last executing test programs: 6.562365577s ago: executing program 1 (id=1210): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 6.047996438s ago: executing program 1 (id=1215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "0075920ba1bf0f0cd0132440471cb932e557eb5b710760e91e0b05a5fb3256a395e4023315bbe61640b223bf939a809ee61c306bc5695ac6dde44e65eda697ae439d16dbbf10f0d42113a824a7abeb7135247d797fe483e4c9f70394dcc68c9e2bdeb0a12f78b2434c1e0b8959f3eb"}}, &(0x7f0000000000)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x2, "2cc8f843"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0xa, "9dfb2efe"}, @main=@item_012={0x1, 0x0, 0x9, "04"}, @main=@item_012={0x1, 0x0, 0x9, "ea"}, @global=@item_4={0x3, 0x1, 0x8, "051fcdb7"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x969}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0x80, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0xe4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x6, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xec, 0x68, 0xd4, 0x20, 0x93a, 0x50f, 0x56a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x90, 0x64}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r2, 0x6, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 5.680326631s ago: executing program 0 (id=1217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000740)}], 0x2}}], 0x1, 0x0) 5.313397284s ago: executing program 2 (id=1219): syz_emit_ethernet(0xb2, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0x6, "2189ea43"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}, @timestamp={0x44, 0x10, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x54, 0x0, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x400006}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="11022dbd7000ffdbdf2512000000080003", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000e9040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000800100000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000003c0)=0x4, 0x2) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c000000000000a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x64b99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.916451425s ago: executing program 0 (id=1220): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x300}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004040) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 4.522135487s ago: executing program 4 (id=1222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.906292782s ago: executing program 4 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 3.905985866s ago: executing program 2 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.676480302s ago: executing program 3 (id=1225): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 3.567993031s ago: executing program 0 (id=1226): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @local}, &(0x7f00000000c0)=0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3.285878058s ago: executing program 3 (id=1227): listen(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="b0", 0x1}, {&(0x7f00000003c0)="198b44a51e270a15fc6ae02b32bc08b55db19edd41440d0b92ab67b743ddb62dc0d17d793d34d75dcf37676351834255f17fac0023de5c386e95a73e611df7c6f661fb571ff04838bfeb75d749431fd75d2256a2e61110e8bff33fa1037ff689b5afde0957e28be6aac0481f713890b15c845932012dcf7f21c8669cacf7fbddc376ecc427662c1091be661896cfb4fce6be3572ad995422ac236b0e8adf83f756a78264769a1ec8c1865626ed5c14491db41b649e31f2fddc892dac654e1287d0011feb3f5cdfa7a859e5400e1cc8de032f5010ed166c78fc162c2bb1545517b00da87de18a9c1c3d188befc43da12d14a7", 0xf2}, {&(0x7f0000000200)="0d15eadf4192ed3874604ae9fa8c460dec30540b703384f9bd3ed106dcaf08565ccb539d16f73a5b8dceed6c13c07a860a5eeb5d627c965157182d7409978aaf350ec25260359d9396f30dfcc1b6e2f6fa7baa690796942af82f6411e544772bfa8576cbd7b10bead02b94823fae11b19053b4a9554aa7138c0c1152dae3f788354167734e10947c24b08a2daae25941e6cd6bafbe1230c94b515639c0c0939d19a619301b6bb6a2a1e0d433476142d331876b8ddae5fcfe533e0c334d", 0xbd}, {&(0x7f0000000540)="4c4c70f6aebfa3c08a33876a6e8a7d567cf202bb878bc6c0f65a9fee5a9cf712dc398b14344a86c526a8c63964f9960188d91c361b3cd68a669de64d28af4b4f141e8787b8b7e6c5d049fe4ac26949f557f4dec8be7ba90a8e5f48f549023c12782775b3dfd830e3205a6d3b05e43217c4eabad6853064f510667bf5370386bda8dd18aef8843000c484fabdd61d47bc59c18897a0fd61d40f3a56d2596ae76a02ebf5e04dc60e87e9ea49f0568b639f361082e0ab03e3c7f2868846211cef56be9ce55f100c8e84cabacce3cf53202b5f93119edbb26217bf79a20adaaa06379d1f3b0057fc744dc01248b73418e083e6526505a6f2b5fa", 0xfc81}], 0x4}}], 0x2, 0x0) 3.28543346s ago: executing program 4 (id=1228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000001000000b702000014002000b7030000000000e184000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b70200"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000fd}, 0x94) 2.862741066s ago: executing program 0 (id=1229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.78565891s ago: executing program 4 (id=1230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000740)}], 0x2}}], 0x1, 0x0) 2.585225645s ago: executing program 3 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a9d28f2749c95"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r1, 0x1ad72f7) r5 = accept4$netrom(r1, 0x0, 0x0, 0x80000) writev(r5, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="2b2e5b000b2fe53b47bd24442ab58812fd5f52ae8c0ea831945643792d2a17c2491c491c7e5e3f7079473b178f3eb75c42cd4c599c6a4f", 0x37}, {0x0}, {&(0x7f0000000080)="ecd4068d764de36b469f30a42d6f1a86b8da9a5341e7bab6cc77cf1d503cc8de4d5f", 0x22}, {&(0x7f0000000100)="789f631aec731f4176fe62a9b696fee65a738c419307f37f22fdae9144e31816475c5a03464df268ca", 0x29}, {0x0}], 0x7) 2.447495396s ago: executing program 1 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) 2.123746759s ago: executing program 2 (id=1233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.806090499s ago: executing program 4 (id=1234): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 1.717327224s ago: executing program 1 (id=1235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000300)=@tcp=r0}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) shutdown(r0, 0x1) 1.634401788s ago: executing program 0 (id=1236): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x300}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004040) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.462165306s ago: executing program 2 (id=1237): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 1.337746255s ago: executing program 3 (id=1238): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) write(r2, &(0x7f0000000100)="3b000000010001", 0x7) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) close(0x3) 1.087736406s ago: executing program 1 (id=1239): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @local}, &(0x7f00000000c0)=0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 734.550237ms ago: executing program 2 (id=1240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000001000000b702000014002000b7030000000000e184000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b70200"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000fd}, 0x94) 530.069604ms ago: executing program 3 (id=1241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="b0", 0x1}, {&(0x7f00000003c0)="198b44a51e270a15fc6ae02b32bc08b55db19edd41440d0b92ab67b743ddb62dc0d17d793d34d75dcf37676351834255f17fac0023de5c386e95a73e611df7c6f661fb571ff04838bfeb75d749431fd75d2256a2e61110e8bff33fa1037ff689b5afde0957e28be6aac0481f713890b15c845932012dcf7f21c8669cacf7fbddc376ecc427662c1091be661896cfb4fce6be3572ad995422ac236b0e8adf83f756a78264769a1ec8c1865626ed5c14491db41b649e31f2fddc892dac654e1287d0011feb3f5cdfa7a859e5400e1cc8de032f5010ed166c78fc162c2bb1545517b00da87de18a9c1c3d188befc43da12d14a7", 0xf2}, {&(0x7f0000000200)="0d15eadf4192ed3874604ae9fa8c460dec30540b703384f9bd3ed106dcaf08565ccb539d16f73a5b8dceed6c13c07a860a5eeb5d627c965157182d7409978aaf350ec25260359d9396f30dfcc1b6e2f6fa7baa690796942af82f6411e544772bfa8576cbd7b10bead02b94823fae11b19053b4a9554aa7138c0c1152dae3f788354167734e10947c24b08a2daae25941e6cd6bafbe1230c94b515639c0c0939d19a619301b6bb6a2a1e0d433476142d331876b8ddae5fcfe533e0c334d", 0xbd}, {&(0x7f0000000540)="4c4c70f6aebfa3c08a33876a6e8a7d567cf202bb878bc6c0f65a9fee5a9cf712dc398b14344a86c526a8c63964f9960188d91c361b3cd68a669de64d28af4b4f141e8787b8b7e6c5d049fe4ac26949f557f4dec8be7ba90a8e5f48f549023c12782775b3dfd830e3205a6d3b05e43217c4eabad6853064f510667bf5370386bda8dd18aef8843000c484fabdd61d47bc59c18897a0fd61d40f3a56d2596ae76a02ebf5e04dc60e87e9ea49f0568b639f361082e0ab03e3c7f2868846211cef56be9ce55f100c8e84cabacce3cf53202b5f93119edbb26217bf79a20adaaa06379d1f3b0057fc744dc01248b73418e083e6526505a6f2b5fa", 0xfc81}], 0x4}}], 0x2, 0x0) 437.47792ms ago: executing program 4 (id=1242): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4099, 0x4f9}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x1007, 0x8000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0) 363.575872ms ago: executing program 1 (id=1243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 256.48094ms ago: executing program 0 (id=1244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "0075920ba1bf0f0cd0132440471cb932e557eb5b710760e91e0b05a5fb3256a395e4023315bbe61640b223bf939a809ee61c306bc5695ac6dde44e65eda697ae439d16dbbf10f0d42113a824a7abeb7135247d797fe483e4c9f70394dcc68c9e2bdeb0a12f78b2434c1e0b8959f3eb"}}, &(0x7f0000000000)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x2, "2cc8f843"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0xa, "9dfb2efe"}, @main=@item_012={0x1, 0x0, 0x9, "04"}, @main=@item_012={0x1, 0x0, 0x9, "ea"}, @global=@item_4={0x3, 0x1, 0x8, "051fcdb7"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x969}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0x80, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0xe4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x6, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xec, 0x68, 0xd4, 0x20, 0x93a, 0x50f, 0x56a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x90, 0x64}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r2, 0x6, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 3.362075ms ago: executing program 3 (id=1245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000740)}], 0x2}}], 0x1, 0x0) 0s ago: executing program 2 (id=1246): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 172.240029][ T5796] cgroup: Unknown subsys name 'net' [ 172.365038][ T5796] cgroup: Unknown subsys name 'cpuset' [ 172.379151][ T5796] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 215.876230][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.401359][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.408251][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.854070][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.862338][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.870729][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.879495][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.888374][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.899496][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.902388][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.909108][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.917360][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.923159][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.929495][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.936511][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.943044][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.952703][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.965658][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.967237][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.981985][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.992136][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.008386][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.038557][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.048263][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.057793][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.068630][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.085004][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.114436][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.179289][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 222.334470][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 222.962303][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 222.983312][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 223.078787][ T5831] Bluetooth: hci0: command tx timeout [ 223.084548][ T49] Bluetooth: hci2: command tx timeout [ 223.090508][ T5831] Bluetooth: hci1: command tx timeout [ 223.148959][ T49] Bluetooth: hci3: command tx timeout [ 223.160391][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 223.306309][ T49] Bluetooth: hci4: command tx timeout [ 223.532733][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.541190][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.549104][ T5818] bridge_slave_0: entered allmulticast mode [ 223.558327][ T5818] bridge_slave_0: entered promiscuous mode [ 223.573160][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.580839][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.590575][ T5822] bridge_slave_0: entered allmulticast mode [ 223.599776][ T5822] bridge_slave_0: entered promiscuous mode [ 223.618412][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.629008][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.638475][ T5818] bridge_slave_1: entered allmulticast mode [ 223.649908][ T5818] bridge_slave_1: entered promiscuous mode [ 223.684808][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.692620][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.700467][ T5822] bridge_slave_1: entered allmulticast mode [ 223.709871][ T5822] bridge_slave_1: entered promiscuous mode [ 223.980126][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.050765][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.069603][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.188326][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.229781][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.237402][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.244931][ T5828] bridge_slave_0: entered allmulticast mode [ 224.254097][ T5828] bridge_slave_0: entered promiscuous mode [ 224.265588][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.273398][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.281126][ T5835] bridge_slave_0: entered allmulticast mode [ 224.289393][ T5835] bridge_slave_0: entered promiscuous mode [ 224.399847][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.407458][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.415035][ T5828] bridge_slave_1: entered allmulticast mode [ 224.424331][ T5828] bridge_slave_1: entered promiscuous mode [ 224.435151][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.444091][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.451705][ T5835] bridge_slave_1: entered allmulticast mode [ 224.460137][ T5835] bridge_slave_1: entered promiscuous mode [ 224.510434][ T5818] team0: Port device team_slave_0 added [ 224.603456][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.610991][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.618759][ T5819] bridge_slave_0: entered allmulticast mode [ 224.627955][ T5819] bridge_slave_0: entered promiscuous mode [ 224.691585][ T5818] team0: Port device team_slave_1 added [ 224.707670][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.715480][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.723391][ T5819] bridge_slave_1: entered allmulticast mode [ 224.740107][ T5819] bridge_slave_1: entered promiscuous mode [ 224.773718][ T5822] team0: Port device team_slave_0 added [ 224.949669][ T5822] team0: Port device team_slave_1 added [ 224.958912][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.966527][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.992893][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.050435][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.069455][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.081603][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.089233][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.115593][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.152266][ T49] Bluetooth: hci2: command tx timeout [ 225.152951][ T5831] Bluetooth: hci1: command tx timeout [ 225.158048][ T49] Bluetooth: hci0: command tx timeout [ 225.180647][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.200709][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.218314][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.229304][ T5831] Bluetooth: hci3: command tx timeout [ 225.237836][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.340535][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.347804][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.374183][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.386521][ T5831] Bluetooth: hci4: command tx timeout [ 225.490612][ T5828] team0: Port device team_slave_0 added [ 225.500332][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.508333][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.534670][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.630445][ T5835] team0: Port device team_slave_0 added [ 225.644556][ T5828] team0: Port device team_slave_1 added [ 225.661525][ T5835] team0: Port device team_slave_1 added [ 225.713972][ T5819] team0: Port device team_slave_0 added [ 225.850338][ T5819] team0: Port device team_slave_1 added [ 225.915846][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.923004][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.949435][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.965160][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.972625][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.999155][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.111615][ T5818] hsr_slave_0: entered promiscuous mode [ 226.120969][ T5818] hsr_slave_1: entered promiscuous mode [ 226.133002][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.141221][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.167651][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.207831][ T5822] hsr_slave_0: entered promiscuous mode [ 226.216492][ T5822] hsr_slave_1: entered promiscuous mode [ 226.223904][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.231938][ T5822] Cannot create hsr debugfs directory [ 226.240033][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.247603][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.273932][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.289936][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.297511][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.323872][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.337857][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.344992][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.371457][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.663547][ T5835] hsr_slave_0: entered promiscuous mode [ 226.672602][ T5835] hsr_slave_1: entered promiscuous mode [ 226.680487][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.688355][ T5835] Cannot create hsr debugfs directory [ 226.704861][ T5819] hsr_slave_0: entered promiscuous mode [ 226.715162][ T5819] hsr_slave_1: entered promiscuous mode [ 226.723219][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.731072][ T5819] Cannot create hsr debugfs directory [ 227.068332][ T5828] hsr_slave_0: entered promiscuous mode [ 227.077100][ T5828] hsr_slave_1: entered promiscuous mode [ 227.084858][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.092711][ T5828] Cannot create hsr debugfs directory [ 227.227113][ T5831] Bluetooth: hci1: command tx timeout [ 227.232746][ T5831] Bluetooth: hci0: command tx timeout [ 227.233167][ T5823] Bluetooth: hci2: command tx timeout [ 227.307255][ T5831] Bluetooth: hci3: command tx timeout [ 227.490991][ T5831] Bluetooth: hci4: command tx timeout [ 228.136215][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.158924][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.193752][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.224365][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.314472][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.348194][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.388020][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.431417][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.468068][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.492292][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.633461][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.690855][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.716450][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.821595][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.910721][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.934386][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.009123][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.087972][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.113034][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.136427][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.316744][ T5831] Bluetooth: hci0: command tx timeout [ 229.317778][ T5823] Bluetooth: hci2: command tx timeout [ 229.322292][ T5831] Bluetooth: hci1: command tx timeout [ 229.399340][ T5831] Bluetooth: hci3: command tx timeout [ 229.532640][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.560481][ T5831] Bluetooth: hci4: command tx timeout [ 229.779283][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.842584][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.850222][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.922525][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.999763][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.007367][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.030311][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.126764][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.185145][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.320150][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.353425][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.376980][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.384294][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.470904][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.478717][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.493579][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.501149][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.521645][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.529079][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.569315][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.681342][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.688930][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.780580][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.832876][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.840461][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.927492][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.935004][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.012703][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.023405][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.103767][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.111382][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.595172][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.692083][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.957384][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.153296][ T5822] veth0_vlan: entered promiscuous mode [ 233.180271][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.200712][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.275465][ T5822] veth1_vlan: entered promiscuous mode [ 233.310810][ T5819] veth0_vlan: entered promiscuous mode [ 233.484130][ T5819] veth1_vlan: entered promiscuous mode [ 233.649974][ T5822] veth0_macvtap: entered promiscuous mode [ 233.718011][ T5818] veth0_vlan: entered promiscuous mode [ 233.733109][ T5822] veth1_macvtap: entered promiscuous mode [ 233.835634][ T5828] veth0_vlan: entered promiscuous mode [ 233.879128][ T5818] veth1_vlan: entered promiscuous mode [ 233.893744][ T5819] veth0_macvtap: entered promiscuous mode [ 233.955375][ T5828] veth1_vlan: entered promiscuous mode [ 233.970086][ T5819] veth1_macvtap: entered promiscuous mode [ 233.995130][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.093118][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.188720][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.198050][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.207302][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.216409][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.265500][ T5818] veth0_macvtap: entered promiscuous mode [ 234.281503][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.377104][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.397072][ T5818] veth1_macvtap: entered promiscuous mode [ 234.411008][ T5828] veth0_macvtap: entered promiscuous mode [ 234.462738][ T5828] veth1_macvtap: entered promiscuous mode [ 234.474388][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.483856][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.493169][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.502274][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.673238][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.768738][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.785359][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.855587][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864933][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.874082][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.884368][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.921364][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.008303][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.017501][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.026611][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.035600][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.540787][ T5835] veth0_vlan: entered promiscuous mode [ 235.634219][ T5835] veth1_vlan: entered promiscuous mode [ 235.973665][ T5835] veth0_macvtap: entered promiscuous mode [ 236.054963][ T5835] veth1_macvtap: entered promiscuous mode [ 236.240899][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.361662][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.464310][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.473624][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.482847][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.491974][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.407964][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.416060][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.744614][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.752718][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.817664][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.826463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.976523][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.984586][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.011004][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.019134][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.233143][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.241336][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.392564][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.457054][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.465111][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.859539][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.869363][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.138145][ T6008] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 242.317695][ T6011] batadv_slave_1: entered promiscuous mode [ 242.416555][ T6009] batadv_slave_1: left promiscuous mode [ 242.781285][ T6016] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 243.028978][ T4162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.037401][ T4162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.363315][ T4162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.371727][ T4162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.612987][ T6046] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 246.006757][ T6068] Zero length message leads to an empty skb [ 246.060089][ T6067] tipc: Started in network mode [ 246.065522][ T6067] tipc: Node identity fe90e9cd8d09, cluster identity 4711 [ 246.073881][ T6067] tipc: Enabled bearer , priority 0 [ 246.185543][ T6070] syzkaller0: entered promiscuous mode [ 246.197199][ T6070] syzkaller0: entered allmulticast mode [ 246.240848][ T6067] tipc: Resetting bearer [ 246.354511][ T6064] tipc: Resetting bearer [ 246.430968][ T6064] tipc: Disabling bearer [ 246.547327][ T6072] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.254464][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 248.792707][ T6103] tipc: Enabled bearer , priority 0 [ 248.859832][ T6103] syzkaller0: entered promiscuous mode [ 248.865552][ T6103] syzkaller0: entered allmulticast mode [ 248.941630][ T6103] tipc: Resetting bearer [ 249.020061][ T6102] tipc: Resetting bearer [ 249.058175][ T6102] tipc: Disabling bearer [ 250.123860][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 250.428652][ T6128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.689251][ T6120] sctp: failed to load transform for md5: -2 [ 253.707212][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 254.137756][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 254.674899][ T6196] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.684177][ T6196] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.695484][ T6196] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.704949][ T6196] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.593521][ T6209] macvlan0: entered promiscuous mode [ 255.617896][ T6209] macvlan1: entered promiscuous mode [ 255.628360][ T6209] hsr1: entered promiscuous mode [ 256.437182][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 256.516527][ T6228] nbd0: detected capacity change from 0 to 127 [ 256.628150][ T5831] block nbd0: Receive control failed (result -32) [ 256.746232][ T6039] block nbd0: Dead connection, failed to find a fallback [ 256.753858][ T6039] block nbd0: shutting down sockets [ 256.759550][ T6039] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.769086][ T6039] Buffer I/O error on dev nbd0, logical block 0, async page read [ 256.777417][ T6039] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.786846][ T6039] Buffer I/O error on dev nbd0, logical block 1, async page read [ 256.794961][ T6039] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.804464][ T6039] Buffer I/O error on dev nbd0, logical block 2, async page read [ 256.812707][ T6039] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.822176][ T6039] Buffer I/O error on dev nbd0, logical block 3, async page read [ 256.830546][ T6039] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.845585][ T6039] Buffer I/O error on dev nbd0, logical block 0, async page read [ 256.855314][ T6039] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.864755][ T6039] Buffer I/O error on dev nbd0, logical block 1, async page read [ 256.872948][ T6039] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.882329][ T6039] Buffer I/O error on dev nbd0, logical block 2, async page read [ 256.890705][ T6039] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.900195][ T6039] Buffer I/O error on dev nbd0, logical block 3, async page read [ 256.909254][ T6039] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.918774][ T6039] Buffer I/O error on dev nbd0, logical block 0, async page read [ 256.926997][ T6039] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.936491][ T6039] Buffer I/O error on dev nbd0, logical block 1, async page read [ 256.953975][ T6039] ldm_validate_partition_table(): Disk read failed. [ 256.964709][ T6039] Dev nbd0: unable to read RDB block 0 [ 256.973107][ T6039] nbd0: unable to read partition table [ 257.020316][ T6039] ldm_validate_partition_table(): Disk read failed. [ 257.029656][ T6039] Dev nbd0: unable to read RDB block 0 [ 257.037986][ T6039] nbd0: unable to read partition table [ 257.122887][ T6039] ldm_validate_partition_table(): Disk read failed. [ 257.133831][ T6039] Dev nbd0: unable to read RDB block 0 [ 257.143497][ T6039] nbd0: unable to read partition table [ 257.216623][ T6039] ldm_validate_partition_table(): Disk read failed. [ 257.226210][ T6039] Dev nbd0: unable to read RDB block 0 [ 257.234356][ T6039] nbd0: unable to read partition table [ 259.278888][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 259.376926][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.104'. [ 260.145692][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.104'. [ 262.659589][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 265.496159][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.135'. [ 265.672615][ T24] IPVS: starting estimator thread 0... [ 265.794056][ T6365] IPVS: using max 240 ests per chain, 12000 per kthread [ 265.807565][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.815404][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.867317][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.875216][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.152158][ T6369] veth1_macvtap: left promiscuous mode [ 266.161934][ T6369] macsec0: entered promiscuous mode [ 266.838316][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 266.848244][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 268.171090][ T6399] tipc: Started in network mode [ 268.176535][ T6399] tipc: Node identity 080211, cluster identity 4711 [ 268.184511][ T6399] tipc: Enabled bearer , priority 10 [ 269.306125][ T5882] tipc: Node number set to 134353152 [ 269.550085][ T6416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.684329][ T6416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.829883][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.017013][ T6445] bridge_slave_0: left allmulticast mode [ 271.022990][ T6445] bridge_slave_0: left promiscuous mode [ 271.029791][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.167304][ T6445] bridge_slave_1: left allmulticast mode [ 271.177319][ T6445] bridge_slave_1: left promiscuous mode [ 271.185935][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.374753][ T6445] bond0: (slave bond_slave_0): Releasing backup interface [ 271.446016][ T6445] bond0: (slave bond_slave_1): Releasing backup interface [ 271.502301][ T6445] team0: Port device team_slave_0 removed [ 271.528169][ T6454] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 271.702533][ T6445] team0: Port device team_slave_1 removed [ 271.713177][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.721252][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.808004][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.815927][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.249586][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 272.767219][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 272.776572][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 274.458578][ T6496] veth0_to_bond: entered allmulticast mode [ 275.488591][ T6516] Bluetooth: MGMT ver 1.23 [ 277.277771][ T6543] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.213'. [ 277.287661][ T6543] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.213'. [ 277.297246][ T6543] netlink: 584 bytes leftover after parsing attributes in process `syz.0.213'. [ 277.706670][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 277.969246][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.979898][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.063439][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.072990][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.081690][ T24] usb 1-1: SerialNumber: syz [ 278.438162][ T24] usb 1-1: 0:2 : does not exist [ 278.443348][ T24] usb 1-1: unit 5 not found! [ 278.549778][ T24] usb 1-1: USB disconnect, device number 2 [ 278.885657][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.127629][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 279.698498][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.843568][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 280.426263][ T4162] wlan1: Trigger new scan to find an IBSS to join [ 280.805145][ T6598] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.237'. [ 280.814840][ T6598] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.237'. [ 280.824366][ T6598] netlink: 584 bytes leftover after parsing attributes in process `syz.0.237'. [ 280.863945][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.146361][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 281.336579][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.347436][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.431654][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.441725][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.450180][ T24] usb 1-1: SerialNumber: syz [ 281.791622][ T24] usb 1-1: 0:2 : does not exist [ 281.796909][ T24] usb 1-1: unit 5 not found! [ 281.936350][ T24] usb 1-1: USB disconnect, device number 3 [ 282.286480][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.432052][ T4162] wlan1: Trigger new scan to find an IBSS to join [ 283.520329][ T6639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.527917][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 283.535450][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 284.140840][ T6653] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.261'. [ 284.150602][ T6653] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.261'. [ 284.160160][ T6653] netlink: 584 bytes leftover after parsing attributes in process `syz.4.261'. [ 284.516586][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 284.731198][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.742103][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.844817][ T5877] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.854804][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.863471][ T5877] usb 5-1: SerialNumber: syz [ 285.248674][ T5877] usb 5-1: 0:2 : does not exist [ 285.253848][ T5877] usb 5-1: unit 5 not found! [ 285.387949][ T57] wlan1: Trigger new scan to find an IBSS to join [ 285.442406][ T5877] usb 5-1: USB disconnect, device number 2 [ 285.852022][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.411401][ T57] wlan1: Creating new IBSS network, BSSID d2:e0:66:c0:91:24 [ 287.387824][ T2995] wlan1: Trigger new scan to find an IBSS to join [ 287.830790][ T6704] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.284'. [ 287.840766][ T6704] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.284'. [ 287.850315][ T6704] netlink: 584 bytes leftover after parsing attributes in process `syz.2.284'. [ 288.138559][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 288.351187][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.361778][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.403836][ T2995] wlan1: Creating new IBSS network, BSSID d2:90:d2:49:5b:d2 [ 288.442574][ T5904] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.452344][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.460796][ T5904] usb 3-1: SerialNumber: syz [ 288.800404][ T5904] usb 3-1: 0:2 : does not exist [ 288.805597][ T5904] usb 3-1: unit 5 not found! [ 288.979066][ T5904] usb 3-1: USB disconnect, device number 2 [ 289.371616][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.870194][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 291.046868][ T6758] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.306'. [ 291.056792][ T6758] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.306'. [ 291.073700][ T6758] netlink: 584 bytes leftover after parsing attributes in process `syz.0.306'. [ 291.395583][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 291.616691][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.627394][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.704151][ T5904] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.716367][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.724640][ T5904] usb 1-1: SerialNumber: syz [ 291.922764][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 292.049901][ T5904] usb 1-1: 0:2 : does not exist [ 292.055071][ T5904] usb 1-1: unit 5 not found! [ 292.237314][ T5904] usb 1-1: USB disconnect, device number 4 [ 292.569169][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.277926][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 295.764588][ T6832] fuse: Unknown parameter 'fd00000000000000000003' [ 296.459730][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 297.951253][ T6871] fuse: Unknown parameter 'fd00000000000000000003' [ 298.868038][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 299.760595][ T6903] fuse: Unknown parameter 'fd00000000000000000003' [ 300.177083][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 300.874105][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 303.080519][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 303.258042][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 303.654519][ T6967] syzkaller0: entered promiscuous mode [ 303.661097][ T6967] syzkaller0: entered allmulticast mode [ 305.175309][ T6992] geneve1: entered promiscuous mode [ 305.181623][ T6992] geneve1: entered allmulticast mode [ 305.519347][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 305.884121][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 306.078060][ T7007] syzkaller0: entered promiscuous mode [ 306.084050][ T7007] syzkaller0: entered allmulticast mode [ 306.847426][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 307.033456][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.045492][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.057167][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.068481][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.081889][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.091552][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.307536][ T5904] usb 2-1: config 0 descriptor?? [ 307.639097][ T7030] tipc: Enabled bearer , priority 0 [ 307.666306][ T7030] syzkaller0: entered promiscuous mode [ 307.672193][ T7030] syzkaller0: entered allmulticast mode [ 307.736464][ T7030] tipc: Resetting bearer [ 307.800030][ T7029] tipc: Resetting bearer [ 307.859699][ T7029] tipc: Disabling bearer [ 308.008647][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 308.015368][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 308.086578][ T5904] usb 2-1: USB disconnect, device number 2 [ 308.173277][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 308.617222][ T7039] xt_CT: No such helper "syz1" [ 309.632333][ T7061] tipc: Started in network mode [ 309.637885][ T7061] tipc: Node identity 1e65c132aae9, cluster identity 4711 [ 309.646576][ T7061] tipc: Enabled bearer , priority 0 [ 309.672770][ T7061] syzkaller0: entered promiscuous mode [ 309.681621][ T7061] syzkaller0: entered allmulticast mode [ 309.743810][ T7060] tipc: Resetting bearer [ 309.793772][ T7060] tipc: Disabling bearer [ 310.388797][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 311.494247][ T7083] xt_CT: No such helper "syz1" [ 311.824090][ T2995] tipc: Resetting bearer [ 312.861906][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 312.871276][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 313.766270][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 314.017287][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 314.044379][ T7129] xt_CT: No such helper "syz1" [ 314.086618][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.096668][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.104926][ T5882] usb 2-1: Product: syz [ 314.109531][ T5882] usb 2-1: Manufacturer: syz [ 314.114350][ T5882] usb 2-1: SerialNumber: syz [ 314.201507][ T5882] usb 2-1: config 0 descriptor?? [ 314.447424][ T5882] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.802162][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 314.877182][ T7144] gtp0: entered promiscuous mode [ 314.882380][ T7144] gtp0: entered allmulticast mode [ 315.563698][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 315.573084][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 315.893668][ T5882] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.971866][ T5882] usb 2-1: USB disconnect, device number 3 [ 316.876879][ T7169] xt_CT: No such helper "syz1" [ 317.225175][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 317.858692][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 317.871509][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 318.485887][ T4162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.481352][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 320.316577][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 320.522887][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.536158][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.547898][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 320.558069][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.571474][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.581024][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.643080][ T5904] usb 1-1: config 0 descriptor?? [ 321.125233][ T5904] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.228097][ T5904] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 321.347462][ T5904] usb 1-1: USB disconnect, device number 5 [ 321.836076][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 322.434200][ T7255] fido_id[7255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 324.141582][ T7299] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 324.214454][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 326.232933][ T7335] tipc: Enabled bearer , priority 0 [ 326.298508][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 326.348482][ T7335] tipc: Resetting bearer [ 326.362919][ T7334] tipc: Disabling bearer [ 327.246354][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 327.471754][ T5904] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 327.482905][ T5904] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 327.519808][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 327.559174][ T5904] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 327.568771][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.577147][ T5904] usb 3-1: Product: syz [ 327.581529][ T5904] usb 3-1: Manufacturer: syz [ 327.586448][ T5904] usb 3-1: SerialNumber: syz [ 327.612094][ T7363] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 327.976803][ T24] usb 3-1: USB disconnect, device number 3 [ 328.050601][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 328.526198][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 328.804280][ T24] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 328.815140][ T24] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 328.892651][ T24] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 328.899041][ T7379] syzkaller0: entered promiscuous mode [ 328.904967][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.908017][ T7379] syzkaller0: entered allmulticast mode [ 328.915681][ T24] usb 3-1: Product: syz [ 328.926230][ T24] usb 3-1: Manufacturer: syz [ 328.933113][ T24] usb 3-1: SerialNumber: syz [ 329.173405][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 329.297114][ T7385] netlink: 'syz.1.542': attribute type 25 has an invalid length. [ 330.007513][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.017437][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.065640][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 330.075283][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.076857][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 330.085523][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.162309][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.172417][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.184773][ T7398] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 330.294075][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.550'. [ 330.781944][ T7413] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 331.519388][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 331.858606][ T24] usb 3-1: USB disconnect, device number 4 [ 332.256945][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 332.855201][ T7452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 333.688486][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 334.120808][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 334.231495][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 334.402776][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 334.469433][ T5904] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 334.480447][ T5904] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 334.541053][ T5904] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 334.550647][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.559629][ T5904] usb 3-1: Product: syz [ 334.564100][ T5904] usb 3-1: Manufacturer: syz [ 334.569062][ T5904] usb 3-1: SerialNumber: syz [ 334.578523][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 334.612501][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 334.944785][ T5882] usb 3-1: USB disconnect, device number 5 [ 335.081875][ T7484] syzkaller0: entered promiscuous mode [ 335.087780][ T7484] syzkaller0: entered allmulticast mode [ 335.118234][ T7487] netlink: 'syz.4.580': attribute type 4 has an invalid length. [ 335.180594][ T7487] netlink: 'syz.4.580': attribute type 4 has an invalid length. [ 335.281571][ T7491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 335.457907][ T5882] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 335.689423][ T5882] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 335.700956][ T5882] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 335.806276][ T5882] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 335.815625][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.824076][ T5882] usb 3-1: Product: syz [ 335.829650][ T5882] usb 3-1: Manufacturer: syz [ 335.834469][ T5882] usb 3-1: SerialNumber: syz [ 336.102829][ T7507] tipc: Enabled bearer , priority 0 [ 336.334738][ T7506] syzkaller0: entered promiscuous mode [ 336.340680][ T7506] syzkaller0: entered allmulticast mode [ 336.443439][ T7505] tipc: Resetting bearer [ 336.530455][ T7512] team_slave_0: entered promiscuous mode [ 336.536570][ T7512] team_slave_1: entered promiscuous mode [ 336.542664][ T7512] macsec1: entered promiscuous mode [ 336.548317][ T7512] team0: entered promiscuous mode [ 336.556511][ T7512] macsec1: entered allmulticast mode [ 336.562030][ T7512] team0: entered allmulticast mode [ 336.567566][ T7512] team_slave_0: entered allmulticast mode [ 336.573501][ T7512] team_slave_1: entered allmulticast mode [ 336.586982][ T7512] team0: Device macsec1 is already an upper device of the team interface [ 336.629730][ T7512] team0: left allmulticast mode [ 336.634935][ T7512] team_slave_0: left allmulticast mode [ 336.641854][ T7512] team_slave_1: left allmulticast mode [ 336.648025][ T7512] team0: left promiscuous mode [ 336.656026][ T7512] team_slave_0: left promiscuous mode [ 336.661674][ T7512] team_slave_1: left promiscuous mode [ 336.767384][ T7502] tipc: Resetting bearer [ 336.796299][ T7502] tipc: Disabling bearer [ 336.877945][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 336.950530][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.960506][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.012355][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 337.041134][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.051733][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.110194][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.122050][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.619726][ T7527] debugfs: Directory 'netdev:nicvf0' with parent 'phy11' already present! [ 337.978329][ T7530] syzkaller0: entered promiscuous mode [ 337.984278][ T7530] syzkaller0: entered allmulticast mode [ 338.148604][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 338.333748][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.346456][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.359362][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 338.373206][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.386783][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.396310][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.491959][ T24] usb 4-1: config 0 descriptor?? [ 338.952238][ T5882] usb 3-1: USB disconnect, device number 6 [ 339.012484][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 339.165011][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 339.229665][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 339.711792][ T4162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.024629][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 341.130732][ T24] usb 4-1: USB disconnect, device number 2 [ 341.176304][ T7575] syzkaller0: entered promiscuous mode [ 341.182133][ T7575] syzkaller0: entered allmulticast mode [ 341.673992][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 342.308899][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.858305][ T7604] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 342.897834][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 343.099785][ T5882] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 343.336384][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.348390][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.362849][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.373474][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.387789][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.397207][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.655162][ T5882] usb 1-1: config 0 descriptor?? [ 343.901668][ T7621] syzkaller0: entered promiscuous mode [ 343.907980][ T7621] syzkaller0: entered allmulticast mode [ 344.107643][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 344.128437][ T7625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.628'. [ 344.221871][ T5882] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 344.427462][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 344.428217][ T5109] Bluetooth: hci0: command 0x0406 tx timeout [ 344.434487][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 344.442238][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 346.202521][ T24] usb 1-1: USB disconnect, device number 6 [ 347.338868][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 347.566789][ T24] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 347.600833][ T24] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 347.611471][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.619888][ T24] usb 4-1: Product: syz [ 347.624268][ T24] usb 4-1: Manufacturer: syz [ 347.629330][ T24] usb 4-1: SerialNumber: syz [ 348.017790][ T24] usb 4-1: USB disconnect, device number 3 [ 348.044524][ T6665] udevd[6665]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 348.536050][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 348.741716][ T24] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 348.791439][ T24] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 348.802320][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.810861][ T24] usb 4-1: Product: syz [ 348.815244][ T24] usb 4-1: Manufacturer: syz [ 348.820203][ T24] usb 4-1: SerialNumber: syz [ 349.384511][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.394716][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.433968][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.473012][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.577235][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.587439][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.437788][ T5882] usb 4-1: USB disconnect, device number 4 [ 352.637390][ T7762] tipc: Started in network mode [ 352.642570][ T7762] tipc: Node identity 6ae0ec973ad8, cluster identity 4711 [ 352.650949][ T7762] tipc: Enabled bearer , priority 0 [ 352.747039][ T7762] tipc: Resetting bearer [ 352.773151][ T7760] tipc: Disabling bearer [ 353.396338][ T1959] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 353.607452][ T1959] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 353.646797][ T1959] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 353.656432][ T1959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.664690][ T1959] usb 4-1: Product: syz [ 353.669219][ T1959] usb 4-1: Manufacturer: syz [ 353.674048][ T1959] usb 4-1: SerialNumber: syz [ 354.055487][ T1959] usb 4-1: USB disconnect, device number 5 [ 354.316396][ T7787] netlink: 144 bytes leftover after parsing attributes in process `syz.1.698'. [ 354.327463][ T7787] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 354.565992][ T1959] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 354.826404][ T1959] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 354.896301][ T1959] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 354.905669][ T1959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.914276][ T1959] usb 4-1: Product: syz [ 354.918808][ T1959] usb 4-1: Manufacturer: syz [ 354.923654][ T1959] usb 4-1: SerialNumber: syz [ 354.954979][ T7797] tipc: Started in network mode [ 354.960654][ T7797] tipc: Node identity a24af4f90df5, cluster identity 4711 [ 354.968952][ T7797] tipc: Enabled bearer , priority 0 [ 355.047353][ T7798] tipc: Resetting bearer [ 355.125016][ T7794] tipc: Disabling bearer [ 355.477840][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.487914][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.580379][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.590863][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.645579][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.657144][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.190925][ T1959] usb 4-1: USB disconnect, device number 6 [ 357.446854][ T7841] tipc: Enabled bearer , priority 0 [ 357.559069][ T7840] tipc: Resetting bearer [ 357.678786][ T7839] tipc: Disabling bearer [ 359.386488][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.631824][ T24] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 359.641477][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.653018][ T24] usb 3-1: Product: syz [ 359.657776][ T24] usb 3-1: Manufacturer: syz [ 359.659751][ T7877] netlink: 'syz.4.734': attribute type 24 has an invalid length. [ 359.662598][ T24] usb 3-1: SerialNumber: syz [ 359.828303][ T7880] tipc: Enabled bearer , priority 0 [ 359.904474][ T7880] tipc: Resetting bearer [ 359.986762][ T7878] tipc: Disabling bearer [ 360.021511][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 360.033146][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 360.177239][ T24] usb 3-1: USB disconnect, device number 7 [ 360.593148][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 360.740266][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.739'. [ 360.803792][ T24] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 360.813416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.821946][ T24] usb 3-1: Product: syz [ 360.826549][ T24] usb 3-1: Manufacturer: syz [ 360.831355][ T24] usb 3-1: SerialNumber: syz [ 361.193529][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 361.203214][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 361.269104][ T7901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.741'. [ 361.449136][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.459195][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.573158][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.583358][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.605172][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.615711][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.448418][ T7917] tipc: Enabled bearer , priority 0 [ 362.494332][ T7917] tipc: Resetting bearer [ 362.552265][ T7915] tipc: Disabling bearer [ 363.210671][ T24] usb 3-1: USB disconnect, device number 8 [ 365.114602][ T7960] tipc: Enabled bearer , priority 0 [ 365.221566][ T7960] tipc: Resetting bearer [ 365.300017][ T7959] tipc: Disabling bearer [ 365.446435][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 365.655396][ T24] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 365.666055][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.674314][ T24] usb 4-1: Product: syz [ 365.680071][ T24] usb 4-1: Manufacturer: syz [ 365.684889][ T24] usb 4-1: SerialNumber: syz [ 366.080357][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 366.090021][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 366.123869][ T24] usb 4-1: USB disconnect, device number 7 [ 366.579722][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 366.812582][ T24] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 366.823762][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.832315][ T24] usb 4-1: Product: syz [ 366.836919][ T24] usb 4-1: Manufacturer: syz [ 366.841734][ T24] usb 4-1: SerialNumber: syz [ 367.182079][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 367.191754][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 367.391711][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.402066][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.502356][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.512534][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.567934][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.577946][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.014771][ T8006] tipc: Enabling of bearer rejected, failed to enable media [ 369.486468][ T24] usb 4-1: USB disconnect, device number 8 [ 371.247070][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 371.725588][ T4421] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.806254][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 372.072920][ T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 372.082572][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.091926][ T24] usb 1-1: Product: syz [ 372.096572][ T24] usb 1-1: Manufacturer: syz [ 372.101423][ T24] usb 1-1: SerialNumber: syz [ 372.568746][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 372.578491][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 372.664404][ T24] usb 1-1: USB disconnect, device number 7 [ 373.117516][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 373.366381][ T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 373.377190][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.385452][ T24] usb 1-1: Product: syz [ 373.390805][ T24] usb 1-1: Manufacturer: syz [ 373.395638][ T24] usb 1-1: SerialNumber: syz [ 373.751873][ T24] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 373.761541][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 373.996434][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.006443][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.042732][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.052673][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.128095][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.138152][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.648765][ T8114] tipc: Enabling of bearer rejected, failed to enable media [ 375.522063][ T8132] tipc: Enabling of bearer rejected, failed to enable media [ 375.862035][ T1959] usb 1-1: USB disconnect, device number 8 [ 376.574053][ T8149] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.824'. [ 376.583671][ T8149] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.824'. [ 376.593454][ T8149] netlink: 584 bytes leftover after parsing attributes in process `syz.2.824'. [ 376.946431][ T1959] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 377.106809][ T8159] veth0: entered promiscuous mode [ 377.150930][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 377.154677][ T1959] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 377.169433][ T1959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.179865][ T1959] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 377.189364][ T1959] usb 3-1: config 1 has no interface number 1 [ 377.195678][ T1959] usb 3-1: config 1 interface 5 has no altsetting 0 [ 377.457798][ T1959] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.468375][ T1959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.476850][ T1959] usb 3-1: SerialNumber: syz [ 377.819018][ T1959] usb 3-1: 0:2 : does not exist [ 378.014270][ T1959] usb 3-1: USB disconnect, device number 9 [ 378.141347][ T8168] tipc: Enabling of bearer rejected, failed to enable media [ 378.361018][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.737644][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'. [ 379.186794][ T8186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.836'. [ 380.627710][ T8217] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.846'. [ 380.637421][ T8217] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.846'. [ 380.647836][ T8217] netlink: 584 bytes leftover after parsing attributes in process `syz.0.846'. [ 381.016170][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 381.085651][ T8221] tipc: Enabling of bearer rejected, failed to enable media [ 381.132961][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'. [ 381.218719][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.229459][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.318518][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.328529][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.336953][ T24] usb 1-1: SerialNumber: syz [ 381.657570][ T24] usb 1-1: 0:2 : does not exist [ 381.664066][ T24] usb 1-1: unit 5 not found! [ 381.813404][ T24] usb 1-1: USB disconnect, device number 9 [ 381.933868][ T8234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.852'. [ 382.227800][ T6665] udevd[6665]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.332707][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'. [ 384.348930][ T8278] tipc: Enabling of bearer rejected, failed to enable media [ 384.514482][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.866'. [ 385.842929][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.875'. [ 387.184005][ T8333] tipc: Enabling of bearer rejected, failed to enable media [ 388.034264][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 388.112796][ T8355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.890'. [ 388.808095][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 388.817758][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 389.322043][ T8376] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 389.330212][ T8376] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 389.621852][ T8380] tipc: Enabling of bearer rejected, failed to enable media [ 389.782255][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 390.106150][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.905'. [ 391.008866][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 391.018369][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 391.475667][ T8416] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 391.483768][ T8416] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 391.670108][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.915'. [ 392.192688][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 393.445565][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 393.455038][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 393.499395][ T8455] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 393.507989][ T8455] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 393.661924][ T8458] netlink: 'syz.0.929': attribute type 15 has an invalid length. [ 394.688251][ T8474] tipc: Enabling of bearer rejected, failed to enable media [ 397.267311][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 397.791182][ T8539] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 397.799064][ T8539] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 398.407155][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 400.244177][ T8575] tipc: Enabled bearer , priority 0 [ 400.332241][ T8579] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 400.337863][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 400.340191][ T8579] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 400.359353][ T8579] tipc: Resetting bearer [ 400.407551][ T8575] tipc: Resetting bearer [ 401.266235][ T1959] tipc: Node number set to 1939466701 [ 402.248734][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 402.423764][ T8611] tipc: Enabling of bearer rejected, already enabled [ 403.530006][ T8628] netlink: 'syz.0.998': attribute type 16 has an invalid length. [ 403.723048][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.738956][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.897399][ T8628] syz.0.998 (8628) used greatest stack depth: 4536 bytes left [ 404.317246][ T8645] tipc: Enabling of bearer rejected, already enabled [ 405.482426][ T8665] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 406.097189][ T8678] tipc: Enabling of bearer rejected, already enabled [ 406.869637][ T8692] netlink: 'syz.2.1025': attribute type 4 has an invalid length. [ 408.205404][ T8711] syzkaller0: entered promiscuous mode [ 408.211383][ T8711] syzkaller0: entered allmulticast mode [ 411.836982][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'. [ 411.846624][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'. [ 413.778845][ T8816] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 413.914578][ T8817] syz_tun: entered promiscuous mode [ 413.920876][ T8817] vlan2: entered promiscuous mode [ 414.374082][ T8821] netlink: 'syz.0.1087': attribute type 25 has an invalid length. [ 415.107524][ T8838] tipc: Enabled bearer , priority 0 [ 415.297271][ T8837] syzkaller0: entered promiscuous mode [ 415.303090][ T8837] syzkaller0: entered allmulticast mode [ 415.396632][ T8835] tipc: Resetting bearer [ 415.446447][ T8835] tipc: Disabling bearer [ 415.896202][ T8844] xt_CT: No such helper "syz1" [ 416.465282][ T8859] netlink: 'syz.0.1103': attribute type 25 has an invalid length. [ 417.022655][ T8869] syzkaller0: entered promiscuous mode [ 417.028742][ T8869] syzkaller0: entered allmulticast mode [ 417.592862][ T8879] syzkaller0: entered promiscuous mode [ 417.598880][ T8879] syzkaller0: entered allmulticast mode [ 418.168949][ T8889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 418.268316][ T8892] netlink: 'syz.2.1118': attribute type 25 has an invalid length. [ 418.853517][ T8901] bridge_slave_0: left allmulticast mode [ 418.859627][ T8901] bridge_slave_0: left promiscuous mode [ 418.866435][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.977099][ T8901] bridge_slave_1: left allmulticast mode [ 418.983181][ T8901] bridge_slave_1: left promiscuous mode [ 418.990693][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.134101][ T8901] bond0: (slave bond_slave_0): Releasing backup interface [ 419.298551][ T8901] bond0: (slave bond_slave_1): Releasing backup interface [ 419.452355][ T8901] team0: Port device team_slave_0 removed [ 419.484808][ T8910] af_packet: tpacket_rcv: packet too big, clamped from 86 to 4294967286. macoff=82 [ 419.552802][ T8901] team0: Port device team_slave_1 removed [ 419.563440][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.571443][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.620675][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.628644][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.960936][ T8916] syzkaller0: entered promiscuous mode [ 419.972141][ T8916] syzkaller0: entered allmulticast mode [ 421.411011][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 421.420647][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 422.181721][ T8955] syzkaller0: entered promiscuous mode [ 422.187923][ T8955] syzkaller0: entered allmulticast mode [ 422.978497][ T8970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 423.323176][ T8976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 424.277919][ T8994] syzkaller0: entered promiscuous mode [ 424.283711][ T8994] syzkaller0: entered allmulticast mode [ 426.830167][ T9039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.837810][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 426.845275][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 426.852888][ T9039] IPv6: NLM_F_CREATE should be set when creating new route [ 426.893784][ T9040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.983627][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 428.182177][ T9064] netlink: 'syz.2.1193': attribute type 4 has an invalid length. [ 429.345380][ T9086] gretap0: entered promiscuous mode [ 429.351243][ T9086] vlan2: entered promiscuous mode [ 431.040102][ T9113] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 431.048067][ T9113] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 431.057704][ T9113] tipc: Resetting bearer [ 431.333217][ T9122] vlan2: entered promiscuous mode [ 431.486540][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 431.718306][ T5877] usb 2-1: config 118 interface 0 has no altsetting 0 [ 431.794744][ T5877] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 431.804431][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.812943][ T5877] usb 2-1: Product: syz [ 431.817405][ T5877] usb 2-1: Manufacturer: syz [ 431.822222][ T5877] usb 2-1: SerialNumber: syz [ 432.088700][ T9136] netlink: 'syz.2.1219': attribute type 39 has an invalid length. [ 432.125272][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.210211][ T5877] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 432.269216][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.292924][ T9136] bridge_slave_0 (unregistering): left allmulticast mode [ 432.301494][ T9136] bridge_slave_0 (unregistering): left promiscuous mode [ 432.309037][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.345034][ T5877] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 432.354297][ T5877] usb 2-1: media controller created [ 432.478451][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.000782][ T5877] DVB: Unable to find symbol mt352_attach() [ 433.008559][ T5877] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 433.021060][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 433.134549][ T5877] dvb-usb: schedule remote query interval to 100 msecs. [ 433.143381][ T5877] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 433.232353][ T5877] dvb_usb_m920x 2-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 433.247608][ T24] m920x_read = error: -71 [ 433.252278][ T24] dvb-usb: error while querying for an remote control event. [ 433.326054][ T5877] usb 2-1: USB disconnect, device number 4 [ 433.344201][ T6039] udevd[6039]: setting mode of /dev/bus/usb/002/004 to 020664 failed: No such file or directory [ 433.366995][ T24] m920x_read = error: -19 [ 433.371574][ T24] dvb-usb: error while querying for an remote control event. [ 433.431612][ T6039] udevd[6039]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: No such file or directory [ 433.487111][ T24] m920x_read = error: -19 [ 433.491695][ T24] dvb-usb: error while querying for an remote control event. [ 433.551995][ T9154] bridge_slave_1: left allmulticast mode [ 433.558091][ T9154] bridge_slave_1: left promiscuous mode [ 433.564695][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.609574][ T24] m920x_read = error: -19 [ 433.614159][ T24] dvb-usb: error while querying for an remote control event. [ 433.726748][ T24] m920x_read = error: -19 [ 433.731446][ T24] dvb-usb: error while querying for an remote control event. [ 433.762402][ T9154] bond0: (slave bond_slave_0): Releasing backup interface [ 433.769195][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 433.846539][ T24] m920x_read = error: -19 [ 433.851301][ T24] dvb-usb: error while querying for an remote control event. [ 433.897751][ T9154] bond0: (slave bond_slave_1): Releasing backup interface [ 433.966839][ T24] m920x_read = error: -19 [ 433.971440][ T24] dvb-usb: error while querying for an remote control event. [ 434.018816][ T5877] usb 2-1: config 118 interface 0 has no altsetting 0 [ 434.031324][ T9154] team0: Port device team_slave_0 removed [ 434.062995][ T5877] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 434.072832][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.081345][ T5877] usb 2-1: Product: syz [ 434.085876][ T5877] usb 2-1: Manufacturer: syz [ 434.086146][ T9154] team0: Port device team_slave_1 removed [ 434.090599][ T5877] usb 2-1: SerialNumber: syz [ 434.101377][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.109991][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.116909][ T24] m920x_read = error: -19 [ 434.121774][ T24] dvb-usb: error while querying for an remote control event. [ 434.214102][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.222000][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.236735][ T24] m920x_read = error: -19 [ 434.241300][ T24] dvb-usb: error while querying for an remote control event. [ 434.356909][ T24] m920x_read = error: -19 [ 434.361745][ T24] dvb-usb: error while querying for an remote control event. [ 434.477688][ T24] m920x_read = error: -19 [ 434.482489][ T24] dvb-usb: error while querying for an remote control event. [ 434.563497][ T5877] usb 2-1: can't set config #118, error -71 [ 434.636727][ T24] m920x_read = error: -19 [ 434.641317][ T24] dvb-usb: error while querying for an remote control event. [ 434.656679][ T5877] usb 2-1: USB disconnect, device number 5 [ 434.661797][ T9165] gretap0: entered promiscuous mode [ 434.668359][ T9165] vlan2: entered promiscuous mode [ 434.706720][ T6039] udevd[6039]: setting owner of /dev/bus/usb/002/005 to uid=0, gid=0 failed: No such file or directory [ 434.766357][ T24] m920x_read = error: -19 [ 434.770933][ T24] dvb-usb: error while querying for an remote control event. [ 434.886636][ T5877] m920x_read = error: -19 [ 434.891230][ T5877] dvb-usb: error while querying for an remote control event. [ 435.006539][ T5877] m920x_read = error: -19 [ 435.011240][ T5877] dvb-usb: error while querying for an remote control event. [ 435.127037][ T5877] m920x_read = error: -19 [ 435.132376][ T5877] dvb-usb: error while querying for an remote control event. [ 435.246704][ T5877] m920x_read = error: -19 [ 435.251442][ T5877] dvb-usb: error while querying for an remote control event. [ 435.367750][ T5877] m920x_read = error: -19 [ 435.372424][ T5877] dvb-usb: error while querying for an remote control event. [ 435.489682][ T5877] m920x_read = error: -19 [ 435.494267][ T5877] dvb-usb: error while querying for an remote control event. [ 435.608148][ T5877] m920x_read = error: -19 [ 435.612846][ T5877] dvb-usb: error while querying for an remote control event. [ 435.708738][ T1109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.726548][ T5877] m920x_read = error: -19 [ 435.731826][ T5877] dvb-usb: error while querying for an remote control event. [ 435.850610][ T5877] m920x_read = error: -19 [ 435.855492][ T5877] dvb-usb: error while querying for an remote control event. [ 435.969381][ T5877] m920x_read = error: -19 [ 435.974831][ T5877] dvb-usb: error while querying for an remote control event. [ 436.086530][ T5877] m920x_read = error: -19 [ 436.091462][ T5877] dvb-usb: error while querying for an remote control event. [ 436.220732][ T5877] m920x_read = error: -19 [ 436.225361][ T5877] dvb-usb: error while querying for an remote control event. [ 436.346654][ T5877] m920x_read = error: -19 [ 436.351247][ T5877] dvb-usb: error while querying for an remote control event. [ 436.467022][ T5877] m920x_read = error: -19 [ 436.471737][ T5877] dvb-usb: error while querying for an remote control event. [ 436.592190][ T5877] m920x_read = error: -19 [ 436.597077][ T5877] dvb-usb: error while querying for an remote control event. [ 436.706410][ T5877] m920x_read = error: -19 [ 436.711013][ T5877] dvb-usb: error while querying for an remote control event. [ 436.829969][ T5877] m920x_read = error: -19 [ 436.834556][ T5877] dvb-usb: error while querying for an remote control event. [ 436.950941][ T5877] m920x_read = error: -19 [ 436.955527][ T5877] dvb-usb: error while querying for an remote control event. [ 437.066601][ T5877] m920x_read = error: -19 [ 437.071301][ T5877] dvb-usb: error while querying for an remote control event. [ 437.167397][ T5882] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 437.186806][ T5877] m920x_read = error: -19 [ 437.191514][ T5877] dvb-usb: error while querying for an remote control event. [ 437.278329][ T9210] ===================================================== [ 437.285593][ T9210] BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x7e4/0x940 [ 437.294173][ T9210] nf_flow_offload_inet_hook+0x7e4/0x940 [ 437.300287][ T9210] nf_hook_slow+0xe1/0x3d0 [ 437.304927][ T9210] __netif_receive_skb_core+0x4aff/0x70c0 [ 437.311060][ T9210] __netif_receive_skb+0xcc/0xac0 [ 437.316415][ T9210] netif_receive_skb+0x57/0x630 [ 437.321504][ T9210] tun_rx_batched+0x1df/0x980 [ 437.326541][ T9210] tun_get_user+0x4ee0/0x6b40 [ 437.331411][ T9210] tun_chr_write_iter+0x3e9/0x5c0 [ 437.336783][ T9210] vfs_write+0xb4b/0x1580 [ 437.341334][ T9210] __x64_sys_write+0x1fb/0x4d0 [ 437.346450][ T9210] x64_sys_call+0x38c3/0x3db0 [ 437.351331][ T9210] do_syscall_64+0xd9/0x210 [ 437.356188][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.362272][ T9210] [ 437.364737][ T9210] Uninit was created at: [ 437.369357][ T9210] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 437.375442][ T9210] kmalloc_reserve+0x13c/0x4b0 [ 437.380567][ T9210] __alloc_skb+0x347/0x7d0 [ 437.385182][ T9210] alloc_skb_with_frags+0xc5/0xa60 [ 437.390639][ T9210] sock_alloc_send_pskb+0xad8/0xc70 [ 437.396138][ T9210] tun_get_user+0x1019/0x6b40 [ 437.401002][ T9210] tun_chr_write_iter+0x3e9/0x5c0 [ 437.405203][ T5882] usb 1-1: config 118 interface 0 has no altsetting 0 [ 437.406279][ T9210] vfs_write+0xb4b/0x1580 [ 437.417648][ T9210] __x64_sys_write+0x1fb/0x4d0 [ 437.422633][ T9210] x64_sys_call+0x38c3/0x3db0 [ 437.427649][ T9210] do_syscall_64+0xd9/0x210 [ 437.432428][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.438652][ T9210] [ 437.441121][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.1243 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 437.453504][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.454743][ T5882] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 437.463765][ T9210] ===================================================== [ 437.463818][ T9210] Disabling lock debugging due to kernel taint [ 437.463865][ T9210] Kernel panic - not syncing: kmsan.panic set ... [ 437.463944][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.1243 Tainted: G B 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 437.464082][ T9210] Tainted: [B]=BAD_PAGE [ 437.464121][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.464187][ T9210] Call Trace: [ 437.464228][ T9210] [ 437.464267][ T9210] __dump_stack+0x26/0x30 [ 437.464398][ T9210] dump_stack_lvl+0x53/0x270 [ 437.464525][ T9210] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 437.464688][ T9210] dump_stack+0x1e/0x25 [ 437.464812][ T9210] panic+0x4bd/0xd50 [ 437.464986][ T9210] kmsan_report+0x31c/0x320 [ 437.465130][ T9210] ? __msan_warning+0x1b/0x30 [ 437.465255][ T9210] ? nf_flow_offload_inet_hook+0x7e4/0x940 [ 437.465390][ T9210] ? nf_hook_slow+0xe1/0x3d0 [ 437.465522][ T9210] ? __netif_receive_skb_core+0x4aff/0x70c0 [ 437.465683][ T9210] ? __netif_receive_skb+0xcc/0xac0 [ 437.465787][ T9210] ? netif_receive_skb+0x57/0x630 [ 437.465942][ T9210] ? tun_rx_batched+0x1df/0x980 [ 437.466057][ T9210] ? tun_get_user+0x4ee0/0x6b40 [ 437.466166][ T9210] ? tun_chr_write_iter+0x3e9/0x5c0 [ 437.466278][ T9210] ? vfs_write+0xb4b/0x1580 [ 437.466412][ T9210] ? __x64_sys_write+0x1fb/0x4d0 [ 437.466551][ T9210] ? x64_sys_call+0x38c3/0x3db0 [ 437.466686][ T9210] ? do_syscall_64+0xd9/0x210 [ 437.466834][ T9210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.466964][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.467112][ T9210] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 437.467273][ T9210] ? __pskb_pull_tail+0x1779/0x2660 [ 437.467412][ T9210] ? __pfx_kmsan_get_shadow_origin_ptr+0x1/0x10 [ 437.467577][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.467731][ T9210] __msan_warning+0x1b/0x30 [ 437.467866][ T9210] nf_flow_offload_inet_hook+0x7e4/0x940 [ 437.468003][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.468151][ T9210] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 437.468299][ T9210] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 437.468435][ T9210] nf_hook_slow+0xe1/0x3d0 [ 437.468580][ T9210] __netif_receive_skb_core+0x4aff/0x70c0 [ 437.468756][ T9210] ? netif_receive_skb+0x57/0x630 [ 437.468915][ T9210] ? __msan_warning+0x1b/0x30 [ 437.469041][ T9210] ? filter_irq_stacks+0x13f/0x190 [ 437.469201][ T9210] __netif_receive_skb+0xcc/0xac0 [ 437.469334][ T9210] netif_receive_skb+0x57/0x630 [ 437.469487][ T9210] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 437.469640][ T9210] ? tun_rx_batched+0x16c/0x980 [ 437.469760][ T9210] tun_rx_batched+0x1df/0x980 [ 437.469889][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.470049][ T9210] tun_get_user+0x4ee0/0x6b40 [ 437.470167][ T9210] ? stack_depot_save_flags+0x35/0x7b0 [ 437.470289][ T9210] ? __rcu_read_unlock+0x6d/0xd0 [ 437.470401][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.470547][ T9210] ? kmsan_get_metadata+0xfb/0x160 [ 437.470693][ T9210] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 437.470845][ T9210] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 437.471044][ T9210] tun_chr_write_iter+0x3e9/0x5c0 [ 437.471182][ T9210] vfs_write+0xb4b/0x1580 [ 437.471345][ T9210] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 437.471490][ T9210] __x64_sys_write+0x1fb/0x4d0 [ 437.471656][ T9210] x64_sys_call+0x38c3/0x3db0 [ 437.471805][ T9210] do_syscall_64+0xd9/0x210 [ 437.471950][ T9210] ? irqentry_exit+0x16/0x60 [ 437.472078][ T9210] ? clear_bhb_loop+0x40/0x90 [ 437.472192][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.472310][ T9210] RIP: 0033:0x7f7c61b8e929 [ 437.472386][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.472480][ T9210] RSP: 002b:00007f7c62a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.472582][ T9210] RAX: ffffffffffffffda RBX: 00007f7c61db6080 RCX: 00007f7c61b8e929 [ 437.472659][ T9210] RDX: 0000000000000fce RSI: 00002000000003c0 RDI: 0000000000000003 [ 437.472724][ T9210] RBP: 00007f7c61c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 437.472789][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.472854][ T9210] R13: 0000000000000001 R14: 00007f7c61db6080 R15: 00007ffd077c6988 [ 437.472955][ T9210] [ 437.473287][ T9210] Kernel Offset: disabled