last executing test programs: 38.616858712s ago: executing program 2 (id=189): sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4062, 0x0, 0xfde}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfefc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') renameat2(r3, &(0x7f0000000c80)='./file0\x00', r3, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x5452, 0x20000000) set_mempolicy(0x2, &(0x7f0000000080)=0xee02, 0xa) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000a02000/0x4000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_submit(0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wg2\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@empty, 0x4e24, 0xb3, 0x4e24, 0x7, 0xa, 0x80, 0x20, 0x8a, r7}, {0x0, 0x0, 0x7ea1, 0xe12, 0x9302, 0x50e, 0xc}, {0xc8f8, 0x400, 0x4, 0x1}, 0x3, 0x6e6bbe, 0x1, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4, 0x0, 0x200, 0x800}}, 0xe8) 38.496665421s ago: executing program 1 (id=190): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000019640)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) capset(0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003f1100004010200040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r4, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000900), {[{{@ip={@local, @multicast1, 0xff, 0xff000000, 'veth0_to_bridge\x00', 'lo\x00', {0xff}, {}, 0x6c, 0x3, 0x58}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x5, 0x0, 0x1eb400, '\x00', 'syz1\x00', {0x200000}}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfb, 0xe, "ad2e306b62c49dfbc6bb296b3a9b73c944fa49f2d17adc92392ab12aded3"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) setsockopt$sock_int(r5, 0x1, 0x31, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000340)="1d3a681ff5", 0x5, 0x4048804, 0x0, 0x0) 37.622075233s ago: executing program 1 (id=191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="3b0200", @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r3, 0x0, 0x0, 0x1, &(0x7f0000000040)="a2", 0x4}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x800, 0x0, @mcast2}, {0xa, 0xfffd, 0x0, @mcast2={0xff, 0x5}, 0x9}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @local}, r6}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(&(0x7f0000000140)={0x20071026}, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000280)=[{}, {0x3, 0x8a, 0x1000}, {0x3, 0x3}], 0x2aaaaaaaaaaaac9d, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ptrace(0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) 37.583802471s ago: executing program 0 (id=192): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x4, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) 37.460914341s ago: executing program 2 (id=193): r0 = socket$tipc(0x1e, 0x5, 0x0) write(r0, &(0x7f0000000000)="f5a473d041fb91ee9411bbf9680a9b5f74bb89d579f15086361a6ed9f456796ebf08ed97b9619167c53d40e3e71aaea78ec5e0d2078dccf26071c13ea15cb3b995f9f667285ff47d2f2d390d347657d44f476cdc78300c9027839fe80a165d3e21090e41b9f789ba8b3bd4d90c0d2afc5b2c0cc654fc0ae4840225ee49071d10953a487d831d93d0a409620491bed16de9bf8e82fe591521f9d665c4dbab551b776bff1d0bb0168e16b4d6356d5107dfc869c69d52450075a771758e15ca499a9649b32986e1e74854da945c5748e8dce8624be085bc5b4e125853ea06a630087ae7dab6f6e2b324db5e", 0xea) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x8, 0x0) syz_emit_ethernet(0x14a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4040800, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000f, 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x422000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001800)=""/202, 0xca}, {0x0}, {0x0}], 0x4, 0xfff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 37.272257563s ago: executing program 0 (id=194): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x1012}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) open(&(0x7f00009e1000)='./file0\x00', 0x450840, 0xd8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x1a3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="bc963e76ebc00bc0e2e92ff7c7dec255b8c66be4d54e8933e69a976b96e945724d6efb96dc3e8f8a2f75094ce9f619f63d553bf837c91b", 0x0, 0x0, 0x0}, 0x38) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00') bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 35.592016671s ago: executing program 0 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000023c7cb082505a4a4c237000000010902120001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = dup2(r2, r2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000001c0)={0x14000000}) unshare(0x6020400) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="cc", 0x1}], 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0414f9f4070009040002000000000000574000000008000f0001000000", 0x24) read$eventfd(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9800000055000001000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000000fe8000000000000000000000000000bb86dd00050404004e947c35000100", @ANYRES32=0x0, @ANYBLOB="00000000ac1414220000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="00000000fc0000000000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x98}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000800ce800007061796c6f616400647c5feca5c4cdb51431793400028008000440000000b5f2d07a400000001408000340000000040800024000000000080007400000000408000840000000000900010073797a30000000000900020073797a3200"/142], 0x9c}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 34.452754431s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x2c, @remote, 0xfffd, 0x2, 'none\x00', 0x0, 0x0, 0x202}, 0x2c) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@empty, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00", 0x4}, 0x3c) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 34.190727926s ago: executing program 2 (id=199): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000019640)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) capset(0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003f1100004010200040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r4, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000900), {[{{@ip={@local, @multicast1, 0xff, 0xff000000, 'veth0_to_bridge\x00', 'lo\x00', {0xff}, {}, 0x6c, 0x3, 0x58}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x5, 0x0, 0x1eb400, '\x00', 'syz1\x00', {0x200000}}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfb, 0xe, "ad2e306b62c49dfbc6bb296b3a9b73c944fa49f2d17adc92392ab12aded3"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) setsockopt$sock_int(r5, 0x1, 0x31, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000340)="1d3a681ff5", 0x5, 0x4048804, 0x0, 0x0) 33.55545713s ago: executing program 0 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x8, 0x0, 0x100000}, 0x20) unshare(0x2a020400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, {{0xf}}}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) fsopen(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f02"], 0x0) 33.14792663s ago: executing program 1 (id=202): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) r3 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) r4 = socket$inet6(0xa, 0x3, 0x3) io_setup(0x9, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) epoll_create1(0x45e201f9eaf0dea0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000180)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x8000, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000002dc0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000200000000000000000000070000000000000003000000000000005b7b7b002c3e30"], 0x24) cachestat(r7, &(0x7f0000000180), &(0x7f00000001c0), 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) 32.889515627s ago: executing program 2 (id=203): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x4, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) 32.49009336s ago: executing program 2 (id=204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x6, 0x4, 0xb, 0x0, '/dev/hwrng\x00'}}, 0x34) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001880)=""/102400, 0x19000}], 0x1, 0x0, 0x90c536e) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getpid() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000ffffffffffffff9600000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(r7, &(0x7f000001c8c0)={0x2020}, 0x160e) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100002, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000100)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) 30.270766128s ago: executing program 0 (id=207): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x5, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r7, &(0x7f0000000040), 0x12) write$cgroup_int(r7, &(0x7f0000000200)=0x200000000000000, 0x12) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = semget$private(0x0, 0x6, 0x0) semtimedop(r8, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(r8, &(0x7f00000001c0)=[{0x3, 0x74, 0x1800}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000080), 0x0, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000300)={0x0, 0x0, 0x13910}, &(0x7f0000000140), &(0x7f0000000040)) 29.935107621s ago: executing program 0 (id=208): r0 = socket(0x28, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000000340)="094fb143daa9baa36aaa2cca06886c533118e05686c3898869409d12f43ca6237c30077b30048fa218b06c1671beff2b31b3cc7cafc952c2b76274fac4eb000337351ed5c7fd6b0207fe074f0b1beca294a8ad5f05e0f712a1cc644eee0639d128216c92db4f29cbf47a7676679e9aa3407acb3d41ede5ad5bdce33d38800870c3c1588f5c3025ada7ee0c7fb2f8a5df", 0x90}], 0x3}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) syz_io_uring_setup(0x5a87, &(0x7f00000004c0), &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYRESHEX=r7], 0x48}}, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0xc008af11, &(0x7f0000000080)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000001c0)={0x59939974c0f71123, 0x1, 0x1, {0x800, 0x1, 0x200, 0xffffffff}}) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xc0, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "24001100"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "8f42"}}}}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000100) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) 28.108765764s ago: executing program 2 (id=211): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xffff, 0x0, 0x0, 0x0, 0xffffff7f}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a0000000000000000000002000000090001007309000000000000140000001100010000000000000000062100000a"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x730, 0x8, 0x7}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000300)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xad, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x29, 0xe9, 0x81, 0x6, 0x13, @mcast2, @local, 0x10, 0x7, 0x7f, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000011c0)=[{0x4c}, {0x6}]}) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGNPMODE(r9, 0x4008744b, &(0x7f0000000000)={0x283}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="0300000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) 28.025244942s ago: executing program 1 (id=212): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000004ec0)=ANY=[@ANYBLOB="b5c10fa3a100c053485ec63cad523783e83483ddbf94e721f0afc0de53f5cef653d6db77c27320c5f211005b1b33c470212d0ecfbb89d451be208c71c90d27e17d9d040378a86e6c5fde8642b0647c022e64ea6c0afe95cc99611803cda4aac0971dfe8908ddf17c8f5ea018d7325c7242b3c72aa9ccce07d8418f43f1f230c09c6c4ac1278a658a45d4dfe9b6e4adbff60b609c34a9c5d3cf31b7c17ebdedafab85a1b9ebf03e9bc5e9b5a19fd8ef6ea90ebc5badd420b5a0dc51cd6c2a70359b7b8446bf53ecdd75f0572d570dc83114413e34354ed3e389e5", @ANYRES16=0x0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) lstat(0x0, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) r3 = socket(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/54, 0x36}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/57, 0x39}, {&(0x7f0000003ac0)=""/204, 0xcc}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/231, 0xe7}, {&(0x7f0000004cc0)=""/210, 0xd2}], 0xa, 0x0) semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) times(&(0x7f0000000040)) sysinfo(&(0x7f0000001a80)=""/131) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r8, 0x7, 0x0) dup3(0xffffffffffffffff, r7, 0x0) syz_clone(0xc8306400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 27.506220866s ago: executing program 1 (id=214): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) 13.953854352s ago: executing program 3 (id=227): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0100008000000000000000119047515ac525fb37657800000000ffffffff0b009078000000004500000000000000000000007f00000100000000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) syz_emit_ethernet(0x223, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "81d90d", 0x1ed, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, {[@srh={0x0, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@private0, @private0, @mcast1, @empty, @mcast2, @remote, @private1, @empty]}, @fragment, @dstopts={0x0, 0x1b, '\x00', [@jumbo, @generic={0x0, 0xce, "4f233a0c5e85917ad816d2f488d56905fb89f4a356f10500f721d11d980999ee7dcc9b9bf0b130eadd58a2fc334f029a9c394f0f6969fa090a960806c6c3ff282cd243af8ce4666a9942999dd8acf51711e37278b756fed33c5ec3e44104974c6cbfa9bcde6a3514afb9d943fd6e6f24b6a3641ffaee9455670581f42a20925ebd4d3814fc425377fba1bbdb64bea0d58636b775d8f500250457cc60b2b5db2e51800285579a082f0a3095bde6e0cc1ac7c764729cfbba3df115848dc44834df693e33255021346a205558b9f285"}, @enc_lim]}, @fragment, @fragment, @routing, @fragment, @fragment], "f010ed505ee62702eb030a634bdac69ca1ae3cf75e50378c7f0a115a4b9ccf98d34b77274570abd2fc77fbbbd14aab8e6d024ebcfdd0367710eefd58975c7db284454504417201bce7eda145ce"}}}}}, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100e50008000500aa521cd814000200776730"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = io_uring_setup(0x51fc, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES16=r8, @ANYRES16=r8, @ANYRES64=r7, @ANYRES64=r3, @ANYRES64=r9, @ANYRESHEX=r8, @ANYRES64=r0, @ANYRES32=r2], 0x30}}, 0x20044810) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x67, 0x0, 0x0) mlock(&(0x7f0000443000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x0, 0x2, 0x8) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 11.981483809s ago: executing program 4 (id=229): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0x4, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x0, [{@multicast2}, {@dev, 0x5}, {@broadcast, 0x2}, {@empty}, {@private, 0x3}, {@private}]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x4, 0x40000, 0x0, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81a000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103"], 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x20000000000001ee, &(0x7f00000000c0)}) sysfs$1(0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 11.330172497s ago: executing program 3 (id=230): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0413"], 0xa) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x28180, 0x100, 0x31}, 0x18) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000dc7a2240c80a2103c9a1010203010902120001000000000904000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x5, 0x1f, 0x40, 0xbf, 0x6}, 0xe3, &(0x7f0000000880)={0x5, 0xf, 0xe3, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf7, "ba333e9306beb6b36ffe365e6a7e80de"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3a59eceb343c6c04d148d16c6ec62dea"}, @generic={0x97, 0x10, 0xa, "f1947a80b4130dec26569d14a2163d7b72049dc64684bf3213a663317b8aa41ff05699a70d72b27c91b3785100e264418c03547f17ab4549edc2f7568c6a48f0a5049be1f6b0035a1c914459a11c1324280951ff21d48d2847b802b375ec47fa5ff589587737f7f1fb56089f0b493e302c18b8cad765556a1b4f0bdbe0cf666909d1878c7702c2e99be024b4c3f1e476c4e0e582"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x0, 0x4, 0x8000, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x4, 0xf0f, 0x7, [0x3f00, 0x0]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x820}}, {0xc7, &(0x7f0000000600)=@string={0xc7, 0x3, "d521dd75c0e7981c7e16a8ef7dd8985932b3c68c081746e4f04fd2a19992ad63a43538500d9cb9db0e7da25a515ddd5b327448dba2d641b48d6dc29f4236ffe77dd02616d4287138b8b4012a9097519190e260306b9cce53ba4474aa48616aa11c38eb991a67770082eef0afe68836fad60b4965147c2bd85535fdec8dc7be1665c589a952eb11f6b91ac0915b36ae3181b39ab67d79b6b540c2e05a00fe9b5ad4d7f9ec0beb875acd4747259b9425c46bae345ce30f8bf10e2be6b7b59380b8aea30e6bed"}}, {0x79, &(0x7f0000000700)=@string={0x79, 0x3, "32fe23277de15c78e91f8a5c3b04b8994fd7d643605e6e8ca90e00f8afb2c9cc918d6682f023eab8d2f1b113653e5114951f6067e2a7209584fca8f348f08484b8f7d4941670356b2db32348c23ef3956554643426849c36f806b7f1392eacc2b0d2a67708f476b7d51d6717810d65b89cdd97458cb0f0"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x401}}]}) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x2, 0x0, @local}, 0x1c) r5 = socket(0x2, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) socket$netlink(0x10, 0x3, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) fsopen(&(0x7f0000000500)='qnx4\x00', 0x0) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000017c0)=0x8000) close_range(r5, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40082104, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c110000000011000003000000000000000000"], 0x14) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x8000, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xee, &(0x7f0000000200)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414c714000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff020000000000000000000000000001"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) 10.145868388s ago: executing program 4 (id=231): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x9c8, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x930, 0x2a8, 0x2a8, 0x930, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xc6, 0x70, 0x90, 0xc000000}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x878, 0x8a0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x40}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {0xd80, 0x1}, {0xffffffff, 0x1}, {0xfffff001}, {0x4, 0x93f50027c4fa988}, {0x8}, {0xc, 0x3}, {0x800}, {0x4}, {0x5}, {0x37928dc6, 0x3}], [{0x26, 0x2}, {0x101, 0x6114}, {0x6}, {0xfffffeff, 0xfffffc01}, {0xf7, 0x7fffffff}, {0x400, 0x3}, {0xfffffff9, 0x3}, {0x2, 0x9}, {0xa, 0xfffffeff}, {0x401, 0x9}, {0x3, 0x4}], 0x5, 0x7}, {[{0x3}, {0x2, 0x3}, {0x8, 0x3}, {0x6bbf76f5}, {0x30, 0x1}, {0x30f, 0x3}, {0x82df, 0x3}, {0x800}, {0x10000, 0x2}, {0x300}, {0x1, 0x1}], [{0x81, 0x1}, {0x2, 0x9}, {0x9, 0x7fff}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0xfffffff2}, {0x9, 0xa}, {0x9}, {0x5, 0xfffffffb}, {0x8, 0x3}, {0x2, 0x7}], 0xb, 0xb}, {[{0x1}, {0x1, 0x5}, {}, {0xdec, 0x1}, {0x41dc}, {0x1, 0x1}, {0x28000, 0x1}, {0x4, 0x1}, {0xa858, 0x3}, {0x3, 0x1}, {0x12ca, 0x1}], [{0x7fffffff, 0x1}, {0x8000, 0x48000000}, {0xd, 0x9}, {0xa, 0x8}, {0x7fffffff, 0x180000}, {0x80000001, 0x9b7}, {0x5, 0xd}, {0x100, 0x101}, {0x7, 0x2}, {0x7, 0x5}, {0x8000, 0xe}], 0x4, 0x29}, {[{0x572c, 0x3}, {0x953, 0x3}, {0x2, 0x3}, {0xcb43, 0x3}, {0x7fff}, {0x2}, {0x9}, {0x80000000}, {0x80, 0x3}, {0x2, 0x2}, {0x10000, 0x1}], [{0x40, 0xb944}, {0xa3, 0x3}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x401}, {0x6, 0xf2ee}, {0x5aef, 0x5}, {0x1ff, 0x9}, {0x7fffffff, 0xf}, {0x7, 0xfff}, {0xf, 0xe}], 0x9, 0x5}, {[{0x7f, 0x1}, {}, {0x5}, {0x1, 0x3}, {0xd}, {0x3}, {0x4, 0x3}, {0x18f, 0x2}, {0x74, 0x3}, {0x9, 0x3}, {0x2}], [{0x6, 0x9}, {0x810, 0xfffffffa}, {0xffc, 0x3}, {0x5e, 0x3}, {0x3, 0x1}, {0x200, 0xf}, {0x1000, 0x9}, {0x7, 0x1}, {0x3, 0xfffffffc}, {0x4}, {0xffff, 0xa}], 0x8, 0x3}, {[{0x200, 0x3}, {0x80, 0x2}, {0x10001, 0x2}, {0x2, 0x1}, {0xa2f, 0x2}, {0x2}, {0x2, 0x1}, {0x8187, 0x3}, {0x1, 0x2}, {0xff}, {0x6}], [{0xa, 0x10}, {0xd6, 0x5}, {0x4, 0xa}, {0x10001, 0x5}, {0x7, 0x7}, {0x4, 0x7f}, {0x2, 0x8}, {0x5, 0x6}, {0x4, 0xa8}, {0x6, 0x5}, {0xfffffff6, 0xc}], 0x8, 0x9}, {[{0xff}, {0x4}, {0xffffffff, 0x2}, {0x817d}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0xca, 0x3}, {0x7, 0x2}, {0xa6, 0x1}, {0x4}], [{0x4, 0x9}, {0x5, 0x800010}, {0x9, 0x4}, {0x4, 0xb}, {0x0, 0x1}, {0x34c, 0x6}, {0xf5, 0x9a}, {0x5, 0xffffffff}, {0x4, 0x6}, {0x1, 0x7}, {0x10000, 0xe}], 0x9, 0x7}, {[{0x7fff, 0x2}, {0x8, 0x2}, {0xc, 0x2}, {0x883, 0x3}, {}, {0x1, 0x2}, {0xd3f, 0x3}, {0xff, 0x2}, {0x7, 0x3}, {0x8, 0x2}, {0x10, 0x2}], [{0x7e7, 0x8}, {0xc86d, 0x5}, {0x0, 0x1}, {0x101, 0x7fff}, {0x10, 0xfffffffb}, {0xf, 0x5}, {0x44b, 0x6}, {0x8, 0xfffffff7}, {0x24, 0x80}, {0x9, 0xfffffff9}, {0xfffffff7, 0x7}], 0x7, 0x5}, {[{0x1, 0x1}, {0x7f}, {0x9, 0x1}, {0xfffffff9}, {0x5, 0x2}, {0x7, 0x1}, {0x80000001, 0x2}, {0x4, 0x3}, {0xffff5b17}, {0xbc, 0x2}, {0x8, 0x1}], [{0x0, 0x2}, {0x5, 0x6}, {0x4, 0x3}, {0xe, 0xb}, {0x7, 0xa01}, {0x4, 0x10001}, {0x10040000, 0x5f}, {0x2, 0x6}, {0x9af, 0x5}, {0x3ff, 0x80}, {0x7, 0x1}], 0xa, 0x8}, {[{0xd4, 0x3}, {0x6, 0x1}, {0xfffffff7}, {0x8}, {0x6, 0x2}, {0xc7, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x6}, {0x4, 0x2}, {0xfffffffe, 0x3}], [{0x2, 0x6}, {0x0, 0x7}, {0x9, 0x5bef1297}, {0x300, 0x40}, {0x2, 0x5}, {0xfff}, {0x7fffffff, 0x59c3}, {0x4, 0x3f80}, {0x6, 0x8}, {0x401, 0x3}, {0x6, 0x1}], 0xa, 0x6}, {[{0x800, 0x1}, {0x1, 0x3}, {0x9, 0x1}, {0x8, 0x3}, {0x1, 0x1}, {0x9, 0x1}, {0x10000, 0x1}, {0xb8, 0x3}, {0xc, 0x3}, {0x1}, {0x7fff, 0x3}], [{0x7, 0x9}, {0x800, 0xbd}, {0xfffffffc, 0x6}, {0xe, 0x3}, {0x9, 0x1}, {0x2, 0x30}, {0x5e, 0x7d}, {0x2, 0x7}, {0x9}, {0xd, 0xc}, {0x3, 0xff}], 0x5, 0x1}], 0xb}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa28) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100003a14e94023398a71c5ba0102030109021200010000000050166b0904000000ff2fff00"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x15, 0x0, 0x4, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x2, 0x0) socket(0xb915a2de6088b7c3, 0x3, 0x4000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r8, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) 7.626565738s ago: executing program 4 (id=232): r0 = socket$inet(0x2, 0x200000003, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="0b305bd725e37acbc848944b44bcd85e97c075af789e8d5e3059e36249d2", 0x1e}, {&(0x7f0000000040)="f1bb811c1e77073a8ff6fe1eedffacdebba4a4bc41afd16b2317cf891542281f6c37a60bf60e", 0x26}, {&(0x7f0000000100)="896437188b379adda89b11f119eff7ae762e011cf99cf8378efc4c3e0aed75c3c5ce8207a69519a322c95825a0baa4943f3cc20a4d7a430aad2d0090202eac530045cc7f9448aee4940f717c8144b32ba42ee73a4abb7c7113bb0172392c7f36700099c66f9cf1e6979d09cab4d0bc902fe6f276d7454bd59dcf948aef", 0x7d}], 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) fremovexattr(r2, &(0x7f0000000380)=@known='trusted.overlay.redirect\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB=',', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x800, 0x0) fdatasync(r7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f00000000c0)) ioctl$KDDELIO(r1, 0x4b35, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x4268c2, 0x0) 6.420224993s ago: executing program 3 (id=233): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000019640)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) capset(0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003f1100004010200040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r4, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x31, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000340)="1d3a681ff5", 0x5, 0x4048804, 0x0, 0x0) 5.383330025s ago: executing program 4 (id=234): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x6002, 0x12) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="d30b7674c0c8195289c92f0000", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf25090000001c000780080002004c720000080002000200000008000200790900001800078008000200060000000c0004000000000000000090"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xbe9ad5817ce3da8a) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000027c0)={r6}, 0x8) socket(0x40000000015, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x8919, 0x0) 4.281702189s ago: executing program 3 (id=235): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "39f0cabb08d436533f351ba72747464b5a5597e4097339f3ff9bcf16f32592462fb261294bd4987589e57f420ba88d24bd0dcbfb31159773c7e46fc29c67fdc7ceb8fdf067df566c39672e1edcd65d9306add084e6fbf201219d74f179055e438809fe94191b59a8fd9626eead5db52b4c29dc7866ac4cf764ab0a4f61811ab68500c0b799957c3015021de1f153f31c2f714ad47220f520002aec3ae1aac37b0b"}, 0xa5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0xef, &(0x7f0000000300)={@broadcast, @empty, @void, {@x25={0x805, {0x0, 0x96, 0xf7, "76b7f46ae5fd68d0fc132b61073fb4376b4b1d3b3b8ab04f90a7a41366d3a5ddedb4fc1552452319e8a8e0c6c0f287d58e6ca908487886d9286c97da8b9d6c68979736aa53d77cd3252fc8c16d6039be5e0e064d4e949ee9d073fc533706ee25657b4ca118053bfd042fd275d7d451ab8b5bef3f93107bd73d9f5692691b9e848e989989036234e8d55ea4e42a704b0df9cea65ce17770415fcf0bd21d73d0e0311f45dc6da0b22b62adf9b33ebc18f7bbd09ff2a92fb46d0d1b49c448aed4d1f0072bdad6651d196bc95ef0e991f4f9cb9389097520e55209aaea74e726"}}}}, &(0x7f0000000200)={0x1, 0x3, [0xeb9, 0x3ce, 0xe83, 0x19d]}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x5c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x0, @device_a, 0x0, @value=@device_b, 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000580)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x18, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000fe8000000000000000000000000000ea71e0e3f17929fa7881ad506193e2bb00000000000000000000000000000000e35e70ed86290d716effcd24f73c2804982132fe67eb39a9918cc4071d69b49d3e5b2a316d36c5b8938096b728d25c4e4be3761bc2fa5336e58f53b7a3529a8efb0f722e95553fbee65ca67506ea8797c026bd06ac537c38e222118f3098099ef6cab7113f2c6f07620b9037282c89e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) syz_emit_ethernet(0xfa, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "75c5a0", 0xc4, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@routing={0x1, 0x8, 0x1, 0xf7, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @empty]}, @dstopts={0x6c, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x2, 0x40, 0x4, [@local]}, @routing={0x0, 0x4, 0x0, 0x40, 0x0, [@mcast2, @empty]}], @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, 0x8, 0xf001, 0x0, 0x4e22, 0x4e23}, 0x4, 0x2}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x34325852}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00), 0x0) 3.285888497s ago: executing program 4 (id=236): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}, 0x38) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000000200)=""/206, 0xce, 0x10001, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0xffffffff, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001880)=0xffffff7b) r6 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x290601) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000015c0)=ANY=[]) ioctl$SG_BLKSECTGET(r7, 0x1267, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4c00000009aec14d04a5c88403dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="42000000021801000000350076657468315f746f5f626f6e64006ce8db4e11fc00000800", @ANYRESDEC=r8, @ANYRES64=r4], 0x4c}}, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'syzkaller\x00'}, {0x20, '\x00'}, {0x20, '\r/'}, {0x20, '\x00'}], 0xa, "b6c59f7ab4907d0999ec091f6f"}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)='M', 0x1}], 0x1}, 0x4000041) recvmmsg$unix(r9, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, &(0x7f0000000680)={0x0, 0x3938700}) fsmount(0xffffffffffffffff, 0x0, 0x78) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x6, 0x1ff, 0x0, 0x40, 0x1, 0x80000001, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.135830798s ago: executing program 3 (id=237): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f00000001c0), 0x0}}], 0x58}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') read$FUSE(r4, &(0x7f000000db00)={0x2020}, 0x2020) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x208000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2b0000000000000000e1"], 0x2b) sendfile(r7, r6, 0x0, 0x53d2) r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/90, 0x5a}}], 0x1, 0x10042, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe8000000000bb159a820f000000000000000000bbe002000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.062821238s ago: executing program 4 (id=238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000031db0000000000ffffffed0900010073797a30000000002c000000030af799bab57e1d03b176e3e96700000000000000000000000000000900010073797a30000000000900030073797a30000000006c00000000000000000008000a001cca78ae01006c696d69740000001c0002800c00014000000000000000000c0002400000000000000000140001800b0001006c6f6f6b757000000400028009000100"/214], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) fanotify_init(0x1, 0x1000) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x321001) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x40c32aec156fcff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100fffffffffffffff50000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000a40000000000900010073797a30000000001400000011000100"/163], 0xa4}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000b40)={0x2020}, 0x2020) 0s ago: executing program 3 (id=239): socket(0x1e, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44}, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xb, 0x8, 'vxcan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) kernel console output (not intermixed with test programs): man_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.693591][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.720970][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.753416][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.764707][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.776251][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.792611][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.827234][ T5249] veth1_macvtap: entered promiscuous mode [ 101.892341][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.930856][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.949278][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.994443][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.034262][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.052791][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.068748][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.099693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.178472][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.219397][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.263646][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.326334][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.406887][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.434342][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.468730][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.492423][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.517474][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.534431][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.550071][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.562963][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.626578][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.828374][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.860263][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.895039][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.923510][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.935898][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.954693][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.968219][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.989950][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.029243][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.080830][ T5296] mmap: syz.4.5 (5296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.217036][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.234756][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.260133][ T5249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.297229][ T5249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.319581][ T5249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.328593][ T5249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.475467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.485051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.592359][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.668678][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.694530][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.763075][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.773094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.789934][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.808844][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.876982][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.949308][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 104.011811][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.077042][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.100965][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.113645][ T8] usb 5-1: config 0 descriptor?? [ 104.207119][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.249701][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.679354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 104.688976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.810952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.960355][ T5310] random: crng reseeded on system resumption [ 105.647766][ T5325] fuse: Bad value for 'fd' [ 105.806256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.830557][ T5315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.850956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.909695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 106.171625][ T8] pegasus 5-1:0.0: probe with driver pegasus failed with error -110 [ 106.957657][ T5280] usb 5-1: USB disconnect, device number 2 [ 107.134317][ T58] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.306244][ T5339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'. [ 107.400755][ T58] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 107.430699][ T58] usb 2-1: config 0 has no interface number 0 [ 107.466328][ T58] usb 2-1: config 0 interface 4 has no altsetting 0 [ 107.500677][ T58] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.547746][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.604056][ T58] usb 2-1: config 0 descriptor?? [ 107.630205][ T58] cp210x 2-1:0.4: cp210x converter detected [ 107.724808][ T5233] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 107.732063][ T5233] Bluetooth: Wrong link type (-22) [ 107.845850][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 108.231028][ T5334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8'. [ 108.396645][ T58] cp210x 2-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 108.480551][ T58] usb 2-1: cp210x converter now attached to ttyUSB0 [ 108.519859][ T58] usb 2-1: USB disconnect, device number 2 [ 108.602052][ T5355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.638156][ T58] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.671311][ T58] cp210x 2-1:0.4: device disconnected [ 109.047235][ T5364] Cannot find set identified by id 0 to match [ 109.290295][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.574862][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 109.631142][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.670675][ T5367] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17'. [ 109.670944][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.712784][ T5369] Zero length message leads to an empty skb [ 109.739969][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.794436][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.795569][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.795603][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.924371][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.127933][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 110.137678][ T58] usbtmc 5-1:16.0: can't read capabilities [ 110.168845][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.436725][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.584397][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.680532][ T5363] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.691310][ T5363] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.700752][ T5363] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.710021][ T5363] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.144576][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 111.196718][ T11] bridge_slave_1: left allmulticast mode [ 111.212948][ T11] bridge_slave_1: left promiscuous mode [ 111.227164][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.277080][ T11] bridge_slave_0: left allmulticast mode [ 111.302753][ T11] bridge_slave_0: left promiscuous mode [ 111.354523][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.454769][ T5387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22'. [ 111.700605][ T5233] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 111.709441][ T5233] Bluetooth: hci3: Injecting HCI hardware error event [ 111.718025][ T5236] Bluetooth: hci3: hardware error 0x00 [ 112.096617][ T58] usb 5-1: USB disconnect, device number 3 [ 112.160031][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.180678][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.188963][ T4622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.202637][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.224426][ T4622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.232336][ T4622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.481966][ T5396] capability: warning: `syz.2.24' uses 32-bit capabilities (legacy support in use) [ 112.766567][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.782225][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.807040][ T11] bond0 (unregistering): Released all slaves [ 112.851310][ T5384] netlink: 76 bytes leftover after parsing attributes in process `syz.3.23'. [ 112.917707][ T5389] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.928465][ T5389] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.937879][ T5389] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.946921][ T5389] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.014702][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 113.642254][ T5413] input: syz1 as /devices/virtual/input/input5 [ 113.857367][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 113.974053][ T5413] netlink: 'syz.0.27': attribute type 8 has an invalid length. [ 114.081018][ T5418] trusted_key: encrypted_key: insufficient parameters specified [ 114.139614][ T11] hsr_slave_0: left promiscuous mode [ 114.174607][ T11] hsr_slave_1: left promiscuous mode [ 114.196787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.214691][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.237554][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.258360][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.339440][ T5236] Bluetooth: hci2: command tx timeout [ 114.448539][ T11] veth1_macvtap: left promiscuous mode [ 114.496398][ T11] veth0_macvtap: left promiscuous mode [ 114.524712][ T11] veth1_vlan: left promiscuous mode [ 114.552218][ T11] veth0_vlan: left promiscuous mode [ 114.839575][ T5281] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.041150][ T5281] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 115.057776][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.084458][ T5281] usb 1-1: config 0 descriptor?? [ 115.122205][ T5281] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 116.006748][ T11] team0 (unregistering): Port device team_slave_1 removed [ 116.108007][ T11] team0 (unregistering): Port device team_slave_0 removed [ 116.413139][ T5236] Bluetooth: hci2: command tx timeout [ 116.874176][ T5445] netlink: 'syz.0.31': attribute type 3 has an invalid length. [ 116.885766][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 117.090163][ T5281] gspca_pac7311: reg_w() failed index 0x29, value 0x53, error -110 [ 117.099443][ T5435] tipc: Started in network mode [ 117.121307][ T5281] pac7311 1-1:0.0: probe with driver pac7311 failed with error -110 [ 117.129649][ T5435] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 117.129748][ T5435] tipc: Enabling of bearer rejected, failed to enable media [ 117.265736][ T5446] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 117.484417][ T5448] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 117.652143][ T5462] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 117.736180][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 117.846147][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 118.315991][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.345430][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.369328][ T5393] bridge_slave_0: entered allmulticast mode [ 118.431611][ T5393] bridge_slave_0: entered promiscuous mode [ 118.456860][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.489483][ T5236] Bluetooth: hci2: command tx timeout [ 118.504577][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.588092][ T5393] bridge_slave_1: entered allmulticast mode [ 118.622099][ T5393] bridge_slave_1: entered promiscuous mode [ 118.719201][ T5280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.821508][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.843794][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.000421][ T5281] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.009170][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 119.041272][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.042006][ T5393] team0: Port device team_slave_0 added [ 119.075172][ T5280] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.115364][ T941] usb 1-1: USB disconnect, device number 2 [ 119.128197][ T5280] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.161805][ T5393] team0: Port device team_slave_1 added [ 119.167517][ T5280] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.220507][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 119.237366][ T5280] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.243925][ T5281] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 119.277158][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.279136][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.349471][ T5281] usb 4-1: config 0 descriptor?? [ 119.371461][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.383407][ T5281] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 119.418038][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.630258][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.759640][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.801212][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.819305][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 119.827747][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.958791][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.442734][ T5393] hsr_slave_0: entered promiscuous mode [ 120.491858][ T5393] hsr_slave_1: entered promiscuous mode [ 120.569625][ T5236] Bluetooth: hci2: command tx timeout [ 120.747153][ T5281] gspca_nw80x: reg_w err -110 [ 120.774785][ T5281] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 121.252450][ T9] usb 4-1: USB disconnect, device number 2 [ 121.430130][ T5280] usb 5-1: usb_control_msg returned -71 [ 121.440947][ T5280] usbtmc 5-1:16.0: can't read capabilities [ 121.442076][ T5510] process 'syz.2.39' launched './file0' with NULL argv: empty string added [ 121.576517][ T5280] usb 5-1: USB disconnect, device number 4 [ 121.876956][ T5524] input: syz1 as /devices/virtual/input/input6 [ 122.132057][ T5527] netlink: 'syz.4.41': attribute type 8 has an invalid length. [ 122.430610][ T5538] netlink: 'syz.2.43': attribute type 12 has an invalid length. [ 122.479497][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.635687][ T5393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.700683][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 122.718919][ T5393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.747699][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 122.785038][ T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 122.829121][ T9] usb 4-1: config 0 has no interface number 0 [ 122.876323][ T9] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.876375][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.876416][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.894734][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 122.894776][ T9] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 122.894803][ T9] usb 4-1: Product: syz [ 122.900571][ T9] usb 4-1: config 0 descriptor?? [ 122.930445][ T5393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.974845][ T5393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.303479][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.377265][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.428673][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.428899][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.492710][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.492870][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.542218][ T9] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input7 [ 123.632535][ T9] input: failed to attach handler kbd to device input7, error: -5 [ 123.899773][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.407702][ T5393] veth0_vlan: entered promiscuous mode [ 124.511776][ T5393] veth1_vlan: entered promiscuous mode [ 124.775211][ T5393] veth0_macvtap: entered promiscuous mode [ 124.808057][ T5393] veth1_macvtap: entered promiscuous mode [ 124.890704][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.909624][ T5281] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.928222][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.949028][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.988143][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.028274][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.064083][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.138912][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.150019][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 125.175132][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.189202][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.206778][ T5281] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 125.221660][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.229256][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.255124][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.285260][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.297731][ T5281] usb 3-1: config 0 descriptor?? [ 125.313598][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.347121][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.358071][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.371860][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.390091][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.443671][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.482447][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.528123][ T5393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.563905][ T5393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.587119][ T5393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.629225][ T5393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.708851][ T5564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.885035][ T5281] usbhid 3-1:0.0: can't add hid device: -71 [ 125.919683][ T5281] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.957833][ T58] usb 4-1: USB disconnect, device number 3 [ 126.003264][ T5281] usb 3-1: USB disconnect, device number 2 [ 126.390727][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.425026][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.556158][ T29] audit: type=1326 audit(1726268675.009:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 126.619332][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.653243][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.664149][ T5596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.684097][ T29] audit: type=1326 audit(1726268675.069:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 126.779005][ T29] audit: type=1326 audit(1726268675.079:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 126.909216][ T29] audit: type=1326 audit(1726268675.079:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 127.166245][ T29] audit: type=1326 audit(1726268675.079:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 127.222895][ T29] audit: type=1326 audit(1726268675.079:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 127.325373][ T29] audit: type=1326 audit(1726268675.079:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 127.359389][ T29] audit: type=1326 audit(1726268675.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f52e9b7def9 code=0x7ffc0000 [ 127.525135][ T5610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.246524][ T5625] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 128.326296][ T5284] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 128.359309][ T5280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.587957][ T5284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.628667][ T5284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.645161][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 128.697790][ T5284] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.741794][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.749444][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.823783][ T5626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.835722][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.862953][ T5284] hub 5-1:1.0: bad descriptor, ignoring hub [ 128.889754][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.926023][ T5280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.926571][ T5639] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.57'. [ 128.959031][ T5639] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.998368][ T5284] hub 5-1:1.0: probe with driver hub failed with error -5 [ 129.031863][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 129.070780][ T5622] syz.2.53 (5622) used greatest stack depth: 19088 bytes left [ 129.082580][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 129.101745][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.123738][ T5284] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.165456][ T5280] usb 2-1: config 0 descriptor?? [ 129.184944][ T5284] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.281632][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.312989][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 129.356353][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.436669][ T29] audit: type=1326 audit(1726268677.899:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.2.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x0 [ 129.458342][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.500140][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.539141][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 129.610752][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.648919][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.718813][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.725858][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.732325][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.739099][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.739295][ T9] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 129.745510][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.759497][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.765948][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.772600][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.778939][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.785705][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.792265][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.798908][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.805450][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.812112][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.818371][ C1] hrtimer: interrupt took 26150255 ns [ 129.824038][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.830170][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.836778][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.843211][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.849850][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.856128][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.862926][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.909239][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 129.923281][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 129.932151][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.953366][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.985604][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.063151][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.063230][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.063264][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.268058][ T5661] netlink: 'syz.4.56': attribute type 30 has an invalid length. [ 130.279523][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 130.285609][ T9] usb usb1-port1: attempt power cycle [ 130.394867][ T25] usb 4-1: usb_control_msg returned -32 [ 130.417309][ T25] usbtmc 4-1:16.0: can't read capabilities [ 130.800137][ T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 130.834857][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 130.999426][ T9] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 131.040457][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 131.040895][ T9] usb usb1-port1: unable to enumerate USB device [ 131.090623][ T5280] usbhid 2-1:0.0: can't add hid device: -71 [ 131.090760][ T5280] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.116439][ T5280] usb 2-1: USB disconnect, device number 3 [ 131.371319][ T58] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.551360][ T58] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 131.551396][ T58] usb 3-1: config 0 has no interface number 0 [ 131.551439][ T58] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.551470][ T58] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.552918][ T58] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 131.552951][ T58] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 131.552975][ T58] usb 3-1: Manufacturer: syz [ 131.555999][ T58] usb 3-1: config 0 descriptor?? [ 132.055585][ T5678] QAT: Device 0 not found [ 132.067409][ T5284] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 132.158109][ T5284] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.454799][ T5236] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 132.454848][ T5236] Bluetooth: Wrong link type (-22) [ 132.454928][ T5236] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 132.454943][ T5236] Bluetooth: Wrong link type (-22) [ 132.454982][ T5236] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 132.454997][ T5236] Bluetooth: Wrong link type (-22) [ 132.455037][ T5236] Bluetooth: Wrong link type (-71) [ 132.455076][ T5236] Bluetooth: Wrong link type (-71) [ 132.493614][ T58] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0002/input/input8 [ 132.527105][ T25] usb 4-1: USB disconnect, device number 4 [ 132.692697][ T58] sony 0003:054C:03D5.0002: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 133.339236][ T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.372991][ T941] usb 5-1: USB disconnect, device number 5 [ 133.609763][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 133.626752][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.675990][ T58] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 133.703343][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.739776][ T5281] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 133.779901][ T58] usb 4-1: config 0 descriptor?? [ 134.007787][ T5714] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 134.173895][ T5693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.291370][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 134.310797][ T5721] xt_bpf: check failed: parse error [ 134.317773][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.354263][ T58] usb 4-1: USB disconnect, device number 5 [ 134.392404][ T5721] x_tables: duplicate underflow at hook 3 [ 135.376465][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.456622][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.570007][ T5284] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.595051][ T25] usb 3-1: USB disconnect, device number 3 [ 135.796528][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.833845][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.855610][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.885881][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.918758][ T5284] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 135.962908][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.026905][ T5284] usb 2-1: config 0 descriptor?? [ 136.212663][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.284219][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.391535][ T5746] team0: Port device virt_wifi0 added [ 136.488802][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.503605][ T5284] appleir 0003:05AC:8241.0003: item fetching failed at offset 5/7 [ 136.531337][ T5284] appleir 0003:05AC:8241.0003: parse failed [ 136.553635][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.582327][ T5284] appleir 0003:05AC:8241.0003: probe with driver appleir failed with error -22 [ 136.599251][ T941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.869654][ T941] usb 4-1: Using ep0 maxpacket: 8 [ 136.884947][ T941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.919760][ T941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.967595][ T941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.981420][ T12] bridge_slave_1: left allmulticast mode [ 136.987150][ T12] bridge_slave_1: left promiscuous mode [ 137.018915][ T941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.023807][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.033935][ T941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.054179][ T12] bridge_slave_0: left allmulticast mode [ 137.064039][ T12] bridge_slave_0: left promiscuous mode [ 137.068192][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.074073][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.099405][ T5280] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.187222][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.205813][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.216912][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.230012][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.256449][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.268215][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.339199][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 137.356220][ T5280] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 137.373442][ T5280] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 137.384024][ T5280] usb 1-1: config 0 has no interface number 0 [ 137.391953][ T5280] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.411015][ T5280] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.425611][ T5280] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 137.474112][ T941] usb 4-1: GET_CAPABILITIES returned 0 [ 137.480970][ T5280] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 137.497455][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 137.508360][ T941] usbtmc 4-1:16.0: can't read capabilities [ 137.527835][ T5280] usb 1-1: Product: syz [ 137.576737][ T5280] usb 1-1: config 0 descriptor?? [ 138.188460][ T25] usb 2-1: USB disconnect, device number 4 [ 138.273415][ T5280] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input9 [ 138.303313][ T5280] input: failed to attach handler kbd to device input9, error: -5 [ 138.422749][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.431188][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.444124][ T5760] syz.2.78 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.940761][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.974534][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.975911][ T5769] netlink: 56 bytes leftover after parsing attributes in process `syz.1.80'. [ 138.998099][ T12] bond0 (unregistering): Released all slaves [ 139.093981][ T5749] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.103177][ T5749] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.112293][ T5749] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.121124][ T5749] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.219718][ T5765] netlink: 168 bytes leftover after parsing attributes in process `syz.2.78'. [ 139.279454][ T12] tipc: Left network mode [ 139.289460][ T5236] Bluetooth: hci3: command tx timeout [ 139.694015][ T5784] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.855815][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 139.978310][ T5792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.82'. [ 140.137617][ T12] hsr_slave_0: left promiscuous mode [ 140.154695][ T12] hsr_slave_1: left promiscuous mode [ 140.186544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.213395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.248163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.311064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.451127][ T5284] usb 4-1: USB disconnect, device number 6 [ 140.474231][ T12] veth1_macvtap: left promiscuous mode [ 140.494059][ T12] veth0_macvtap: left promiscuous mode [ 140.529300][ T12] veth1_vlan: left promiscuous mode [ 140.558640][ T12] veth0_vlan: left promiscuous mode [ 140.608725][ T5280] usb 1-1: USB disconnect, device number 7 [ 140.821303][ T5806] xt_bpf: check failed: parse error [ 140.905479][ T5806] x_tables: duplicate underflow at hook 3 [ 141.139486][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.374930][ T4622] Bluetooth: hci3: command tx timeout [ 141.389396][ T9] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 141.411457][ T9] usb 2-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 141.442797][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 141.453250][ T9] usb 2-1: config 0 has no interface number 0 [ 141.467665][ T9] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 141.481622][ T9] usb 2-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 141.518413][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 141.568494][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.589160][ T9] usb 2-1: Product: syz [ 141.604479][ T9] usb 2-1: Manufacturer: syz [ 141.621035][ T9] usb 2-1: SerialNumber: syz [ 141.636700][ T9] usb 2-1: config 0 descriptor?? [ 141.663491][ T9] cdc_ether 2-1:0.185: skipping garbage [ 141.670293][ T9] cdc_ether 2-1:0.185: skipping garbage [ 141.702381][ T9] cdc_ether 2-1:0.185: skipping garbage [ 141.728982][ T9] usb 2-1: bad CDC descriptors [ 141.761437][ T9] usb 2-1: unsupported MDLM descriptors [ 142.122386][ T5824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.86'. [ 142.489436][ T4622] Bluetooth: hci0: command 0x0406 tx timeout [ 142.577276][ T12] team0 (unregistering): Port device team_slave_1 removed [ 142.735391][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.189238][ T5280] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.413328][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.440931][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.452365][ T4622] Bluetooth: hci3: command tx timeout [ 143.475075][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.497892][ T5280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.509123][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.526822][ T5280] usb 4-1: config 0 descriptor?? [ 143.975995][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.993132][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.273565][ T5800] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 144.544565][ T941] usb 2-1: USB disconnect, device number 5 [ 144.685493][ T29] audit: type=1326 audit(1726268693.129:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 144.776395][ T29] audit: type=1326 audit(1726268693.139:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 144.873574][ T29] audit: type=1326 audit(1726268693.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 144.950033][ T29] audit: type=1326 audit(1726268693.139:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.040642][ T29] audit: type=1326 audit(1726268693.139:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.154905][ T29] audit: type=1326 audit(1726268693.139:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.202155][ T4622] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 145.207492][ T29] audit: type=1326 audit(1726268693.139:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.498231][ T29] audit: type=1326 audit(1726268693.179:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.519567][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.538168][ T5236] Bluetooth: hci3: command tx timeout [ 145.611383][ T5755] chnl_net:caif_netlink_parms(): no params data found [ 145.686476][ T29] audit: type=1326 audit(1726268693.179:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.822969][ T29] audit: type=1326 audit(1726268693.179:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x7ffc0000 [ 145.896294][ T5280] usbhid 4-1:0.0: can't add hid device: -71 [ 145.940795][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.028379][ T5280] usb 4-1: USB disconnect, device number 7 [ 146.323600][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.367032][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.388024][ T5755] bridge_slave_0: entered allmulticast mode [ 146.424771][ T5755] bridge_slave_0: entered promiscuous mode [ 146.445602][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.472431][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.506647][ T5755] bridge_slave_1: entered allmulticast mode [ 146.531810][ T5755] bridge_slave_1: entered promiscuous mode [ 146.741979][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.806462][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.977807][ T5755] team0: Port device team_slave_0 added [ 147.011305][ T5755] team0: Port device team_slave_1 added [ 147.170609][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.214329][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.240472][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.313222][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.478241][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.504110][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.542517][ T5891] random: crng reseeded on system resumption [ 147.613005][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.907309][ T5755] hsr_slave_0: entered promiscuous mode [ 147.923891][ T5755] hsr_slave_1: entered promiscuous mode [ 147.950542][ T5755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.960365][ T5755] Cannot create hsr debugfs directory [ 148.999522][ T5908] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 149.335272][ T5918] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.102'. [ 149.353291][ T5918] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.699387][ T5285] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 149.760238][ T941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.854428][ T5927] xt_l2tp: v2 sid > 0xffff: 536870912 [ 149.899778][ T5285] usb 3-1: Invalid ep0 maxpacket: 32 [ 150.005808][ T941] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 150.034432][ T941] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 150.085384][ T941] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.099277][ T5285] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 150.150371][ T941] usb 1-1: config 0 has no interface number 0 [ 150.191794][ T941] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 150.223691][ T941] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 150.276391][ T5755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.280929][ T941] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.325251][ T941] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.350255][ T5285] usb 3-1: Invalid ep0 maxpacket: 32 [ 150.366589][ T941] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 150.369451][ T5285] usb usb3-port1: attempt power cycle [ 150.400981][ T5755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.416932][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.466064][ T5755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.487700][ T941] usb 1-1: config 0 descriptor?? [ 150.514817][ T5755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.526158][ T941] gspca_main: spca561-2.14.0 probing abcd:cdee [ 150.840748][ T5285] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 150.891544][ T5285] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.086426][ T941] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 151.099369][ T5285] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 151.166720][ T5285] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.175223][ T941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.188524][ T5285] usb usb3-port1: unable to enumerate USB device [ 151.240306][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.249279][ T941] usb 1-1: MIDIStreaming interface descriptor not found [ 151.605142][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.645672][ T3694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.648833][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.728658][ T3694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.761985][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.800884][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.853854][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.917712][ T25] usb 2-1: config 0 descriptor?? [ 151.933490][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.090595][ T3694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.155303][ T3694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.404192][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.468761][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.732870][ T5285] usb 1-1: USB disconnect, device number 8 [ 152.842393][ T3694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.903023][ T3694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.155751][ T3694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.206604][ T3694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.305948][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.402278][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.410264][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.603323][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.610704][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.805489][ T4622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.868907][ T4622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.881684][ T4622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.903283][ T4622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.913910][ T4622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.923130][ T4622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.020850][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 154.082863][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.209787][ T25] usb 2-1: USB disconnect, device number 6 [ 154.373239][ T5976] syz.2.111 uses obsolete (PF_INET,SOCK_PACKET) [ 154.373976][ T3694] bridge_slave_1: left allmulticast mode [ 154.439305][ T3694] bridge_slave_1: left promiscuous mode [ 154.468799][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.535842][ T3694] bridge_slave_0: left allmulticast mode [ 154.567557][ T3694] bridge_slave_0: left promiscuous mode [ 154.576690][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.779560][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.970006][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 154.995274][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.040111][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.074553][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.088682][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 155.101210][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.149902][ T25] usb 2-1: config 0 descriptor?? [ 155.173803][ T5978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.227572][ T25] hub 2-1:0.0: USB hub found [ 155.434383][ T25] hub 2-1:0.0: 2 ports detected [ 155.880221][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.902254][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.928122][ T3694] bond0 (unregistering): Released all slaves [ 155.985760][ T5981] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 156.029376][ T4622] Bluetooth: hci1: command tx timeout [ 156.156341][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.452826][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 156.880978][ T6029] random: crng reseeded on system resumption [ 156.917685][ T6020] tipc: Started in network mode [ 156.949220][ T6020] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 156.976550][ T6020] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 157.043621][ T6020] tipc: Enabled bearer , priority 10 [ 157.486025][ T3694] hsr_slave_0: left promiscuous mode [ 157.502152][ T3694] hsr_slave_1: left promiscuous mode [ 157.538817][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.557569][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.576148][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.597529][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.662448][ T3694] veth1_macvtap: left promiscuous mode [ 157.669786][ T3694] veth0_macvtap: left promiscuous mode [ 157.675727][ T3694] veth1_vlan: left promiscuous mode [ 157.694578][ T3694] veth0_vlan: left promiscuous mode [ 157.823191][ T6045] xt_limit: Overflow, try lower: 0/0 [ 158.099893][ T4622] Bluetooth: hci1: command tx timeout [ 158.121158][ T5284] tipc: Node number set to 1 [ 159.083986][ T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 159.112340][ T941] usb 2-1: USB disconnect, device number 7 [ 159.115768][ T25] usb 2-1-port2: config error [ 159.323324][ T3694] team0 (unregistering): Port device team_slave_1 removed [ 159.408697][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 159.758503][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 159.869379][ T5280] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.079219][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 160.092053][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 160.114500][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.156684][ T5280] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.183071][ T4622] Bluetooth: hci1: command tx timeout [ 160.209018][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.229258][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.257945][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 160.269204][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.290472][ T5280] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.324858][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.380265][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.425811][ T5280] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 160.433586][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.450007][ T5280] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.463518][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.474991][ T5280] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.545473][ T5280] usb 2-1: string descriptor 0 read error: -22 [ 160.553476][ T5280] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.562849][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.582833][ T5280] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 160.737091][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 160.894679][ T5755] veth0_vlan: entered promiscuous mode [ 160.924875][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 160.970411][ T6066] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 161.031730][ T5755] veth1_vlan: entered promiscuous mode [ 161.342924][ T5304] usb 2-1: USB disconnect, device number 8 [ 161.599266][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.638066][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.670148][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.699626][ T5969] bridge_slave_0: entered allmulticast mode [ 161.716322][ T5969] bridge_slave_0: entered promiscuous mode [ 161.763642][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.786815][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.796916][ T5969] bridge_slave_1: entered allmulticast mode [ 161.812224][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.814310][ T5969] bridge_slave_1: entered promiscuous mode [ 161.849616][ T5755] veth0_macvtap: entered promiscuous mode [ 161.882916][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.939983][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.997741][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.038407][ T5755] veth1_macvtap: entered promiscuous mode [ 162.083819][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.140222][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.141309][ T9] usb 3-1: config 0 descriptor?? [ 162.197982][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.264226][ T4622] Bluetooth: hci1: command tx timeout [ 162.477372][ T5969] team0: Port device team_slave_0 added [ 162.500043][ T941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.507609][ T5969] team0: Port device team_slave_1 added [ 162.536174][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.556600][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.590035][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.607831][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.645548][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.675340][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.718545][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.741910][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.742127][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 162.760622][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.808700][ T941] usb 1-1: config 0 has no interfaces? [ 162.838664][ T941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 162.866768][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.870703][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.927892][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.948525][ T941] usb 1-1: Product: syz [ 162.950790][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.968685][ T941] usb 1-1: Manufacturer: syz [ 162.984132][ T941] usb 1-1: SerialNumber: syz [ 162.989419][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.995187][ T941] usb 1-1: config 0 descriptor?? [ 163.032795][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.077355][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.126990][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.207346][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.225652][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.269213][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.290540][ T5755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.307745][ T5755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.326372][ T5755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.355737][ T5755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.387992][ T5284] usb 1-1: USB disconnect, device number 9 [ 163.413373][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.425649][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.493896][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.819720][ T5969] hsr_slave_0: entered promiscuous mode [ 163.841388][ T5969] hsr_slave_1: entered promiscuous mode [ 163.857923][ T6097] PKCS7: Unknown OID: [5] 0.0 [ 163.865369][ T5969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.875825][ T6097] PKCS7: Only support pkcs7_signedData type [ 163.878770][ T5969] Cannot create hsr debugfs directory [ 164.126892][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 164.153036][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.175495][ T9] usb 3-1: USB disconnect, device number 8 [ 164.250807][ T4622] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 164.408397][ T6106] tipc: Started in network mode [ 164.442451][ T6106] tipc: Node identity ac1414aa, cluster identity 4711 [ 164.514311][ T6106] tipc: Enabled bearer , priority 10 [ 164.923383][ T9] IPVS: starting estimator thread 0... [ 165.064664][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.074688][ T6116] IPVS: using max 17 ests per chain, 40800 per kthread [ 165.108707][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.510393][ T941] tipc: Node number set to 2886997162 [ 165.539419][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.581108][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.604562][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.776884][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.827198][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.859292][ T25] usb 2-1: config 0 descriptor?? [ 165.900941][ T25] cp210x 2-1:0.0: cp210x converter detected [ 166.121717][ T5969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.191621][ T25] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 166.213098][ T25] cp210x 2-1:0.0: querying part number failed [ 166.243925][ T5969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.280763][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 166.330150][ T5969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.373802][ T5969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.391429][ T25] usb 2-1: USB disconnect, device number 9 [ 166.478173][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.514974][ T4622] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 166.540083][ T25] cp210x 2-1:0.0: device disconnected [ 166.983372][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.009626][ T6155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.134'. [ 167.086060][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.171647][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.178872][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.260935][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.269120][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.335349][ T6156] netlink: 'syz.0.133': attribute type 21 has an invalid length. [ 167.351708][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.133'. [ 167.601205][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.709370][ T5284] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.884263][ T5969] veth0_vlan: entered promiscuous mode [ 167.922121][ T5284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.961020][ T6179] hub 9-0:1.0: USB hub found [ 167.975127][ T6179] hub 9-0:1.0: 8 ports detected [ 168.006955][ T5284] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 168.022727][ T5969] veth1_vlan: entered promiscuous mode [ 168.045205][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.094752][ T5284] usb 3-1: config 0 descriptor?? [ 168.108205][ T5284] hub 3-1:0.0: bad descriptor, ignoring hub [ 168.122444][ T5284] hub 3-1:0.0: probe with driver hub failed with error -5 [ 168.250939][ T5969] veth0_macvtap: entered promiscuous mode [ 168.276324][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 168.339641][ T4622] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 168.348912][ T4622] Bluetooth: hci2: Injecting HCI hardware error event [ 168.357284][ T4622] Bluetooth: hci2: hardware error 0x00 [ 168.452526][ T6178] vlan2: entered promiscuous mode [ 168.462269][ T6178] bond0: entered promiscuous mode [ 168.469424][ T6178] bond_slave_0: entered promiscuous mode [ 168.609016][ T6178] bond_slave_1: entered promiscuous mode [ 168.637971][ T5969] veth1_macvtap: entered promiscuous mode [ 168.675134][ T6186] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 168.780667][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.823697][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.876635][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.988944][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.053698][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.093661][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.119680][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.135677][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.157601][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.200607][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.247962][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.304810][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.338702][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.413645][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.462586][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.508974][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.544207][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.574305][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.666712][ T5969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.706454][ T5969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.744157][ T5969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.759637][ T5969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.792082][ T5284] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 170.013936][ T5284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.061178][ T5284] usb 1-1: not running at top speed; connect to a high speed hub [ 170.108137][ T5284] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.149782][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.163322][ T5304] usb 3-1: USB disconnect, device number 9 [ 170.172898][ T5284] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.199367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.235633][ T5284] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.285551][ T5284] usb 1-1: config 1 has no interface number 1 [ 170.336317][ T5284] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.382649][ T5284] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.390801][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.410962][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 170.411292][ T4622] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 170.422291][ T5236] Bluetooth: hci4: Injecting HCI hardware error event [ 170.439403][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.447451][ T5284] usb 1-1: Product: syz [ 170.449557][ T5236] Bluetooth: hci4: hardware error 0x00 [ 170.503799][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.555574][ T5284] usb 1-1: Manufacturer: syz [ 170.590209][ T5284] usb 1-1: SerialNumber: syz [ 170.640369][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 170.640386][ T29] audit: type=1326 audit(1726268719.099:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x0 [ 170.739203][ T5285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.929208][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 170.982311][ T5285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.016108][ T5285] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 171.073725][ T5285] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.114531][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.139374][ T58] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 171.149350][ T5285] usb 5-1: Product: syz [ 171.165826][ T5285] usb 5-1: Manufacturer: syz [ 171.176983][ T5285] usb 5-1: SerialNumber: syz [ 171.343135][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.354571][ T58] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 171.387753][ T58] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.438367][ T58] usb 3-1: config 1 has no interface number 1 [ 171.462269][ T58] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 171.487622][ T58] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 171.556551][ T6235] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 171.567790][ T58] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 171.590662][ T58] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 171.618954][ T58] usb 3-1: string descriptor 0 read error: -22 [ 171.638882][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.699297][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.726798][ T6223] sctp: [Deprecated]: syz.4.143 (pid 6223) Use of int in max_burst socket option deprecated. [ 171.726798][ T6223] Use struct sctp_assoc_value instead [ 171.783147][ T58] usb 3-1: low speed audio streaming not supported [ 172.489300][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 172.564527][ T5963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.736610][ T5963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.881922][ T5963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.045544][ T5284] usb 1-1: USB disconnect, device number 10 [ 173.073204][ T5963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.117174][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 173.411717][ T5963] bridge_slave_1: left allmulticast mode [ 173.438547][ T5963] bridge_slave_1: left promiscuous mode [ 173.464070][ T5284] usb 3-1: USB disconnect, device number 10 [ 173.479573][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.551914][ T5963] bridge_slave_0: left allmulticast mode [ 173.574949][ T5963] bridge_slave_0: left promiscuous mode [ 173.605370][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.743731][ T5285] usb 5-1: USB disconnect, device number 6 [ 174.470303][ T4622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.489394][ T4622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.497679][ T4622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.511353][ T4622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.521995][ T4622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.529642][ T4622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.037465][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.054930][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.068104][ T5963] bond0 (unregistering): Released all slaves [ 175.096194][ T6245] bridge0: entered allmulticast mode [ 175.103145][ T6249] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 175.115334][ T6263] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.152'. [ 175.173390][ T6262] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 175.219971][ T6262] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 175.583951][ T6266] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 175.678780][ T6266] batman_adv: batadv0: Adding interface: team0 [ 175.685617][ T6266] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.713045][ T6266] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.732893][ T6276] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 175.763835][ T6276] netlink: 2 bytes leftover after parsing attributes in process `syz.0.154'. [ 175.814811][ T6276] team0: entered promiscuous mode [ 175.847592][ T6276] team_slave_0: entered promiscuous mode [ 175.901772][ T6276] team_slave_1: entered promiscuous mode [ 175.928416][ T6276] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 175.974046][ T6280] block device autoloading is deprecated and will be removed. [ 176.001813][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.015577][ T6276] batman_adv: batadv0: Interface activated: team0 [ 176.033281][ T6276] batman_adv: batadv0: Interface deactivated: team0 [ 176.044087][ T6276] batman_adv: batadv0: Removing interface: team0 [ 176.061719][ T6276] bridge0: port 3(team0) entered blocking state [ 176.078439][ T6276] bridge0: port 3(team0) entered disabled state [ 176.113157][ T6276] team0: entered allmulticast mode [ 176.127539][ T6276] team_slave_0: entered allmulticast mode [ 176.136140][ T6276] team_slave_1: entered allmulticast mode [ 176.142311][ T6276] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 176.159859][ T6276] bridge0: port 3(team0) entered blocking state [ 176.167680][ T6276] bridge0: port 3(team0) entered forwarding state [ 176.569917][ T4622] Bluetooth: hci1: command tx timeout [ 176.859222][ T5963] hsr_slave_0: left promiscuous mode [ 176.880191][ T5963] hsr_slave_1: left promiscuous mode [ 176.985557][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.019224][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.066399][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.126418][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.195741][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 177.208576][ T5963] veth1_macvtap: left promiscuous mode [ 177.214522][ T5963] veth0_macvtap: left promiscuous mode [ 177.238100][ T5963] veth1_vlan: left promiscuous mode [ 177.257234][ T5963] veth0_vlan: left promiscuous mode [ 178.649514][ T4622] Bluetooth: hci1: command tx timeout [ 178.874138][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 178.899690][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.935148][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 179.089377][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 179.098387][ T9] usb 5-1: config 253 has an invalid interface number: 157 but max is 3 [ 179.109992][ T9] usb 5-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 179.118944][ T9] usb 5-1: config 253 has an invalid interface number: 213 but max is 3 [ 179.128873][ T9] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 179.140444][ T9] usb 5-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 179.149820][ T9] usb 5-1: config 253 has no interface number 0 [ 179.156129][ T9] usb 5-1: config 253 has no interface number 1 [ 179.165203][ T9] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 179.180381][ T9] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 179.192001][ T9] usb 5-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 179.203574][ T9] usb 5-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 179.217428][ T9] usb 5-1: config 253 interface 157 has no altsetting 0 [ 179.224526][ T9] usb 5-1: config 253 interface 213 has no altsetting 0 [ 179.234810][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 179.245095][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.253312][ T9] usb 5-1: Product: syz [ 179.257520][ T9] usb 5-1: Manufacturer: syz [ 179.263982][ T9] usb 5-1: SerialNumber: syz [ 179.590646][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 179.610196][ T9] usb 5-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 179.627576][ T9] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 179.634881][ T9] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 179.645281][ T9] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 179.683143][ T9] usb 5-1: Found UVC 0.00 device syz (0b05:1791) [ 179.694334][ T9] usb 5-1: No valid video chain found. [ 179.705640][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 179.714350][ T9] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 179.742261][ T9] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 179.750103][ T9] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 179.757896][ T9] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 179.780521][ T9] usb 5-1: USB disconnect, device number 7 [ 180.306883][ T6334] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 180.552300][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 180.729511][ T4622] Bluetooth: hci1: command tx timeout [ 181.613002][ T4622] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.622605][ T4622] Bluetooth: hci3: Injecting HCI hardware error event [ 181.627328][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.631514][ T5236] Bluetooth: hci3: hardware error 0x00 [ 181.657906][ T6353] bond0: entered promiscuous mode [ 181.663512][ T6353] bond_slave_0: entered promiscuous mode [ 181.671645][ T6353] bond_slave_1: entered promiscuous mode [ 181.677981][ T6353] bond0: entered allmulticast mode [ 181.684923][ T6353] bond_slave_0: entered allmulticast mode [ 181.702039][ T6353] bond_slave_1: entered allmulticast mode [ 181.711168][ T6353] team0: Port device bond0 added [ 181.935871][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.989971][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.016000][ T6259] bridge_slave_0: entered allmulticast mode [ 182.035326][ T6259] bridge_slave_0: entered promiscuous mode [ 182.099655][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.150984][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.177841][ T6259] bridge_slave_1: entered allmulticast mode [ 182.201522][ T6259] bridge_slave_1: entered promiscuous mode [ 182.308361][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.329769][ T4622] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 182.340507][ T4622] Bluetooth: hci0: Injecting HCI hardware error event [ 182.353205][ T5233] Bluetooth: hci0: hardware error 0x00 [ 182.372301][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.545361][ T5963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.637554][ T6259] team0: Port device team_slave_0 added [ 182.657329][ T6259] team0: Port device team_slave_1 added [ 182.682554][ T5963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.726700][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.735658][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.762163][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.775951][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.783565][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.810715][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.821619][ T4622] Bluetooth: hci1: command tx timeout [ 182.845797][ T5963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.901162][ T6259] hsr_slave_0: entered promiscuous mode [ 182.907656][ T6259] hsr_slave_1: entered promiscuous mode [ 182.920244][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.927857][ T6259] Cannot create hsr debugfs directory [ 182.972415][ T5963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.287914][ T5963] bridge_slave_1: left allmulticast mode [ 183.297325][ T5963] bridge_slave_1: left promiscuous mode [ 183.308622][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.328195][ T5963] bridge_slave_0: left allmulticast mode [ 183.339425][ T5963] bridge_slave_0: left promiscuous mode [ 183.345980][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.858853][ T5963] bond0 (unregistering): left promiscuous mode [ 183.865600][ T5963] bond_slave_0: left promiscuous mode [ 183.872145][ T5963] bond_slave_1: left promiscuous mode [ 183.896442][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.908053][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.919486][ T5963] bond0 (unregistering): Released all slaves [ 183.929241][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 184.269584][ T5283] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.416613][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.457235][ T6395] netlink: 'syz.1.171': attribute type 8 has an invalid length. [ 184.539694][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 184.554705][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.586499][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.619148][ T5283] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.648435][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.714904][ T5283] usb 1-1: config 0 descriptor?? [ 184.744896][ T5283] hub 1-1:0.0: USB hub found [ 184.896348][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.906822][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.915976][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.946328][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.954451][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.962172][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.419483][ T5284] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.571857][ T6412] netlink: 'syz.1.173': attribute type 8 has an invalid length. [ 185.632686][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.663063][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.678925][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.763087][ T5284] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 185.810099][ T5963] hsr_slave_0: left promiscuous mode [ 185.831081][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.850965][ T5963] hsr_slave_1: left promiscuous mode [ 185.875197][ T5284] usb 3-1: config 0 descriptor?? [ 185.883502][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.917136][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.952396][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.966680][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.065258][ T5963] veth1_macvtap: left promiscuous mode [ 186.079523][ T5963] veth0_macvtap: left promiscuous mode [ 186.091294][ T5963] veth1_vlan: left promiscuous mode [ 186.119890][ T5963] veth0_vlan: left promiscuous mode [ 186.560002][ T5284] waltop 0003:172F:0038.0004: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 186.912335][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.971586][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.059730][ T5233] Bluetooth: hci3: command tx timeout [ 187.271787][ T5283] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 187.320609][ T5283] usbhid 1-1:0.0: can't add hid device: -71 [ 187.341450][ T5283] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 187.421504][ T5283] usb 1-1: USB disconnect, device number 11 [ 188.060890][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 188.099307][ T58] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 188.189838][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 188.891447][ T5281] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.903363][ T29] audit: type=1326 audit(1726268737.369:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.2.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bcb37def9 code=0x0 [ 189.089213][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 189.096930][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.108463][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.125591][ T5281] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.135936][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.146410][ T5233] Bluetooth: hci3: command tx timeout [ 189.156722][ T5281] usb 1-1: config 0 descriptor?? [ 189.222110][ T6423] netlink: 'syz.1.174': attribute type 8 has an invalid length. [ 189.282653][ T5284] usb 3-1: USB disconnect, device number 11 [ 189.630195][ T5281] microsoft 0003:045E:07DA.0005: item fetching failed at offset 32/34 [ 189.640372][ T5281] microsoft 0003:045E:07DA.0005: parse failed [ 189.646700][ T5281] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 189.675310][ T6259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.019131][ T6259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.061114][ T6259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.098936][ T6453] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 190.109301][ T6453] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.176'. [ 190.140656][ T6259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.268200][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 190.329413][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.519569][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 190.614279][ T5281] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 190.662194][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.681627][ T5281] usb 3-1: Product: syz [ 190.691769][ T5281] usb 3-1: Manufacturer: syz [ 190.703895][ T5281] usb 3-1: SerialNumber: syz [ 190.737915][ T5281] r8152-cfgselector 3-1: Unknown version 0x0000 [ 190.759705][ T5281] r8152-cfgselector 3-1: config 0 descriptor?? [ 190.887795][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.931279][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.965405][ T6406] bridge_slave_0: entered allmulticast mode [ 191.012387][ T6406] bridge_slave_0: entered promiscuous mode [ 191.019906][ T6449] x_tables: ip_tables: ah match: only valid for protocol 51 [ 191.044604][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.065322][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.081682][ T6406] bridge_slave_1: entered allmulticast mode [ 191.093809][ T5281] r8152-cfgselector 3-1: Unknown version 0x0000 [ 191.112335][ T5281] r8152-cfgselector 3-1: bad CDC descriptors [ 191.121623][ T6406] bridge_slave_1: entered promiscuous mode [ 191.209798][ T5233] Bluetooth: hci3: command tx timeout [ 191.256340][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.310214][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.376900][ T941] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 191.502509][ T6406] team0: Port device team_slave_0 added [ 191.559286][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.604141][ T6406] team0: Port device team_slave_1 added [ 191.672551][ T941] usb 1-1: USB disconnect, device number 12 [ 191.862497][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.893276][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.999201][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.033408][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.058361][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.084438][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.116447][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.261884][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.358495][ T6406] hsr_slave_0: entered promiscuous mode [ 192.385740][ T6406] hsr_slave_1: entered promiscuous mode [ 192.392297][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.413147][ T6406] Cannot create hsr debugfs directory [ 192.419461][ T5285] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 192.437586][ T6486] netlink: 'syz.1.182': attribute type 8 has an invalid length. [ 192.453523][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.460728][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.505096][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.512323][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.641478][ T5285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.660655][ T5285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.679197][ T5281] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 192.696724][ T5285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 192.707793][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.716215][ T5285] usb 1-1: SerialNumber: syz [ 192.734001][ T5285] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 192.754243][ T5285] usb-storage 1-1:1.0: USB Mass Storage device detected [ 192.808314][ T5285] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 192.823877][ T5285] scsi host1: usb-storage 1-1:1.0 [ 192.874698][ T5281] usb 3-1: string descriptor 0 read error: -22 [ 192.882410][ T5281] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 192.892466][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.911295][ T5281] usb 3-1: config 0 descriptor?? [ 192.926744][ T5281] usbtest 3-1:0.0: FX2 device [ 192.942520][ T5281] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 193.083922][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.118913][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.185976][ T5281] usb 3-1: USB disconnect, device number 13 [ 193.219194][ T5295] usb 1-1: USB disconnect, device number 13 [ 193.299671][ T5233] Bluetooth: hci3: command tx timeout [ 193.548301][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.138083][ T6259] veth0_vlan: entered promiscuous mode [ 194.283562][ T6259] veth1_vlan: entered promiscuous mode [ 194.500797][ T6524] input: syz1 as /devices/virtual/input/input12 [ 194.538757][ T6406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.605434][ T6259] veth0_macvtap: entered promiscuous mode [ 194.624732][ T6406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.651851][ T6524] netlink: 'syz.1.187': attribute type 8 has an invalid length. [ 194.673165][ T6406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.716758][ T6259] veth1_macvtap: entered promiscuous mode [ 194.774029][ T6406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.905817][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.938213][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.979291][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.001096][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.011614][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.022609][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.054739][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.166428][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.209836][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.220491][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.278210][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.305126][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.336701][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.364341][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.454042][ T6259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.494952][ T6259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.520780][ T6259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.531517][ T6259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.578111][ T6547] xt_bpf: check failed: parse error [ 195.636929][ T6547] x_tables: duplicate underflow at hook 3 [ 195.860617][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.045784][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.122345][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.236819][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.266066][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.269667][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.344844][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.352076][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.430658][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.437891][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.564206][ T6560] random: crng reseeded on system resumption [ 196.660225][ T6563] capability: warning: `syz.1.191' uses deprecated v2 capabilities in a way that may be insecure [ 196.687831][ T6406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.843444][ T6406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.016267][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.048965][ T6571] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 197.268759][ T6406] veth0_vlan: entered promiscuous mode [ 197.338400][ T6406] veth1_vlan: entered promiscuous mode [ 197.508041][ T6406] veth0_macvtap: entered promiscuous mode [ 197.556482][ T6406] veth1_macvtap: entered promiscuous mode [ 197.628706][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.670577][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.796800][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.823450][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.884577][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.903466][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.946247][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.006806][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.047988][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.123980][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 198.210482][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.244482][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.290405][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.332859][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.361484][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.394428][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.444771][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.466366][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.508593][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.548897][ T6406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.608072][ T6406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.630362][ T6406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.642807][ T6406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.689493][ T5304] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 198.924744][ T5304] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 198.968569][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.015472][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.052177][ T5304] usb 1-1: config 0 descriptor?? [ 199.070216][ T5304] usbtest 1-1:0.0: Linux user mode test driver [ 199.077440][ T5304] usbtest 1-1:0.0: low-speed {control} tests [ 199.094175][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.198733][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.210835][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.259222][ T5281] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.469728][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 199.494847][ T6605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.196'. [ 199.524066][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.557524][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.604028][ T5281] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.656157][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.684773][ T6607] input: syz1 as /devices/virtual/input/input13 [ 199.708896][ T5281] usb 4-1: config 0 descriptor?? [ 199.814168][ T6610] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:65533 [ 199.852389][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.868248][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.915480][ T5285] IPVS: starting estimator thread 0... [ 200.041799][ T6616] IPVS: using max 19 ests per chain, 45600 per kthread [ 200.083663][ T6619] xt_bpf: check failed: parse error [ 200.126502][ T8] usb 1-1: USB disconnect, device number 14 [ 200.161897][ T6619] x_tables: duplicate underflow at hook 3 [ 200.226832][ T5281] savu 0003:1E7D:2D5A.0006: hidraw0: USB HID v0.1c Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 200.824681][ T5233] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 201.099783][ T6599] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 201.110383][ T6634] binder: 6624:6634 ioctl c0306201 0 returned -14 [ 201.487035][ T5304] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.732657][ T5304] usb 1-1: Using ep0 maxpacket: 32 [ 201.767494][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.833677][ T5304] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 201.872785][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.912600][ T5304] usb 1-1: config 0 descriptor?? [ 203.050267][ T58] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 203.056987][ T5236] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.058118][ T58] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 203.516899][ T5304] usbhid 1-1:0.0: can't add hid device: -71 [ 203.529556][ T5304] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.580946][ T5304] usb 1-1: USB disconnect, device number 15 [ 204.002930][ T1303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.029375][ T1303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.196125][ T1303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.226860][ T1303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.375822][ T1303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.399137][ T1303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.582828][ T1303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.613856][ T1303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.845080][ T1303] team0: left allmulticast mode [ 204.852307][ T1303] team_slave_0: left allmulticast mode [ 204.858286][ T1303] team_slave_1: left allmulticast mode [ 204.864126][ T1303] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 204.872752][ T1303] bond0: left allmulticast mode [ 204.877658][ T1303] bond_slave_0: left allmulticast mode [ 204.883307][ T1303] bond_slave_1: left allmulticast mode [ 204.890766][ T1303] bridge0: port 3(team0) entered disabled state [ 204.901434][ T1303] bridge_slave_1: left allmulticast mode [ 204.907139][ T1303] bridge_slave_1: left promiscuous mode [ 204.914659][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.925764][ T1303] bridge_slave_0: left allmulticast mode [ 204.932628][ T1303] bridge_slave_0: left promiscuous mode [ 204.938343][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.289480][ T5236] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.289551][ T58] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 205.302182][ T58] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 205.369711][ T1303] bond0 (unregistering): left promiscuous mode [ 205.376487][ T1303] bond_slave_0: left promiscuous mode [ 205.383554][ T1303] bond_slave_1: left promiscuous mode [ 205.395254][ T1303] team0: Port device bond0 removed [ 205.403870][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.417845][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.429579][ T1303] bond0 (unregistering): Released all slaves [ 205.886887][ T5283] usb 4-1: USB disconnect, device number 8 [ 206.113622][ T1303] hsr_slave_0: left promiscuous mode [ 206.140406][ T1303] hsr_slave_1: left promiscuous mode [ 206.173330][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.200193][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.209924][ T6708] xt_bpf: check failed: parse error [ 206.230009][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.259415][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.353657][ T1303] veth1_macvtap: left promiscuous mode [ 206.375018][ T1303] veth0_macvtap: left promiscuous mode [ 206.399158][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 206.410757][ T1303] veth1_vlan: left promiscuous mode [ 206.416076][ T1303] veth0_vlan: left promiscuous mode [ 206.506000][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.516276][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.524745][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.534595][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.550038][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.557678][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.639812][ T9] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 206.656629][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 206.664649][ T9] usb 5-1: can't read configurations, error -61 [ 206.688006][ T6712] binder: 6711:6712 ioctl c0306201 0 returned -14 [ 206.787588][ T6712] binder: 6711:6712 ioctl 4018620d 0 returned -22 [ 206.829590][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 206.860139][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.215'. [ 207.051053][ T9] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 207.077295][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 207.110791][ T9] usb 5-1: can't read configurations, error -61 [ 207.153955][ T9] usb usb5-port1: attempt power cycle [ 207.640481][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 207.702735][ T9] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 207.750106][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 207.757744][ T9] usb 5-1: can't read configurations, error -61 [ 207.837707][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.845672][ T1303] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 207.869348][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.878603][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.887090][ T1303] team0 (unregistering): Port device virt_wifi0 removed [ 207.887645][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.903750][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.915337][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.929803][ T9] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 208.010176][ T9] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 208.041913][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 208.059613][ T9] usb 5-1: can't read configurations, error -61 [ 208.067093][ T9] usb usb5-port1: unable to enumerate USB device [ 208.851509][ T1303] team_slave_1 (unregistering): left promiscuous mode [ 208.871334][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 209.076773][ T1303] team_slave_0 (unregistering): left promiscuous mode [ 209.106209][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 211.698402][ T1303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.857529][ T1303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.018514][ T1303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.240460][ T1303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.350015][ T6750] netlink: 'syz.4.218': attribute type 8 has an invalid length. [ 212.615756][ T1303] bridge_slave_1: left allmulticast mode [ 212.627168][ T1303] bridge_slave_1: left promiscuous mode [ 212.642637][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.671437][ T1303] bridge_slave_0: left allmulticast mode [ 212.677157][ T1303] bridge_slave_0: left promiscuous mode [ 212.686681][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.339633][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.372829][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.393931][ T1303] bond0 (unregistering): Released all slaves [ 214.506238][ T1303] tipc: Disabling bearer [ 214.535001][ T1303] tipc: Left network mode [ 214.929891][ T1303] hsr_slave_0: left promiscuous mode [ 214.974910][ T1303] hsr_slave_1: left promiscuous mode [ 215.029653][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.037129][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.091864][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.113446][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 215.127786][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.160100][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 215.184126][ T1303] veth1_macvtap: left promiscuous mode [ 215.192854][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 215.211556][ T1303] veth0_macvtap: left promiscuous mode [ 215.217296][ T1303] veth1_vlan: left promiscuous mode [ 215.259227][ T1303] veth0_vlan: left promiscuous mode [ 216.651246][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 216.692876][ T5249] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 216.820278][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 216.853167][ T6810] xt_bpf: check failed: parse error [ 218.945979][ T1303] IPVS: stop unused estimator thread 0... [ 219.264588][ T1303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.490295][ T1303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.591527][ T1303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.694861][ T1303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.949403][ T1303] bridge_slave_1: left allmulticast mode [ 219.965766][ T1303] bridge_slave_1: left promiscuous mode [ 219.987163][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.015077][ T1303] bridge_slave_0: left allmulticast mode [ 220.029567][ T1303] bridge_slave_0: left promiscuous mode [ 220.035405][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.712733][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.737336][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.789118][ T1303] bond0 (unregistering): Released all slaves [ 221.958734][ T6865] netlink: 'syz.4.229': attribute type 29 has an invalid length. [ 221.990987][ T1303] tipc: Disabling bearer [ 222.002869][ T1303] tipc: Left network mode [ 222.414477][ T1303] hsr_slave_0: left promiscuous mode [ 222.429542][ T1303] hsr_slave_1: left promiscuous mode [ 222.449605][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.457218][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.482055][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.499175][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.588382][ T1303] veth1_macvtap: left promiscuous mode [ 222.628042][ T1303] veth0_macvtap: left promiscuous mode [ 222.669307][ T1303] veth1_vlan: left promiscuous mode [ 222.674815][ T1303] veth0_vlan: left promiscuous mode [ 222.695266][ T29] audit: type=1326 audit(1726268771.159:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80bd7def9 code=0x0 [ 222.800112][ T6885] netlink: 44 bytes leftover after parsing attributes in process `syz.3.230'. [ 222.829758][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 222.838993][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.230'. [ 223.771937][ T6893] binder: BINDER_SET_CONTEXT_MGR already set [ 223.793320][ T6893] binder: 6892:6893 ioctl 4018620d 20000100 returned -16 [ 223.836586][ T6893] binder: 6892:6893 ioctl c0306201 0 returned -14 [ 224.334907][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 224.478233][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 226.003717][ T1303] IPVS: stop unused estimator thread 0... [ 226.304339][ T29] audit: type=1326 audit(1726268774.769:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.344975][ T29] audit: type=1326 audit(1726268774.769:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.382092][ T6914] fuse: Unknown parameter '00000000000000000000' [ 226.400537][ T29] audit: type=1326 audit(1726268774.769:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.459134][ T29] audit: type=1326 audit(1726268774.769:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.499118][ T29] audit: type=1326 audit(1726268774.769:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.521494][ T29] audit: type=1326 audit(1726268774.769:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.573307][ T29] audit: type=1326 audit(1726268774.769:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.596251][ T29] audit: type=1326 audit(1726268774.769:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 226.619506][ T29] audit: type=1326 audit(1726268774.769:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d757def9 code=0x7ffc0000 [ 227.482069][ T6944] xt_bpf: check failed: parse error [ 229.617770][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.235'. [ 229.629999][ T7003] unsupported nlmsg_type 40 [ 232.880364][ T7094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.238'. SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=0 req=209 state=1 status=67 (errno 9: Bad file descriptor) [ 234.454053][ T5963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.591882][ T5963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.655635][ T5963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.734013][ T5963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.949375][ T5963] bridge_slave_1: left allmulticast mode [ 234.955104][ T5963] bridge_slave_1: left promiscuous mode [ 234.966123][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.977095][ T5963] bridge_slave_0: left allmulticast mode [ 234.984327][ T5963] bridge_slave_0: left promiscuous mode [ 234.994513][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.382364][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.393973][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.406567][ T5963] bond0 (unregistering): Released all slaves [ 235.690297][ T5963] hsr_slave_0: left promiscuous mode [ 235.696611][ T5963] hsr_slave_1: left promiscuous mode [ 235.708422][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.718144][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.728275][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.737361][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.765830][ T5963] veth1_macvtap: left promiscuous mode [ 235.771989][ T5963] veth0_macvtap: left promiscuous mode [ 235.778535][ T5963] veth1_vlan: left promiscuous mode [ 235.786901][ T5963] veth0_vlan: left promiscuous mode [ 236.337908][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 236.385549][ T5963] team0 (unregistering): Port device team_slave_0 removed [ 237.290172][ T5963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.392150][ T5963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.455899][ T5963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.526182][ T5963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.697164][ T5963] bridge_slave_1: left allmulticast mode [ 237.705892][ T5963] bridge_slave_1: left promiscuous mode [ 237.713709][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.724336][ T5963] bridge_slave_0: left allmulticast mode [ 237.732946][ T5963] bridge_slave_0: left promiscuous mode [ 237.738768][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.117680][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.130104][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.142095][ T5963] bond0 (unregistering): Released all slaves [ 238.535898][ T5963] hsr_slave_0: left promiscuous mode [ 238.543174][ T5963] hsr_slave_1: left promiscuous mode [ 238.553136][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.562362][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.572678][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.580624][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.606923][ T5963] veth1_macvtap: left promiscuous mode [ 238.612803][ T5963] veth0_macvtap: left promiscuous mode [ 238.618539][ T5963] veth1_vlan: left promiscuous mode [ 238.624983][ T5963] veth0_vlan: left promiscuous mode [ 239.125027][ T5963] team0 (unregistering): Port device team_slave_1 removed [ 239.175436][ T5963] team0 (unregistering): Port device team_slave_0 removed