last executing test programs: 3.436712922s ago: executing program 0 (id=1003): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0xd, 0x3, 0x0, {0x5, 0x4, 0x1, 0x7, 0xffff, 0x67, 0x7, 0x9, 0x29, 0x1000, @private=0xa010102, @loopback}}}}}}, 0x0) 3.311310104s ago: executing program 0 (id=1006): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x24}}, 0x4000000) 3.153828096s ago: executing program 0 (id=1009): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0xca9a3b, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 2.933805744s ago: executing program 0 (id=1012): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 2.173656672s ago: executing program 2 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x70, r1, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x3c, 0xfe, "816cc3e76ed545febf4dc205e0513bddac655b9e28f609d08276e789dd43681f8f3ccef240d0250313871285a2b50cca3d5933b2e10ec51d"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x2000080) 2.153224988s ago: executing program 2 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d41f2ad44d2df55bedd2a27a04c9683a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f4f685cdfdaf237"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000804) 2.002598126s ago: executing program 0 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003000)={0x1c, r1, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.00038037s ago: executing program 2 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}}, 0x0) 1.727635449s ago: executing program 2 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x8880) 1.608063446s ago: executing program 0 (id=1031): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x498, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x498}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f72030000003078303030303030312c00"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.562007488s ago: executing program 4 (id=1032): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000f80)={0x8, 0x6, 0x10000, 0xfffffffe}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 1.391702811s ago: executing program 3 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r1, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x3c, 0xfe, "816cc3e76ed545febf4dc205e0513bddac655b9e28f609d08276e789dd43681f8f3ccef240d0250313871285a2b50cca3d5933b2e10ec51d"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x2000080) 1.37170466s ago: executing program 2 (id=1034): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a", 0x66}, {&(0x7f0000001240)="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", 0x1d6}], 0x2}, 0x9cdc2384056b48b8) 1.330647327s ago: executing program 4 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 1.284393939s ago: executing program 3 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 1.173492903s ago: executing program 3 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.15809478s ago: executing program 2 (id=1038): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x8, 0x7}}]}}}]}}]}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r3 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x3c) r4 = socket$unix(0x1, 0x5, 0x0) listen(r4, 0x7) r5 = socket$kcm(0xf, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002abd7004fddbdf252c000000080003", @ANYRES32=r7, @ANYBLOB="04006c00220033001014020008021100000008021100000099ac3cc0d33d6f0a206331000100"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r8 = memfd_create(&(0x7f0000000500)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#RD\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\x91\x15\xc2\xf1f\xdfK\xf46\xed\xe4\xfb\xdf\a3F\xccB\x9d\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3c(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x923\xd7\xde\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xcd\x0f\x00\x00\x00\x00\x00\x00\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xad\'\xe5\xbc7\x00\xfax\x8dL\x82\xed\xa0s\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]lbA\xd9\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\x9dj\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb3\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\xb5\xe7\xf3\xf1\x96RPeW\xb9\xe3\x99fq\xb1\b\xc11\\(Ljw\xb8\xe1\xec\xceY\x88\x82>\xb1\xd3\x97\x02\xb8\xc9\xf8\x98F1t\x8e\xbc\x88\x0f\xa5;#\xea\xee*\x03\xf2\b\xfd%\xc9\x14\xc1\xc5\x93\f\xdc]\xd2#mW\xe4\xf7\xc1\x7f\x85s@\xc9\xefdP\xef\x89\xa4\x13R\xb5c\xe3\xac\x88\xcc\xd5Mv\x03\xd4x<\n', 0x7) fcntl$addseals(r8, 0x409, 0x12) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="020b0700", 0x4}, {0x0}], 0x2}, 0x0) write$proc_mixer(r1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYBLOB="44b2f458728b9c3a795a33f17ffd8ba2a3833ec7e3457bc03b9df1460345d8a32aab1db1bbf8c7dc323de5f303e4e3e1c2daf03259bfa893403a7d3bf2e510ffc4458019f9622b3666f4c989e22338660bac6a317c6f0bdcc15776f88debfc7ff03ed2ee628b00998ca2be7dd185068fba06c3e85e2e40fc4a9cd5bc7dc9f954adaf0acbc0bc77693038b787a929cfe0cc04c01384ab364b6ce8f68a3e", @ANYBLOB="b89b48e1edc47ac7e4f064738069c2ff0342121121bf3dd879379c61ed138e71a547fbc9348255e544a340fd52957920718819bc5428bb34890e1c0caae7eb4411f2789bc4230fb2d90cdb2c6e240592b13f070512cd47660becb1fa3d1337569e060a3b9326cd2d4df932f0e3e0784eb65d27c4a79fa163836b4a132cdf2671db975fa7a23d229b1e295595de3221af2b9d233120a8f38b13ade2d5263cbfcaea3143da3a6087b748ab6bce5ea1e6415d95ca8973113710dbc63d", @ANYRES32, @ANYRES64=r5, @ANYRES16], 0x71) dup3(r2, r1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000280)={0x0, 0x50323234, 0x2, @stepwise={0x8, 0x0, 0x6, 0x5, 0x3, 0xfffffffb}}) r9 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r9, &(0x7f0000000900)=[{&(0x7f00000002c0)="c9780c04b7352ad5eec3fbb9f82520cc7d0d674a4212c18d51fc41e0ce64c35bdb84b48cc1e38f78f897c840315de459fab7473a2c7780ce315dfc4b768d038ddb97a770415f8196629bd71629c7fbc3d71238424c25d6dffe15c2ed3a600f003f7d64b46a724a49c4c3457d9f8d54f1e75ed730bce7c45cd0b9f18d346a0fcd44744f47dba91f7fc83687a0edacbcbdb20c739029a1bfaf0a580d50aa41f1fb35cdd7eb98a6", 0xa6}, {&(0x7f0000000000)="c45bde98b0610581c8285352bdf62453fe34e4b28d3627cad3b6fe51a439ec7f0fb66a0683a7c73bfd", 0x29}, {&(0x7f0000000380)="7e33058bab0c96c93e4bbf4576d8773f94b94ed85cb65fc3fd9562cb4dc24d7fb821e6710511bc64a1a15dcaed5fcea9618d1f29a55341bd4eb63db308cf2144b88510537100d5bf0d3c436eb4211e280ae8c5e1f688efe8d14a9504d398cf1e2635778075bd697fd586fabf4438e472fefa229abbadc2ad23762e", 0x7b}, {&(0x7f0000000100)="35f5019a0ca0039a24f2f44d6328116f76f72d4bd09aa78d130e830e28edff63dad19d218f8480ee9689a3b270d6ed29295b256043f058f4f9827f259cdff6f8bccbb17baa26f1b98c34f3f35d0885036574985cbb15b4088e7dfb21bccde858d08b990a96d66e70e3aab94fbb164d542d0db800633df3a0f1d204b88bd8fd16da9a6aa2b82a59bc84166e58d443db734d97c4afaac2d791d1c212ae2e5d5dd9ab8d6614856f49a6defd48de70459e16dc6e6355025d8319bc0bf95d2b25189039061142d1d04e474c844961f2dc85acb2593e415450f3715b85fff1fc293a2240cb14446154367744cf91d9ec", 0xed}, {&(0x7f0000000500)="1a231f50318a41a20592f8a1d0a738bc94a72f613ca7c7c6f0574adaeee1cf596b4847b913de30d7681f71146b33e28534352d544765a4acd467d4c6a3749ddb1f737b24c858fc8df24ebecd875f9ae9e22181462cc0fdbf3f3c9440b3eddc38d98a2f74d685aba6454d18836b569f4e4397d17cb6b5cdfb42bbf57cf0ed2be4a446189c97726e15e1250a3be51eb2246a57d4b4c43a4f2ce23df8db988aeebf0415fa7aa2f7a8be70ef88b9a1990621f0ed2518a19121afc18ea9d60afe174f66dff776", 0xc4}, {&(0x7f0000000600)="98edbaa6685e397c26b6ca1b1f13b56af6a9e5acb80d357d26e1e448023e079e2633e42a66649fa95f28318d44cdff5d893b99d1be377202b161d484621cbd0b953b4265f4a539dc1d44d34505c2369cfd07a633566bbe060666f5354e8be1fa09833f0d888ef7b1f19e23ce580d85de0596755bb4831f5500ae3f1df3353ded9394a5b269cb760d6cf946a8f2a43d15660dc7d5b98dcc977e5be11ca3e0e76ec06d63b3c3640cdb112dda253b14da20cf983a9b7bab7cc5164671e3a2165d43e009c5c91d69ef5106b64267a7201860059f84d77b11d347db8090b718a41c2f49ae6162", 0xe4}, {&(0x7f0000000700)="83ab8ab590a5a094b034f363e2e5c1279c6c958849e12e5599af2cbdb066a4f357e7dbffea8e4c4f3ac743a709627fab8daa336fca7f5c06555bc9ae9d38910a4c57c04b86002d97c3233ca23cffa94012f6f6ece03706a4902e4c4d48ff1c954bad3fc8e909d26563ea928320d53a444fb98ca7284863454f580801045f7b834e400d7738061fda29468dcda1ff", 0x8e}, {&(0x7f00000007c0)="644adc6422a900f73a8b956758debd4195cbc3837e486bb53263267f9e849a3b27901996da7ce5e01bf90568a660c5892c268a43584ba8ad5e17b83da1a43365465a7594391a44b189ef094f07ae8d02fa4b73c52a07bb0a1748de8c6d9207ca707931662f001da552535d525fdaacbc29fd02d6e4d8a2dc6f8642a2168296c75c36ba29672b4b3af6820be74e3b6076e00466050096fb50dc6b213aa054d0d7fc2ef4", 0xa3}, {&(0x7f0000000880)}, {&(0x7f0000000880)="ec4ee2ef8031d0f80107238fbaac323798c28935c280ca506dbbc5", 0x1b}], 0xa) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, 'k'}, @global=@item_012={0x2, 0x1, 0x4, "b314"}]}}, 0x0}, 0x0) 1.03401461s ago: executing program 4 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r1, 0x21, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1041}, 0x20008000) 967.118431ms ago: executing program 3 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003000)={0x1c, r1, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 918.343191ms ago: executing program 1 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000850) 865.03255ms ago: executing program 3 (id=1043): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 835.336481ms ago: executing program 4 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x1, 0x9, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000001000)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 745.292023ms ago: executing program 1 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x8880) 645.149177ms ago: executing program 3 (id=1046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="50000000090601420000000000000000010000030900020073797a31000000000500010007000000280007800c000180080001407f0100010c00148008000140ac1414100c00028008000140"], 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d577c621506}, 0x44) 565.078071ms ago: executing program 1 (id=1047): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 422.7064ms ago: executing program 1 (id=1048): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a", 0x66}, {&(0x7f0000001240)="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", 0x1d6}], 0x2}, 0x9cdc2384056b48b8) 342.530209ms ago: executing program 1 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d41f2ad44d2df55bedd2a27a04c9683a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f4f685cdfdaf237"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000804) 234.991356ms ago: executing program 1 (id=1050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 153.87763ms ago: executing program 4 (id=1051): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x3ff, 0x4, 0x3, 0x10000, 0xd0c7140a}, &(0x7f0000000100)=0x14) 0s ago: executing program 4 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000034002d800a00000001010101010100000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 67.044401][ T5816] cgroup: Unknown subsys name 'net' [ 67.159093][ T5816] cgroup: Unknown subsys name 'cpuset' [ 67.167350][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.494661][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.487197][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.495028][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.504600][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.511996][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.520226][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.529073][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.537588][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.553228][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.566715][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.573701][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.580826][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.584953][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.594124][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.596135][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.604828][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.610318][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.616175][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.623619][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.637695][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.640509][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.652625][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.654494][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.668594][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.675898][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.683813][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.271754][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 71.305241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311654][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353785][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 71.421972][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 71.535886][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 71.598965][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 71.677477][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.685454][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.692669][ T5848] bridge_slave_0: entered allmulticast mode [ 71.700020][ T5848] bridge_slave_0: entered promiscuous mode [ 71.731092][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.738230][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.745393][ T5846] bridge_slave_0: entered allmulticast mode [ 71.752225][ T5846] bridge_slave_0: entered promiscuous mode [ 71.760008][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.767523][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.774930][ T5846] bridge_slave_1: entered allmulticast mode [ 71.782316][ T5846] bridge_slave_1: entered promiscuous mode [ 71.789933][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.797194][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.804359][ T5848] bridge_slave_1: entered allmulticast mode [ 71.811301][ T5848] bridge_slave_1: entered promiscuous mode [ 71.833079][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.840239][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.847984][ T5845] bridge_slave_0: entered allmulticast mode [ 71.854984][ T5845] bridge_slave_0: entered promiscuous mode [ 71.896555][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.903811][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.911162][ T5845] bridge_slave_1: entered allmulticast mode [ 71.918413][ T5845] bridge_slave_1: entered promiscuous mode [ 71.982837][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.994864][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.009243][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.016829][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.024121][ T5847] bridge_slave_0: entered allmulticast mode [ 72.030965][ T5847] bridge_slave_0: entered promiscuous mode [ 72.049987][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.060795][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.078980][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.086303][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.093379][ T5847] bridge_slave_1: entered allmulticast mode [ 72.100418][ T5847] bridge_slave_1: entered promiscuous mode [ 72.109280][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.161228][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.190300][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.197510][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.204837][ T5849] bridge_slave_0: entered allmulticast mode [ 72.211688][ T5849] bridge_slave_0: entered promiscuous mode [ 72.242844][ T5848] team0: Port device team_slave_0 added [ 72.250781][ T5846] team0: Port device team_slave_0 added [ 72.258128][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.268769][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.276086][ T5849] bridge_slave_1: entered allmulticast mode [ 72.283289][ T5849] bridge_slave_1: entered promiscuous mode [ 72.291795][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.312536][ T5848] team0: Port device team_slave_1 added [ 72.319553][ T5846] team0: Port device team_slave_1 added [ 72.336552][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.347126][ T5845] team0: Port device team_slave_0 added [ 72.391767][ T5845] team0: Port device team_slave_1 added [ 72.419457][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.451278][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.458588][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.485226][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.497273][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.504765][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.530979][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.544443][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.555041][ T5847] team0: Port device team_slave_0 added [ 72.574373][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.581323][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.607555][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.619922][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.627099][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.653051][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.675421][ T5847] team0: Port device team_slave_1 added [ 72.681640][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.688895][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.715141][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.726262][ T5830] Bluetooth: hci3: command tx timeout [ 72.726296][ T5834] Bluetooth: hci2: command tx timeout [ 72.735232][ T5831] Bluetooth: hci4: command tx timeout [ 72.737621][ T5839] Bluetooth: hci0: command tx timeout [ 72.742856][ T5830] Bluetooth: hci1: command tx timeout [ 72.782590][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.789675][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.816049][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.831094][ T5849] team0: Port device team_slave_0 added [ 72.866464][ T5849] team0: Port device team_slave_1 added [ 72.872647][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.880047][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.906208][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.951388][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.958504][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.984884][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.012356][ T5848] hsr_slave_0: entered promiscuous mode [ 73.018738][ T5848] hsr_slave_1: entered promiscuous mode [ 73.056040][ T5846] hsr_slave_0: entered promiscuous mode [ 73.062277][ T5846] hsr_slave_1: entered promiscuous mode [ 73.068482][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 73.074313][ T5846] Cannot create hsr debugfs directory [ 73.083047][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.090228][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.116742][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.150559][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.157656][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.183738][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.221119][ T5845] hsr_slave_0: entered promiscuous mode [ 73.227373][ T5845] hsr_slave_1: entered promiscuous mode [ 73.233367][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 73.239531][ T5845] Cannot create hsr debugfs directory [ 73.318729][ T5847] hsr_slave_0: entered promiscuous mode [ 73.325337][ T5847] hsr_slave_1: entered promiscuous mode [ 73.331323][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 73.337082][ T5847] Cannot create hsr debugfs directory [ 73.455565][ T5849] hsr_slave_0: entered promiscuous mode [ 73.461741][ T5849] hsr_slave_1: entered promiscuous mode [ 73.467958][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 73.474007][ T5849] Cannot create hsr debugfs directory [ 73.830781][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.847373][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.865873][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.877331][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.926316][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.946914][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.967663][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.979784][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.045199][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.056271][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.077693][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.090201][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.179607][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.192020][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.203027][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.213352][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.330262][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.344730][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.358172][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.370121][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.384667][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.427473][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477068][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.487837][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.508055][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.515352][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.537473][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.548087][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.555192][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.579851][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.586959][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.610823][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.635173][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.642282][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.667362][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.674502][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.698259][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.705474][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.755875][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.805366][ T5830] Bluetooth: hci2: command tx timeout [ 74.805404][ T5839] Bluetooth: hci1: command tx timeout [ 74.810784][ T5831] Bluetooth: hci4: command tx timeout [ 74.816594][ T5834] Bluetooth: hci0: command tx timeout [ 74.823297][ T52] Bluetooth: hci3: command tx timeout [ 74.851170][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.887423][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.894620][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.918469][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.925605][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.958258][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.011983][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.029125][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.059156][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.066289][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.087027][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.094193][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.120931][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.130326][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.205480][ T5846] veth0_vlan: entered promiscuous mode [ 75.242031][ T5846] veth1_vlan: entered promiscuous mode [ 75.253337][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.296884][ T5847] veth0_vlan: entered promiscuous mode [ 75.315273][ T5845] veth0_vlan: entered promiscuous mode [ 75.340591][ T5846] veth0_macvtap: entered promiscuous mode [ 75.349463][ T5847] veth1_vlan: entered promiscuous mode [ 75.372389][ T5845] veth1_vlan: entered promiscuous mode [ 75.379880][ T5846] veth1_macvtap: entered promiscuous mode [ 75.391101][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.454218][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.462498][ T5847] veth0_macvtap: entered promiscuous mode [ 75.481147][ T5845] veth0_macvtap: entered promiscuous mode [ 75.491501][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.510471][ T5847] veth1_macvtap: entered promiscuous mode [ 75.521657][ T5845] veth1_macvtap: entered promiscuous mode [ 75.529260][ T5848] veth0_vlan: entered promiscuous mode [ 75.542766][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.552951][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.569195][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578814][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.600156][ T5848] veth1_vlan: entered promiscuous mode [ 75.627123][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.649704][ T5849] veth0_vlan: entered promiscuous mode [ 75.677846][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.690918][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.707928][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.751877][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.760897][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.778718][ T5849] veth1_vlan: entered promiscuous mode [ 75.788770][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805156][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.821617][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.840615][ T3729] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.859592][ T5848] veth0_macvtap: entered promiscuous mode [ 75.869700][ T3729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.878718][ T3729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.899601][ T3729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.909764][ T3729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.942063][ T5848] veth1_macvtap: entered promiscuous mode [ 75.970035][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.985936][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.046217][ T5849] veth0_macvtap: entered promiscuous mode [ 76.059984][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.078112][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.093654][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.111688][ T5849] veth1_macvtap: entered promiscuous mode [ 76.114308][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.138278][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.147868][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.155888][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.167293][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.190887][ T3729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.210101][ T3729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.250289][ T3729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.261426][ T3729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272815][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.293736][ T4032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.315330][ T4032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.337328][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.351558][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.410365][ T1100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.420834][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.443020][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463063][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.645033][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.658187][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.724247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.754982][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.790806][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892436][ T52] Bluetooth: hci3: command tx timeout [ 76.893737][ T5839] Bluetooth: hci1: command tx timeout [ 76.898229][ T5830] Bluetooth: hci2: command tx timeout [ 76.908713][ T5831] Bluetooth: hci4: command tx timeout [ 76.913351][ T5834] Bluetooth: hci0: command tx timeout [ 76.948838][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.957289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.968175][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.980765][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.020391][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.363545][ T5946] fuse: Unknown parameter 'user_id00000000000000000000' [ 77.483907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.492466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.501029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.816325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.965284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 78.107934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.215850][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.283034][ T5963] batadv_slave_0: entered promiscuous mode [ 78.475272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.483927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.907923][ T5973] syz_tun: entered allmulticast mode [ 78.918080][ T5973] syz_tun: left allmulticast mode [ 78.964165][ T5834] Bluetooth: hci0: command tx timeout [ 78.964315][ T5831] Bluetooth: hci4: command tx timeout [ 78.969677][ T5839] Bluetooth: hci1: command tx timeout [ 78.975462][ T52] Bluetooth: hci3: command tx timeout [ 78.986074][ T5830] Bluetooth: hci2: command tx timeout [ 79.190067][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.688190][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 79.718219][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 79.801257][ T5993] syzkaller0: entered promiscuous mode [ 79.823963][ T5993] syzkaller0: entered allmulticast mode [ 80.207645][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 80.562678][ T6017] fuse: Unknown parameter 'user_id00000000000000000000' [ 80.854044][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 80.893195][ T6028] geneve2: entered promiscuous mode [ 81.157987][ T6034] syz_tun: entered allmulticast mode [ 81.197125][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 81.307981][ T6034] syz_tun (unregistering): left allmulticast mode [ 81.544506][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 81.590647][ T794] cfg80211: failed to load regulatory.db [ 81.812865][ T6043] netlink: 84 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.127264][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 82.457219][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 82.805964][ T6079] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 82.859386][ T6080] syzkaller0: entered promiscuous mode [ 82.932301][ T6080] syzkaller0: entered allmulticast mode [ 83.158078][ T6085] Zero length message leads to an empty skb [ 83.343167][ T6083] fuse: Unknown parameter 'user_id00000000000000000000' [ 84.664817][ T5923] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.841747][ T5923] usb 3-1: config 64 has an invalid interface number: 146 but max is 0 [ 84.856981][ T5923] usb 3-1: config 64 has no interface number 0 [ 84.863167][ T5923] usb 3-1: config 64 interface 146 has no altsetting 0 [ 84.885942][ T5923] usb 3-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 84.895073][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.903072][ T5923] usb 3-1: Product: syz [ 84.910812][ T5923] usb 3-1: Manufacturer: syz [ 84.917102][ T5923] usb 3-1: SerialNumber: syz [ 84.961461][ T6075] kthread_run failed with err -4 [ 85.242534][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 85.294030][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 85.335497][ T5923] ftdi_sio 3-1:64.146: FTDI USB Serial Device converter detected [ 85.375229][ T5923] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 85.436166][ T5923] usb 3-1: USB disconnect, device number 2 [ 85.470867][ T5923] ftdi_sio 3-1:64.146: device disconnected [ 85.554584][ T6126] warning: `syz.3.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.839061][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 85.893219][ T6138] netlink: 'syz.3.82': attribute type 3 has an invalid length. [ 87.384841][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.554288][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.575299][ T5878] usb 2-1: config 64 has an invalid interface number: 146 but max is 0 [ 87.583643][ T5878] usb 2-1: config 64 has no interface number 0 [ 87.591594][ T5878] usb 2-1: config 64 interface 146 has no altsetting 0 [ 87.603546][ T6177] batadv_slave_0: entered promiscuous mode [ 87.629283][ T5878] usb 2-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 87.643312][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.764950][ T5878] usb 2-1: Product: syz [ 87.806046][ T5878] usb 2-1: Manufacturer: syz [ 87.828125][ T5878] usb 2-1: SerialNumber: syz [ 88.089546][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 88.111424][ T5878] ftdi_sio 2-1:64.146: FTDI USB Serial Device converter detected [ 88.348946][ T5878] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 88.370748][ T5878] usb 2-1: USB disconnect, device number 2 [ 88.377633][ T5878] ftdi_sio 2-1:64.146: device disconnected [ 88.488598][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 89.652999][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.125'. [ 89.662061][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.803646][ T5923] usb 2-1: device descriptor read/64, error -71 [ 90.054679][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.203786][ T5923] usb 2-1: device descriptor read/64, error -71 [ 90.291993][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 90.335785][ T5923] usb usb2-port1: attempt power cycle [ 90.723827][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.769637][ T5923] usb 2-1: device descriptor read/8, error -71 [ 90.945794][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 91.013660][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.073051][ T5923] usb 2-1: device descriptor read/8, error -71 [ 91.204169][ T5923] usb usb2-port1: unable to enumerate USB device [ 91.307425][ T6312] syzkaller0: entered promiscuous mode [ 91.313001][ T6312] syzkaller0: entered allmulticast mode [ 91.470971][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 92.209126][ T6351] syzkaller0: entered promiscuous mode [ 92.223698][ T6351] syzkaller0: entered allmulticast mode [ 92.757490][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 92.787775][ T6377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.064670][ T6387] syzkaller0: entered promiscuous mode [ 93.070187][ T6387] syzkaller0: entered allmulticast mode [ 94.023889][ T6427] syzkaller0: entered promiscuous mode [ 94.036269][ T6427] syzkaller0: entered allmulticast mode [ 94.181139][ T6427] tipc: Started in network mode [ 94.202656][ T6427] tipc: Node identity baeedea3a34b, cluster identity 4711 [ 94.230697][ T6427] tipc: Enabled bearer , priority 0 [ 94.284767][ T6427] tipc: Resetting bearer [ 94.320050][ T6426] tipc: Resetting bearer [ 94.539415][ T6426] tipc: Disabling bearer [ 94.806115][ T6449] syzkaller0: entered promiscuous mode [ 94.811599][ T6449] syzkaller0: entered allmulticast mode [ 94.848500][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 95.013784][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 95.218561][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 95.391749][ T6469] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET) [ 95.415871][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 95.599433][ T6478] syzkaller0: entered promiscuous mode [ 95.633653][ T6478] syzkaller0: entered allmulticast mode [ 95.693549][ T6478] tipc: Started in network mode [ 95.700458][ T6478] tipc: Node identity 0a6bdb5add74, cluster identity 4711 [ 95.715250][ T6478] tipc: Enabled bearer , priority 0 [ 95.735711][ T6478] tipc: Resetting bearer [ 95.769003][ T6477] tipc: Resetting bearer [ 95.874566][ T6477] tipc: Disabling bearer [ 96.019155][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 96.177677][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 96.400548][ T6513] input: syz0 as /devices/virtual/input/input5 [ 96.407153][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 96.419415][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 97.526372][ T6536] fuse: Unknown parameter 'user_id00000000000000000000' [ 97.937514][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 98.121784][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 98.256966][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 98.506305][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 98.593069][ T6572] netlink: 84 bytes leftover after parsing attributes in process `syz.3.274'. [ 98.812320][ T6581] syz_tun: entered allmulticast mode [ 98.835432][ T6581] syz_tun: left allmulticast mode [ 99.616587][ T6613] fuse: Unknown parameter 'user_id00000000000000000000' [ 99.982254][ T6624] lo: entered allmulticast mode [ 100.031872][ T6624] lo: left allmulticast mode [ 100.525775][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 100.755018][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 100.788901][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 101.042600][ T6657] netlink: 72 bytes leftover after parsing attributes in process `syz.0.311'. [ 101.286418][ T6663] input: syz0 as /devices/virtual/input/input6 [ 101.294376][ T6667] netlink: 100 bytes leftover after parsing attributes in process `syz.4.315'. [ 102.490238][ T6688] netlink: 72 bytes leftover after parsing attributes in process `syz.0.324'. [ 102.587822][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.603790][ T6696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.328'. [ 103.252272][ T6720] input: syz0 as /devices/virtual/input/input7 [ 103.617828][ T6726] netlink: 100 bytes leftover after parsing attributes in process `syz.1.340'. [ 104.004774][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 105.656713][ T6783] __nla_validate_parse: 3 callbacks suppressed [ 105.656725][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.364'. [ 105.761976][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.676504][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.382'. [ 106.703450][ T6828] netlink: 100 bytes leftover after parsing attributes in process `syz.0.385'. [ 107.326997][ T6857] syz_tun: entered allmulticast mode [ 107.333063][ T6858] netlink: 100 bytes leftover after parsing attributes in process `syz.2.398'. [ 108.117591][ T6888] netlink: 100 bytes leftover after parsing attributes in process `syz.4.411'. [ 108.898386][ T6915] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.939674][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 108.954302][ T6919] netlink: 100 bytes leftover after parsing attributes in process `syz.3.426'. [ 108.966882][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 108.992883][ T6915] bond1: (slave lo): speed changed to 0 on port 1 [ 109.026446][ T6915] bond1: (slave lo): Enslaving as a backup interface with an up link [ 109.079108][ T6915] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 109.377988][ T6934] fuse: Unknown parameter 'user_id00000000000000000000' [ 109.741934][ T6953] process 'syz.4.437' launched './file0' with NULL argv: empty string added [ 111.076992][ T6986] tipc: Enabling of bearer rejected, failed to enable media [ 112.317144][ T7039] netlink: 'syz.0.479': attribute type 4 has an invalid length. [ 112.567850][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 112.640306][ T7054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.488'. [ 112.708901][ T7054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.488'. [ 112.758220][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.356269][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 113.365458][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 114.061203][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 114.208089][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.373689][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 114.381507][ T5937] usb 5-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 114.422483][ T5937] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.434567][ T5937] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 114.453706][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.471950][ T5937] usb 5-1: Product: syz [ 114.476470][ T5937] usb 5-1: Manufacturer: syz [ 114.481068][ T5937] usb 5-1: SerialNumber: syz [ 114.513519][ T5937] usb 5-1: config 0 descriptor?? [ 114.779231][ T5937] usb 5-1: USB disconnect, device number 2 [ 115.261541][ T7149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.529'. [ 115.275259][ T7150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.709031][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 115.720041][ T7171] netlink: 56 bytes leftover after parsing attributes in process `syz.3.541'. [ 115.890473][ T7184] openvswitch: netlink: Unknown key attributes 2 [ 116.326760][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 117.581389][ T7258] __nla_validate_parse: 5 callbacks suppressed [ 117.581405][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 118.419169][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 118.648021][ T7297] tipc: Started in network mode [ 118.652894][ T7297] tipc: Node identity 82ac3e6a7ff8, cluster identity 4711 [ 118.695267][ T7297] tipc: Enabled bearer , priority 0 [ 118.720455][ T7301] tipc: Started in network mode [ 118.726160][ T7301] tipc: Node identity 1a536b724ec4, cluster identity 4711 [ 118.733487][ T7301] tipc: Enabled bearer , priority 0 [ 118.741376][ T7303] syzkaller0: entered promiscuous mode [ 118.751344][ T7303] syzkaller0: entered allmulticast mode [ 118.769303][ T7301] tipc: Resetting bearer [ 118.888876][ T7297] tipc: Resetting bearer [ 118.910977][ T7295] tipc: Resetting bearer [ 118.936895][ T7295] tipc: Disabling bearer [ 118.954530][ T7299] tipc: Disabling bearer [ 120.513086][ T7354] lo: entered allmulticast mode [ 120.863839][ T7365] fuse: Unknown parameter 'user_id00000000000000000000' [ 121.763243][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.770674][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.096574][ T7397] bridge_slave_0: left allmulticast mode [ 122.107135][ T7397] bridge_slave_0: left promiscuous mode [ 122.113284][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.130552][ T7397] bridge_slave_1: left allmulticast mode [ 122.136979][ T7397] bridge_slave_1: left promiscuous mode [ 122.144055][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.186185][ T7397] bond0: (slave bond_slave_0): Releasing backup interface [ 122.210789][ T7397] bond0: (slave bond_slave_1): Releasing backup interface [ 122.227237][ T7397] team0: Port device team_slave_0 removed [ 122.239470][ T7397] team0: Port device team_slave_1 removed [ 122.249357][ T7397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.279208][ T7397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.291830][ T7397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.309400][ T7397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.734898][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.654'. [ 122.879591][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.657'. [ 123.150725][ T7451] tipc: Enabled bearer , priority 0 [ 123.208750][ T7451] syzkaller0: entered promiscuous mode [ 123.225272][ T7451] syzkaller0: entered allmulticast mode [ 123.273788][ T7455] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.385393][ T7457] tipc: Resetting bearer [ 123.571884][ T7450] tipc: Resetting bearer [ 123.752277][ T7450] tipc: Disabling bearer [ 123.775854][ T7467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 124.553475][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.684'. [ 125.778942][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'. [ 126.161993][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'. [ 126.307069][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 126.419012][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 126.737981][ T7583] tipc: Enabling of bearer rejected, failed to enable media [ 126.799348][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.728'. [ 127.160938][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 127.825745][ T7637] fuse: Unknown parameter 'user_id00000000000000000000' [ 128.092460][ T7648] __nla_validate_parse: 2 callbacks suppressed [ 128.092477][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 128.213834][ T7652] netlink: 148 bytes leftover after parsing attributes in process `syz.0.760'. [ 128.275056][ T7653] syzkaller0: entered promiscuous mode [ 128.294566][ T7653] syzkaller0: entered allmulticast mode [ 128.802051][ T7678] netlink: 148 bytes leftover after parsing attributes in process `syz.3.772'. [ 128.975245][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 129.028381][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 129.364090][ T7717] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 129.462309][ T7717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.535350][ T7720] bond2: (slave geneve2): making interface the new active one [ 129.637691][ T7720] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 130.116054][ T7732] fuse: Bad value for 'user_id' [ 130.120988][ T7732] fuse: Bad value for 'user_id' [ 130.128269][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 130.445126][ T7737] tipc: Started in network mode [ 130.452728][ T7737] tipc: Node identity 3aa59ea7321b, cluster identity 4711 [ 130.459975][ T7737] tipc: Enabled bearer , priority 0 [ 130.480587][ T7737] syzkaller0: entered promiscuous mode [ 130.496365][ T7737] syzkaller0: entered allmulticast mode [ 130.531938][ T7737] tipc: Resetting bearer [ 130.575986][ T7736] tipc: Resetting bearer [ 130.594606][ T7736] tipc: Disabling bearer [ 130.945614][ T7758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.807'. [ 130.966318][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 131.600546][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 131.741183][ T7793] netlink: 72 bytes leftover after parsing attributes in process `syz.0.824'. [ 132.265322][ T7813] tipc: Enabled bearer , priority 0 [ 132.276069][ T7813] syzkaller0: entered promiscuous mode [ 132.281553][ T7813] syzkaller0: entered allmulticast mode [ 132.337465][ T7813] tipc: Resetting bearer [ 132.394875][ T7812] tipc: Resetting bearer [ 132.412479][ T7812] tipc: Disabling bearer [ 132.728041][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.735620][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.605308][ T7862] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 133.969651][ T7884] __nla_validate_parse: 3 callbacks suppressed [ 133.969669][ T7884] netlink: 72 bytes leftover after parsing attributes in process `syz.1.867'. [ 134.434121][ T7896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.872'. [ 134.652827][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 134.838644][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 135.161268][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 135.515745][ T7943] tipc: Enabled bearer , priority 0 [ 135.520660][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 135.558175][ T7943] syzkaller0: entered promiscuous mode [ 135.602895][ T7943] syzkaller0: entered allmulticast mode [ 135.677354][ T7942] tipc: Resetting bearer [ 135.727047][ T7942] tipc: Disabling bearer [ 136.297832][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 136.756443][ T7982] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 136.865356][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.917'. [ 137.019437][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.922'. [ 137.418242][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 137.553793][ T5918] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.713678][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 137.725015][ T5918] usb 2-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 137.752298][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 137.775274][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 137.787519][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.805833][ T5918] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 137.836337][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.849852][ T5918] usb 2-1: Product: syz [ 137.857702][ T5918] usb 2-1: Manufacturer: syz [ 137.869683][ T5918] usb 2-1: SerialNumber: syz [ 137.884122][ T5918] usb 2-1: config 0 descriptor?? [ 137.900013][ T8015] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.934222][ T8040] syzkaller0: entered promiscuous mode [ 137.950371][ T8040] syzkaller0: entered allmulticast mode [ 137.986638][ T8040] 0: reclassify loop, rule prio 0, protocol 800 [ 138.158001][ T5918] usb 2-1: USB disconnect, device number 7 [ 138.402622][ T8070] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 138.533658][ T794] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 138.635120][ T8085] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 138.662782][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.704337][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.718398][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 138.748642][ T8085] bond1: (slave gretap1): making interface the new active one [ 138.756272][ T794] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 138.765727][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.776309][ T8085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.787964][ T794] usb 1-1: config 0 descriptor?? [ 138.812285][ T8064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.046779][ T8064] __nla_validate_parse: 7 callbacks suppressed [ 139.046795][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.950'. [ 139.275225][ T794] holtek_mouse 0003:04D9:A070.0001: unbalanced collection at end of report description [ 139.286604][ T794] holtek_mouse 0003:04D9:A070.0001: hid parse failed: -22 [ 139.294636][ T794] holtek_mouse 0003:04D9:A070.0001: probe with driver holtek_mouse failed with error -22 [ 139.515374][ T794] usb 1-1: USB disconnect, device number 2 [ 139.669185][ T8125] fuse: Unknown parameter 'user_id00000000000000000000' [ 139.980434][ T8137] tipc: Enabled bearer , priority 0 [ 139.991486][ T8137] tipc: Resetting bearer [ 140.001571][ T8135] tipc: Disabling bearer [ 140.187552][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 140.418700][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 140.518376][ T8163] tipc: Enabled bearer , priority 0 [ 140.533282][ T8163] tipc: Resetting bearer [ 140.544250][ T8162] tipc: Disabling bearer [ 140.764177][ T5918] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 140.863174][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 140.884985][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 140.930927][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.951198][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 140.969534][ T5918] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 140.986551][ T8187] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 140.994446][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.014018][ T5918] usb 4-1: config 0 descriptor?? [ 141.031414][ T8165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.137784][ T8192] fuse: Unknown parameter 'user_id00000000000000000000' [ 141.193513][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 141.394809][ T8202] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1015'. [ 141.511775][ T5918] holtek_mouse 0003:04D9:A070.0002: unbalanced collection at end of report description [ 141.545892][ T5918] holtek_mouse 0003:04D9:A070.0002: hid parse failed: -22 [ 141.553314][ T5918] holtek_mouse 0003:04D9:A070.0002: probe with driver holtek_mouse failed with error -22 [ 141.722442][ T794] usb 4-1: USB disconnect, device number 2 [ 142.288307][ T8232] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1028'. [ 143.003313][ T8251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.054384][ T8253] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1039'. [ 143.341833][ T8265] fuse: Unknown parameter 'user_id00000000000000000000' [ 143.376787][ T794] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 143.510907][ T8271] 0: reclassify loop, rule prio 0, protocol 700 [ 143.597205][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.616594][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.627774][ T794] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 143.636960][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.646706][ T794] usb 3-1: config 0 descriptor?? [ 143.652176][ T8256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.086342][ T794] holtek_mouse 0003:04D9:A070.0003: unbalanced collection at end of report description [ 144.117227][ T8282] ------------[ cut here ]------------ [ 144.122874][ T8282] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#1: syz.1.1050/8282 [ 144.133344][ T8282] Modules linked in: [ 144.137359][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) [ 144.146643][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.156785][ T8282] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 144.162924][ T8282] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 6d f1 f6 90 0f 0b 90 eb e1 e8 37 6d f1 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 144.183110][ T8282] RSP: 0018:ffffc900030e6f40 EFLAGS: 00010283 [ 144.189290][ T8282] RAX: ffffffff8acf8b79 RBX: ffff88802f354000 RCX: 0000000000080000 [ 144.197285][ T8282] RDX: ffffc90004b72000 RSI: 000000000000034e RDI: 000000000000034f [ 144.205269][ T8282] RBP: 0000000000000000 R08: ffffffff8acf8693 R09: ffffffff8df41aa0 [ 144.213225][ T8282] R10: dffffc0000000000 R11: ffffed1005e6a831 R12: 1ffff11005e6a80a [ 144.221211][ T8282] R13: ffff888022788e80 R14: 0000000000000001 R15: ffffffff8acf8693 [ 144.229185][ T8282] FS: 0000000000000000(0000) GS:ffff888125f1f000(0063) knlGS:00000000f54edb40 [ 144.238129][ T8282] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 144.245907][ T8282] CR2: 0000000080001080 CR3: 0000000076f50000 CR4: 00000000003526f0 [ 144.254547][ T8282] Call Trace: [ 144.257836][ T8282] [ 144.260773][ T8282] rate_control_rate_init_all_links+0x109/0x1a0 [ 144.267044][ T8282] sta_apply_auth_flags+0x1c2/0x400 [ 144.272249][ T8282] sta_apply_parameters+0xe27/0x1570 [ 144.277609][ T8282] ieee80211_add_station+0x424/0x6a0 [ 144.282889][ T8282] rdev_add_station+0xfc/0x270 [ 144.287679][ T8282] nl80211_new_station+0x1755/0x1b70 [ 144.292961][ T8282] ? __pfx_nl80211_new_station+0x10/0x10 [ 144.298613][ T8282] ? netdev_run_todo+0xe1b/0xea0 [ 144.303552][ T8282] ? nl80211_pre_doit+0x4f1/0x930 [ 144.308637][ T8282] genl_family_rcv_msg_doit+0x215/0x300 [ 144.314205][ T8282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 144.320263][ T8282] ? bpf_lsm_capable+0x9/0x20 [ 144.325090][ T8282] ? security_capable+0x7e/0x2e0 [ 144.330019][ T8282] genl_rcv_msg+0x60e/0x790 [ 144.334597][ T8282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.339604][ T8282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 144.344994][ T8282] ? __pfx_nl80211_new_station+0x10/0x10 [ 144.350612][ T8282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 144.356078][ T8282] ? __asan_memcpy+0x40/0x70 [ 144.360655][ T8282] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.366047][ T8282] ? __skb_clone+0x63/0x7a0 [ 144.370539][ T8282] netlink_rcv_skb+0x208/0x470 [ 144.375310][ T8282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.380317][ T8282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.385615][ T8282] ? genl_rcv+0x19/0x40 [ 144.389764][ T8282] ? down_read+0x274/0x2e0 [ 144.394192][ T8282] ? genl_rcv+0xd/0x40 [ 144.398245][ T8282] genl_rcv+0x28/0x40 [ 144.402216][ T8282] netlink_unicast+0x82f/0x9e0 [ 144.407148][ T8282] ? __pfx_netlink_unicast+0x10/0x10 [ 144.412417][ T8282] ? __alloc_skb+0x198/0x3a0 [ 144.417022][ T8282] ? netlink_sendmsg+0x642/0xb30 [ 144.421942][ T8282] ? skb_put+0x11b/0x210 [ 144.426211][ T8282] netlink_sendmsg+0x805/0xb30 [ 144.430964][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.436269][ T8282] ? __import_iovec+0x5d4/0x7f0 [ 144.441104][ T8282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 144.446092][ T8282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.451389][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.456685][ T8282] __sock_sendmsg+0x21c/0x270 [ 144.461351][ T8282] ____sys_sendmsg+0x505/0x820 [ 144.466150][ T8282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.471440][ T8282] ? __pfx_futex_wake_mark+0x10/0x10 [ 144.476733][ T8282] ___sys_sendmsg+0x21f/0x2a0 [ 144.481404][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.486676][ T8282] ? futex_wait+0x285/0x360 [ 144.491181][ T8282] ? __fget_files+0x2a/0x420 [ 144.495775][ T8282] ? __fget_files+0x3a0/0x420 [ 144.500441][ T8282] __sys_sendmsg+0x164/0x220 [ 144.505053][ T8282] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.510154][ T8282] ? rcu_is_watching+0x15/0xb0 [ 144.514942][ T8282] __do_fast_syscall_32+0x1dc/0x570 [ 144.520129][ T8282] ? lockdep_hardirqs_on+0x7b/0x110 [ 144.525333][ T8282] ? do_fast_syscall_32+0x34/0x80 [ 144.530349][ T8282] ? irqentry_exit+0x10f/0x670 [ 144.535181][ T8282] do_fast_syscall_32+0x34/0x80 [ 144.540035][ T8282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.546380][ T8282] RIP: 0023:0xf70fd539 [ 144.550441][ T8282] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.570064][ T8282] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 144.578516][ T8282] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 144.582715][ T794] holtek_mouse 0003:04D9:A070.0003: hid parse failed: -22 [ 144.586521][ T8282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.586559][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.586571][ T8282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.617663][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.625708][ T8282] [ 144.628731][ T8282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.636009][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) [ 144.645291][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.655340][ T8282] Call Trace: [ 144.658605][ T8282] [ 144.661519][ T8282] vpanic+0x1e0/0x670 [ 144.665498][ T8282] panic+0xb9/0xc0 [ 144.669210][ T8282] ? __pfx_panic+0x10/0x10 [ 144.673630][ T8282] __warn+0x317/0x4b0 [ 144.677596][ T8282] ? rate_control_rate_init+0x64a/0x6e0 [ 144.683127][ T8282] ? rate_control_rate_init+0x64a/0x6e0 [ 144.688656][ T8282] __report_bug+0x288/0x500 [ 144.693142][ T8282] ? lockdep_hardirqs_on+0x7b/0x110 [ 144.698323][ T8282] ? rate_control_rate_init+0x64a/0x6e0 [ 144.703854][ T8282] ? __pfx___report_bug+0x10/0x10 [ 144.708862][ T8282] ? __lock_acquire+0x6b6/0x2cf0 [ 144.713787][ T8282] ? __lock_acquire+0x6b6/0x2cf0 [ 144.718715][ T8282] ? rate_control_rate_init+0x64a/0x6e0 [ 144.724251][ T8282] report_bug+0x16a/0x220 [ 144.728566][ T8282] ? rate_control_rate_init+0x64a/0x6e0 [ 144.734098][ T8282] ? rate_control_rate_init+0x64c/0x6e0 [ 144.739638][ T8282] handle_bug+0x98/0x200 [ 144.743873][ T8282] exc_invalid_op+0x1a/0x50 [ 144.748367][ T8282] asm_exc_invalid_op+0x1a/0x20 [ 144.753199][ T8282] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 144.759339][ T8282] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 6d f1 f6 90 0f 0b 90 eb e1 e8 37 6d f1 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 144.778927][ T8282] RSP: 0018:ffffc900030e6f40 EFLAGS: 00010283 [ 144.784984][ T8282] RAX: ffffffff8acf8b79 RBX: ffff88802f354000 RCX: 0000000000080000 [ 144.792940][ T8282] RDX: ffffc90004b72000 RSI: 000000000000034e RDI: 000000000000034f [ 144.800895][ T8282] RBP: 0000000000000000 R08: ffffffff8acf8693 R09: ffffffff8df41aa0 [ 144.808849][ T8282] R10: dffffc0000000000 R11: ffffed1005e6a831 R12: 1ffff11005e6a80a [ 144.816804][ T8282] R13: ffff888022788e80 R14: 0000000000000001 R15: ffffffff8acf8693 [ 144.824758][ T8282] ? rate_control_rate_init+0x163/0x6e0 [ 144.830296][ T8282] ? rate_control_rate_init+0x163/0x6e0 [ 144.835833][ T8282] ? rate_control_rate_init+0x649/0x6e0 [ 144.841374][ T8282] rate_control_rate_init_all_links+0x109/0x1a0 [ 144.847602][ T8282] sta_apply_auth_flags+0x1c2/0x400 [ 144.852791][ T8282] sta_apply_parameters+0xe27/0x1570 [ 144.858070][ T8282] ieee80211_add_station+0x424/0x6a0 [ 144.863350][ T8282] rdev_add_station+0xfc/0x270 [ 144.868108][ T8282] nl80211_new_station+0x1755/0x1b70 [ 144.873392][ T8282] ? __pfx_nl80211_new_station+0x10/0x10 [ 144.879010][ T8282] ? netdev_run_todo+0xe1b/0xea0 [ 144.883969][ T8282] ? nl80211_pre_doit+0x4f1/0x930 [ 144.889001][ T8282] genl_family_rcv_msg_doit+0x215/0x300 [ 144.894540][ T8282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 144.900600][ T8282] ? bpf_lsm_capable+0x9/0x20 [ 144.905265][ T8282] ? security_capable+0x7e/0x2e0 [ 144.910196][ T8282] genl_rcv_msg+0x60e/0x790 [ 144.914689][ T8282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.919693][ T8282] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 144.925051][ T8282] ? __pfx_nl80211_new_station+0x10/0x10 [ 144.930668][ T8282] ? __pfx_nl80211_post_doit+0x10/0x10 [ 144.936117][ T8282] ? __asan_memcpy+0x40/0x70 [ 144.940699][ T8282] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.946054][ T8282] ? __skb_clone+0x63/0x7a0 [ 144.950550][ T8282] netlink_rcv_skb+0x208/0x470 [ 144.955302][ T8282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.960313][ T8282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.965580][ T8282] ? genl_rcv+0x19/0x40 [ 144.969730][ T8282] ? down_read+0x274/0x2e0 [ 144.974133][ T8282] ? genl_rcv+0xd/0x40 [ 144.978185][ T8282] genl_rcv+0x28/0x40 [ 144.982154][ T8282] netlink_unicast+0x82f/0x9e0 [ 144.986912][ T8282] ? __pfx_netlink_unicast+0x10/0x10 [ 144.992181][ T8282] ? __alloc_skb+0x198/0x3a0 [ 144.996760][ T8282] ? netlink_sendmsg+0x642/0xb30 [ 145.001705][ T8282] ? skb_put+0x11b/0x210 [ 145.005937][ T8282] netlink_sendmsg+0x805/0xb30 [ 145.010693][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.015966][ T8282] ? __import_iovec+0x5d4/0x7f0 [ 145.020802][ T8282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.025729][ T8282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.030996][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.036272][ T8282] __sock_sendmsg+0x21c/0x270 [ 145.040953][ T8282] ____sys_sendmsg+0x505/0x820 [ 145.045710][ T8282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.050988][ T8282] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.056266][ T8282] ___sys_sendmsg+0x21f/0x2a0 [ 145.060929][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.066118][ T8282] ? futex_wait+0x285/0x360 [ 145.070628][ T8282] ? __fget_files+0x2a/0x420 [ 145.075208][ T8282] ? __fget_files+0x3a0/0x420 [ 145.079876][ T8282] __sys_sendmsg+0x164/0x220 [ 145.084456][ T8282] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.089561][ T8282] ? rcu_is_watching+0x15/0xb0 [ 145.094318][ T8282] __do_fast_syscall_32+0x1dc/0x570 [ 145.099500][ T8282] ? lockdep_hardirqs_on+0x7b/0x110 [ 145.104685][ T8282] ? do_fast_syscall_32+0x34/0x80 [ 145.109695][ T8282] ? irqentry_exit+0x10f/0x670 [ 145.114442][ T8282] do_fast_syscall_32+0x34/0x80 [ 145.119280][ T8282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.125590][ T8282] RIP: 0023:0xf70fd539 [ 145.129645][ T8282] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.149233][ T8282] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 145.157634][ T8282] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 145.165589][ T8282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.173542][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.181495][ T8282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.189452][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.197419][ T8282] [ 145.200739][ T8282] Kernel Offset: disabled [ 145.205042][ T8282] Rebooting in 86400 seconds..