last executing test programs: 2m31.954714334s ago: executing program 1 (id=663): clock_adjtime(0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000380), &(0x7f0000000600), 0x0, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 2m30.64256764s ago: executing program 1 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)=""/4083, 0xff3}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000001680)=""/122, 0x7a}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 2m25.7481993s ago: executing program 1 (id=674): r0 = epoll_create(0x10000e9) mount(0x0, 0x0, 0x0, 0x3200456, 0x0) chdir(0x0) chmod(0x0, 0x8cff) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(0x0, 0x3) ftruncate(r2, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f0000001700)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) fcntl$addseals(r2, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f0000000140)={0x80000001}) fcntl$dupfd(r9, 0x406, r2) 2m24.361940568s ago: executing program 1 (id=676): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000680)="91f8a9849519def28691bbc4173c1d6f8df651357d0272b731c582b902dd2902e35d4ac297179130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb93f1b47289131699cf972ea79cc6fbf9ff8af38a1fdd9ab62d2cf3314edc36a6260b4a172e1b42c3b9c9fea74197ab34dfc9ce0e7eae91f3be688da91f5a833d1173bac5af2d62bb1e7be9f9a16c6aeeaf76b6c780b01ad83cc128b3a0484fbc8ebfe8ad8e6c47ca148a93c8fef2b4ecb5c058b0f9173b6faa06d959fe04517327c922573206c97a2f2a54692f", 0xcd}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b29", 0x51}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x134}, {&(0x7f0000000fc0)="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", 0x149}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m21.964340561s ago: executing program 1 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x2710}, [@ldst={0x4}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 2m21.867481986s ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000079c0)={0x1d, r2, 0x0, {0x0, 0xf0, 0x1}, 0x2}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0x0, 0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg0\x00'}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m5.361207122s ago: executing program 32 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000079c0)={0x1d, r2, 0x0, {0x0, 0xf0, 0x1}, 0x2}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0x0, 0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg0\x00'}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 12.549464213s ago: executing program 3 (id=955): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0xffffffffffffff10) 11.639373262s ago: executing program 3 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 11.592054914s ago: executing program 0 (id=958): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.532326409s ago: executing program 0 (id=960): syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda5", 0x2}], 0x1}, 0x41) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.504449243s ago: executing program 0 (id=962): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040cb06f4730000000000010902240001000090000904000009030004000921200000012228000905810408000308"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_setup(0x4005, &(0x7f00000004c0)) 9.372800529s ago: executing program 4 (id=963): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 9.174176737s ago: executing program 4 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8.357172533s ago: executing program 4 (id=965): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0xffffffffffffff10) 8.056339485s ago: executing program 3 (id=966): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 7.23067396s ago: executing program 4 (id=967): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) read$FUSE(r0, &(0x7f000001aa40)={0x2020}, 0x2020) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) epoll_pwait(r2, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0) 7.00422563s ago: executing program 3 (id=969): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0xffffffffffffffce, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.599555111s ago: executing program 3 (id=970): syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x40000, 0x4000, 0x2, 0x6, 0x2}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda5", 0x2}], 0x1}, 0x41) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.169758299s ago: executing program 2 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x5) umount2(&(0x7f0000000040)='.\x00', 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04221d02aaaaaaaaaa12040395a77fb5820affffffffffff0002a3b9270900ef1c4cfd7fc45def47d67b5e982234e122456d6876f21b7dd50c0c1ef7de1f61cd9d81f10babdf36d3482799de4975ead52b76b73f773b59cea231a96cd9a4120706772b87ed464dfdc81b57681605b1db"], 0x20) sendmsg$NFT_BATCH(r6, 0x0, 0x40440c4) 5.168515069s ago: executing program 0 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 5.077923993s ago: executing program 3 (id=974): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x119, 0x9, 0x0, 0x33) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 4.866435352s ago: executing program 0 (id=975): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0xffffffffffffff10) 4.175075372s ago: executing program 2 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdb7c, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000010) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc141200004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.857463248s ago: executing program 0 (id=977): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$eJzs3cFvHGfdB/DvrNeON2+V12kTGqEgTCIVpIjEiZVCuGAQQjlUqCqHnq3Eaaw4SZW4KK0QuIDghMShf0BB8o0DQuIeFC5cyq1XHyshcYk4RL0smtlZe3e9tteJs07h86km8zzzPPPMb3/zzIx3XWsD/M+6ei7Nhyly9dwbD8r6xvr8ysb6/JG6eSVJWW4kzc4qxZ2keJQslO1Fz5Ke9TYfLV9569PHG591as16qfpP7LbfEEP6rtVLZuvxZofuOTnqIdbq8PJSkmv1ut/UqGP1dSyTdrZew6Fr92ukvVa3jDTB93PdAi+Y7lVedJ6b28wkR5NM1z8HpL47NMYX4YH6WrewdrhxAAAAwFh8cvewIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAvnur7/1ub1UZnUzKbovv9/1PdbXX5BbQwcs+HzzUOAAAAAAAAABiPrz7JkzzIsW69XVS/8z9TVU7k83byf3kv97OUezmfB1nMalZzLxeTzPQMNPVgcXX13sXNPUvD97w0dM9L43rFAAAAAAAAAPBf6Rdpbf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgRFMtFZVcuJep2ZNJrZasta8o8kU4cd7z4UwzY+HH8cAAAA8Eymn2Kf/3+SJ3mQY916u6je83+per88nfdyJ6tZzmpWspTr9Xvo8l1/Y2N9fmVjff52uZT1/nG/9699hTFVjzBR1YYd+VTVo5UbWa62nM+1KpjraXSOfTY51Y2nJ64eH5YxFd+tjRhZs05rebDf7fQpwoHo/yiisUvP1lZwyWZG5urYyj2PdzJQVB/UJIOZGDw72w7W7KvNVF0mN490MY3NT35OHGzOq0iO1pXy9fz6ueZ8FL252MxEI1UmLnVnX3nN7J6J5Ot/+ePbN1fu3Lp54/65w31J+zCxw/bBOTHfk4lXv9CZaO6z/1yViZOb9av5YX6cc5nNm7mX5fwki1nNUtp1+2I9n8t/Z3bP1EJf7c29Ipmqz0vnnI0S02x+UJUWc6ba91iWU+Rurmcpr1f/XcrFfCuXczlXes7wyR3jrl5bddU3Bq/67pn+69Dgz36jLpR3t99s3eUWdnvFO83Og9K595d5Pd6T186sf7zZ63jPdTDXk6WXu9mZHDr40zyPml+uC+UxfrnHc2K8ZupMlBdQ9ynRje6VTiaa1bNo+zz/fbvcLyt32u2bi+/uMP7aQP21el1Oq/Wv7NW7a/ipOFjlfHk50/WdpH92lG2vbN5letraW3O509b/xC33O1m1FUX3Sv1R7lYTYPuVOlX/DLd9pEtV26sDbafre3jZdqqnre/nrdzNSq6PIX8API2/v71ZnMnRqdY/W5+0Pm79qnWz9cb09498+8jpqUz+bfI7zbmJ1xqniz/n4/xs6/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9O6//8GtxZWVpXvDC42dm/oKrQxu2WvkgUJRf6HPsD636m8p2NeAh1yYTtK3pfqeo7GH0RoMY1uh/fNk7Pnpfong8D6/LQvNkU73Qt+WP20f8MO945nIwDwc4bp4joVGxnvQiQyfAId1RwLG5cLq7Xcv3H//g28u3158Z+mdpTuTly9fmbty+fX5CzeWV5bmOv8edpTA87D10D/sSAAAAAAAAAAAAIBRDfvDgDMv7fVHI9sKjSSDf+Ph/ywEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTVc2k+TJGLc+fnyvrG+vxKuXTLWz2bSRqNpPhpUjxKFtJZMtMzXJE/PEp7yHE+Wr7y1qePNz7bGqvZ6Z806vXOdm9NslYvmU0yUa+fQd9413YerzHacMW/u6+hTNjn7XZ74dnig4PxnwAAAP//RNftbQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x46942, 0x0) unshare(0x20000400) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2.068233362s ago: executing program 2 (id=978): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0xffffffffffffffce, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.895408349s ago: executing program 4 (id=979): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480060001008a9500000900010073797a30"], 0x118}}, 0x0) 1.126489782s ago: executing program 2 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000005000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x7, 0x0, &(0x7f0000000a80)="b8000005000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 828.392375ms ago: executing program 2 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}]}, 0x24}}, 0x4000) 152.246464ms ago: executing program 4 (id=982): syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x40000, 0x4000, 0x2, 0x6, 0x2}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda5", 0x2}], 0x1}, 0x41) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=983): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 63.600639][ T5755] cgroup: Unknown subsys name 'net' [ 63.732960][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.106948][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.528476][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.530966][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.547108][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.554745][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.562448][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.571628][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.579806][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.588646][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.595904][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.603931][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.612160][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.628312][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.633438][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.646477][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.652702][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.661518][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.671511][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.681895][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.683639][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.696696][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.697826][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.714822][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.723425][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.736398][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.037538][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.144066][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 67.213370][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.220757][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228618][ T5766] bridge_slave_0: entered allmulticast mode [ 67.235738][ T5766] bridge_slave_0: entered promiscuous mode [ 67.243737][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 67.280542][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.291536][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.298870][ T5766] bridge_slave_1: entered allmulticast mode [ 67.307308][ T5766] bridge_slave_1: entered promiscuous mode [ 67.376507][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.388898][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.398293][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.405540][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.412688][ T5769] bridge_slave_0: entered allmulticast mode [ 67.419603][ T5769] bridge_slave_0: entered promiscuous mode [ 67.432044][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.439299][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.448511][ T5769] bridge_slave_1: entered allmulticast mode [ 67.455217][ T5769] bridge_slave_1: entered promiscuous mode [ 67.487240][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.542463][ T5766] team0: Port device team_slave_0 added [ 67.552210][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.561545][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.569644][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.577780][ T5768] bridge_slave_0: entered allmulticast mode [ 67.584473][ T5768] bridge_slave_0: entered promiscuous mode [ 67.599800][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.607178][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.614641][ T5768] bridge_slave_1: entered allmulticast mode [ 67.621559][ T5768] bridge_slave_1: entered promiscuous mode [ 67.629988][ T5766] team0: Port device team_slave_1 added [ 67.637856][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.695599][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.726942][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.743342][ T5769] team0: Port device team_slave_0 added [ 67.754883][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.763663][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.792995][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.814391][ T5769] team0: Port device team_slave_1 added [ 67.825384][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.832604][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.859551][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.911691][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.919054][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.927229][ T5767] bridge_slave_0: entered allmulticast mode [ 67.934615][ T5767] bridge_slave_0: entered promiscuous mode [ 67.945135][ T5768] team0: Port device team_slave_0 added [ 67.962767][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.970396][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.979052][ T5767] bridge_slave_1: entered allmulticast mode [ 67.986977][ T5767] bridge_slave_1: entered promiscuous mode [ 67.995005][ T5768] team0: Port device team_slave_1 added [ 68.020722][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.028160][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.055358][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.109046][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.116893][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.144006][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.158067][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.165022][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.192170][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.206659][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.220212][ T5766] hsr_slave_0: entered promiscuous mode [ 68.228905][ T5766] hsr_slave_1: entered promiscuous mode [ 68.240770][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.247886][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.273940][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.301131][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.364787][ T5768] hsr_slave_0: entered promiscuous mode [ 68.371542][ T5768] hsr_slave_1: entered promiscuous mode [ 68.377851][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.385943][ T5768] Cannot create hsr debugfs directory [ 68.401958][ T5767] team0: Port device team_slave_0 added [ 68.431680][ T5769] hsr_slave_0: entered promiscuous mode [ 68.438055][ T5769] hsr_slave_1: entered promiscuous mode [ 68.444347][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.452471][ T5769] Cannot create hsr debugfs directory [ 68.460624][ T5767] team0: Port device team_slave_1 added [ 68.510513][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.520014][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.546306][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.563574][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.570672][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.597373][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.696575][ T5780] Bluetooth: hci1: command tx timeout [ 68.748448][ T5767] hsr_slave_0: entered promiscuous mode [ 68.754914][ T5767] hsr_slave_1: entered promiscuous mode [ 68.761125][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.769212][ T5767] Cannot create hsr debugfs directory [ 68.775777][ T5780] Bluetooth: hci2: command tx timeout [ 68.775803][ T5084] Bluetooth: hci0: command tx timeout [ 68.776075][ T5778] Bluetooth: hci3: command tx timeout [ 68.968882][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.990780][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.001854][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.025291][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.107631][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.117350][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.128181][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.146223][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.225092][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.244730][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.262393][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.272620][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.327855][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.368382][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.396699][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.410420][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.434623][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.447771][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.482705][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.490470][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.514585][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.521779][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.635363][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.671743][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.713021][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.733166][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.744018][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.767057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.774296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.787844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.795028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.833106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.840391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.890126][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.904051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.911419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.940583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.947816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.984145][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.003864][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.011821][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.162780][ T5766] veth0_vlan: entered promiscuous mode [ 70.226591][ T5766] veth1_vlan: entered promiscuous mode [ 70.284380][ T5766] veth0_macvtap: entered promiscuous mode [ 70.299681][ T5766] veth1_macvtap: entered promiscuous mode [ 70.364595][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.406339][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.430843][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454337][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.464575][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.473402][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.540209][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.591922][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.647160][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.673575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.690767][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.737350][ T5768] veth0_vlan: entered promiscuous mode [ 70.775957][ T5778] Bluetooth: hci1: command tx timeout [ 70.783552][ T5768] veth1_vlan: entered promiscuous mode [ 70.793859][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.806109][ T5767] veth0_vlan: entered promiscuous mode [ 70.827039][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.856263][ T5778] Bluetooth: hci3: command tx timeout [ 70.856609][ T5084] Bluetooth: hci0: command tx timeout [ 70.868023][ T5780] Bluetooth: hci2: command tx timeout [ 70.890857][ T5768] veth0_macvtap: entered promiscuous mode [ 70.912612][ T5768] veth1_macvtap: entered promiscuous mode [ 70.920766][ T5769] veth0_vlan: entered promiscuous mode [ 70.947277][ T5767] veth1_vlan: entered promiscuous mode [ 70.964900][ T5769] veth1_vlan: entered promiscuous mode [ 70.994398][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.017556][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.030241][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.078563][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.090532][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.095121][ T5828] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.102724][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.147132][ T5767] veth0_macvtap: entered promiscuous mode [ 71.181654][ T5767] veth1_macvtap: entered promiscuous mode [ 71.193849][ T5769] veth0_macvtap: entered promiscuous mode [ 71.213781][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.222769][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.232389][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.243195][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.273068][ T5769] veth1_macvtap: entered promiscuous mode [ 71.311190][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.322084][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.333202][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.343998][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.355099][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.382948][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.399858][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.419944][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.431088][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.442587][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.454684][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.467106][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.482978][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.497601][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.508045][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.519014][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.532467][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.542915][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.559532][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.578094][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.589300][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.599436][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.610107][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.631649][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.658001][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.670138][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.679633][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.688436][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.702580][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722032][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.731228][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.749243][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.749491][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.756039][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.883936][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.911348][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.964839][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.995095][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.052769][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.077543][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.102834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.124695][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.182947][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.194469][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.267732][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.292293][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.309528][ T5773] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.539289][ T5773] usb 1-1: config 6 has an invalid interface number: 56 but max is 0 [ 72.571123][ T5773] usb 1-1: config 6 has no interface number 0 [ 72.584234][ T5847] syzkaller1: entered promiscuous mode [ 72.601244][ T5773] usb 1-1: config 6 interface 56 altsetting 240 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 72.607419][ T5847] syzkaller1: entered allmulticast mode [ 72.627608][ T5773] usb 1-1: config 6 interface 56 altsetting 240 has an invalid endpoint with address 0x80, skipping [ 72.640627][ T5773] usb 1-1: config 6 interface 56 altsetting 240 has a duplicate endpoint with address 0x6, skipping [ 72.672008][ T5773] usb 1-1: config 6 interface 56 has no altsetting 0 [ 72.688849][ T5773] usb 1-1: New USB device found, idVendor=1410, idProduct=7003, bcdDevice=45.d9 [ 72.700590][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.710761][ T5773] usb 1-1: Product: syz [ 72.714964][ T5773] usb 1-1: Manufacturer: syz [ 72.723185][ T5773] usb 1-1: SerialNumber: syz [ 72.740141][ T5842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.855945][ T5084] Bluetooth: hci1: command tx timeout [ 72.885560][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.936142][ T5084] Bluetooth: hci3: command tx timeout [ 72.941659][ T5084] Bluetooth: hci0: command tx timeout [ 72.947280][ T5780] Bluetooth: hci2: command tx timeout [ 72.967440][ T5773] option 1-1:6.56: GSM modem (1-port) converter detected [ 72.988085][ T5773] usb 1-1: USB disconnect, device number 2 [ 73.001807][ T5773] option 1-1:6.56: device disconnected [ 73.076745][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 73.092277][ T5772] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.110895][ T5772] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.122926][ T5772] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.133083][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.141621][ T5772] usb 4-1: Product: syz [ 73.146360][ T5772] usb 4-1: Manufacturer: syz [ 73.151622][ T5772] usb 4-1: SerialNumber: syz [ 73.254026][ T5869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.376671][ T5772] usb 4-1: 0:2 : does not exist [ 73.400080][ T5772] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 73.469873][ T5772] usb 4-1: USB disconnect, device number 2 [ 73.485664][ T5874] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 73.497303][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 73.560185][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.155867][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.356469][ T5834] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 74.366734][ T5834] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 74.384966][ T5834] usb 2-1: config 220 has no interface number 2 [ 74.413548][ T5834] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 74.447201][ T5834] usb 2-1: config 220 interface 0 has no altsetting 0 [ 74.454135][ T5834] usb 2-1: config 220 interface 76 has no altsetting 0 [ 74.466621][ T5834] usb 2-1: config 220 interface 1 has no altsetting 0 [ 74.486716][ T5834] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 74.497361][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.505604][ T5834] usb 2-1: Product: syz [ 74.509927][ T5834] usb 2-1: Manufacturer: syz [ 74.514655][ T5834] usb 2-1: SerialNumber: syz [ 74.639015][ T5892] syz.3.19[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.787124][ T5834] uvcvideo 2-1:220.1: Unknown video format 3605f963-0047-0000-0000-000000000000 [ 74.820697][ T5834] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 74.828450][ T5834] usb 2-1: No valid video chain found. [ 74.871403][ T5834] usb 2-1: selecting invalid altsetting 0 [ 74.899481][ T5834] usb 2-1: selecting invalid altsetting 0 [ 74.925655][ T5834] usbtest: probe of 2-1:220.1 failed with error -22 [ 74.942539][ T5084] Bluetooth: hci1: command tx timeout [ 74.946327][ T5834] usb 2-1: USB disconnect, device number 2 [ 75.016273][ T5084] Bluetooth: hci0: command tx timeout [ 75.021829][ T5780] Bluetooth: hci2: command tx timeout [ 75.027726][ T5780] Bluetooth: hci3: command tx timeout [ 75.205524][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.565893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 75.975561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 76.155522][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 76.162759][ T5854] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.198210][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 76.209607][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.229866][ T5854] usb 3-1: Product: syz [ 76.234061][ T5854] usb 3-1: Manufacturer: syz [ 76.295237][ T5854] usb 3-1: SerialNumber: syz [ 76.445639][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.659596][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.712235][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 76.725770][ T5809] usb 1-1: can't read configurations, error -71 [ 77.596566][ T5854] usb 3-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 77.605079][ T5854] usb 3-1: found format II with max.bitrate = 4, frame size=65533 [ 77.644855][ T5854] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 77.694463][ T5854] usb 3-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 77.718774][ T5854] usb 3-1: found format II with max.bitrate = 4, frame size=65533 [ 77.757549][ T5854] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 77.813597][ T5854] usb 3-1: failed to enable PITCH for EP 0x1 [ 77.855028][ T5854] usb 3-1: unit 8 not found! [ 78.005931][ T5854] usb 3-1: USB disconnect, device number 2 [ 78.149777][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.095552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 81.775727][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.987504][ T28] cfg80211: failed to load regulatory.db [ 82.027626][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.084718][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.115362][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.145503][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.202387][ T8] usb 2-1: config 0 descriptor?? [ 82.885802][ T5809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.939585][ T8] usb 2-1: string descriptor 0 read error: -22 [ 83.185764][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 83.226839][ T8] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5 [ 83.236923][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.316392][ T5809] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 83.399959][ T5809] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 83.448211][ T8] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 83.500462][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.577284][ T8] usb 2-1: USB disconnect, device number 3 [ 83.579023][ T5809] usb 1-1: Product: syz [ 83.597698][ T5809] usb 1-1: Manufacturer: syz [ 83.621882][ T5809] usb 1-1: SerialNumber: syz [ 83.878873][ T5953] fido_id[5953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 83.965760][ T5809] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.033876][ T5809] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.284660][ T5809] usb 1-1: USB disconnect, device number 5 [ 85.252785][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.215484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.301943][ T5966] random: crng reseeded on system resumption [ 86.733782][ T5967] capability: warning: `syz.1.42' uses 32-bit capabilities (legacy support in use) [ 89.059249][ T5980] kvm: kvm [5978]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 89.525638][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.731138][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.761793][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.792765][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.823476][ T8] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 89.845701][ T8] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 89.875663][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 89.945505][ T8] usb 2-1: config 1 interface 1 has no altsetting 0 [ 89.959234][ T8] usb 2-1: string descriptor 0 read error: -22 [ 89.975577][ T8] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 90.687233][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.335462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.837676][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 92.559496][ T8] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 92.685867][ T8] usb 2-1: USB disconnect, device number 4 [ 95.055653][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.726100][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 95.790681][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 95.875816][ T23] usb 4-1: config 220 has no interface number 2 [ 95.882179][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 95.912685][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 95.920081][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 95.927263][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 95.936693][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 95.949676][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.958426][ T23] usb 4-1: Product: syz [ 95.962592][ T23] usb 4-1: Manufacturer: syz [ 95.975535][ T23] usb 4-1: SerialNumber: syz [ 96.228748][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 96.239940][ T23] usb 4-1: No valid video chain found. [ 96.262241][ T23] usb 4-1: selecting invalid altsetting 0 [ 96.291316][ T23] usb 4-1: selecting invalid altsetting 0 [ 96.303607][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 96.346486][ T23] usb 4-1: USB disconnect, device number 3 [ 97.632725][ T6063] loop2: detected capacity change from 0 to 16 [ 98.149992][ T6070] syzkaller1: entered promiscuous mode [ 98.185667][ T6070] syzkaller1: entered allmulticast mode [ 99.561806][ T6063] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.575499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 104.812058][ T6119] kvm: kvm [6118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 106.227178][ T6123] loop3: detected capacity change from 0 to 16 [ 106.238954][ T6123] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.535116][ T6137] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 111.129648][ T6154] loop3: detected capacity change from 0 to 16 [ 111.138226][ T6154] erofs: (device loop3): mounted with root inode @ nid 36. [ 111.148543][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.413596][ T788] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 111.425480][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.455708][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.479396][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 111.517876][ T788] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 111.540190][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.590009][ T788] usb 2-1: config 0 descriptor?? [ 112.008331][ T788] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 6/7 [ 112.052081][ T788] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 112.212129][ T788] usb 2-1: USB disconnect, device number 5 [ 114.375646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.525885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.048545][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.285292][ T28] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.330385][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.345270][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.345610][ T6193] loop1: detected capacity change from 0 to 16 [ 118.355658][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.379787][ T6193] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.463766][ T28] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.505513][ T28] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.513691][ T28] usb 1-1: Manufacturer: syz [ 118.584531][ T28] usb 1-1: config 0 descriptor?? [ 119.049833][ T28] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 119.063241][ T6197] syzkaller1: entered promiscuous mode [ 119.094058][ T28] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 119.106160][ T6197] syzkaller1: entered allmulticast mode [ 119.142123][ T28] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 119.565765][ T28] usb 1-1: USB disconnect, device number 6 [ 121.017473][ T6207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.111'. [ 121.111997][ T6207] netlink: 72 bytes leftover after parsing attributes in process `syz.2.111'. [ 122.055515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 126.765935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 129.245706][ T5834] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.485762][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 129.507403][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.528279][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 129.548696][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.575716][ T5834] usb 2-1: Product: syz [ 129.605779][ T5834] usb 2-1: Manufacturer: syz [ 129.620706][ T5834] usb 2-1: SerialNumber: syz [ 129.970772][ T6258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.726678][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.736269][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.779401][ T5834] usb 2-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 133.868028][ T5834] usb 2-1: found format II with max.bitrate = 4, frame size=65533 [ 133.884673][ T5834] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 133.942349][ T5834] usb 2-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 133.965990][ T5834] usb 2-1: found format II with max.bitrate = 4, frame size=65533 [ 133.991320][ T5834] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 134.025157][ T5834] usb 2-1: failed to enable PITCH for EP 0x1 [ 134.841211][ T5834] usb 2-1: unit 8 not found! [ 135.715663][ T5834] usb 2-1: USB disconnect, device number 6 [ 137.165937][ T6293] loop0: detected capacity change from 0 to 16 [ 137.184637][ T6293] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.687056][ T6302] ip6t_rpfilter: unknown options [ 148.046644][ T6348] bridge0: port 3(syz_tun) entered blocking state [ 148.054135][ T6348] bridge0: port 3(syz_tun) entered disabled state [ 148.093182][ T6348] syz_tun: entered allmulticast mode [ 148.106428][ T6348] syz_tun: entered promiscuous mode [ 148.137176][ T6348] bridge0: port 3(syz_tun) entered blocking state [ 148.144555][ T6348] bridge0: port 3(syz_tun) entered forwarding state [ 153.315508][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.273532][ T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 154.321029][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.365495][ T8] usb 3-1: Product: syz [ 154.387081][ T8] usb 3-1: Manufacturer: syz [ 154.391724][ T8] usb 3-1: SerialNumber: syz [ 155.065745][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:88:14:c8:9f:da [ 155.138333][ T8] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 156.746880][ T5809] usb 3-1: USB disconnect, device number 3 [ 158.553452][ T6411] ======================================================= [ 158.553452][ T6411] WARNING: The mand mount option has been deprecated and [ 158.553452][ T6411] and is ignored by this kernel. Remove the mand [ 158.553452][ T6411] option from the mount to silence this warning. [ 158.553452][ T6411] ======================================================= [ 161.094240][ T6426] kvm: pic: non byte read [ 161.140496][ T6426] kvm: pic: level sensitive irq not supported [ 161.140616][ T6426] kvm: pic: non byte read [ 161.206313][ T6426] kvm: pic: level sensitive irq not supported [ 161.206376][ T6426] kvm: pic: non byte read [ 161.273705][ T6426] kvm: pic: level sensitive irq not supported [ 161.273770][ T6426] kvm: pic: non byte read [ 161.354344][ T6426] kvm: pic: level sensitive irq not supported [ 161.354410][ T6426] kvm: pic: non byte read [ 161.376079][ T6426] kvm: pic: level sensitive irq not supported [ 161.376142][ T6426] kvm: pic: non byte read [ 162.555873][ T6426] kvm: pic: level sensitive irq not supported [ 162.555945][ T6426] kvm: pic: non byte read [ 165.625540][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.898839][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 166.910326][ T23] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 166.928107][ T23] usb 2-1: config 0 has no interface number 0 [ 166.961282][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 166.984784][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.010329][ T23] usb 2-1: Product: syz [ 167.014519][ T23] usb 2-1: Manufacturer: syz [ 167.026173][ T23] usb 2-1: SerialNumber: syz [ 167.057602][ T23] usb 2-1: config 0 descriptor?? [ 167.087518][ T23] smsc95xx v2.0.0 [ 168.935691][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 169.063031][ T23] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 169.077483][ T23] usb 2-1: USB disconnect, device number 7 [ 171.139670][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.459791][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 172.468279][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.544001][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.558263][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 172.567758][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.597636][ T8] usb 4-1: config 0 descriptor?? [ 173.117943][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x3 [ 173.310403][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.400443][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.425636][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.473257][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.505640][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.551413][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.575627][ T8] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 173.626298][ T8] usb 4-1: USB disconnect, device number 4 [ 182.492086][ T6544] ip6t_rpfilter: unknown options [ 186.325894][ T5773] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 186.562658][ T5773] usb 3-1: too many endpoints for config 0 interface 0 altsetting 136: 252, using maximum allowed: 30 [ 186.610896][ T5773] usb 3-1: config 0 interface 0 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 186.685869][ T5773] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.692511][ T5773] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 186.755733][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.826700][ T5773] usb 3-1: config 0 descriptor?? [ 187.396666][ T5773] saitek 0003:06A3:0CCD.0005: unexpected long global item [ 187.404538][ T5773] saitek 0003:06A3:0CCD.0005: parse failed [ 187.442978][ T5773] saitek: probe of 0003:06A3:0CCD.0005 failed with error -22 [ 187.697597][ T5809] usb 3-1: USB disconnect, device number 4 [ 188.389161][ T6579] ip6t_rpfilter: unknown options [ 193.245489][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 193.251645][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 193.256000][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 193.260756][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 194.872300][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.889088][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.434428][ T6619] ip6t_rpfilter: unknown options [ 197.234017][ T6624] loop2: detected capacity change from 0 to 512 [ 197.260664][ T6624] EXT4-fs: Ignoring removed bh option [ 197.335756][ T6624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.353729][ T6624] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 197.392134][ T6624] EXT4-fs (loop2): group descriptors corrupted! [ 201.501465][ T6654] ip6t_rpfilter: unknown options [ 204.965101][ T6685] loop2: detected capacity change from 0 to 512 [ 204.995355][ T6685] EXT4-fs: Ignoring removed bh option [ 205.108479][ T6685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.151598][ T6685] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 205.184534][ T6685] EXT4-fs (loop2): group descriptors corrupted! [ 205.335587][ T5773] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.537168][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 205.548957][ T5773] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 205.557955][ T5773] usb 4-1: config 0 has no interface number 0 [ 205.564043][ T5773] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 205.584449][ T5773] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 205.607892][ T5773] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 205.627226][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.638319][ T5773] usb 4-1: Product: syz [ 205.646974][ T5773] usb 4-1: Manufacturer: syz [ 205.661792][ T5773] usb 4-1: SerialNumber: syz [ 205.703735][ T5773] usb 4-1: config 0 descriptor?? [ 205.722530][ T6687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.730002][ T6687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.000449][ T6687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.039321][ T6687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.293345][ T5773] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 208.510678][ T5773] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.521092][ T5773] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 208.553612][ T5773] asix: probe of 4-1:0.34 failed with error -71 [ 208.616404][ T5773] usb 4-1: USB disconnect, device number 5 [ 210.281117][ T6720] loop3: detected capacity change from 0 to 512 [ 210.316929][ T6720] EXT4-fs: Ignoring removed bh option [ 210.345766][ T6720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.389648][ T6720] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 210.430304][ T6720] EXT4-fs (loop3): group descriptors corrupted! [ 221.379656][ T6785] ip6t_rpfilter: unknown options [ 222.513847][ T6790] loop1: detected capacity change from 0 to 512 [ 222.562246][ T6790] EXT4-fs: Ignoring removed bh option [ 222.656939][ T6790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.714834][ T6790] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 222.769379][ T6790] EXT4-fs (loop1): group descriptors corrupted! [ 226.977831][ T6819] ip6t_rpfilter: unknown options [ 229.104382][ T6834] loop2: detected capacity change from 0 to 512 [ 229.117004][ T6834] EXT4-fs: Ignoring removed bh option [ 229.162716][ T6834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.189582][ T6834] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 229.218187][ T6836] C: renamed from team_slave_0 (while UP) [ 229.224087][ T6834] EXT4-fs (loop2): group descriptors corrupted! [ 229.235116][ T6836] netlink: 'syz.1.280': attribute type 3 has an invalid length. [ 238.806913][ T6907] netlink: 'syz.0.307': attribute type 29 has an invalid length. [ 238.815237][ T6907] netlink: 'syz.0.307': attribute type 29 has an invalid length. [ 238.837655][ T6907] netlink: 'syz.0.307': attribute type 29 has an invalid length. [ 243.822871][ T6941] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.319'. [ 244.214761][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 246.335940][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 246.345187][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 251.775444][ C0] sched: RT throttling activated [ 255.734061][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 256.966043][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.972334][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.448245][ T7104] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 260.481329][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.380'. [ 260.534800][ T7104] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 260.545370][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.380'. [ 260.763108][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 260.821256][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 263.079777][ T7127] loop3: detected capacity change from 0 to 512 [ 263.117457][ T7127] EXT4-fs: Ignoring removed bh option [ 264.383588][ T7127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.438466][ T7127] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 264.482688][ T7127] EXT4-fs (loop3): group descriptors corrupted! [ 266.912860][ T7166] loop3: detected capacity change from 0 to 512 [ 268.166398][ T7166] EXT4-fs: Ignoring removed bh option [ 268.230390][ T7166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.249522][ T7166] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 268.288621][ T7166] EXT4-fs (loop3): group descriptors corrupted! [ 269.303519][ T7185] netlink: 15 bytes leftover after parsing attributes in process `syz.0.401'. [ 278.422356][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.433'. [ 279.444665][ T7269] loop0: detected capacity change from 0 to 16 [ 280.260751][ T7269] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.306540][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 285.315385][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 285.324910][ T7252] netlink: 2 bytes leftover after parsing attributes in process `syz.3.431'. [ 285.335301][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 285.351703][ T7252] netlink: 2 bytes leftover after parsing attributes in process `syz.3.431'. [ 286.594492][ T7325] ip6t_rpfilter: unknown options [ 288.785049][ T7350] ip6t_rpfilter: unknown options [ 289.125666][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 289.168401][ T7358] kvm: kvm [7356]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 289.201090][ T7358] kvm: kvm [7356]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100004199 [ 289.238743][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 289.255115][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 291.494936][ T7378] ip6t_rpfilter: unknown options [ 295.879745][ T7418] Zero length message leads to an empty skb [ 295.897026][ T7418] C: renamed from team_slave_0 (while UP) [ 295.901039][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 295.927556][ T7418] netlink: 'syz.2.490': attribute type 8 has an invalid length. [ 295.952132][ T7418] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 298.311535][ T7438] ip6t_rpfilter: unknown options [ 302.852264][ T7470] ip6t_rpfilter: unknown options [ 302.991897][ T7476] netlink: 830 bytes leftover after parsing attributes in process `syz.1.507'. [ 303.280245][ T7483] netlink: 164 bytes leftover after parsing attributes in process `syz.1.512'. [ 303.318309][ T7483] netlink: 72 bytes leftover after parsing attributes in process `syz.1.512'. [ 304.148458][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 307.908896][ T7503] ip6t_rpfilter: unknown options [ 308.519729][ T7522] netlink: 164 bytes leftover after parsing attributes in process `syz.2.523'. [ 308.574000][ T7522] netlink: 72 bytes leftover after parsing attributes in process `syz.2.523'. [ 308.662647][ T7527] netlink: 64467 bytes leftover after parsing attributes in process `syz.3.527'. [ 310.492411][ T7546] ip6t_rpfilter: unknown options [ 311.435872][ T7560] netlink: 164 bytes leftover after parsing attributes in process `syz.0.539'. [ 311.472379][ T7560] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'. [ 312.676063][ T7582] tap0: tun_chr_ioctl cmd 2147767520 [ 314.074219][ T7595] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 314.086564][ T7595] netlink: 'syz.3.554': attribute type 2 has an invalid length. [ 314.379272][ T7603] netlink: 164 bytes leftover after parsing attributes in process `syz.1.556'. [ 314.421494][ T7603] netlink: 72 bytes leftover after parsing attributes in process `syz.1.556'. [ 314.910895][ T7610] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.561'. [ 317.831220][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.837683][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.646832][ T7638] netlink: 164 bytes leftover after parsing attributes in process `syz.3.571'. [ 318.696647][ T7638] netlink: 72 bytes leftover after parsing attributes in process `syz.3.571'. [ 320.019405][ T7645] netlink: 'syz.2.567': attribute type 29 has an invalid length. [ 320.096190][ T7645] netlink: 'syz.2.567': attribute type 29 has an invalid length. [ 320.105330][ T7644] netlink: 'syz.2.567': attribute type 29 has an invalid length. [ 320.142740][ T7647] netlink: 'syz.2.567': attribute type 29 has an invalid length. [ 323.956197][ T7676] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 323.964379][ T7676] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 324.009028][ T7676] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 326.224155][ T7703] netlink: 72 bytes leftover after parsing attributes in process `syz.3.583'. [ 326.246060][ T7702] netlink: 72 bytes leftover after parsing attributes in process `syz.3.583'. [ 327.316277][ T7712] ip6t_rpfilter: unknown options [ 328.418083][ T7721] pimreg: tun_chr_ioctl cmd 1074812117 [ 330.311492][ T7734] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 331.245971][ T7741] ip6t_rpfilter: unknown options [ 331.982720][ T7745] netlink: 164 bytes leftover after parsing attributes in process `syz.2.608'. [ 332.018662][ T7745] netlink: 72 bytes leftover after parsing attributes in process `syz.2.608'. [ 337.225975][ T7781] netlink: 164 bytes leftover after parsing attributes in process `syz.2.622'. [ 337.266934][ T7781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.622'. [ 339.070689][ T7796] tipc: Can't bind to reserved service type 2 [ 340.529516][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 340.575695][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 340.622179][ T7811] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.631943][ T7811] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.640764][ T7811] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.649816][ T7811] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.672352][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 340.710240][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 342.356742][ T7828] netlink: 164 bytes leftover after parsing attributes in process `syz.3.634'. [ 342.384026][ T7828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.634'. [ 347.626422][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 349.433040][ T7873] unsupported nlmsg_type 40 [ 349.743450][ T7884] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 349.844514][ T7887] netlink: 'syz.3.646': attribute type 3 has an invalid length. [ 351.223042][ T7891] netlink: 164 bytes leftover after parsing attributes in process `syz.1.647'. [ 352.116252][ T7902] ip6t_rpfilter: unknown options [ 356.822893][ T7929] ip6t_rpfilter: unknown options [ 358.936133][ C1] icmp: detected local route for 172.20.20.22 during ICMP sending, src 3.252.8.0 [ 361.538008][ T7957] ip6t_rpfilter: unknown options [ 362.407945][ T7963] netlink: 164 bytes leftover after parsing attributes in process `syz.2.668'. [ 364.707881][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 365.023195][ T7982] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 367.092376][ T7990] syzkaller0: entered promiscuous mode [ 367.098801][ T7990] syzkaller0: entered allmulticast mode [ 368.587492][ T8001] netlink: 164 bytes leftover after parsing attributes in process `syz.2.689'. [ 371.166323][ T8013] gretap1: entered promiscuous mode [ 371.171983][ T8013] batman_adv: batadv0: Adding interface: gretap1 [ 371.229248][ T8013] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 371.290454][ T8013] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 374.072732][ T5809] IPVS: starting estimator thread 0... [ 374.754328][ T8043] ip6t_rpfilter: unknown options [ 375.366733][ T8040] IPVS: using max 36 ests per chain, 86400 per kthread [ 375.678818][ T8047] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 375.927379][ T8047] bond1: (slave gretap1): making interface the new active one [ 376.016608][ T8047] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 376.071377][ T8049] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 376.138158][ T8050] macvlan2: entered promiscuous mode [ 376.148039][ T8050] macvlan2: entered allmulticast mode [ 376.186603][ T8050] bond1: entered promiscuous mode [ 376.215487][ T8050] gretap1: entered promiscuous mode [ 376.245923][ T8050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.253759][ T8050] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.390958][ T8050] bond1: left promiscuous mode [ 376.407148][ T8050] gretap1: left promiscuous mode [ 376.487152][ T8047] syz.2.703 (8047) used greatest stack depth: 19920 bytes left [ 376.800567][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 378.022926][ T79] wlan1: Trigger new scan to find an IBSS to join [ 379.016338][ T8073] ip6t_rpfilter: unknown options [ 379.789243][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.795958][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.378387][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.387573][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.395930][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.432982][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.440695][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 380.448084][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.949236][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 381.232705][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.347704][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.386784][ T8079] bridge_slave_0: entered allmulticast mode [ 381.455300][ T8079] bridge_slave_0: entered promiscuous mode [ 381.506467][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.513713][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.545814][ T8079] bridge_slave_1: entered allmulticast mode [ 381.563750][ T8079] bridge_slave_1: entered promiscuous mode [ 381.648065][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.685307][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.858830][ T8079] team0: Port device team_slave_0 added [ 381.888956][ T8079] team0: Port device team_slave_1 added [ 382.010006][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.018440][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.051906][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.067488][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.078903][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.112660][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.194747][ T8079] hsr_slave_0: entered promiscuous mode [ 382.212209][ T8079] hsr_slave_1: entered promiscuous mode [ 382.232451][ T8079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.245570][ T8079] Cannot create hsr debugfs directory [ 382.535837][ T5780] Bluetooth: hci4: command tx timeout [ 382.547126][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 382.847681][ T8079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.890683][ T8108] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 382.909788][ T8079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.992619][ T8108] syz.0.720 uses obsolete (PF_INET,SOCK_PACKET) [ 383.002780][ T8079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.035729][ T8079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.267382][ T12] wlan1: Trigger new scan to find an IBSS to join [ 383.504364][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.574860][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.631735][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.638906][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.708163][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.715345][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.918437][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.137611][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 385.143692][ T5780] Bluetooth: hci4: command tx timeout [ 385.240537][ T8135] raw_sendmsg: syz.2.727 forgot to set AF_INET. Fix it! [ 385.286859][ T8137] syzkaller0: entered promiscuous mode [ 385.295703][ T8137] syzkaller0: entered allmulticast mode [ 385.458892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.822093][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.914417][ T8148] syzkaller0: entered promiscuous mode [ 385.943444][ T8148] syzkaller0: entered allmulticast mode [ 386.135840][ T8152] tipc: Started in network mode [ 386.145659][ T8152] tipc: Node identity 5e2959544f6c, cluster identity 4711 [ 386.192963][ T8152] tipc: Enabled bearer , priority 0 [ 386.226373][ T8145] tipc: Resetting bearer [ 386.417533][ T8145] tipc: Disabling bearer [ 387.823350][ T5780] Bluetooth: hci4: command tx timeout [ 387.936035][ T8161] syzkaller0: entered promiscuous mode [ 387.964646][ T8161] syzkaller0: entered allmulticast mode [ 388.076394][ T8079] veth0_vlan: entered promiscuous mode [ 388.377144][ T8079] veth1_vlan: entered promiscuous mode [ 388.534105][ T8079] veth0_macvtap: entered promiscuous mode [ 388.590869][ T8079] veth1_macvtap: entered promiscuous mode [ 388.697624][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.752652][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.805659][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.840358][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.895309][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.915713][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.960834][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.008199][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.054791][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.090996][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.126649][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.172293][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.206820][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.235614][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.275526][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.290782][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.311055][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.327973][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.338622][ T8176] warning: `syz.2.739' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 389.364302][ T8079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.383373][ T8079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.402682][ T8079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.422843][ T8079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.716408][ T8183] netlink: 76 bytes leftover after parsing attributes in process `syz.2.740'. [ 389.761440][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.790152][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.853179][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.869139][ T8183] syzkaller0: entered promiscuous mode [ 389.874734][ T8183] syzkaller0: entered allmulticast mode [ 389.894405][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.906481][ T5780] Bluetooth: hci4: command tx timeout [ 391.779159][ T8214] netlink: 'syz.4.753': attribute type 13 has an invalid length. [ 392.216037][ T11] wlan1: Trigger new scan to find an IBSS to join [ 393.822013][ T8239] tipc: Started in network mode [ 393.845952][ T8239] tipc: Node identity , cluster identity 4711 [ 393.852099][ T8239] tipc: Failed to obtain node identity [ 393.896923][ T8239] tipc: Enabling of bearer rejected, failed to enable media [ 396.797784][ T4269] wlan1: Trigger new scan to find an IBSS to join [ 398.956020][ T11] wlan1: Creating new IBSS network, BSSID ca:15:2b:e4:24:b1 [ 404.013500][ T8322] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 404.038229][ T8322] syzkaller0: entered promiscuous mode [ 404.043933][ T8322] syzkaller0: entered allmulticast mode [ 404.058491][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.429103][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 424.600074][ T79] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 425.174482][ T8460] syzkaller0: entered promiscuous mode [ 425.190785][ T8460] syzkaller0: entered allmulticast mode [ 425.323538][ T8439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.938360][ T8474] syzkaller0: entered promiscuous mode [ 427.943899][ T8474] syzkaller0: entered allmulticast mode [ 429.922608][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.940940][ T8510] loop2: detected capacity change from 0 to 1024 [ 433.059295][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.169965][ T5780] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 433.294045][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.622180][ T8527] loop0: detected capacity change from 0 to 512 [ 434.690627][ T8527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.880783][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.170208][ T8542] UBIFS error (pid: 8542): cannot open "(null)", error -22 [ 441.215843][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.234557][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.779695][ T8572] netlink: 164 bytes leftover after parsing attributes in process `syz.4.859'. [ 443.822287][ T8575] netlink: 72 bytes leftover after parsing attributes in process `syz.4.859'. [ 447.318908][ T8600] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 447.484919][ T8600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.642969][ T8604] bond2: (slave veth0_to_bond): making interface the new active one [ 447.676409][ T8604] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 447.800237][ T8605] bond2: entered promiscuous mode [ 447.806794][ T8605] veth0_to_bond: entered promiscuous mode [ 447.831575][ T8605] bond2: entered allmulticast mode [ 447.842166][ T8605] veth0_to_bond: entered allmulticast mode [ 447.905631][ T8600] macvlan2: entered promiscuous mode [ 447.955602][ T8600] macvlan2: entered allmulticast mode [ 447.963152][ T8600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.090211][ T8600] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 455.971027][ T8646] syzkaller0: entered promiscuous mode [ 455.986916][ T8646] syzkaller0: entered allmulticast mode [ 456.547748][ T8657] loop0: detected capacity change from 0 to 1024 [ 461.073455][ T8687] syzkaller0: entered promiscuous mode [ 461.091083][ T8687] syzkaller0: entered allmulticast mode [ 461.723005][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.470870][ T8699] syzkaller0: entered promiscuous mode [ 462.482205][ T8699] syzkaller0: entered allmulticast mode [ 462.664640][ T8701] loop0: detected capacity change from 0 to 64 [ 463.980241][ T8714] loop0: detected capacity change from 0 to 32768 [ 463.992260][ T8714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.901 (8714) [ 465.298203][ T8714] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 465.312458][ T8714] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 465.321678][ T8714] BTRFS info (device loop0): turning on async discard [ 465.328538][ T8714] BTRFS info (device loop0): metadata ratio 0 [ 465.334627][ T8714] BTRFS info (device loop0): setting nodatasum [ 465.341005][ T8714] BTRFS info (device loop0): using free space tree [ 465.514779][ T8714] BTRFS info (device loop0): enabling ssd optimizations [ 467.709178][ T27] audit: type=1800 audit(1778609654.088:2): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.901" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 468.622865][ T5766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.069238][ T8756] syzkaller0: entered promiscuous mode [ 470.074762][ T8756] syzkaller0: entered allmulticast mode [ 471.372028][ T8766] syzkaller0: entered promiscuous mode [ 471.377718][ T8766] syzkaller0: entered allmulticast mode [ 472.794938][ T8777] loop3: detected capacity change from 0 to 8 [ 475.939052][ T8800] syzkaller0: entered promiscuous mode [ 475.954685][ T8800] syzkaller0: entered allmulticast mode [ 476.866328][ T8803] syzkaller0: entered promiscuous mode [ 476.885666][ T8803] syzkaller0: entered allmulticast mode [ 481.966422][ T8834] syzkaller0: entered promiscuous mode [ 481.971967][ T8834] syzkaller0: entered allmulticast mode [ 486.945305][ T8859] syzkaller0: entered promiscuous mode [ 486.996715][ T8859] syzkaller0: entered allmulticast mode [ 487.256764][ T8865] syzkaller0: entered promiscuous mode [ 487.262293][ T8865] syzkaller0: entered allmulticast mode [ 487.799304][ T8871] loop0: detected capacity change from 0 to 256 [ 490.496372][ T8868] syz.3.944 (8868) used greatest stack depth: 17896 bytes left [ 490.835945][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 491.025710][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 491.039000][ T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 491.058560][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.106022][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.152212][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.175555][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.205528][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.236442][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.358560][ T8903] syzkaller0: entered promiscuous mode [ 491.364305][ T8903] syzkaller0: entered allmulticast mode [ 491.471516][ T23] usb 3-1: usb_control_msg returned -32 [ 491.482750][ T23] usbtmc 3-1:16.0: can't read capabilities [ 492.650750][ T8912] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 493.545977][ T5773] usb 3-1: USB disconnect, device number 5 [ 493.572429][ T3530] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.005666][ T5772] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 496.236654][ T5772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 496.957969][ T5772] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 496.967143][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.986553][ T5772] usb 1-1: config 0 descriptor?? [ 496.993232][ T8948] syzkaller0: entered promiscuous mode [ 497.007369][ T8948] syzkaller0: entered allmulticast mode [ 497.021900][ T5772] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 499.857137][ T5772] usb 1-1: USB disconnect, device number 7 [ 500.290872][ T8976] process 'syz.3.974' launched './file1' with NULL argv: empty string added [ 502.271759][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.278556][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.195210][ T9011] loop0: detected capacity change from 0 to 256 [ 505.239240][ T9011] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 505.249809][ T9011] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 505.259965][ T9011] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 505.271706][ T27] audit: type=1800 audit(1778609692.698:3): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.977" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 505.295586][ T7978] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 514.149813][ T5778] Bluetooth: hci4: command 0x0406 tx timeout