last executing test programs: 9.657168025s ago: executing program 4 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f00000003c0)="9c74dfbf775728", 0x7}], 0x2) 6.950210735s ago: executing program 3 (id=3405): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x50, r1, 0x701, 0x70bd2b, 0x0, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 4.069266665s ago: executing program 3 (id=3413): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) 4.063838435s ago: executing program 4 (id=3414): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.009118151s ago: executing program 4 (id=3418): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}], 0x484, 0x24048084) 2.966603421s ago: executing program 3 (id=3419): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) preadv(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) read(r5, &(0x7f0000000400)=""/211, 0xd3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, &(0x7f0000000040)) 2.965429881s ago: executing program 0 (id=3420): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) r2 = socket(0x11, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000080)={0xd800001b}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r7 = dup3(r2, r4, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000300)={0x200f}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 2.893075651s ago: executing program 2 (id=3421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_sample={0x60, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "3f81bd469ecd55c3d0c66f931a90cf8a9a6c6e924d22e41113bf61112e1bef5ef9e1150463043691922858f554"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x91}, 0x2000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.70603098s ago: executing program 1 (id=3423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x8000) 2.68194304s ago: executing program 2 (id=3424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/176, 0xb0}], 0x1}, 0x2000) 2.445231359s ago: executing program 1 (id=3425): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) 2.413298769s ago: executing program 4 (id=3426): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000600fd00000000001400550084"], 0x58}}, 0x0) 2.288714468s ago: executing program 1 (id=3427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x0) 2.156317648s ago: executing program 4 (id=3428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.984911258s ago: executing program 1 (id=3429): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto$ax25(r3, &(0x7f0000000080)="f40c9aa499bdaa97a384d5760667be42f54bcb", 0x13, 0x80, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/189, 0xbd}], 0x3}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x148, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0xffffff80], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e21, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x3e}}, @common=@unspec=@cpu={{0x28}, {0xe73}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x7, 0x800}}}, {{@ipv6={@remote, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) close(r4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, &(0x7f0000000080)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e400000005000000010000d1a196b5874bc7a8000e0000000000000b04000000000000000400000d00000000080000000500000001000000050000000d00000003000000070000000000000006000000000000020000000010000000000000100c000000560000000000001004000000020000000000000b0400000002000000070000931c0000000300000000000000060000000700000006000000080000000800000003000000060000001000000005000000060000000c000000080000000400000003000000fcffffff080000000400000081000000ed00000006000000000000010000000016001403002e003000"], &(0x7f0000000280)=""/185, 0x101, 0xb9, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000005000000010100000001000080040000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r9, @ANYRES8=r6, @ANYRES32=r5], 0x50) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 1.957863777s ago: executing program 0 (id=3430): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x40}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0xc0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 1.716866726s ago: executing program 0 (id=3431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.716432366s ago: executing program 2 (id=3432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0x7}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.405259145s ago: executing program 4 (id=3433): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1000000, 0x1, 0x3, "4a37f6c000190056400000000020000000000000000000000100000000f300", 0x38303553}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000020000000500000003000000730000000000000001000000080000000000000000000000000000000a000000020000000600000004000000040000000600000007000000000000000300000000000000000000000600000002000000889700000600000005000000e34ccd2b00000000000000000000000000000080feffffff040000000200000005000000060000000a000000000000000000000000000000010000c0b708000004000000040000000000080001800000080000000000000000000000000000000100000000802200000000000800000000000000f7ffffff"]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000)) 584.757652ms ago: executing program 0 (id=3434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xd}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_sample={0x60, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "3f81bd469ecd55c3d0c66f931a90cf8a9a6c6e924d22e41113bf61112e1bef5ef9e1150463043691922858f554"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x91}, 0x2000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 524.514952ms ago: executing program 2 (id=3435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x28, 0x0, 0x6a98047402e98331, 0x0, 0x80000, {0x15}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x4880) 523.958172ms ago: executing program 3 (id=3436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x8000) 473.157652ms ago: executing program 1 (id=3437): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}], 0x1, 0x1005) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) 422.695762ms ago: executing program 2 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x5c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xd, 0x84, 0x3}}, @cf={0x4, 0x6, {0x3, 0xff, 0x5, 0x6}}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0xb6, 0xfb, @broadcast, 0x4, 0x1, 0xa0d}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}}, 0x0) 421.913362ms ago: executing program 0 (id=3439): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000600fd00000000001400550084"], 0x58}}, 0x0) 317.637941ms ago: executing program 2 (id=3440): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) r2 = socket(0x11, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000080)={0xd800001b}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r7 = dup3(r2, r4, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000300)={0x200f}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 205.067851ms ago: executing program 1 (id=3441): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 204.683161ms ago: executing program 3 (id=3442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 150.291791ms ago: executing program 0 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=3444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): [T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.533238][T11680] device bridge_slave_0 entered promiscuous mode [ 687.611915][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.627391][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.639194][T11680] device bridge_slave_1 entered promiscuous mode [ 687.705188][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.731780][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.898841][T11680] team0: Port device team_slave_0 added [ 688.195071][T11680] team0: Port device team_slave_1 added [ 688.938898][T11680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.946554][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.033505][T11680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.066847][T11680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.074065][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.115973][T11680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.225051][T11680] device hsr_slave_0 entered promiscuous mode [ 689.242207][T11680] device hsr_slave_1 entered promiscuous mode [ 689.563701][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 689.713543][ T4296] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 689.903535][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 689.919787][ T4296] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 689.973610][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.051994][ T4296] usb 1-1: Product: syz [ 690.078326][ T4296] usb 1-1: Manufacturer: syz [ 690.083004][ T4296] usb 1-1: SerialNumber: syz [ 690.130918][ T4296] usb 1-1: config 0 descriptor?? [ 690.146219][ T4296] go7007: probe of 1-1:0.0 failed with error -12 [ 690.301916][T11791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2294'. [ 690.327101][T11794] bond0: (slave rose0): Enslaving as an active interface with an up link [ 690.410624][T11797] bond0: (slave rose0): Releasing backup interface [ 690.506434][T11786] lo speed is unknown, defaulting to 1000 [ 691.653749][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 692.058289][T11786] lo speed is unknown, defaulting to 1000 [ 692.191097][ T7795] device veth0_macvtap left promiscuous mode [ 692.243727][ T7795] device veth1_vlan left promiscuous mode [ 692.306844][ T7795] device veth0_vlan left promiscuous mode [ 692.567802][ T4239] usb 1-1: USB disconnect, device number 19 [ 692.593733][ T8540] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 692.655947][ T7795] infiniband sz1: set down [ 692.773635][ T8540] usb 3-1: device descriptor read/64, error -71 [ 693.053655][ T8540] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 693.116997][ T4239] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 693.203813][ T8540] usb 3-1: device descriptor read/64, error -71 [ 693.319455][ T4239] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 693.338874][ T4239] usb 1-1: config 1 has no interface number 1 [ 693.349338][ T8540] usb usb3-port1: attempt power cycle [ 693.380752][ T4239] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 693.409509][ T4239] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 693.434951][ T4239] usb 1-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 0.40 [ 693.444559][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.452725][ T4239] usb 1-1: Product: syz [ 693.468125][ T4239] usb 1-1: Manufacturer: syz [ 693.472781][ T4239] usb 1-1: SerialNumber: syz [ 693.502316][T11818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 693.672702][ T7795] team0 (unregistering): Port device team_slave_1 removed [ 693.723800][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 693.730783][ T4239] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 693.739288][ T4239] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 693.741050][ T7795] team0 (unregistering): Port device team_slave_0 removed [ 693.802968][ T7795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.812008][ T4239] usb 1-1: USB disconnect, device number 20 [ 693.833900][ T8540] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 693.897950][ T8540] usb 3-1: device descriptor read/8, error -71 [ 693.905254][ T7795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.914336][ T9103] infiniband syz1: ib_query_port failed (-19) [ 694.066747][ T7317] udevd[7317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.176537][ T8540] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 694.224684][ T8540] usb 3-1: device descriptor read/8, error -71 [ 694.346945][ T8540] usb usb3-port1: unable to enumerate USB device [ 694.502871][ T7795] bond0 (unregistering): Released all slaves [ 694.552026][T11786] bond0 speed is unknown, defaulting to 1000 [ 694.650148][ T7770] smc: removing ib device sz1 [ 694.665749][ T9086] bond0 speed is unknown, defaulting to 1000 [ 694.671975][ T4328] lo speed is unknown, defaulting to 1000 [ 694.679437][ T4347] lo speed is unknown, defaulting to 1000 [ 694.857934][T11832] serio: Serial port ptm1 [ 696.534950][T11680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.729950][T11680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.778830][T11680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.818640][T11680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 697.439147][T11874] serio: Serial port ptm0 [ 698.100264][T11680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.161621][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 698.191301][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 698.309512][T11680] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.363876][ T4300] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 698.544912][ T4300] usb 1-1: device descriptor read/64, error -71 [ 698.669623][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 698.721679][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.773809][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.780958][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.833724][ T4300] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 698.887976][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 698.919246][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.948005][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.981611][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.988785][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.016667][ T4300] usb 1-1: device descriptor read/64, error -71 [ 699.073791][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.123188][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.153981][ T4300] usb usb1-port1: attempt power cycle [ 699.154453][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.208498][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.238878][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.276456][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.305528][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.373849][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.401629][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.430924][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.462743][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 699.499771][T11680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.583589][ T4300] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 699.676561][ T4300] usb 1-1: device descriptor read/8, error -71 [ 700.013701][ T4300] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 700.058451][ T4300] usb 1-1: device descriptor read/8, error -71 [ 700.194498][ T4300] usb usb1-port1: unable to enumerate USB device [ 700.201898][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.240137][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.288297][T11680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.390723][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.469436][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.550288][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 700.570554][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.612358][T11680] device veth0_vlan entered promiscuous mode [ 700.627938][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.656674][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.966093][T11680] device veth1_vlan entered promiscuous mode [ 701.980007][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 702.067538][T11943] serio: Serial port ptm0 [ 702.992631][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 703.071909][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 703.344306][T11680] device veth0_macvtap entered promiscuous mode [ 703.360944][T11680] device veth1_macvtap entered promiscuous mode [ 703.439904][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.497584][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.518830][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.541948][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.552215][ T4300] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 703.584032][T11680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.733505][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 703.743743][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 703.752127][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.774434][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 703.819853][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 703.857359][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.881947][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.935894][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.066667][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.082837][ T4300] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice=ff.dd [ 704.092036][ T4300] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 704.134867][ T4300] usb 4-1: Product: syz [ 704.147685][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.159716][ T4300] usb 4-1: Manufacturer: syz [ 704.184824][ T4300] usb 4-1: config 0 descriptor?? [ 704.384042][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.477915][T11680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.500071][T11953] netlink: 'syz.3.2333': attribute type 6 has an invalid length. [ 704.524363][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.536975][ T4300] usbhid 4-1:0.0: can't add hid device: -71 [ 704.542993][ T4300] usbhid: probe of 4-1:0.0 failed with error -71 [ 704.552121][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.579518][ T4300] usb 4-1: USB disconnect, device number 24 [ 704.609599][T11680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.629856][T11680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.639916][T11680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.655363][T11680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.753658][ T9086] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 704.911383][ T7788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.941260][ T7788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.963606][ T9086] usb 1-1: device descriptor read/64, error -71 [ 704.995025][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 705.331099][ T9086] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 705.544939][ T9086] usb 1-1: device descriptor read/64, error -71 [ 705.640602][ T7786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.664558][ T9086] usb usb1-port1: attempt power cycle [ 705.705205][ T7786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.915051][T11992] serio: Serial port ptm0 [ 706.038329][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 706.173626][ T9086] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 706.226320][ T9086] usb 1-1: device descriptor read/8, error -71 [ 706.513698][ T9086] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 706.586140][ T9086] usb 1-1: device descriptor read/8, error -71 [ 706.714447][ T9086] usb usb1-port1: unable to enumerate USB device [ 707.186640][ T4300] hid-generic 0005:7FFF:0008.0020: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 707.320642][T12017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'. [ 707.630947][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2349'. [ 710.773647][ T4296] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 710.933551][ T4296] usb 1-1: device descriptor read/64, error -71 [ 710.973556][ T14] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 711.166744][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.181636][ T14] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 711.199345][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.209844][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.227872][ T4296] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 711.257656][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.270508][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 711.279091][ T14] usb 4-1: Product: syz [ 711.283274][ T14] usb 4-1: Manufacturer: syz [ 712.091870][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 712.102640][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 712.109764][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 712.133642][ T4296] usb 1-1: device descriptor read/64, error -71 [ 712.253716][ T4296] usb usb1-port1: attempt power cycle [ 712.278399][ T4300] usb 4-1: USB disconnect, device number 25 [ 712.673498][ T4296] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 712.714113][ T4296] usb 1-1: device descriptor read/8, error -71 [ 712.983526][ T4296] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 713.608749][ T4296] usb 1-1: device not accepting address 32, error -71 [ 713.654064][ T4296] usb usb1-port1: unable to enumerate USB device [ 714.413559][T12123] serio: Serial port ptm1 [ 715.336510][T12133] bond0: (slave rose0): Enslaving as an active interface with an up link [ 715.563582][ T4296] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 715.563706][ T9103] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 716.183656][ T4296] usb 3-1: device descriptor read/64, error -71 [ 716.313393][ T9103] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.322450][ T9103] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 716.332997][ T9103] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.342124][ T9103] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.356992][ T9103] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 716.367260][ T9103] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 716.376627][ T9103] usb 5-1: Product: syz [ 716.382018][ T9103] usb 5-1: Manufacturer: syz [ 716.418086][ T9103] cdc_wdm 5-1:1.0: skipping garbage [ 716.423362][ T9103] cdc_wdm 5-1:1.0: skipping garbage [ 716.429089][ T9103] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 716.453641][ T4296] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 716.613661][ T4296] usb 3-1: device descriptor read/64, error -71 [ 716.631094][ T9103] usb 5-1: USB disconnect, device number 32 [ 716.743707][ T4296] usb usb3-port1: attempt power cycle [ 717.153559][ T4296] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 717.197217][ T4296] usb 3-1: device descriptor read/8, error -71 [ 717.300013][T12158] device dummy0 entered promiscuous mode [ 717.328434][T12158] device macvtap1 entered promiscuous mode [ 717.369847][T12158] device dummy0 left promiscuous mode [ 717.483748][ T4296] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 717.525815][ T4296] usb 3-1: device descriptor read/8, error -71 [ 717.712732][ T4296] usb usb3-port1: unable to enumerate USB device [ 717.851471][T12163] serio: Serial port ptm0 [ 718.712117][T12166] overlayfs: statfs failed on './file0' [ 719.039398][T12175] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 719.531429][T12186] device syzkaller1 entered promiscuous mode [ 719.783624][ T4347] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 719.833804][ T4296] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 719.985371][ T4347] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 720.011559][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.029113][ T4347] usb 1-1: config 0 has no interfaces? [ 720.059336][ T4296] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 720.060316][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.082571][ T4296] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 720.091895][ T4347] usb 1-1: config 0 has no interfaces? [ 720.141263][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.318903][ T4347] usb 1-1: config 0 has no interfaces? [ 720.330266][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.360999][ T4296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 720.363346][ T4347] usb 1-1: config 0 has no interfaces? [ 720.371120][ T4296] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.408596][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.420154][ T4296] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 720.439096][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 720.444167][ T4347] usb 1-1: config 0 has no interfaces? [ 720.488396][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.524681][T12200] serio: Serial port ptm0 [ 720.685575][ T4347] usb 1-1: config 0 has no interfaces? [ 720.793298][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.967053][ T4347] usb 1-1: config 0 has no interfaces? [ 721.004771][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.057501][ T4347] usb 1-1: config 0 has no interfaces? [ 721.134984][ T4296] usb 4-1: Product: syz [ 721.139260][ T4296] usb 4-1: Manufacturer: syz [ 721.151511][ T4296] cdc_wdm 4-1:1.0: skipping garbage [ 721.156846][ T4296] cdc_wdm 4-1:1.0: skipping garbage [ 721.163721][ T4296] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 721.174171][ T4347] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 721.248633][ T4347] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 721.619227][ T4347] usb 1-1: Product: syz [ 721.623617][ T4347] usb 1-1: Manufacturer: syz [ 721.630268][ T4347] usb 1-1: SerialNumber: syz [ 721.648491][ T4347] usb 1-1: config 0 descriptor?? [ 721.778095][ T4296] usb 4-1: USB disconnect, device number 26 [ 721.905935][ T4299] usb 1-1: USB disconnect, device number 33 [ 722.698934][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2416'. [ 723.195870][T12242] serio: Serial port ptm0 [ 724.126815][T12245] serio: Serial port ptm0 [ 725.394269][ T4299] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 725.493593][ T4296] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 725.584504][ T4299] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 725.602609][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.719918][ T4299] usb 4-1: config 0 has no interfaces? [ 725.734466][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.753583][ T4299] usb 4-1: config 0 has no interfaces? [ 725.760678][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.772452][ T4296] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.803473][ T4296] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 725.820098][ T4299] usb 4-1: config 0 has no interfaces? [ 725.829439][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.839630][ T4296] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.853654][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.864001][ T4299] usb 4-1: config 0 has no interfaces? [ 725.878633][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.889697][ T4296] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.902070][ T4299] usb 4-1: config 0 has no interfaces? [ 725.908559][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.917048][ T4296] usb 5-1: Product: syz [ 725.921475][ T4296] usb 5-1: Manufacturer: syz [ 725.927289][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.939082][ T4299] usb 4-1: config 0 has no interfaces? [ 725.956211][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 725.964485][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 725.970138][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 726.006944][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.104751][ T4296] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 726.148515][ T4299] usb 4-1: config 0 has no interfaces? [ 726.273253][ T4296] usb 5-1: USB disconnect, device number 33 [ 726.288810][ T4299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.337347][ T4299] usb 4-1: config 0 has no interfaces? [ 726.368105][ T4299] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 726.377917][ T4299] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 726.388545][ T4299] usb 4-1: Product: syz [ 726.392865][ T4299] usb 4-1: Manufacturer: syz [ 726.397814][ T4299] usb 4-1: SerialNumber: syz [ 726.441371][ T4299] usb 4-1: config 0 descriptor?? [ 726.676075][ T9115] usb 4-1: USB disconnect, device number 27 [ 726.730720][T12291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.096889][ T4260] Bluetooth: Unknown BR/EDR signaling command 0x22 [ 728.103483][ T4260] Bluetooth: Wrong link type (-22) [ 730.118512][T12344] overlayfs: statfs failed on './file0' [ 730.247239][T12348] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 730.443783][ T4300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 730.469592][T12357] ======================================================= [ 730.469592][T12357] WARNING: The mand mount option has been deprecated and [ 730.469592][T12357] and is ignored by this kernel. Remove the mand [ 730.469592][T12357] option from the mount to silence this warning. [ 730.469592][T12357] ======================================================= [ 730.645392][ T4300] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.684634][ T4300] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 730.711556][ T4300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.727581][ T4300] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.752578][ T4300] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.768399][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.806797][ T4300] usb 2-1: Product: syz [ 730.811023][ T4300] usb 2-1: Manufacturer: syz [ 730.839400][ T4300] cdc_wdm 2-1:1.0: skipping garbage [ 730.848069][ T4300] cdc_wdm 2-1:1.0: skipping garbage [ 730.857002][ T4300] cdc_wdm 2-1:1.0: skipping garbage [ 730.862269][ T4300] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 730.987019][T12378] overlayfs: statfs failed on './file0' [ 730.997823][T12380] 9pnet_fd: Insufficient options for proto=fd [ 731.040484][ T4300] usb 2-1: USB disconnect, device number 2 [ 731.223391][T12388] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 731.631999][ T9115] hid-generic 0005:7FFF:0008.0021: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 731.681606][T12402] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 731.877021][T12412] overlayfs: statfs failed on './file0' [ 733.649601][T12442] 9pnet_fd: Insufficient options for proto=fd [ 733.788643][ T4296] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 734.045867][ T4296] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 734.054998][ T4296] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 734.065932][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.136597][ T4296] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 734.159573][ T4296] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.169285][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 734.178826][ T4296] usb 5-1: Product: syz [ 735.213984][ T4296] usb 5-1: Manufacturer: syz [ 735.303522][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 735.308787][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 735.314515][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 735.319766][ T4296] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 735.513357][ T4296] usb 5-1: USB disconnect, device number 34 [ 737.069547][T12477] 9pnet_fd: Insufficient options for proto=fd [ 739.705084][T12508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2514'. [ 739.814426][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.893755][ T41] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 740.096160][T12516] 9pnet_fd: Insufficient options for proto=fd [ 740.114443][ T41] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 740.133503][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.160718][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.178558][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.189862][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.201907][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.218164][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.229821][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.241716][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.252101][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.265530][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.280111][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.291529][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.318931][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.464327][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.473913][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.482125][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.492886][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.502711][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.423056][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.435780][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.446214][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.454116][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.464394][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.476327][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.493977][ T41] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 741.503057][ T41] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 742.552090][ T41] usb 1-1: Product: syz [ 742.556836][ T41] usb 1-1: Manufacturer: syz [ 742.561555][ T41] usb 1-1: SerialNumber: syz [ 742.643030][ T41] usb 1-1: config 0 descriptor?? [ 743.201312][ T41] usb 1-1: can't set config #0, error -71 [ 743.259297][ T41] usb 1-1: USB disconnect, device number 34 [ 743.493063][T12551] 9pnet_fd: Insufficient options for proto=fd [ 745.219101][ T26] audit: type=1326 audit(1738136788.427:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.0.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e158cd29 code=0x7ffc0000 [ 745.300194][ T26] audit: type=1326 audit(1738136788.457:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.0.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e158cd29 code=0x7ffc0000 [ 745.374650][ T26] audit: type=1326 audit(1738136788.457:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.0.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f94e158cd29 code=0x7ffc0000 [ 745.525337][ T26] audit: type=1326 audit(1738136788.457:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.0.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e158cd29 code=0x7ffc0000 [ 745.593609][ T26] audit: type=1326 audit(1738136788.457:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.0.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e158cd29 code=0x7ffc0000 [ 747.085999][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.092396][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.193799][ T4347] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 748.423580][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 748.441465][ T4347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.514201][ T4347] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 748.562777][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.574055][ T4347] usb 2-1: Product: syz [ 748.578395][ T4347] usb 2-1: Manufacturer: syz [ 748.583487][ T4347] usb 2-1: SerialNumber: syz [ 748.604030][ T4347] usb 2-1: config 0 descriptor?? [ 749.224765][T12664] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 749.552867][T12669] 9pnet_fd: Insufficient options for proto=fd [ 749.809891][T12673] serio: Serial port ptm0 [ 750.574515][ T4299] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 750.795079][ T4299] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 750.975770][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.012875][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 751.052045][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.112245][ T9086] usb 2-1: USB disconnect, device number 3 [ 751.144706][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 751.178792][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.223008][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 751.238651][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.252059][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 751.263250][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.283796][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 751.301795][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.431589][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 751.722569][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.908145][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 751.946796][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.999797][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.090364][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.122853][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.140684][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.158646][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.167053][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.182122][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.232287][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.326407][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.349019][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.367965][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.378922][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.396968][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 753.258217][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.382665][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 753.406451][ T4299] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.447185][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 753.493585][ T4299] usb 3-1: string descriptor 0 read error: -71 [ 753.509712][ T4299] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 753.562760][ T4299] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 753.603166][ T4299] usb 3-1: config 0 descriptor?? [ 753.619195][ T4299] usb 3-1: can't set config #0, error -71 [ 753.646192][ T4299] usb 3-1: USB disconnect, device number 35 [ 754.006393][ T9115] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 754.195096][ T9115] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 754.209566][ T9115] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 754.239791][ T9115] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 754.261406][ T9115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 754.277175][ T9115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 754.312988][ T9115] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 754.349949][ T9115] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 754.387794][ T9115] usb 4-1: Product: syz [ 754.399362][ T9115] usb 4-1: Manufacturer: syz [ 754.462640][ T9115] cdc_wdm 4-1:1.0: skipping garbage [ 754.489466][ T9115] cdc_wdm 4-1:1.0: skipping garbage [ 754.518349][ T9115] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 754.674916][ T9115] cdc_wdm 4-1:1.0: Unknown control protocol [ 754.686637][ T9115] usb 4-1: USB disconnect, device number 28 [ 756.219526][T12751] 9pnet_fd: Insufficient options for proto=fd [ 757.650451][ T4299] hid-generic 0005:7FFF:0008.0022: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 757.953711][ T4299] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 758.145626][ T4299] usb 4-1: config index 0 descriptor too short (expected 1298, got 18) [ 758.158956][ T4299] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 758.189825][ T4299] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 758.216001][ T4299] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 758.232132][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.240466][ T4299] usb 4-1: Product: syz [ 758.245920][ T4299] usb 4-1: Manufacturer: syz [ 758.250552][ T4299] usb 4-1: SerialNumber: syz [ 758.267061][ T4299] usb 4-1: config 0 descriptor?? [ 758.363692][ T9086] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 758.587109][ T9086] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 758.617220][ T9086] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 758.643380][ T9086] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 758.817396][ T9086] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 758.943845][ T9086] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 759.057173][ T9086] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.130039][ T9086] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.445284][ T4299] usb 4-1: Firmware version (0.0) predates our first public release. [ 759.463698][ T4299] usb 4-1: Please update to version 0.2 or newer [ 759.481469][ T4299] usb 4-1: Firmware: build [ 759.662761][ T9086] usb 1-1: Product: syz [ 759.678753][ T9086] usb 1-1: Manufacturer: syz [ 759.789010][ T4299] usb 4-1: USB disconnect, device number 29 [ 760.522907][ T9086] cdc_wdm 1-1:1.0: skipping garbage [ 760.533501][ T9086] cdc_wdm 1-1:1.0: skipping garbage [ 760.547605][ T9086] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 760.553650][ T9086] cdc_wdm 1-1:1.0: Unknown control protocol [ 760.704086][T12809] program syz.4.2619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.726528][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.733189][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.744232][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.750874][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.759805][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.766439][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.773795][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.780429][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.793763][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.800416][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.803636][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 760.806750][ T9086] usb 1-1: USB disconnect, device number 35 [ 760.980417][ T4299] hid-generic 0005:7FFF:0008.0023: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 761.003699][ T4296] usb 2-1: Using ep0 maxpacket: 8 [ 761.015048][ T4296] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 761.039431][ T4296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 761.077950][ T4296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 761.111819][ T4296] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.179721][ T4296] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 761.200521][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.232546][ T4296] usbtmc 2-1:16.0: bulk endpoints not found [ 761.734310][T12810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.304456][ T9086] usb 2-1: USB disconnect, device number 4 [ 764.220268][ T9086] hid-generic 0005:7FFF:0008.0024: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 764.543598][ T9086] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 764.813772][ T9086] usb 2-1: Using ep0 maxpacket: 8 [ 764.834824][ T9086] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 764.846156][ T9086] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.856328][ T9086] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.866436][ T9086] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 764.879762][ T9086] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 764.889111][ T9086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.926980][ T9086] usbtmc 2-1:16.0: bulk endpoints not found [ 765.851970][T12910] serio: Serial port ptm0 [ 766.948348][ T4239] hid-generic 0005:7FFF:0008.0025: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 767.204959][T12932] vivid-000: disconnect [ 767.713147][T12917] vivid-000: reconnect [ 767.815084][T12943] serio: Serial port ptm0 [ 768.271005][ T41] usb 2-1: USB disconnect, device number 5 [ 770.963529][ T4239] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 771.620666][T12992] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 771.783467][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 771.790277][ T4239] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 771.813767][ T4239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.858835][ T4239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.916772][ T4239] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 771.950158][ T4239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 771.982885][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.029264][ T4239] usbtmc 2-1:16.0: bulk endpoints not found [ 774.010325][ T4296] usb 2-1: USB disconnect, device number 6 [ 775.229572][T13061] vivid-000: disconnect [ 775.249960][T13056] vivid-000: reconnect [ 776.367992][ T4296] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 776.573626][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 776.580411][ T4296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.600178][ T4296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 776.617994][ T4296] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 776.640216][ T4296] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.655742][ T4296] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 776.665540][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.685881][ T4296] usbtmc 4-1:16.0: bulk endpoints not found [ 776.869783][T13103] vivid-000: disconnect [ 776.879964][T13100] vivid-000: reconnect [ 777.093485][ T4296] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 777.415477][ T4296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.426657][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.437318][ T4296] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 778.394095][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 778.406672][ T4296] usb 5-1: SerialNumber: syz [ 778.666999][ T4296] usb 5-1: 0:2 : does not exist [ 778.696664][ T4296] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 778.730412][ T4296] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 778.749661][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.780919][ T4296] usb 5-1: USB disconnect, device number 35 [ 778.994066][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.482919][ T41] usb 4-1: USB disconnect, device number 30 [ 779.748517][ T9103] hid-generic 0005:7FFF:0008.0026: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 779.957716][T13140] binder: 13139:13140 ioctl 4018620d 0 returned -22 [ 779.983224][T13140] binder: 13139:13140 ioctl c0306201 0 returned -14 [ 781.608010][ T4296] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 781.813482][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 781.820911][ T4296] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.923824][ T4296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.953840][ T4296] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 781.983595][ T4296] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.020670][ T4296] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.043548][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.077507][ T4296] usbtmc 3-1:16.0: bulk endpoints not found [ 782.887935][T13178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.039670][T13202] overlayfs: missing 'lowerdir' [ 783.450040][T13213] vivid-000: disconnect [ 783.463749][T13189] vivid-000: reconnect [ 783.506119][T13215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.726213][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2757'. [ 783.966654][T13230] overlayfs: missing 'lowerdir' [ 783.999169][T13233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 784.193742][T13241] vivid-000: disconnect [ 784.224411][T13235] vivid-000: reconnect [ 785.123694][ T9103] usb 3-1: USB disconnect, device number 36 [ 785.321139][T13254] netlink: 'syz.4.2770': attribute type 10 has an invalid length. [ 785.375970][T13254] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 785.724362][T13272] vivid-000: disconnect [ 785.732586][T13266] vivid-000: reconnect [ 786.113201][T13276] device veth1_to_bridge entered promiscuous mode [ 786.120018][ T9103] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 786.313817][ T9103] usb 5-1: Using ep0 maxpacket: 8 [ 786.334426][ T9103] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.535392][ T9103] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.726107][ T9103] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 786.874143][ T9103] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.004733][ T9103] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.065695][ T9103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.114914][ T9103] usbtmc 5-1:16.0: bulk endpoints not found [ 787.197532][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.365096][T13304] vivid-000: disconnect [ 787.383289][T13300] vivid-000: reconnect [ 789.117614][ T4296] usb 5-1: USB disconnect, device number 36 [ 789.759854][T13357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.767271][T13357] IPv6: NLM_F_CREATE should be set when creating new route [ 789.774564][T13357] IPv6: NLM_F_CREATE should be set when creating new route [ 791.013651][ T41] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 791.213541][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 791.226623][ T41] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.252443][ T41] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.268581][ T41] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 791.279137][ T41] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 791.294800][ T41] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.342592][ T41] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.378009][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.405302][ T41] usbtmc: probe of 3-1:16.0 failed with error -22 [ 791.488816][T13390] overlayfs: missing 'lowerdir' [ 791.792794][T13400] netlink: 'syz.4.2826': attribute type 10 has an invalid length. [ 791.996885][T13400] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 792.443265][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 792.615734][T13422] overlayfs: missing 'workdir' [ 792.921425][ T9115] hid-generic 0005:7FFF:0008.0027: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 793.868905][ T41] usb 3-1: USB disconnect, device number 37 [ 794.070601][T13461] 9pnet_fd: Insufficient options for proto=fd [ 794.920327][ T4300] hid-generic 0005:7FFF:0008.0028: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 795.064399][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 795.288934][T13482] overlayfs: missing 'workdir' [ 795.723816][ T4299] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 795.801493][T13497] 9pnet_fd: Insufficient options for proto=fd [ 795.933495][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 795.940575][ T4299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.021888][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.032353][ T4299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 796.053496][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 796.063865][ T4299] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.126412][ T4299] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 796.259395][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.259612][T13503] device syzkaller0 entered promiscuous mode [ 796.341118][ T4299] usbtmc: probe of 3-1:16.0 failed with error -22 [ 796.662123][T13513] overlayfs: missing 'lowerdir' [ 799.081407][ T41] usb 3-1: USB disconnect, device number 38 [ 799.429570][T13550] overlayfs: missing 'lowerdir' [ 800.573180][T13566] 9pnet_fd: Insufficient options for proto=fd [ 800.756793][T13572] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 801.311038][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 802.811936][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 802.842193][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 802.889580][T13579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2892'. [ 803.082821][T13597] overlayfs: missing 'lowerdir' [ 803.093540][ T4296] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 804.053595][ T4296] usb 2-1: Using ep0 maxpacket: 8 [ 804.060999][ T4296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.081937][ T4296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 804.101289][ T4296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 804.114257][ T4296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 804.125064][ T4296] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.138922][ T4296] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.148394][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.224530][ T4296] usbtmc: probe of 2-1:16.0 failed with error -22 [ 804.270411][T13610] 9pnet_fd: Insufficient options for proto=fd [ 804.383818][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2902'. [ 805.786813][ T4299] hid-generic 0005:7FFF:0008.0029: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 806.469624][T13650] 9pnet_fd: Insufficient options for proto=fd [ 806.488420][ T4296] usb 2-1: USB disconnect, device number 7 [ 807.728707][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 807.770758][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'. [ 807.896420][T13666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'. [ 808.005833][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 808.441184][ T41] hid-generic 0005:7FFF:0008.002A: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 808.504761][T13691] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 808.525020][T13686] device veth1_macvtap left promiscuous mode [ 808.532723][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.539160][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.569708][T13691] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 808.643509][ T4300] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 808.963535][ T4300] usb 1-1: Using ep0 maxpacket: 8 [ 809.647666][ T4300] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.687601][ T4300] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 809.758949][ T4300] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 809.798236][ T4300] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.838115][ T4300] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.847549][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.130044][ T4300] usb 1-1: usb_control_msg returned -32 [ 810.439993][ T4300] usbtmc 1-1:16.0: can't read capabilities [ 810.702723][ T8540] usb 1-1: USB disconnect, device number 36 [ 813.904509][T13771] netlink: 'syz.3.2955': attribute type 10 has an invalid length. [ 814.217466][T13771] bond0: (slave team0): Releasing backup interface [ 814.265750][T13771] batman_adv: batadv0: Adding interface: team0 [ 814.295468][T13771] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.366457][T13771] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 815.208978][T13773] netlink: 'syz.3.2955': attribute type 10 has an invalid length. [ 815.268608][T13773] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2955'. [ 815.277992][T13773] device team0 entered promiscuous mode [ 815.283909][T13773] device team_slave_0 entered promiscuous mode [ 815.290655][T13773] device team_slave_1 entered promiscuous mode [ 815.299105][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.308794][T13773] batman_adv: batadv0: Interface activated: team0 [ 815.315365][T13773] batman_adv: batadv0: Interface deactivated: team0 [ 815.322012][T13773] batman_adv: batadv0: Removing interface: team0 [ 815.344981][T13773] bridge0: port 3(team0) entered blocking state [ 815.353591][T13773] bridge0: port 3(team0) entered disabled state [ 815.362117][T13773] bridge0: port 3(team0) entered blocking state [ 815.368521][T13773] bridge0: port 3(team0) entered forwarding state [ 815.398231][T13788] netlink: 'syz.2.2958': attribute type 1 has an invalid length. [ 815.428470][T13788] netlink: 'syz.2.2958': attribute type 2 has an invalid length. [ 816.647275][T13810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.084179][T13810] netlink: 'syz.4.2967': attribute type 10 has an invalid length. [ 817.269653][T13810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 818.116230][T13810] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2967'. [ 818.180861][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 818.778713][T13842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 819.353224][T13857] serio: Serial port ptm0 [ 821.146258][T13885] serio: Serial port ptm0 [ 823.505919][T13923] serio: Serial port ptm0 [ 825.826145][T13891] Set syz1 is full, maxelem 65536 reached [ 826.767753][T13967] serio: Serial port ptm0 [ 827.839684][T13977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input37 [ 829.623486][T14014] serio: Serial port ptm0 [ 831.768930][T14037] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input38 [ 832.535377][T14060] serio: Serial port ptm0 [ 833.512686][T14070] device macvtap1 entered promiscuous mode [ 833.519452][T14070] device vlan0 entered promiscuous mode [ 833.598262][T14070] team0: Device macvtap1 failed to register rx_handler [ 833.617169][T14070] device vlan0 left promiscuous mode [ 834.791506][ T4264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 834.801385][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 834.813483][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 834.822517][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 834.844022][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 834.851406][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.509807][T14098] serio: Serial port ptm1 [ 836.281831][ T4257] bond0: (slave syz_tun): Releasing backup interface [ 836.292403][T14103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 836.520281][T12004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.627165][T14085] chnl_net:caif_netlink_parms(): no params data found [ 836.933714][ T4260] Bluetooth: hci5: command 0x0409 tx timeout [ 837.764541][T12004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.836091][T14121] ax25_connect(): syz.0.3071 uses autobind, please contact jreuter@yaina.de [ 837.947482][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 838.129983][T12004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.312379][T14140] serio: Serial port ptm0 [ 839.031471][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 839.121323][T12004] bond0: (slave netdevsim0): Releasing backup interface [ 839.157298][T12004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.229743][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.237137][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.246682][T14085] device bridge_slave_0 entered promiscuous mode [ 839.256555][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.264886][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.278636][T14085] device bridge_slave_1 entered promiscuous mode [ 839.430346][T14157] netlink: 'syz.0.3080': attribute type 1 has an invalid length. [ 839.610457][T14085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.662355][T14085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.885748][T14160] bond1: (slave gretap1): making interface the new active one [ 839.898063][T14160] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 840.582514][T14165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input40 [ 840.686412][T14085] team0: Port device team_slave_0 added [ 840.711101][T14085] team0: Port device team_slave_1 added [ 840.734969][ T7368] udevd[7368]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 840.892387][T14085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.908717][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.082382][T14085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.083495][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 841.191687][T14085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.210262][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.249565][T14085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.776931][T14085] device hsr_slave_0 entered promiscuous mode [ 841.786785][T14085] device hsr_slave_1 entered promiscuous mode [ 841.794285][T14085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.801875][T14085] Cannot create hsr debugfs directory [ 841.906577][T14202] serio: Serial port ptm0 [ 843.164899][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 844.011722][T14224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input41 [ 844.089606][T14229] nftables ruleset with unbound chain [ 844.891808][T12004] bond0: (slave wlan1): Releasing backup interface [ 845.676794][T12004] device hsr_slave_0 left promiscuous mode [ 845.689527][T12004] device hsr_slave_1 left promiscuous mode [ 845.733997][T12004] device bridge_slave_1 left promiscuous mode [ 845.754820][T14266] xt_CT: No such helper "syz0" [ 845.800831][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.851675][T12004] device bridge_slave_0 left promiscuous mode [ 845.870800][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.945330][T12004] device veth0_macvtap left promiscuous mode [ 845.959501][T12004] device veth1_vlan left promiscuous mode [ 845.988420][T12004] device veth0_vlan left promiscuous mode [ 846.157430][T14286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 846.855458][T14294] netlink: 'syz.0.3114': attribute type 29 has an invalid length. [ 847.226458][T12004] team0 (unregistering): Port device team_slave_1 removed [ 847.271262][T12004] team0 (unregistering): Port device team_slave_0 removed [ 847.299699][T14303] Bluetooth: MGMT ver 1.22 [ 847.325761][T12004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.378084][T12004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.724733][T12004] bond0 (unregistering): (slave team0): Releasing backup interface [ 847.877400][T12004] bond0 (unregistering): Released all slaves [ 847.982446][T14294] netlink: 'syz.0.3114': attribute type 29 has an invalid length. [ 848.361927][T14085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 848.416645][T14085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 848.458301][T14085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 848.513988][T14085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 849.081242][T14085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.166662][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.199427][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.225410][T14085] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.255427][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.282397][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.309861][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.317127][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.367263][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.394065][ T4328] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 849.429662][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.471693][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.522299][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.529562][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.592484][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.603633][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 849.612586][ T4328] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.633798][ T4328] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.660023][ T4328] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.707025][ T4328] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.724619][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 849.754753][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 849.840551][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 849.862791][ T4328] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.889072][T14085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.914524][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.932287][T14085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.972622][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 849.988954][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.011395][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.042033][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.100382][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.133144][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.156371][ T4328] usb 1-1: usb_control_msg returned -32 [ 850.172505][ T4328] usbtmc 1-1:16.0: can't read capabilities [ 850.183222][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.207972][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.239578][T14353] netlink: 'syz.3.3130': attribute type 4 has an invalid length. [ 850.295884][T14354] netlink: 'syz.3.3130': attribute type 4 has an invalid length. [ 850.591173][T14367] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 850.617991][T14367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3133'. [ 850.731170][ T41] usb 1-1: USB disconnect, device number 37 [ 851.038847][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.071762][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.105597][T14085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.504422][ T4300] hid-generic 0005:7FFF:0008.002B: item fetching failed at offset 0/3 [ 852.517289][ T4300] hid-generic: probe of 0005:7FFF:0008.002B failed with error -22 [ 853.208837][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 853.219651][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.327701][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.370022][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.425183][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.452472][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.473127][T14085] device veth0_vlan entered promiscuous mode [ 853.527993][T14085] device veth1_vlan entered promiscuous mode [ 853.878001][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 853.991032][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 854.180210][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 854.360013][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 854.442839][T14085] device veth0_macvtap entered promiscuous mode [ 854.454850][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 854.486356][T14085] device veth1_macvtap entered promiscuous mode [ 854.565535][ T9115] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 854.638122][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.669098][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.699745][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.720762][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.742900][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.763677][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 854.771317][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.775420][ T9115] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.797789][T14085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.810964][ T9115] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.816425][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 854.840110][ T9115] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.847054][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.863984][ T9115] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.884413][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.897613][ T9115] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.919644][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.961404][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.014378][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.055287][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.066081][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.076578][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.098196][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.132976][T14085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.149909][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 855.167611][ T9115] usb 3-1: usb_control_msg returned -32 [ 855.173863][ T9115] usbtmc 3-1:16.0: can't read capabilities [ 855.181565][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 855.202059][T14085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.223898][T14085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.263555][T14085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.272588][T14085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.431173][T12004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.475606][T12004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.536415][ T7786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.554834][ T7786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.609886][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 855.648818][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 855.789436][ T4299] usb 3-1: USB disconnect, device number 39 [ 856.301132][ T4300] hid-generic 0005:7FFF:0008.002C: item fetching failed at offset 0/3 [ 856.324217][ T4300] hid-generic: probe of 0005:7FFF:0008.002C failed with error -22 [ 856.687906][T14479] device veth1_macvtap left promiscuous mode [ 857.748298][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.759020][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.768819][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.800105][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.810118][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 857.818002][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 858.282958][T14496] chnl_net:caif_netlink_parms(): no params data found [ 858.399204][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.406928][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.415660][T14496] device bridge_slave_0 entered promiscuous mode [ 858.424327][T14519] dccp_invalid_packet: pskb_may_pull failed [ 858.425154][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.437818][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.454906][T14496] device bridge_slave_1 entered promiscuous mode [ 858.633533][ T9086] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 858.718523][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.737893][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.926737][ T9086] usb 2-1: Using ep0 maxpacket: 8 [ 859.564367][ T9086] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.597776][ T9086] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 859.638551][ T9086] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 859.690057][ T9086] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.738723][ T9086] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 859.758532][ T9086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.825993][T14496] team0: Port device team_slave_0 added [ 859.835103][T14496] team0: Port device team_slave_1 added [ 859.864099][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.871086][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.903874][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 859.990888][ T9086] usb 2-1: usb_control_msg returned -32 [ 860.000133][ T9086] usbtmc 2-1:16.0: can't read capabilities [ 860.124237][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.126748][ T9086] hid-generic 0005:7FFF:0008.002D: item fetching failed at offset 0/4 [ 860.166976][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.190366][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.226556][ T9086] hid-generic: probe of 0005:7FFF:0008.002D failed with error -22 [ 860.242866][T14535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3175'. [ 860.272924][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.332721][T14496] device hsr_slave_0 entered promiscuous mode [ 860.341014][T14496] device hsr_slave_1 entered promiscuous mode [ 860.369119][T14496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.393117][T14496] Cannot create hsr debugfs directory [ 860.563685][ T4239] usb 2-1: USB disconnect, device number 8 [ 860.828063][T14496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.946004][T14496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.009105][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3180'. [ 861.025431][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'. [ 861.492456][T14496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.013529][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 862.141661][T14496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.380414][ T9086] hid-generic 0005:7FFF:0008.002E: item fetching failed at offset 0/4 [ 862.414292][ T9086] hid-generic: probe of 0005:7FFF:0008.002E failed with error -22 [ 862.756694][T14496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 862.802648][T14496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 862.866604][T14496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.903249][T14496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.162322][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.224828][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 863.233600][ T4239] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 863.264237][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 863.286963][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.343545][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 863.352267][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 863.419668][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.426891][ T7763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.444495][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 863.615406][T14496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 863.620171][ T4239] usb 1-1: Using ep0 maxpacket: 8 [ 863.631619][T14496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.644271][ T4239] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.654176][ T4239] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.664153][ T4239] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.665550][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 863.674209][ T4239] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.674259][ T4239] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 863.674286][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.723953][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 863.734101][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.741254][ T7763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.825305][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 863.886222][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 863.959933][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 864.093765][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.214540][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.225024][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 864.360856][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 864.390547][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 864.419202][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.459407][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 864.462738][ T4239] usb 1-1: usb_control_msg returned -32 [ 864.488346][ T4239] usbtmc 1-1:16.0: can't read capabilities [ 864.502678][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 864.546800][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 864.565538][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 864.575640][T14579] device lo entered promiscuous mode [ 864.585240][T14579] device tunl0 entered promiscuous mode [ 864.619498][T14579] device gre0 entered promiscuous mode [ 864.637657][T14579] device gretap0 entered promiscuous mode [ 864.643967][T14579] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 864.954452][ T4328] usb 1-1: USB disconnect, device number 38 [ 865.178784][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.191357][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.286292][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.368769][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 865.382480][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 865.488704][ T4300] hid-generic 0005:7FFF:0008.002F: item fetching failed at offset 0/4 [ 865.507811][ T4300] hid-generic: probe of 0005:7FFF:0008.002F failed with error -22 [ 865.561611][T14496] device veth0_vlan entered promiscuous mode [ 865.646512][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 865.671521][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 865.725837][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 865.767960][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 865.827250][T14496] device veth1_vlan entered promiscuous mode [ 865.995655][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.017212][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.081867][T14496] device veth0_macvtap entered promiscuous mode [ 866.118381][T14496] device veth1_macvtap entered promiscuous mode [ 866.212930][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.277756][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.283751][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 866.334401][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.376672][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.533491][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.544647][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.555087][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.565900][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.585088][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.595882][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.358488][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.418267][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.449869][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.476486][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.499232][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.530421][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.561664][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.709342][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.754049][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 867.766564][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 867.801005][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 867.844182][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.890974][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 867.926964][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.958397][T14496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.987659][T14496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.013135][T14496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.028462][T14496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.281419][ T7786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.300352][ T7786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.343102][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.385848][ T7770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.395975][ T7770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.427162][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 868.523745][ T4328] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 868.859577][T14663] serio: Serial port ptm0 [ 869.733657][ T4328] usb 5-1: Using ep0 maxpacket: 8 [ 869.742713][ T4328] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.763012][ T4328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.786821][ T4328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.814900][ T4328] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.965326][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.971769][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.992033][ T4328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.002716][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.236836][ T4328] usb 5-1: usb_control_msg returned -32 [ 870.242485][ T4328] usbtmc 5-1:16.0: can't read capabilities [ 870.671461][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 870.695413][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 870.714148][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 870.725465][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 870.738531][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 870.747425][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 870.901617][ T4296] usb 5-1: USB disconnect, device number 37 [ 871.258481][T14679] chnl_net:caif_netlink_parms(): no params data found [ 871.340485][ T4300] hid-generic 0005:7FFF:0008.0030: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 871.462725][T14679] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.470644][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.485041][T14679] device bridge_slave_0 entered promiscuous mode [ 871.510576][T14679] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.517907][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.548540][T14679] device bridge_slave_1 entered promiscuous mode [ 871.735975][T14679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.878733][T14709] serio: Serial port ptm0 [ 872.585170][T14679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.789246][T14679] team0: Port device team_slave_0 added [ 872.812782][T14679] team0: Port device team_slave_1 added [ 872.843826][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 872.935847][T14679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.942866][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.032456][T14679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.054134][T14679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.063115][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.100417][T14679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.298242][T14679] device hsr_slave_0 entered promiscuous mode [ 873.309257][T14679] device hsr_slave_1 entered promiscuous mode [ 873.321203][T14679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 873.337262][T14679] Cannot create hsr debugfs directory [ 873.493445][T14739] serio: Serial port ptm1 [ 874.284608][ T4299] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 874.338884][T14679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.403482][T14748] hsr0: VLAN not yet supported [ 874.483574][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 874.515599][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 874.517802][T14679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.572526][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 874.593779][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 874.609013][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.626013][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 874.639514][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.807275][T14679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.864384][ T4299] usb 5-1: usb_control_msg returned -32 [ 874.871812][ T4299] usbtmc 5-1:16.0: can't read capabilities [ 874.933578][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 875.066634][T14679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.437479][ T41] usb 5-1: USB disconnect, device number 38 [ 875.478841][T14679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 875.518055][T14679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 875.559384][T14679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 875.579650][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3245'. [ 875.606190][T14679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 875.667871][T14755] netpci0: tun_chr_ioctl cmd 1074025672 [ 875.673809][T14755] netpci0: ignored: set checksum disabled [ 875.850993][T14679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.891771][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 875.924688][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 875.977185][T14767] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3249'. [ 876.008368][T14679] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.094521][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 876.104395][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 876.113035][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.120215][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.255074][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.270396][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 876.335205][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 876.357998][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.365206][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.411570][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 876.449272][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 876.488860][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 876.533866][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 876.553912][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 876.562538][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 876.572210][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 876.588202][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 876.646741][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 876.674145][T14679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.707034][T14679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 876.725331][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 876.742736][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 877.004467][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 877.451342][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.490751][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.538109][T14679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.679483][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.729835][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.838165][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.853736][ T4328] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 877.871181][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.899035][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.938188][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.967920][T14679] device veth0_vlan entered promiscuous mode [ 878.002500][T14679] device veth1_vlan entered promiscuous mode [ 878.058409][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 878.071054][ T4328] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.086408][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 878.097537][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 878.106502][ T4328] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.118028][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 878.128216][ T4328] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.144113][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 878.159799][ T4328] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.187036][T14679] device veth0_macvtap entered promiscuous mode [ 878.207163][T14679] device veth1_macvtap entered promiscuous mode [ 878.221271][ T4328] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.246117][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.270654][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.337479][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.364036][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.375018][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.403655][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.423442][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.444422][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.473793][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.503456][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.517495][ T4328] usb 4-1: usb_control_msg returned -32 [ 878.523119][ T4328] usbtmc 4-1:16.0: can't read capabilities [ 878.529644][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.561129][T14679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.579643][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 878.596343][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 878.619031][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.638561][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.660018][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.701792][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.728738][ T4300] hid-generic 0005:7FFF:0008.0031: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 878.742933][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.805822][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.882553][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.920272][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.958767][T14679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.992743][T14679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.040538][T14679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.077145][ T4239] usb 4-1: USB disconnect, device number 31 [ 879.083778][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 879.180558][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 879.189786][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 879.250850][T14679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.351300][T14679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.376285][T14679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.394060][T14679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.722747][ T7809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.737914][ T7809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.814879][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.837006][ T7809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.851304][ T7809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.887988][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 881.300348][T14905] device ipvlan2 entered promiscuous mode [ 881.355952][T14905] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 881.394527][ T4239] hid-generic 0005:7FFF:0008.0032: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 881.663607][ T4296] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 881.863538][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 881.870901][ T4296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.946936][ T4296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.042740][ T4296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.184821][ T4296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.218867][ T4296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.228534][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.278251][T14923] tipc: Started in network mode [ 882.302257][T14923] tipc: Node identity 2e7d3464def, cluster identity 4711 [ 882.316628][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.326131][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.334133][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.355553][T14923] tipc: Enabled bearer , priority 0 [ 882.370266][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.416593][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 882.424053][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.458228][ T4296] usb 5-1: usb_control_msg returned -32 [ 882.464014][ T4296] usbtmc 5-1:16.0: can't read capabilities [ 882.466559][T14924] device syzkaller0 entered promiscuous mode [ 882.543321][T14924] tipc: Resetting bearer [ 882.622058][ T7763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.649899][ C1] Unknown status report in ack skb [ 882.655452][T14922] tipc: Resetting bearer [ 883.063498][ T4328] usb 5-1: USB disconnect, device number 39 [ 883.355729][ T4328] tipc: Node number set to 4035785828 [ 884.421409][ T4299] hid-generic 0005:7FFF:0008.0033: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 884.531235][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 886.609705][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 886.677950][T14922] tipc: Disabling bearer [ 886.735558][ T7763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.902504][ T7763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.179402][ T7763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.333951][ T9086] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 887.367199][T14928] chnl_net:caif_netlink_parms(): no params data found [ 887.533459][ T9086] usb 4-1: Using ep0 maxpacket: 8 [ 887.541765][ T9086] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.596249][ T9086] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.643831][ T9086] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.654522][ T9086] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.667795][ T9086] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.677038][ T9086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.773947][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.781157][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.860218][T14928] device bridge_slave_0 entered promiscuous mode [ 887.899251][ T9086] usb 4-1: usb_control_msg returned -32 [ 887.906336][ T9086] usbtmc 4-1:16.0: can't read capabilities [ 887.931606][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.947834][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.960485][T14928] device bridge_slave_1 entered promiscuous mode [ 888.112391][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.211269][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.471649][ T9115] usb 4-1: USB disconnect, device number 32 [ 888.526250][T14928] team0: Port device team_slave_0 added [ 888.614281][T14928] team0: Port device team_slave_1 added [ 888.683882][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 888.754267][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.761351][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.807045][ C0] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(110900227255878) <= P.seqno(110900227255873) <= S.SWH(110900227255952)) and (P.ackno exists or LAWL(35917900754761) <= P.ackno(35917900754762) <= S.AWH(35917900754775), sending SYNC... [ 888.815323][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.337999][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.347145][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.379519][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.621497][T14928] device hsr_slave_0 entered promiscuous mode [ 889.639840][T14928] device hsr_slave_1 entered promiscuous mode [ 889.661390][T14928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.691434][T14928] Cannot create hsr debugfs directory [ 889.760712][T15044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 891.008176][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 891.118302][ T4300] hid-generic 0005:7FFF:0008.0034: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 891.313107][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.321779][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.351905][ T7763] device bridge_slave_1 left promiscuous mode [ 891.393736][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.523630][ T4299] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 891.730358][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 891.740385][ T4299] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.773114][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 891.799760][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 891.817883][ T4299] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.842902][ T4299] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 891.858075][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.085887][ T4299] usb 2-1: usb_control_msg returned -32 [ 892.093629][ T4299] usbtmc 2-1:16.0: can't read capabilities [ 892.425079][ T7763] team0 (unregistering): Port device team_slave_1 removed [ 892.483908][ T7763] team0 (unregistering): Port device team_slave_0 removed [ 892.549919][ T7763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.675663][ T9086] usb 2-1: USB disconnect, device number 9 [ 892.697010][ T7763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.141611][ T7763] bond0 (unregistering): Released all slaves [ 895.633063][T14928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.662193][T14928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.677261][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 895.719061][T14928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.746869][T14928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.017162][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.053824][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.069670][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 896.088429][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.121367][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 896.133240][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.143183][T15101] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.150497][T15101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.177125][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 896.187111][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 896.196863][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 896.207995][T15101] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.215202][T15101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.224341][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 896.245200][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 896.261081][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 896.277483][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 896.285853][ T4300] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 896.294935][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 896.310646][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 896.320302][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 896.334993][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 896.344812][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.365706][T14928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.398422][T14928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.417387][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 896.438783][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.483652][ T4300] usb 2-1: Using ep0 maxpacket: 8 [ 896.490484][ T4300] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.521726][ T4300] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.551996][ T4300] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.582783][ T4300] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.626618][ T4300] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 896.662013][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.696266][T15156] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 896.928272][ T4300] usb 2-1: usb_control_msg returned -32 [ 896.936455][ T4300] usbtmc 2-1:16.0: can't read capabilities [ 897.167600][ T4296] hid-generic 0005:7FFF:0008.0035: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 897.441149][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 897.459902][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 897.503835][ T9115] usb 2-1: USB disconnect, device number 10 [ 897.529287][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.700238][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 897.717091][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 897.783011][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 897.806303][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 897.855489][T14928] device veth0_vlan entered promiscuous mode [ 897.875535][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 897.891269][T15101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 897.906487][T14928] device veth1_vlan entered promiscuous mode [ 898.006532][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 898.036997][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 898.065991][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 898.091857][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.122944][T14928] device veth0_macvtap entered promiscuous mode [ 898.172732][T14928] device veth1_macvtap entered promiscuous mode [ 898.252198][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.301025][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.329330][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.362922][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.383575][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.403545][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.423455][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.483428][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.503924][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.528456][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.548671][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.585582][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.604585][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.646356][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 898.694766][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 898.703065][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 898.733122][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 898.777031][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.795029][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.815308][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.836052][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.868050][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.886119][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.902159][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.933142][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.952985][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.973441][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.991508][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.002189][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.036073][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.060392][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.079198][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.113894][T14928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.155526][T14928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.173486][T14928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.182360][T14928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.404959][ T7792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.460197][ T7792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.498998][ T7788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.504893][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 899.527394][ T7788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.576234][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 899.625852][T15223] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input45 [ 900.156639][T15237] serio: Serial port ptm0 [ 901.134022][ T9086] hid-generic 0005:7FFF:0008.0036: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 901.263691][ T4296] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 901.459456][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 901.490711][ T4296] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.546109][ T4296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 901.618789][ T4296] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 901.691900][ T4296] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.808894][ T4296] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 901.856259][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.139981][ T4296] usb 3-1: usb_control_msg returned -32 [ 902.145911][ T4296] usbtmc 3-1:16.0: can't read capabilities [ 902.722449][ T4300] usb 3-1: USB disconnect, device number 40 [ 903.790434][T15300] serio: Serial port ptm0 [ 904.938394][T15181] Set syz1 is full, maxelem 65536 reached [ 905.546178][T15324] dccp_close: ABORT with 88 bytes unread [ 906.108481][T15351] serio: Serial port ptm0 [ 906.113857][T15274] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 906.403695][T15274] usb 3-1: Using ep0 maxpacket: 8 [ 906.454993][T15274] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.710669][T15274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 906.787343][T15354] tipc: Started in network mode [ 906.792321][T15354] tipc: Node identity bef19ecde9bc, cluster identity 4711 [ 906.845714][T15354] tipc: Enabled bearer , priority 0 [ 906.852005][T15274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 906.894037][T15274] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.959246][T15274] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.972811][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3396'. [ 906.982390][T15274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.085623][T15355] device syzkaller0 entered promiscuous mode [ 907.130118][T15355] tipc: Resetting bearer [ 907.237779][T15274] usb 3-1: usb_control_msg returned -32 [ 907.252625][T15274] usbtmc 3-1:16.0: can't read capabilities [ 907.328509][T15368] serio: Serial port ptm0 [ 907.929867][ T8540] tipc: Node number set to 1464704717 [ 907.935940][T15350] tipc: Resetting bearer [ 909.052237][ T4298] usb 3-1: USB disconnect, device number 41 [ 911.348421][T15350] tipc: Disabling bearer [ 911.363482][T15401] netlink: 'syz.2.3410': attribute type 12 has an invalid length. [ 911.393444][T15401] netlink: 'syz.2.3410': attribute type 29 has an invalid length. [ 911.401358][T15401] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3410'. [ 911.453490][T15401] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 911.461756][T15401] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 911.515217][T15401] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3410'. [ 911.902369][T15414] serio: Serial port ptm0 [ 913.013436][ T4296] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 913.223431][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 913.230446][ T4296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.281195][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3426'. [ 913.381108][ T4296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 913.391195][ T4296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 913.414876][ T4296] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.473771][ T4296] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 913.483044][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.718014][ T4296] usb 4-1: usb_control_msg returned -32 [ 913.723913][ T4296] usbtmc 4-1:16.0: can't read capabilities [ 913.747674][T15451] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 914.149874][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3432'. [ 914.282275][T15464] serio: Serial port ptm0 [ 914.323134][ T8540] usb 4-1: USB disconnect, device number 33 [ 915.281870][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3439'. [ 916.066865][T15495] serio: Serial port ptm0 [ 916.373392][ C1] ------------[ cut here ]------------ [ 916.378957][ C1] WARNING: CPU: 1 PID: 21 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x1abc/0x2110 [ 916.388874][ C1] Modules linked in: [ 916.392811][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.127-syzkaller #0 [ 916.400856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 916.410965][ C1] RIP: 0010:__ieee80211_beacon_get+0x1abc/0x2110 [ 916.417360][ C1] Code: ff ff ff e8 a6 7f 50 f7 0f 0b 48 8b 7c 24 20 e8 ea 31 66 fe e9 6f e8 ff ff e8 90 7f 50 f7 0f 0b e9 92 ed ff ff e8 84 7f 50 f7 <0f> 0b e9 26 f1 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fc e8 [ 916.437059][ C1] RSP: 0018:ffffc900001b76c0 EFLAGS: 00010246 [ 916.443161][ C1] RAX: ffffffff8a3a1d1c RBX: 0000000000000000 RCX: ffff888018c61dc0 [ 916.451192][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 916.459234][ C1] RBP: ffffc900001b78d0 R08: ffffffff8a3a0e3c R09: ffffffff8a3a0642 [ 916.467313][ C1] R10: 0000000000000003 R11: ffff888018c61dc0 R12: dffffc0000000000 [ 916.475350][ C1] R13: 1ffff92000036ef0 R14: ffff8880580c2258 R15: ffffffff8a3a0310 [ 916.483394][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 916.492347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.498984][ C1] CR2: 000000110c37277b CR3: 000000007131a000 CR4: 00000000003506e0 [ 916.507015][ C1] Call Trace: [ 916.510341][ C1] [ 916.513296][ C1] ? __warn+0x15a/0x520 [ 916.517516][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.523270][ C1] ? report_bug+0x2af/0x500 [ 916.527841][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.533811][ C1] ? handle_bug+0x3d/0x70 [ 916.538168][ C1] ? exc_invalid_op+0x16/0x40 [ 916.542864][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 916.547955][ C1] ? __ieee80211_beacon_get+0xb0/0x2110 [ 916.553594][ C1] ? __ieee80211_beacon_get+0x3e2/0x2110 [ 916.559257][ C1] ? __ieee80211_beacon_get+0xbdc/0x2110 [ 916.564984][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.570745][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.576585][ C1] ? print_irqtrace_events+0x210/0x210 [ 916.582287][ C1] ? __ieee80211_beacon_get+0xb0/0x2110 [ 916.587900][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 916.593947][ C1] ? __lock_acquire+0x125b/0x1f80 [ 916.599182][ C1] ? mark_lock+0x9a/0x340 [ 916.603585][ C1] ? __lock_acquire+0x125b/0x1f80 [ 916.608649][ C1] ieee80211_beacon_get_tim+0xb1/0x5d0 [ 916.614178][ C1] ? __ieee80211_beacon_get+0x2110/0x2110 [ 916.620048][ C1] mac80211_hwsim_beacon_tx+0x1d2/0xaa0 [ 916.625679][ C1] __iterate_interfaces+0x21e/0x4b0 [ 916.630928][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 916.637248][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 916.643562][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 916.650766][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x170 [ 916.657856][ C1] mac80211_hwsim_beacon+0xd0/0x1e0 [ 916.663108][ C1] ? hw_scan_work+0xf20/0xf20 [ 916.667867][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 916.673197][ C1] ? hrtimer_interrupt+0x980/0x980 [ 916.678386][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 916.684540][ C1] hrtimer_run_softirq+0x196/0x2c0 [ 916.689669][ C1] handle_softirqs+0x2ee/0xa40 [ 916.694513][ C1] ? run_ksoftirqd+0xc6/0x120 [ 916.699226][ C1] ? do_softirq+0x240/0x240 [ 916.703819][ C1] ? preempt_schedule_common+0xa6/0xd0 [ 916.709416][ C1] ? run_ksoftirqd+0xa3/0x120 [ 916.714219][ C1] run_ksoftirqd+0xc6/0x120 [ 916.718848][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 916.724114][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 916.729498][ C1] ? smpboot_thread_fn+0x2c3/0xa30 [ 916.734669][ C1] ? smpboot_thread_fn+0x4e7/0xa30 [ 916.739790][ C1] ? smpboot_thread_fn+0x63c/0xa30 [ 916.744949][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 916.750186][ C1] smpboot_thread_fn+0x52c/0xa30 [ 916.755161][ C1] ? smpboot_thread_fn+0x4a/0xa30 [ 916.760201][ C1] kthread+0x28d/0x320 [ 916.764292][ C1] ? cpu_report_death+0x2b0/0x2b0 [ 916.769350][ C1] ? kthread_blkcg+0xd0/0xd0 [ 916.774065][ C1] ret_from_fork+0x1f/0x30 [ 916.778500][ C1] [ 916.781539][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 916.788824][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.127-syzkaller #0 [ 916.796798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 916.806846][ C1] Call Trace: [ 916.810119][ C1] [ 916.813045][ C1] dump_stack_lvl+0x1e3/0x2cb [ 916.817763][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 916.823312][ C1] ? panic+0x764/0x764 [ 916.827391][ C1] ? 0xffffffffa000095c [ 916.831566][ C1] ? vscnprintf+0x59/0x80 [ 916.835907][ C1] panic+0x318/0x764 [ 916.839830][ C1] ? __warn+0x169/0x520 [ 916.844007][ C1] ? memcpy_page_flushcache+0xfc/0xfc [ 916.849401][ C1] ? ret_from_fork+0x1f/0x30 [ 916.854014][ C1] __warn+0x348/0x520 [ 916.858005][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.863750][ C1] report_bug+0x2af/0x500 [ 916.868080][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.873824][ C1] handle_bug+0x3d/0x70 [ 916.877993][ C1] exc_invalid_op+0x16/0x40 [ 916.882493][ C1] asm_exc_invalid_op+0x16/0x20 [ 916.887349][ C1] RIP: 0010:__ieee80211_beacon_get+0x1abc/0x2110 [ 916.893699][ C1] Code: ff ff ff e8 a6 7f 50 f7 0f 0b 48 8b 7c 24 20 e8 ea 31 66 fe e9 6f e8 ff ff e8 90 7f 50 f7 0f 0b e9 92 ed ff ff e8 84 7f 50 f7 <0f> 0b e9 26 f1 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fc e8 [ 916.913299][ C1] RSP: 0018:ffffc900001b76c0 EFLAGS: 00010246 [ 916.919372][ C1] RAX: ffffffff8a3a1d1c RBX: 0000000000000000 RCX: ffff888018c61dc0 [ 916.927366][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 916.935417][ C1] RBP: ffffc900001b78d0 R08: ffffffff8a3a0e3c R09: ffffffff8a3a0642 [ 916.943392][ C1] R10: 0000000000000003 R11: ffff888018c61dc0 R12: dffffc0000000000 [ 916.951356][ C1] R13: 1ffff92000036ef0 R14: ffff8880580c2258 R15: ffffffff8a3a0310 [ 916.959322][ C1] ? __ieee80211_beacon_get+0xb0/0x2110 [ 916.964885][ C1] ? __ieee80211_beacon_get+0x3e2/0x2110 [ 916.970519][ C1] ? __ieee80211_beacon_get+0xbdc/0x2110 [ 916.976155][ C1] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 916.981887][ C1] ? print_irqtrace_events+0x210/0x210 [ 916.987353][ C1] ? __ieee80211_beacon_get+0xb0/0x2110 [ 916.992931][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 916.998929][ C1] ? __lock_acquire+0x125b/0x1f80 [ 917.003958][ C1] ? mark_lock+0x9a/0x340 [ 917.008303][ C1] ? __lock_acquire+0x125b/0x1f80 [ 917.013382][ C1] ieee80211_beacon_get_tim+0xb1/0x5d0 [ 917.018886][ C1] ? __ieee80211_beacon_get+0x2110/0x2110 [ 917.024645][ C1] mac80211_hwsim_beacon_tx+0x1d2/0xaa0 [ 917.030226][ C1] __iterate_interfaces+0x21e/0x4b0 [ 917.035437][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 917.041682][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 917.047925][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 917.055209][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x170 [ 917.062233][ C1] mac80211_hwsim_beacon+0xd0/0x1e0 [ 917.067437][ C1] ? hw_scan_work+0xf20/0xf20 [ 917.072116][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 917.077351][ C1] ? hrtimer_interrupt+0x980/0x980 [ 917.082463][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 917.088554][ C1] hrtimer_run_softirq+0x196/0x2c0 [ 917.093702][ C1] handle_softirqs+0x2ee/0xa40 [ 917.098474][ C1] ? run_ksoftirqd+0xc6/0x120 [ 917.103151][ C1] ? do_softirq+0x240/0x240 [ 917.107687][ C1] ? preempt_schedule_common+0xa6/0xd0 [ 917.113144][ C1] ? run_ksoftirqd+0xa3/0x120 [ 917.117848][ C1] run_ksoftirqd+0xc6/0x120 [ 917.122363][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 917.127557][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 917.132936][ C1] ? smpboot_thread_fn+0x2c3/0xa30 [ 917.138088][ C1] ? smpboot_thread_fn+0x4e7/0xa30 [ 917.143205][ C1] ? smpboot_thread_fn+0x63c/0xa30 [ 917.148419][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 917.153619][ C1] smpboot_thread_fn+0x52c/0xa30 [ 917.158565][ C1] ? smpboot_thread_fn+0x4a/0xa30 [ 917.163684][ C1] kthread+0x28d/0x320 [ 917.167746][ C1] ? cpu_report_death+0x2b0/0x2b0 [ 917.172790][ C1] ? kthread_blkcg+0xd0/0xd0 [ 917.177376][ C1] ret_from_fork+0x1f/0x30 [ 917.181798][ C1] [ 917.185143][ C1] Kernel Offset: disabled [ 917.189501][ C1] Rebooting in 86400 seconds..