x10 [ 856.692476][T18533] ? fd_install+0x9c/0x5d0 [ 856.696878][T18533] ? __pfx_lock_release+0x10/0x10 [ 856.701902][T18533] ? __pfx_do_futex+0x10/0x10 [ 856.706567][T18533] __x64_sys_recvmmsg+0x199/0x250 [ 856.711575][T18533] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 856.717104][T18533] ? do_syscall_64+0x100/0x230 [ 856.721849][T18533] ? do_syscall_64+0xb6/0x230 [ 856.726510][T18533] do_syscall_64+0xf3/0x230 [ 856.730995][T18533] ? clear_bhb_loop+0x35/0x90 [ 856.735656][T18533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.741543][T18533] RIP: 0033:0x7f0ad477ff19 [ 856.745946][T18533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.765534][T18533] RSP: 002b:00007f0ad54ad058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 856.773928][T18533] RAX: ffffffffffffffda RBX: 00007f0ad4946080 RCX: 00007f0ad477ff19 [ 856.781956][T18533] RDX: 000000000400034f RSI: 0000000020000480 RDI: 0000000000000008 [ 856.789945][T18533] RBP: 00007f0ad47f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 856.797901][T18533] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 856.805851][T18533] R13: 0000000000000000 R14: 00007f0ad4946080 R15: 00007ffdd8331458 [ 856.813816][T18533] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 857.614341][T17112] Bluetooth: hci3: command tx timeout [ 857.642581][T18530] vlan2: entered promiscuous mode [ 857.930809][T18531] syz_tun (unregistering): left promiscuous mode [ 857.974868][T18526] syz_tun (unregistering): left promiscuous mode [ 858.022721][T18530] syz_tun (unregistering): left promiscuous mode [ 858.295216][ T266] gretap0: left allmulticast mode [ 858.306616][ T266] gretap0: left promiscuous mode [ 858.312654][ T266] bridge0: port 1(gretap0) entered disabled state [ 858.468823][ T266] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 858.750164][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.759501][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.768690][ T266] bond0 (unregistering): Released all slaves [ 858.885888][ T266] bond1 (unregistering): Released all slaves [ 859.004576][ T266] bond2 (unregistering): Released all slaves [ 859.122195][ T266] bond3 (unregistering): Released all slaves [ 859.192468][ T266] tipc: Disabling bearer [ 859.198268][ T266] tipc: Left network mode [ 859.389511][ T266] hsr_slave_0: left promiscuous mode [ 859.397046][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.410143][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.775743][ T266] team0 (unregistering): Port device team_slave_1 removed [ 859.816158][ T266] team0 (unregistering): Port device team_slave_0 removed [ 860.451075][ T266] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.524005][ T266] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.574019][ T266] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.616439][ T266] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.702853][ T266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.753976][ T266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.794572][ T266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.836338][ T266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.923509][ T266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.001136][ T266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.037168][ T266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.083496][ T266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.393058][ T266] bridge_slave_1: left allmulticast mode [ 861.399319][ T266] bridge_slave_1: left promiscuous mode [ 861.410333][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.418494][ T266] bridge_slave_0: left allmulticast mode [ 861.424654][ T266] bridge_slave_0: left promiscuous mode [ 861.432066][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.441459][ T266] bridge_slave_1: left allmulticast mode [ 861.447096][ T266] bridge_slave_1: left promiscuous mode [ 861.453506][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.461520][ T266] bridge_slave_0: left allmulticast mode [ 861.467162][ T266] bridge_slave_0: left promiscuous mode [ 861.473307][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.483285][ T266] bridge_slave_1: left allmulticast mode [ 861.488930][ T266] bridge_slave_1: left promiscuous mode [ 861.494968][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.503350][ T266] bridge_slave_0: left allmulticast mode [ 861.509011][ T266] bridge_slave_0: left promiscuous mode [ 861.515498][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.524486][ T266] vlan2: left allmulticast mode [ 861.529337][ T266] vlan2: left promiscuous mode [ 861.534295][ T266] bridge0: port 3(vlan2) entered disabled state [ 861.542124][ T266] bridge_slave_1: left allmulticast mode [ 861.547784][ T266] bridge_slave_1: left promiscuous mode [ 861.553561][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.561504][ T266] bridge_slave_0: left allmulticast mode [ 861.567140][ T266] bridge_slave_0: left promiscuous mode [ 861.572836][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.658129][ T266] ip6gretap0 (unregistering): left promiscuous mode [ 861.764004][ T266] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 862.230028][ T266] bond1 (unregistering): (slave bridge1): Releasing active interface [ 862.295507][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.305321][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.314906][ T266] bond0 (unregistering): Released all slaves [ 862.327828][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.337797][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.347563][ T266] bond0 (unregistering): Released all slaves [ 862.479327][ T266] bond1 (unregistering): Released all slaves [ 862.599986][ T266] bond2 (unregistering): Released all slaves [ 862.716009][ T266] bond3 (unregistering): Released all slaves [ 862.836349][ T266] bond4 (unregistering): Released all slaves [ 862.848988][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.858959][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.869779][ T266] bond0 (unregistering): Released all slaves [ 862.993464][ T266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.003354][ T266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.012590][ T266] bond0 (unregistering): Released all slaves [ 863.134012][ T266] bond1 (unregistering): Released all slaves [ 863.282921][ T266] tipc: Disabling bearer [ 863.301513][ T266] tipc: Left network mode [ 863.913777][ T266] hsr_slave_0: left promiscuous mode [ 863.921529][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.929126][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.939187][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.947403][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.961271][ T266] hsr_slave_0: left promiscuous mode [ 863.967049][ T266] hsr_slave_1: left promiscuous mode [ 863.975465][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.983790][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.993492][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.001652][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.009371][ T266] team0: left promiscuous mode [ 864.016171][ T266] team_slave_0: left promiscuous mode [ 864.022609][ T266] team_slave_1: left promiscuous mode [ 864.032820][ T266] hsr_slave_0: left promiscuous mode [ 864.038573][ T266] hsr_slave_1: left promiscuous mode [ 864.045057][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.054423][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.063544][ T266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.073663][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.082566][ T266] team0: left promiscuous mode [ 864.087359][ T266] team_slave_0: left promiscuous mode [ 864.094900][ T266] team_slave_1: left promiscuous mode [ 864.102384][ T266] dummy0: left promiscuous mode [ 864.109599][ T266] hsr_slave_0: left promiscuous mode [ 864.115924][ T266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.123783][ T266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.135910][ T266] veth1_macvtap: left promiscuous mode [ 864.141881][ T266] veth0_macvtap: left promiscuous mode [ 864.147402][ T266] veth1_vlan: left promiscuous mode [ 864.152858][ T266] veth0_vlan: left promiscuous mode [ 864.158622][ T266] veth1_macvtap: left promiscuous mode [ 864.164208][ T266] veth0_macvtap: left promiscuous mode [ 864.169981][ T266] veth1_vlan: left promiscuous mode [ 864.175247][ T266] veth0_vlan: left promiscuous mode [ 864.181629][ T266] veth1_macvtap: left promiscuous mode [ 864.187102][ T266] veth0_macvtap: left promiscuous mode [ 864.192751][ T266] veth1_vlan: left promiscuous mode [ 864.198014][ T266] veth0_vlan: left promiscuous mode [ 864.204459][ T266] hsr_slave_1: left allmulticast mode [ 864.210283][ T266] hsr_slave_1: left promiscuous mode [ 864.549600][ T266] team0 (unregistering): Port device team_slave_1 removed [ 864.576563][ T266] team0 (unregistering): Port device team_slave_0 removed [ 864.808551][ T266] team0 (unregistering): Port device team_slave_1 removed [ 864.836631][ T266] team0 (unregistering): Port device team_slave_0 removed [ 865.255440][ T266] team0 (unregistering): Port device team_slave_1 removed [ 865.295272][ T266] team0 (unregistering): Port device team_slave_0 removed