last executing test programs: 4m48.679617936s ago: executing program 2 (id=412): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r2}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000000) 4m47.844955907s ago: executing program 2 (id=416): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x88c4}, 0x10) 4m47.024167583s ago: executing program 2 (id=421): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x3, 0x0, &(0x7f0000000280)) 4m46.650278301s ago: executing program 2 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xa0c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xdfb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) 4m46.113044968s ago: executing program 2 (id=428): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x74, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x2}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008801}, 0x14004804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m44.648282096s ago: executing program 2 (id=435): socket$igmp(0x2, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m29.47060759s ago: executing program 32 (id=435): socket$igmp(0x2, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m6.358505966s ago: executing program 4 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x84, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x881) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}]}]}, 0x38}}, 0x20008080) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x35, @local, 0x7}, @in6={0xa, 0x4e22, 0xfef, @dev={0xfe, 0x80, '\x00', 0x42}, 0x4c8}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, @in6={0xa, 0x4e22, 0x3, @private0}], 0xb0) listen(r0, 0x95) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x90, 0xb0, 0x0, {0x390, 0x8f00}, [@common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x498e, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1}, 0x4004080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 4m3.939599839s ago: executing program 4 (id=577): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) shutdown(r1, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="86ce0e44222e", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @multicast1}, {0x11, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 4m2.197943983s ago: executing program 4 (id=582): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) close(0x4) 4m1.56139324s ago: executing program 4 (id=584): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 4m0.255493273s ago: executing program 4 (id=588): unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x20000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000023"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000540)="6e59bc41d958eb09dfa87615532bf8444518b8a3d673985abed2536b6d202daebd3a340991fa64298adfd49c2bb8757ce9aa9d644cfb6b0705f231c7da6d68985431e301a4cbe707c38161d185b748b02fd72daa20d48383d0b86fd97594e222b54146c94ffe3390484a9c6c4413edf545e414c6939e3cf4d772a5fd584b6eda91e89a81a080564b9a4ab373deac"}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 3m59.447058171s ago: executing program 4 (id=591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 3m43.946609692s ago: executing program 33 (id=591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 1m42.161292848s ago: executing program 5 (id=1124): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1m41.392353053s ago: executing program 5 (id=1128): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c00020000000000000000000800010000000000200003801400038006000100000000008800020005000000080001"], 0x54}}, 0x44) 1m40.780105805s ago: executing program 5 (id=1132): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000200)='\b', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x2, 0x4000800) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 1m40.223482148s ago: executing program 5 (id=1136): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 1m39.364910752s ago: executing program 5 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 1m38.787607289s ago: executing program 5 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'ip6tnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x1, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, 0x8000, 0x8000, 0xbb, 0xd}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, 0x0, 0x20000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00@\x00\x00\x00', @ANYBLOB], 0x50) 1m23.370403883s ago: executing program 34 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'ip6tnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x1, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, 0x8000, 0x8000, 0xbb, 0xd}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, 0x0, 0x20000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00@\x00\x00\x00', @ANYBLOB], 0x50) 8.023857562s ago: executing program 7 (id=1529): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da839000905030220"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000a088dfc6e8c4d8d1190cd112edd8e3376ff7779866c1b4a9b5979c914971fb36a00f225c98bfa9a7622f4e737c654557b5bc21defe88646805f2492917", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf257a00000008000300", @ANYBLOB="0c00990009000000300000000600fb0009000000b100fa00ef46f809296ab80426fc9db50b38c36eb30a862e50683fc573ea870b40054adc092c4c1742b02312dffcda2dea4a8211fe8713b5c11fadacc1b382afd86fa654d0b85f5d5cdf11600e17769d5c7c9e2a92409feedce793276a2938e8ffa101e621af363cd66651955386dbcbca99d93dbdfb382508f5be68286e39d4aac1bf077911a1efeff5f4c4295a095ab53a5d9499909f1b2be9966b3e5f56932a55e60d7bbc8434936450cf9ee1f2e7220000000500fc00e600000004"], 0x1d8}, 0x1, 0x0, 0x0, 0x24040041}, 0x11) 5.754618006s ago: executing program 7 (id=1541): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 5.342687269s ago: executing program 3 (id=1543): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff1, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 4.723783088s ago: executing program 1 (id=1545): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c000200000000000000000008000100000000002000"], 0x54}}, 0x44) 4.624202794s ago: executing program 3 (id=1546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.5602025s ago: executing program 7 (id=1547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0xfdef) 4.144903632s ago: executing program 1 (id=1548): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000380)=0x7fffffff, 0x4) 3.838510021s ago: executing program 7 (id=1550): socket$l2tp(0x2, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)={[{0x2b, 'cpu'}]}, 0x5) 3.707811867s ago: executing program 1 (id=1551): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b00010000000009040000016da839000905030220"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000a088dfc6e8c4d8d1190cd112edd8e3376ff7779866c1b4a9b5979c914971fb36a00f225c98bfa9a7622f4e737c654557b5bc21defe88646805f2492917", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf257a00000008000300", @ANYBLOB="0c00990009000000300000000600fb0009000000b100fa00ef46f809296ab80426fc9db50b38c36eb30a862e50683fc573ea870b40054adc092c4c1742b02312dffcda2dea4a8211fe8713b5c11fadacc1b382afd86fa654d0b85f5d5cdf11600e17769d5c7c9e2a92409feedce793276a2938e8ffa101e621af363cd66651955386dbcbca99d93dbdfb382508f5be68286e39d4aac1bf077911a1efeff5f4c4295a095ab53a5d9499909f1b2be9966b3e5f56932a55e60d7bbc8434936450cf9ee1f2e7220000000500fc00e600000004"], 0x1d8}, 0x1, 0x0, 0x0, 0x24040041}, 0x11) 3.640896725s ago: executing program 0 (id=1552): openat$nci(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) 3.516119075s ago: executing program 6 (id=1553): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffffffffffdce) 3.216539465s ago: executing program 7 (id=1554): unshare(0x22020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 3.104724399s ago: executing program 3 (id=1555): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0198000000000000380012800b000100697036746e6c00002800028014000300200100000000000000000000000000000500040009000000080008003f"], 0x58}, 0x1, 0x0, 0x0, 0x24008007}, 0x4048004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 2.870730684s ago: executing program 0 (id=1556): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff1, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 2.676316139s ago: executing program 6 (id=1557): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}}) 2.416679941s ago: executing program 3 (id=1558): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c000200000000000000000008000100000000002000"], 0x54}}, 0x44) 2.350089657s ago: executing program 7 (id=1559): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffe}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r6, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 1.953719554s ago: executing program 6 (id=1560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0xfdef) 1.950537265s ago: executing program 0 (id=1561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000380)=0x7fffffff, 0x4) 1.735618588s ago: executing program 3 (id=1562): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00', 0x0, [0x9, 0xffffffff, 0x7, 0x4, 0xb]}, &(0x7f0000000180)=0x54) 1.569022765s ago: executing program 1 (id=1563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.335834371s ago: executing program 0 (id=1564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x80000000, 0x3, 0xfffffffd, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.304612523s ago: executing program 6 (id=1565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.012489053s ago: executing program 1 (id=1566): openat$nci(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) 643.617187ms ago: executing program 6 (id=1567): syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @random="b5a842979c99", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x8}}}}}, 0x0) 470.791447ms ago: executing program 0 (id=1568): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0198000000000000380012800b000100697036746e6c00002800028014000300200100000000000000000000000000000500040009000000080008003f"], 0x58}, 0x1, 0x0, 0x0, 0x24008007}, 0x4048004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 426.710358ms ago: executing program 6 (id=1569): unshare(0x22020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 423.139886ms ago: executing program 3 (id=1570): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x891b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 248.464657ms ago: executing program 1 (id=1571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e70081", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1572): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c000200000000000000000008000100000000002000"], 0x54}}, 0x44) kernel console output (not intermixed with test programs): rface with an up link [ 185.807062][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.818498][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.826250][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.836736][ T5810] bridge_slave_1: entered allmulticast mode [ 185.846317][ T5810] bridge_slave_1: entered promiscuous mode [ 185.870283][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.883826][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.891308][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.899223][ T5798] bridge_slave_0: entered allmulticast mode [ 185.911386][ T5798] bridge_slave_0: entered promiscuous mode [ 185.931852][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.941504][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.949309][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.957053][ T5798] bridge_slave_1: entered allmulticast mode [ 185.966605][ T5798] bridge_slave_1: entered promiscuous mode [ 186.266603][ T5806] team0: Port device team_slave_0 added [ 186.284780][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.388306][ T5806] team0: Port device team_slave_1 added [ 186.406608][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.426441][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.442553][ T5799] team0: Port device team_slave_0 added [ 186.492123][ T5805] Bluetooth: hci3: command tx timeout [ 186.526332][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.572684][ T5805] Bluetooth: hci1: command tx timeout [ 186.578385][ T5811] Bluetooth: hci2: command tx timeout [ 186.584621][ T5811] Bluetooth: hci0: command tx timeout [ 186.590421][ T5811] Bluetooth: hci4: command tx timeout [ 186.620106][ T5799] team0: Port device team_slave_1 added [ 186.720272][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.727661][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.755375][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.834598][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.844286][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.852081][ T5800] bridge_slave_0: entered allmulticast mode [ 186.861200][ T5800] bridge_slave_0: entered promiscuous mode [ 186.879264][ T5798] team0: Port device team_slave_0 added [ 186.888104][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.895899][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.903639][ T5800] bridge_slave_1: entered allmulticast mode [ 186.913191][ T5800] bridge_slave_1: entered promiscuous mode [ 186.925624][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.934265][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.960580][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.979436][ T5810] team0: Port device team_slave_0 added [ 187.038867][ T5798] team0: Port device team_slave_1 added [ 187.048631][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.055864][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.082234][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.138332][ T5810] team0: Port device team_slave_1 added [ 187.227910][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.235264][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.261795][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.344266][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.351371][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.378005][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.457243][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.508687][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.516000][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.542196][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.556055][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.563347][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.590537][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.608259][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.615657][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.641952][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.663191][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.732429][ T5806] hsr_slave_0: entered promiscuous mode [ 187.742649][ T5806] hsr_slave_1: entered promiscuous mode [ 187.886896][ T5799] hsr_slave_0: entered promiscuous mode [ 187.897221][ T5799] hsr_slave_1: entered promiscuous mode [ 187.906011][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 187.911996][ T5799] Cannot create hsr debugfs directory [ 188.055359][ T5800] team0: Port device team_slave_0 added [ 188.214267][ T5800] team0: Port device team_slave_1 added [ 188.237305][ T5798] hsr_slave_0: entered promiscuous mode [ 188.247563][ T5798] hsr_slave_1: entered promiscuous mode [ 188.256368][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 188.262381][ T5798] Cannot create hsr debugfs directory [ 188.326112][ T5810] hsr_slave_0: entered promiscuous mode [ 188.336229][ T5810] hsr_slave_1: entered promiscuous mode [ 188.344933][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 188.350892][ T5810] Cannot create hsr debugfs directory [ 188.505361][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.512754][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.539101][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.591328][ T5801] Bluetooth: hci3: command tx timeout [ 188.652122][ T5801] Bluetooth: hci1: command tx timeout [ 188.657814][ T5805] Bluetooth: hci4: command tx timeout [ 188.663601][ T5801] Bluetooth: hci0: command tx timeout [ 188.667542][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.669157][ T5801] Bluetooth: hci2: command tx timeout [ 188.677768][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.709260][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.373082][ T5800] hsr_slave_0: entered promiscuous mode [ 189.383493][ T5800] hsr_slave_1: entered promiscuous mode [ 189.394043][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 189.399925][ T5800] Cannot create hsr debugfs directory [ 189.857544][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.899516][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.975363][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.020966][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.122214][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.202658][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.224872][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.246322][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.427204][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.477456][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.546872][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.616482][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.653376][ T5811] Bluetooth: hci3: command tx timeout [ 190.736951][ T5811] Bluetooth: hci2: command tx timeout [ 190.744418][ T5811] Bluetooth: hci4: command tx timeout [ 190.749998][ T5811] Bluetooth: hci0: command tx timeout [ 190.752272][ T5801] Bluetooth: hci1: command tx timeout [ 190.825544][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.880025][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.949565][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.037847][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.174638][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.266184][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.306031][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.341445][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.373520][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.563152][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.612100][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.700249][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.707880][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.752327][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.815176][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.822747][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.900296][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.907727][ T1827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.028028][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.035606][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.201373][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.406111][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.529294][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.560424][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.586104][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.593733][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.640440][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.648020][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.864394][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.948126][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.955763][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.107187][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.114792][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.149700][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.313856][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.481960][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.489921][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.574748][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.632205][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.639711][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.558145][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.750586][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.205024][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.405291][ T5799] veth0_vlan: entered promiscuous mode [ 195.549704][ T5799] veth1_vlan: entered promiscuous mode [ 195.655860][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.859258][ T5810] veth0_vlan: entered promiscuous mode [ 195.939241][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.966088][ T5799] veth0_macvtap: entered promiscuous mode [ 196.024913][ T5810] veth1_vlan: entered promiscuous mode [ 196.048749][ T5799] veth1_macvtap: entered promiscuous mode [ 196.271604][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.330426][ T5800] veth0_vlan: entered promiscuous mode [ 196.363672][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.425770][ T5810] veth0_macvtap: entered promiscuous mode [ 196.538375][ T3821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.557537][ T5800] veth1_vlan: entered promiscuous mode [ 196.578063][ T5810] veth1_macvtap: entered promiscuous mode [ 196.614653][ T3821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.677093][ T4215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.718482][ T5798] veth0_vlan: entered promiscuous mode [ 196.746656][ T4215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.855620][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.881789][ T5798] veth1_vlan: entered promiscuous mode [ 196.972725][ T5800] veth0_macvtap: entered promiscuous mode [ 197.008465][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.051185][ T5800] veth1_macvtap: entered promiscuous mode [ 197.112337][ T3731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.121412][ T3731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.203860][ T3731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.257587][ T3731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.363132][ T5798] veth0_macvtap: entered promiscuous mode [ 197.394533][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.485394][ T5798] veth1_macvtap: entered promiscuous mode [ 197.508042][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.543070][ T5806] veth0_vlan: entered promiscuous mode [ 197.706499][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.718675][ T5806] veth1_vlan: entered promiscuous mode [ 197.730849][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.804380][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.873427][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.918626][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.975825][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.016600][ T4164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.083113][ T4164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.164385][ T4164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.219127][ T5806] veth0_macvtap: entered promiscuous mode [ 198.247556][ T4164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.339210][ T5806] veth1_macvtap: entered promiscuous mode [ 198.495249][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.606694][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.708131][ T3821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.746383][ T3821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.802140][ T3821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.833253][ T3821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.597691][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.605859][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.841460][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.849636][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.334943][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 203.409752][ T4017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.417938][ T4017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.530350][ T4017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.539355][ T4017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.900343][ T3747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.908527][ T3747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.196428][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.206127][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.289397][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.298292][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.692841][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.700871][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.848140][ T4017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.856285][ T4017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.104384][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.112930][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.189815][ T5993] loop2: detected capacity change from 0 to 512 [ 205.387156][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.400700][ T5993] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.612148][ T30] audit: type=1800 audit(1763120663.274:2): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 205.807169][ T6001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.817024][ T6001] block device autoloading is deprecated and will be removed. [ 205.924592][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.794527][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 206.800880][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 206.824377][ T6013] ceph: No mds server is up or the cluster is laggy [ 207.047023][ T6013] sctp: [Deprecated]: syz.1.9 (pid 6013) Use of int in max_burst socket option. [ 207.047023][ T6013] Use struct sctp_assoc_value instead [ 207.392916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 207.683225][ T6013] loop1: detected capacity change from 0 to 2048 [ 207.828281][ T6013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.377654][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.425849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 208.834821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 210.289221][ T6039] loop3: detected capacity change from 0 to 128 [ 212.213428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 212.931192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 213.150653][ T6068] loop1: detected capacity change from 0 to 256 [ 213.217863][ T6068] ======================================================= [ 213.217863][ T6068] WARNING: The mand mount option has been deprecated and [ 213.217863][ T6068] and is ignored by this kernel. Remove the mand [ 213.217863][ T6068] option from the mount to silence this warning. [ 213.217863][ T6068] ======================================================= [ 213.257899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 213.491392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 213.519430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 213.610989][ T6068] FAT-fs (loop1): Directory bread(block 64) failed [ 213.618182][ T6068] FAT-fs (loop1): Directory bread(block 65) failed [ 213.625308][ T6068] FAT-fs (loop1): Directory bread(block 66) failed [ 213.632103][ T6068] FAT-fs (loop1): Directory bread(block 67) failed [ 213.638946][ T6068] FAT-fs (loop1): Directory bread(block 68) failed [ 213.650096][ T6068] FAT-fs (loop1): Directory bread(block 69) failed [ 213.658300][ T6068] FAT-fs (loop1): Directory bread(block 70) failed [ 213.665193][ T6068] FAT-fs (loop1): Directory bread(block 71) failed [ 213.672287][ T6068] FAT-fs (loop1): Directory bread(block 72) failed [ 213.679039][ T6068] FAT-fs (loop1): Directory bread(block 73) failed [ 214.843607][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 216.791975][ T6090] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 217.840991][ T6102] 9pnet_fd: Insufficient options for proto=fd [ 219.063522][ T6111] genirq: Flags mismatch irq 10. 00200000 (pcl812) vs. 00200080 (virtio2) [ 220.624584][ T6126] 9pnet_fd: Insufficient options for proto=fd [ 222.748447][ T6146] loop0: detected capacity change from 0 to 512 [ 222.828200][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.841534][ T6146] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.063060][ T30] audit: type=1800 audit(1763120680.734:3): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 223.416319][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.247811][ T6159] 9pnet_fd: Insufficient options for proto=fd [ 224.519652][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.528498][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.043093][ T6178] loop3: detected capacity change from 0 to 512 [ 226.172174][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.186250][ T6178] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.350374][ T30] audit: type=1800 audit(1763120684.014:4): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.77" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 226.625439][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.393568][ T6187] 9pnet_fd: Insufficient options for proto=fd [ 228.382194][ T2161] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.573060][ T2161] usb 1-1: Using ep0 maxpacket: 16 [ 228.643734][ T2161] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 228.684493][ T2161] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 228.694007][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.705513][ T2161] usb 1-1: Product: syz [ 228.709874][ T2161] usb 1-1: Manufacturer: syz [ 228.715785][ T2161] usb 1-1: SerialNumber: syz [ 228.807976][ T2161] usb 1-1: config 0 descriptor?? [ 228.815964][ T6195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.907172][ T2161] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 229.111585][ T2161] usb 1-1: USB disconnect, device number 2 [ 229.123845][ T4017] usb 1-1: Failed to submit usb control message: -71 [ 229.130804][ T4017] usb 1-1: unable to send the bmi data to the device: -71 [ 229.141406][ T4017] usb 1-1: unable to get target info from device [ 229.148090][ T4017] usb 1-1: could not get target info (-71) [ 229.154224][ T4017] usb 1-1: could not probe fw (-71) [ 229.906974][ T6210] loop4: detected capacity change from 0 to 512 [ 230.088133][ T6215] 9pnet_fd: Insufficient options for proto=fd [ 230.099268][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.112497][ T6210] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.382206][ T30] audit: type=1800 audit(1763120688.034:5): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.89" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 230.464333][ T6220] netlink: 104 bytes leftover after parsing attributes in process `syz.1.94'. [ 230.709815][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.332375][ T1626] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 232.426352][ T6246] 9pnet_fd: Insufficient options for proto=fd [ 232.505315][ T1626] usb 2-1: Using ep0 maxpacket: 16 [ 232.542362][ T1626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 232.583778][ T6248] loop0: detected capacity change from 0 to 512 [ 232.594324][ T1626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 232.603808][ T1626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.612204][ T1626] usb 2-1: Product: syz [ 232.616556][ T1626] usb 2-1: Manufacturer: syz [ 232.621329][ T1626] usb 2-1: SerialNumber: syz [ 232.726278][ T1626] usb 2-1: config 0 descriptor?? [ 232.735355][ T6248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.739191][ T6239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.748577][ T6248] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.870542][ T1626] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 233.018814][ T143] usb 2-1: Failed to submit usb control message: -71 [ 233.026321][ T143] usb 2-1: unable to send the bmi data to the device: -71 [ 233.033796][ T143] usb 2-1: unable to get target info from device [ 233.040322][ T143] usb 2-1: could not get target info (-71) [ 233.046507][ T143] usb 2-1: could not probe fw (-71) [ 233.053313][ T1626] usb 2-1: USB disconnect, device number 2 [ 233.337338][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.778151][ T6263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.109'. [ 233.846063][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 233.892571][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 233.958720][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 234.049086][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 235.285033][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 235.524898][ T6290] loop2: detected capacity change from 0 to 512 [ 235.703349][ T6290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.716602][ T6290] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.240975][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.655454][ T1626] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 236.847207][ T1626] usb 2-1: Using ep0 maxpacket: 16 [ 236.903214][ T1626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 236.945122][ T1626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 236.954673][ T1626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.963312][ T1626] usb 2-1: Product: syz [ 236.967691][ T1626] usb 2-1: Manufacturer: syz [ 236.972687][ T1626] usb 2-1: SerialNumber: syz [ 237.035721][ T1626] usb 2-1: config 0 descriptor?? [ 237.044166][ T6309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.117540][ T1626] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 237.334421][ T3731] usb 2-1: Failed to submit usb control message: -71 [ 237.339587][ T1626] usb 2-1: USB disconnect, device number 3 [ 237.341451][ T3731] usb 2-1: unable to send the bmi data to the device: -71 [ 237.354893][ T3731] usb 2-1: unable to get target info from device [ 237.361409][ T3731] usb 2-1: could not get target info (-71) [ 237.367596][ T3731] usb 2-1: could not probe fw (-71) [ 237.483177][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 238.115093][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 238.380528][ T6338] netlink: 'syz.1.134': attribute type 12 has an invalid length. [ 238.439954][ T6337] loop0: detected capacity change from 0 to 512 [ 238.804816][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.818013][ T6337] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.463521][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.038171][ T6354] fuse: Bad value for 'group_id' [ 240.043875][ T6354] fuse: Bad value for 'group_id' [ 241.348898][ T6368] Bluetooth: MGMT ver 1.23 [ 241.580421][ T1626] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.762033][ T1626] usb 1-1: Using ep0 maxpacket: 16 [ 241.812395][ T1626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 241.840108][ T1626] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 241.849812][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.858299][ T1626] usb 1-1: Product: syz [ 241.862781][ T1626] usb 1-1: Manufacturer: syz [ 241.867548][ T1626] usb 1-1: SerialNumber: syz [ 241.889399][ T1626] usb 1-1: config 0 descriptor?? [ 241.897381][ T6369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.967253][ T1626] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 242.044698][ T6373] 9pnet_fd: Insufficient options for proto=fd [ 242.195566][ T3731] usb 1-1: Failed to submit usb control message: -71 [ 242.202920][ T3731] usb 1-1: unable to send the bmi data to the device: -71 [ 242.203503][ T5855] usb 1-1: USB disconnect, device number 3 [ 242.210300][ T3731] usb 1-1: unable to get target info from device [ 242.228354][ T3731] usb 1-1: could not get target info (-71) [ 242.234556][ T3731] usb 1-1: could not probe fw (-71) [ 242.919830][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 243.356201][ T6387] fuse: Bad value for 'group_id' [ 243.361458][ T6387] fuse: Bad value for 'group_id' [ 244.376007][ T6403] 9pnet_fd: Insufficient options for proto=fd [ 244.841098][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 245.121985][ T1626] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 245.502161][ T6415] netlink: 52 bytes leftover after parsing attributes in process `syz.2.164'. [ 245.662028][ T1626] usb 1-1: Using ep0 maxpacket: 16 [ 245.704017][ T1626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 245.776338][ T1626] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 245.785857][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.794337][ T1626] usb 1-1: Product: syz [ 245.803177][ T1626] usb 1-1: Manufacturer: syz [ 245.807965][ T1626] usb 1-1: SerialNumber: syz [ 245.935109][ T1626] usb 1-1: config 0 descriptor?? [ 245.943087][ T6410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.044102][ T1626] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 246.252413][ T3731] usb 1-1: Failed to submit usb control message: -71 [ 246.259569][ T3731] usb 1-1: unable to send the bmi data to the device: -71 [ 246.267310][ T3731] usb 1-1: unable to get target info from device [ 246.274052][ T3731] usb 1-1: could not get target info (-71) [ 246.280081][ T3731] usb 1-1: could not probe fw (-71) [ 246.292795][ T5857] usb 1-1: USB disconnect, device number 4 [ 246.474087][ T6422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 246.587012][ T6422] Illegal XDP return value 256 on prog (id 19) dev syz_tun, expect packet loss! [ 246.646445][ T6424] fuse: Bad value for 'group_id' [ 246.651589][ T6424] fuse: Bad value for 'group_id' [ 247.513767][ T6432] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 247.732377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e543e00: rx timeout, send abort [ 247.837738][ T6436] 9pnet_fd: Insufficient options for proto=fd [ 248.233284][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e542800: rx timeout, send abort [ 248.242031][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e543e00: abort rx timeout. Force session deactivation [ 248.703607][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 248.712914][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 248.743233][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e542800: abort rx timeout. Force session deactivation [ 249.776743][ T5855] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 249.963121][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 250.009449][ T5855] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 250.041324][ T5855] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 250.051116][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.059582][ T5855] usb 2-1: Product: syz [ 250.064036][ T5855] usb 2-1: Manufacturer: syz [ 250.068809][ T5855] usb 2-1: SerialNumber: syz [ 250.125189][ T5855] usb 2-1: config 0 descriptor?? [ 250.133323][ T6454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.189611][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 250.239423][ T5855] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 250.394477][ T5855] usb 2-1: USB disconnect, device number 4 [ 250.394642][ T3731] usb 2-1: Failed to submit usb control message: -71 [ 250.413060][ T3731] usb 2-1: unable to send the bmi data to the device: -71 [ 250.420399][ T3731] usb 2-1: unable to get target info from device [ 250.427081][ T3731] usb 2-1: could not get target info (-71) [ 250.433358][ T3731] usb 2-1: could not probe fw (-71) [ 250.864588][ T6468] 9pnet_fd: Insufficient options for proto=fd [ 251.518079][ T6477] netlink: 71 bytes leftover after parsing attributes in process `syz.2.191'. [ 251.577341][ T6478] loop1: detected capacity change from 0 to 512 [ 251.768521][ T6478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.781921][ T6478] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.962126][ T30] audit: type=1800 audit(1763120709.634:6): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 252.372351][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.737222][ T6506] netlink: 72 bytes leftover after parsing attributes in process `syz.2.201'. [ 253.832160][ T30] audit: type=1804 audit(1763120711.504:7): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.202" name="cgroup.controllers" dev="tmpfs" ino=244 res=1 errno=0 [ 253.853738][ T30] audit: type=1800 audit(1763120711.504:8): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="cgroup.controllers" dev="tmpfs" ino=244 res=0 errno=0 [ 254.081556][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'. [ 254.262894][ T6514] Zero length message leads to an empty skb [ 254.527878][ T6518] loop2: detected capacity change from 0 to 512 [ 254.651372][ T6518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.665114][ T6518] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.837882][ T30] audit: type=1800 audit(1763120712.514:9): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.206" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 255.139597][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.219352][ T6572] loop0: detected capacity change from 0 to 512 [ 258.433888][ T6572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.446987][ T6572] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.622753][ T30] audit: type=1800 audit(1763120716.294:10): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.221" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 258.862296][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.810665][ T6600] netlink: 240 bytes leftover after parsing attributes in process `syz.3.229'. [ 259.867623][ T6592] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.852121][ T5805] Bluetooth: hci4: command tx timeout [ 261.919229][ T6627] loop2: detected capacity change from 0 to 512 [ 262.364553][ T6627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.377791][ T6627] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.692066][ T30] audit: type=1800 audit(1763120720.354:11): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 262.978366][ T6647] syz_tun: entered allmulticast mode [ 263.061334][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.109803][ T6646] syz_tun: left allmulticast mode [ 265.350580][ T6678] loop3: detected capacity change from 0 to 512 [ 265.544060][ T6687] syz_tun: entered allmulticast mode [ 265.544198][ T6678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.567893][ T6678] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.707983][ T6692] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 265.821881][ T30] audit: type=1800 audit(1763120723.484:12): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.256" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 265.860878][ T6692] team0: Port device dummy0 added [ 265.906896][ T6694] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 265.919387][ T6694] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 265.995546][ T6694] team0: Failed to send options change via netlink (err -105) [ 266.008717][ T6694] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.019431][ T6694] team0: Port device dummy0 removed [ 266.041498][ T6694] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.058325][ T6683] syz_tun: left allmulticast mode [ 266.238429][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.463057][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 266.797874][ T6700] fuse: Unknown parameter 'grou00000000000000000000' [ 268.866097][ T6726] loop0: detected capacity change from 0 to 512 [ 268.999276][ T6726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.013774][ T6726] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.224697][ T6734] fuse: Unknown parameter 'grou00000000000000000000' [ 269.476202][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.948425][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 270.550911][ T6746] 9pnet: Could not find request transport: fd0x0000000000000005 [ 270.751765][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 271.734762][ T6764] loop0: detected capacity change from 0 to 512 [ 271.863207][ T6764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.876423][ T6764] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.274913][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.494979][ T6772] fuse: Unknown parameter 'grou00000000000000000000' [ 273.202737][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 273.640849][ T6784] 9pnet: Could not find request transport: fd0x0000000000000005 [ 273.975500][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.299'. [ 274.034563][ T6796] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 275.242507][ T6807] loop2: detected capacity change from 0 to 512 [ 275.430411][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 275.431936][ T6807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.452950][ T6807] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.577818][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.094817][ T6816] fuse: Unknown parameter 'group_i00000000000000000000' [ 277.487130][ T6827] 9pnet: Could not find request transport: fd0x0000000000000005 [ 277.972057][ T6834] syz.3.310 (6834) used obsolete PPPIOCDETACH ioctl [ 278.341921][ T6841] loop0: detected capacity change from 0 to 512 [ 278.515498][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.528729][ T6841] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.652620][ T30] audit: type=1800 audit(1763120736.324:13): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.315" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 278.897192][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.504288][ T6854] fuse: Unknown parameter 'group_i00000000000000000000' [ 280.192943][ T6865] 9pnet_fd: Insufficient options for proto=fd [ 281.950796][ T6881] loop1: detected capacity change from 0 to 512 [ 282.114802][ T6881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.127889][ T6881] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.328428][ T30] audit: type=1800 audit(1763120739.974:14): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 282.495163][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.808544][ T6893] fuse: Unknown parameter 'group_i00000000000000000000' [ 282.892770][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 283.146994][ T6899] 9pnet_fd: Insufficient options for proto=fd [ 284.725236][ T6914] netlink: 'syz.2.341': attribute type 8 has an invalid length. [ 285.039264][ T6919] loop1: detected capacity change from 0 to 512 [ 285.169418][ T6919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.185805][ T6919] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.318036][ T30] audit: type=1800 audit(1763120742.994:15): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 285.588482][ T6924] fuse: Unknown parameter 'group_id00000000000000000000' [ 285.613315][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.957622][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.964926][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.276910][ T6934] 9pnet_fd: Insufficient options for proto=fd [ 286.475493][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.350'. [ 287.312796][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.491924][ T5855] usb 5-1: device descriptor read/64, error -71 [ 287.789229][ T5855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 287.953604][ T5855] usb 5-1: device descriptor read/64, error -71 [ 288.102203][ T5855] usb usb5-port1: attempt power cycle [ 288.114495][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 288.503417][ T5855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 288.575874][ T5855] usb 5-1: device descriptor read/8, error -71 [ 288.852867][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 288.915898][ T5855] usb 5-1: device descriptor read/8, error -71 [ 289.045786][ T5855] usb usb5-port1: unable to enumerate USB device [ 289.254400][ T6970] 9pnet_fd: Insufficient options for proto=fd [ 289.810952][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 290.457006][ T6987] fuse: Unknown parameter 'group_id00000000000000000000' [ 291.356133][ T6998] 9pnet_fd: Insufficient options for proto=fd [ 291.507867][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 291.517058][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 292.623046][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 292.643441][ T7017] fuse: Bad value for 'user_id' [ 292.648681][ T7017] fuse: Bad value for 'user_id' [ 292.790768][ T5855] usb 4-1: device descriptor read/64, error -71 [ 293.052233][ T5855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 293.223889][ T5855] usb 4-1: device descriptor read/64, error -71 [ 293.353691][ T5855] usb usb4-port1: attempt power cycle [ 293.426056][ T7028] 9pnet_fd: Insufficient options for proto=fd [ 293.742413][ T5855] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.814925][ T5855] usb 4-1: device descriptor read/8, error -71 [ 294.095074][ T5855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 294.162273][ T5855] usb 4-1: device descriptor read/8, error -71 [ 294.302415][ T5855] usb usb4-port1: unable to enumerate USB device [ 294.502863][ T7043] fuse: Bad value for 'user_id' [ 294.508028][ T7043] fuse: Bad value for 'user_id' [ 295.478253][ T7056] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 296.524576][ T7072] fuse: Bad value for 'user_id' [ 296.529651][ T7072] fuse: Bad value for 'user_id' [ 296.759031][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.411'. [ 298.142295][ T2161] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 298.333264][ T2161] usb 2-1: device descriptor read/64, error -71 [ 298.548157][ T7105] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 298.602505][ T2161] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.762404][ T2161] usb 2-1: device descriptor read/64, error -71 [ 298.883213][ T2161] usb usb2-port1: attempt power cycle [ 299.242891][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 299.259098][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 299.268456][ T7115] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 299.276925][ T2161] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 299.361912][ T2161] usb 2-1: device descriptor read/8, error -71 [ 299.632116][ T2161] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 299.666985][ T2161] usb 2-1: device descriptor read/8, error -71 [ 299.783081][ T2161] usb usb2-port1: unable to enumerate USB device [ 303.623356][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 303.782177][ T5857] usb 5-1: device descriptor read/64, error -71 [ 304.024837][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 304.109557][ T7166] IPVS: length: 141 != 8 [ 304.232736][ T5857] usb 5-1: device descriptor read/64, error -71 [ 304.346378][ T5857] usb usb5-port1: attempt power cycle [ 304.722712][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 304.800823][ T5857] usb 5-1: device descriptor read/8, error -71 [ 304.935880][ T7174] syzkaller1: entered promiscuous mode [ 304.942025][ T7174] syzkaller1: entered allmulticast mode [ 305.055782][ T7174] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 305.056469][ T5857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 305.160164][ T7174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.173354][ T5857] usb 5-1: device descriptor read/8, error -71 [ 305.299668][ T5857] usb usb5-port1: unable to enumerate USB device [ 305.405837][ T7177] tipc: Started in network mode [ 305.411210][ T7177] tipc: Node identity 66fc97e1824b, cluster identity 4711 [ 305.419531][ T7177] tipc: Enabled bearer , priority 0 [ 305.476206][ T7179] syzkaller0: entered promiscuous mode [ 305.482128][ T7179] syzkaller0: entered allmulticast mode [ 305.540159][ T7177] tipc: Resetting bearer [ 305.574863][ T7176] tipc: Resetting bearer [ 305.611436][ T7176] tipc: Disabling bearer [ 307.819223][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 308.167449][ T7200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.493448][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 308.500782][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 308.509199][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 308.518576][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 310.097962][ T2161] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 310.193691][ T7226] netlink: 264 bytes leftover after parsing attributes in process `syz.3.472'. [ 310.292035][ T2161] usb 5-1: device descriptor read/64, error -71 [ 310.543341][ T2161] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 310.708907][ T2161] usb 5-1: device descriptor read/64, error -71 [ 310.831130][ T2161] usb usb5-port1: attempt power cycle [ 311.222690][ T2161] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 311.295896][ T2161] usb 5-1: device descriptor read/8, error -71 [ 311.564576][ T2161] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.647268][ T2161] usb 5-1: device descriptor read/8, error -71 [ 311.793452][ T2161] usb usb5-port1: unable to enumerate USB device [ 315.702171][ T5857] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 315.886789][ T5857] usb 4-1: device descriptor read/64, error -71 [ 316.150678][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 316.322156][ T5857] usb 4-1: device descriptor read/64, error -71 [ 316.324276][ T7278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.493'. [ 316.337935][ T7278] team0: No ports can be present during mode change [ 316.457506][ T5857] usb usb4-port1: attempt power cycle [ 316.529522][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.543364][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.588345][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.614134][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.633273][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.895378][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 316.982292][ T5857] usb 4-1: device descriptor read/8, error -71 [ 317.129837][ T7285] team_slave_0: entered promiscuous mode [ 317.135896][ T7285] team_slave_1: entered promiscuous mode [ 317.149706][ T7285] team0: Device macsec1 is already an upper device of the team interface [ 317.182920][ T7285] team_slave_0: left promiscuous mode [ 317.188565][ T7285] team_slave_1: left promiscuous mode [ 317.262620][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 317.393213][ T5857] usb 4-1: device descriptor read/8, error -71 [ 317.532490][ T5857] usb usb4-port1: unable to enumerate USB device [ 318.684683][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 318.816242][ T5805] Bluetooth: hci5: command tx timeout [ 319.264208][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 320.725916][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.733708][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.741461][ T7279] bridge_slave_0: entered allmulticast mode [ 320.751822][ T7279] bridge_slave_0: entered promiscuous mode [ 320.855064][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.869275][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.877262][ T7279] bridge_slave_1: entered allmulticast mode [ 320.887205][ T7279] bridge_slave_1: entered promiscuous mode [ 320.906081][ T5805] Bluetooth: hci5: command tx timeout [ 321.159388][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.264917][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.582147][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 321.665046][ T7340] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 321.741588][ T7341] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 321.817047][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 321.852442][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.863160][ T5857] usb 4-1: config 0 has no interfaces? [ 321.944985][ T7279] team0: Port device team_slave_0 added [ 321.986285][ T5857] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 321.996056][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.004650][ T5857] usb 4-1: Product: syz [ 322.008999][ T5857] usb 4-1: Manufacturer: syz [ 322.014158][ T5857] usb 4-1: SerialNumber: syz [ 322.043394][ T7279] team0: Port device team_slave_1 added [ 322.145832][ T5857] usb 4-1: config 0 descriptor?? [ 322.412209][ T5855] usb 4-1: USB disconnect, device number 10 [ 322.479377][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.486846][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.518398][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.626270][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.633930][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.661087][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.982062][ T5805] Bluetooth: hci5: command tx timeout [ 323.117711][ T7279] hsr_slave_0: entered promiscuous mode [ 323.128263][ T7279] hsr_slave_1: entered promiscuous mode [ 323.137731][ T7279] debugfs: 'hsr0' already exists in 'hsr' [ 323.145367][ T7279] Cannot create hsr debugfs directory [ 323.943496][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 324.608556][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 324.685232][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 324.873664][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 325.052846][ T5805] Bluetooth: hci5: command tx timeout [ 325.586477][ T7279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.693361][ T7279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.800900][ T7279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.920071][ T7279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.172348][ T5855] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 326.398525][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 326.416430][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.427161][ T5855] usb 5-1: config 0 has no interfaces? [ 326.444453][ T7394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.532'. [ 326.465793][ T7392] tipc: Enabled bearer , priority 0 [ 326.530030][ T7392] syzkaller0: entered promiscuous mode [ 326.536568][ T7392] syzkaller0: entered allmulticast mode [ 326.561362][ T5855] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 326.570989][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.579505][ T5855] usb 5-1: Product: syz [ 326.583929][ T5855] usb 5-1: Manufacturer: syz [ 326.588705][ T5855] usb 5-1: SerialNumber: syz [ 326.647012][ T7392] tipc: Resetting bearer [ 326.671138][ T7391] tipc: Resetting bearer [ 326.685689][ T5855] usb 5-1: config 0 descriptor?? [ 326.727753][ T7391] tipc: Disabling bearer [ 326.929968][ T5855] usb 5-1: USB disconnect, device number 14 [ 327.435895][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.687419][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.766769][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.774579][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.877294][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.884937][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.225521][ T7279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.240311][ T7279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.269007][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.373306][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 332.694028][ T7453] fuse: Unknown parameter 'use00000000000000000000' [ 333.629931][ T7279] veth0_vlan: entered promiscuous mode [ 333.792853][ T7279] veth1_vlan: entered promiscuous mode [ 333.985818][ T7470] tipc: Started in network mode [ 333.990980][ T7470] tipc: Node identity 4246, cluster identity 3223 [ 333.998573][ T7470] tipc: Node number set to 16966 [ 334.130093][ T7279] veth0_macvtap: entered promiscuous mode [ 334.225460][ T7279] veth1_macvtap: entered promiscuous mode [ 334.407967][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.548626][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.732909][ T4164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.804055][ T7476] netlink: 27 bytes leftover after parsing attributes in process `syz.0.555'. [ 334.842647][ T4164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.908469][ T4164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.967714][ T4164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.936150][ T7491] fuse: Unknown parameter 'use00000000000000000000' [ 338.726241][ T7524] syz_tun: entered allmulticast mode [ 339.168691][ T7522] syz_tun: left allmulticast mode [ 339.696078][ T7531] fuse: Unknown parameter 'use00000000000000000000' [ 340.064133][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 340.317598][ T7538] fuse: Unknown parameter 'user_i00000000000000000000' [ 342.716572][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.724807][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.142476][ T4017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.150594][ T4017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.234671][ T7580] fuse: Unknown parameter 'user_i00000000000000000000' [ 344.857851][ T7587] fuse: Unknown parameter 'user_i00000000000000000000' [ 345.153313][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.163399][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.935055][ T7599] mmap: syz.4.591 (7599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 346.170167][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.212163][ T5860] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 346.288676][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.412934][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 346.430289][ T5860] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 346.442233][ T5860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 346.452607][ T5860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.467251][ T5860] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.481941][ T5860] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.491188][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.807609][ T5860] usb 5-1: usb_control_msg returned -32 [ 346.813708][ T5860] usbtmc 5-1:16.0: can't read capabilities [ 347.400424][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.407506][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.762764][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 348.131599][ T143] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.164717][ T3731] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.245956][ T3731] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.352546][ T3731] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.506441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 349.121931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 360.932486][ T2161] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 361.126117][ T2161] usb 1-1: Using ep0 maxpacket: 16 [ 361.166185][ T2161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 361.358392][ T2161] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 361.368119][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.377058][ T2161] usb 1-1: Product: syz [ 361.381406][ T2161] usb 1-1: Manufacturer: syz [ 361.386340][ T2161] usb 1-1: SerialNumber: syz [ 361.579707][ T2161] usb 1-1: config 0 descriptor?? [ 361.764848][ T2161] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 361.853739][ T4121] usb 1-1: Failed to submit usb control message: -71 [ 361.860890][ T4121] usb 1-1: unable to send the bmi data to the device: -71 [ 361.868635][ T4121] usb 1-1: unable to get target info from device [ 361.875353][ T4121] usb 1-1: could not get target info (-71) [ 361.881356][ T4121] usb 1-1: could not probe fw (-71) [ 361.885507][ T2161] usb 1-1: USB disconnect, device number 5 [ 362.317253][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.327677][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.365525][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.424177][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.455361][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.516854][ T7679] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 364.588309][ T5805] Bluetooth: hci6: command tx timeout [ 364.768424][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 366.282123][ T2161] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 366.542142][ T2161] usb 6-1: Using ep0 maxpacket: 16 [ 366.639809][ T2161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.653375][ T5805] Bluetooth: hci6: command tx timeout [ 366.776306][ T2161] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 366.786289][ T2161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.794999][ T2161] usb 6-1: Product: syz [ 366.799253][ T2161] usb 6-1: Manufacturer: syz [ 366.804024][ T2161] usb 6-1: SerialNumber: syz [ 366.847737][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.855357][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.863219][ T7664] bridge_slave_0: entered allmulticast mode [ 366.871886][ T7664] bridge_slave_0: entered promiscuous mode [ 366.905295][ T2161] usb 6-1: config 0 descriptor?? [ 366.963845][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.971360][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.979552][ T7664] bridge_slave_1: entered allmulticast mode [ 366.989507][ T7664] bridge_slave_1: entered promiscuous mode [ 367.046198][ T2161] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 367.104714][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.129712][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.185247][ T3731] usb 6-1: Failed to submit usb control message: -71 [ 367.192573][ T3731] usb 6-1: unable to send the bmi data to the device: -71 [ 367.199899][ T3731] usb 6-1: unable to get target info from device [ 367.206624][ T3731] usb 6-1: could not get target info (-71) [ 367.212844][ T3731] usb 6-1: could not probe fw (-71) [ 367.222627][ T2161] usb 6-1: USB disconnect, device number 2 [ 367.457580][ T7664] team0: Port device team_slave_0 added [ 367.517039][ T7664] team0: Port device team_slave_1 added [ 367.829676][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.836988][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.873040][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.026953][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.034472][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.060814][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.394268][ T5855] usb 5-1: USB disconnect, device number 15 [ 368.493118][ T2161] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 368.529599][ T3821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.710605][ T2161] usb 1-1: Using ep0 maxpacket: 16 [ 368.736259][ T5805] Bluetooth: hci6: command tx timeout [ 368.767205][ T2161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.849543][ T2161] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 368.859108][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.867492][ T2161] usb 1-1: Product: syz [ 368.871921][ T2161] usb 1-1: Manufacturer: syz [ 368.876698][ T2161] usb 1-1: SerialNumber: syz [ 369.035207][ T2161] usb 1-1: config 0 descriptor?? [ 369.158699][ T2161] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 369.225385][ T3821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.299443][ T4017] usb 1-1: Failed to submit usb control message: -71 [ 369.307049][ T4017] usb 1-1: unable to send the bmi data to the device: -71 [ 369.314602][ T4017] usb 1-1: unable to get target info from device [ 369.321122][ T4017] usb 1-1: could not get target info (-71) [ 369.327288][ T4017] usb 1-1: could not probe fw (-71) [ 369.373189][ T1626] usb 1-1: USB disconnect, device number 6 [ 369.532854][ T7664] hsr_slave_0: entered promiscuous mode [ 369.576038][ T7664] hsr_slave_1: entered promiscuous mode [ 369.590531][ T7664] debugfs: 'hsr0' already exists in 'hsr' [ 369.597630][ T7664] Cannot create hsr debugfs directory [ 369.678102][ T3821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.782848][ T7726] fuse: Bad value for 'fd' [ 369.967302][ T3821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.470183][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 370.826586][ T5805] Bluetooth: hci6: command tx timeout [ 370.836605][ T3821] bridge_slave_1: left allmulticast mode [ 370.842753][ T3821] bridge_slave_1: left promiscuous mode [ 370.849313][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.893459][ T3821] bridge_slave_0: left allmulticast mode [ 370.899293][ T3821] bridge_slave_0: left promiscuous mode [ 370.906275][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.958990][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.997206][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.072253][ T3821] bond0 (unregistering): Released all slaves [ 372.943498][ T7754] fuse: Bad value for 'fd' [ 372.958215][ T3821] hsr_slave_0: left promiscuous mode [ 372.984112][ T5860] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.002621][ T3821] hsr_slave_1: left promiscuous mode [ 373.010764][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.018848][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.042478][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.050144][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.079381][ T3821] veth1_macvtap: left promiscuous mode [ 373.090028][ T3821] veth0_macvtap: left promiscuous mode [ 373.096163][ T3821] veth1_vlan: left promiscuous mode [ 373.101865][ T3821] veth0_vlan: left promiscuous mode [ 373.186334][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 373.207055][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.219480][ T5860] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 373.319986][ T5860] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 373.329460][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.337890][ T5860] usb 1-1: Product: syz [ 373.342357][ T5860] usb 1-1: Manufacturer: syz [ 373.347128][ T5860] usb 1-1: SerialNumber: syz [ 373.465910][ T5860] usb 1-1: config 0 descriptor?? [ 373.543581][ T5860] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 373.705152][ T4121] usb 1-1: Failed to submit usb control message: -71 [ 373.708988][ T5860] usb 1-1: USB disconnect, device number 7 [ 373.713519][ T4121] usb 1-1: unable to send the bmi data to the device: -71 [ 373.726602][ T4121] usb 1-1: unable to get target info from device [ 373.733223][ T4121] usb 1-1: could not get target info (-71) [ 373.739302][ T4121] usb 1-1: could not probe fw (-71) [ 375.021535][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 375.087939][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 375.738941][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 376.066265][ T7664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.123748][ T7664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.179363][ T7664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.222164][ T7664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.675418][ T7801] fuse: Unknown parameter '0x0000000000000003' [ 376.684850][ T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.926756][ T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.130558][ T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.327511][ T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.031028][ T143] bridge_slave_1: left allmulticast mode [ 378.037351][ T143] bridge_slave_1: left promiscuous mode [ 378.044751][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.130012][ T143] bridge_slave_0: left allmulticast mode [ 378.137204][ T143] bridge_slave_0: left promiscuous mode [ 378.143999][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.473184][ T5857] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 378.605992][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 378.675606][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 378.696555][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.706766][ T5857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 378.797083][ T5857] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 378.806692][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.819707][ T5857] usb 6-1: Product: syz [ 378.825418][ T5857] usb 6-1: Manufacturer: syz [ 378.830199][ T5857] usb 6-1: SerialNumber: syz [ 378.935431][ T5857] usb 6-1: config 0 descriptor?? [ 379.030441][ T5857] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 379.200052][ T3747] usb 6-1: Failed to submit usb control message: -71 [ 379.207752][ T5857] usb 6-1: USB disconnect, device number 3 [ 379.216293][ T3747] usb 6-1: unable to send the bmi data to the device: -71 [ 379.224587][ T3747] usb 6-1: unable to get target info from device [ 379.231117][ T3747] usb 6-1: could not get target info (-71) [ 379.240398][ T3747] usb 6-1: could not probe fw (-71) [ 379.448792][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.504691][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.558635][ T143] bond0 (unregistering): Released all slaves [ 379.637248][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 379.731626][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.115238][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.355417][ T3731] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.362985][ T3731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.427481][ T7838] fuse: Unknown parameter '0x0000000000000003' [ 380.516968][ T143] hsr_slave_0: left promiscuous mode [ 380.536994][ T143] hsr_slave_1: left promiscuous mode [ 380.546076][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.553819][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.635674][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.643788][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.778465][ T143] veth1_macvtap: left promiscuous mode [ 380.784612][ T143] veth0_macvtap: left promiscuous mode [ 380.790598][ T143] veth1_vlan: left promiscuous mode [ 380.796348][ T143] veth0_vlan: left promiscuous mode [ 382.757930][ T143] team0 (unregistering): Port device team_slave_1 removed [ 382.794458][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.677'. [ 382.858442][ T143] team0 (unregistering): Port device team_slave_0 removed [ 383.228907][ T3731] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.236490][ T3731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.923764][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 385.480877][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.450942][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.690'. [ 388.199104][ T7664] veth0_vlan: entered promiscuous mode [ 388.396712][ T7664] veth1_vlan: entered promiscuous mode [ 388.473077][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 388.696319][ T7664] veth0_macvtap: entered promiscuous mode [ 388.754247][ T7664] veth1_macvtap: entered promiscuous mode [ 388.974153][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.110585][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.240384][ T4215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.489546][ T4215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.538442][ T4215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.622993][ T4215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.392524][ T8007] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 394.804558][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.717'. [ 395.778931][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.787198][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.995834][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.005284][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.739386][ T2161] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 399.952977][ T2161] usb 6-1: Using ep0 maxpacket: 16 [ 399.997961][ T2161] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 400.051540][ T2161] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 400.061028][ T2161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.069774][ T2161] usb 6-1: Product: syz [ 400.074313][ T2161] usb 6-1: Manufacturer: syz [ 400.079087][ T2161] usb 6-1: SerialNumber: syz [ 400.200900][ T2161] usb 6-1: config 0 descriptor?? [ 400.209121][ T8116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 400.356849][ T2161] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 400.552103][ T3747] usb 6-1: Failed to submit usb control message: -71 [ 400.559267][ T3747] usb 6-1: unable to send the bmi data to the device: -71 [ 400.566956][ T3747] usb 6-1: unable to get target info from device [ 400.573772][ T3747] usb 6-1: could not get target info (-71) [ 400.579795][ T3747] usb 6-1: could not probe fw (-71) [ 400.587078][ T2161] usb 6-1: USB disconnect, device number 4 [ 403.353284][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.752'. [ 406.713589][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 408.891595][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.899777][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.603625][ T8258] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 413.779939][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.793'. [ 416.022486][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 420.302624][ T2161] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 420.512228][ T2161] usb 4-1: Using ep0 maxpacket: 16 [ 420.545965][ T2161] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 420.647841][ T2161] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 420.657549][ T2161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.666121][ T2161] usb 4-1: Product: syz [ 420.670474][ T2161] usb 4-1: Manufacturer: syz [ 420.675412][ T2161] usb 4-1: SerialNumber: syz [ 420.749975][ T2161] usb 4-1: config 0 descriptor?? [ 420.760032][ T8408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.853950][ T2161] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 420.993039][ T3821] usb 4-1: Failed to submit usb control message: -71 [ 420.998225][ T2161] usb 4-1: USB disconnect, device number 11 [ 420.999966][ T3821] usb 4-1: unable to send the bmi data to the device: -71 [ 421.000086][ T3821] usb 4-1: unable to get target info from device [ 421.027751][ T3821] usb 4-1: could not get target info (-71) [ 421.034117][ T3821] usb 4-1: could not probe fw (-71) [ 423.198858][ T8452] netlink: 52 bytes leftover after parsing attributes in process `syz.1.835'. [ 424.432705][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 424.602084][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 424.638873][ T5855] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 424.675063][ T5855] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 424.684848][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.696537][ T5855] usb 2-1: Product: syz [ 424.700917][ T5855] usb 2-1: Manufacturer: syz [ 424.706881][ T5855] usb 2-1: SerialNumber: syz [ 424.719633][ T5855] usb 2-1: config 0 descriptor?? [ 424.728232][ T8465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.789533][ T5855] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 425.002720][ T5855] usb 2-1: USB disconnect, device number 9 [ 425.010912][ T143] usb 2-1: Failed to submit usb control message: -71 [ 425.018193][ T143] usb 2-1: unable to send the bmi data to the device: -71 [ 425.026062][ T143] usb 2-1: unable to get target info from device [ 425.033047][ T143] usb 2-1: could not get target info (-71) [ 425.039069][ T143] usb 2-1: could not probe fw (-71) [ 426.143453][ T8495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.850'. [ 427.982263][ T1626] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 428.152077][ T1626] usb 6-1: Using ep0 maxpacket: 16 [ 428.167738][ T1626] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 428.230764][ T1626] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 428.240550][ T1626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.249050][ T1626] usb 6-1: Product: syz [ 428.254071][ T1626] usb 6-1: Manufacturer: syz [ 428.258852][ T1626] usb 6-1: SerialNumber: syz [ 428.335488][ T1626] usb 6-1: config 0 descriptor?? [ 428.346511][ T8519] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.438422][ T1626] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 428.643668][ T4164] usb 6-1: Failed to submit usb control message: -71 [ 428.648858][ T1626] usb 6-1: USB disconnect, device number 5 [ 428.650857][ T4164] usb 6-1: unable to send the bmi data to the device: -71 [ 428.664261][ T4164] usb 6-1: unable to get target info from device [ 428.670817][ T4164] usb 6-1: could not get target info (-71) [ 428.677050][ T4164] usb 6-1: could not probe fw (-71) [ 428.905518][ T8535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.864'. [ 429.627619][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'. [ 432.098759][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 432.212014][ T1626] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 432.417840][ T1626] usb 2-1: Using ep0 maxpacket: 16 [ 432.452615][ T1626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 432.454544][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 432.567965][ T1626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 432.579878][ T1626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.590069][ T1626] usb 2-1: Product: syz [ 432.594615][ T1626] usb 2-1: Manufacturer: syz [ 432.599399][ T1626] usb 2-1: SerialNumber: syz [ 432.748878][ T1626] usb 2-1: config 0 descriptor?? [ 432.757261][ T8581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.885753][ T1626] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 433.048148][ T5855] usb 2-1: USB disconnect, device number 10 [ 433.056964][ T3731] usb 2-1: Failed to submit usb control message: -71 [ 433.064223][ T3731] usb 2-1: unable to send the bmi data to the device: -71 [ 433.071536][ T3731] usb 2-1: unable to get target info from device [ 433.078193][ T3731] usb 2-1: could not get target info (-71) [ 433.084283][ T3731] usb 2-1: could not probe fw (-71) [ 433.957316][ T5805] Bluetooth: hci6: link tx timeout [ 433.962838][ T5805] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 435.113838][ T8627] tipc: Started in network mode [ 435.119091][ T8627] tipc: Node identity e24f46f7bf3, cluster identity 4711 [ 435.127638][ T8627] tipc: Enabled bearer , priority 0 [ 435.263284][ T8634] syzkaller0: entered promiscuous mode [ 435.268986][ T8634] syzkaller0: entered allmulticast mode [ 435.334782][ T8627] tipc: Resetting bearer [ 435.401483][ T8626] tipc: Resetting bearer [ 435.435687][ T8626] tipc: Disabling bearer [ 435.486928][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 436.013160][ T5805] Bluetooth: hci6: command 0x0406 tx timeout [ 436.187711][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.896'. [ 436.675299][ T5855] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 436.703184][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.896'. [ 436.884221][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 436.920607][ T5855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 436.987389][ T5855] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 436.997168][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.005582][ T5855] usb 1-1: Product: syz [ 437.009934][ T5855] usb 1-1: Manufacturer: syz [ 437.014952][ T5855] usb 1-1: SerialNumber: syz [ 437.185889][ T5855] usb 1-1: config 0 descriptor?? [ 437.196898][ T8651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.310149][ T5855] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 437.509153][ T4017] usb 1-1: Failed to submit usb control message: -71 [ 437.517031][ T4017] usb 1-1: unable to send the bmi data to the device: -71 [ 437.524783][ T4017] usb 1-1: unable to get target info from device [ 437.531578][ T4017] usb 1-1: could not get target info (-71) [ 437.537896][ T4017] usb 1-1: could not probe fw (-71) [ 437.547057][ T1626] usb 1-1: USB disconnect, device number 8 [ 437.759436][ T8671] syzkaller1: entered promiscuous mode [ 437.765837][ T8671] syzkaller1: entered allmulticast mode [ 437.858390][ T8667] netlink: 'syz.6.902': attribute type 1 has an invalid length. [ 437.946497][ T8667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.701537][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 440.551272][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.913'. [ 441.188588][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.913'. [ 441.342188][ T1626] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 441.572263][ T1626] usb 1-1: Using ep0 maxpacket: 16 [ 441.612380][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 441.629856][ T1626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 441.742876][ T1626] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 441.752438][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.760664][ T1626] usb 1-1: Product: syz [ 441.765236][ T1626] usb 1-1: Manufacturer: syz [ 441.770029][ T1626] usb 1-1: SerialNumber: syz [ 441.928699][ T1626] usb 1-1: config 0 descriptor?? [ 441.937993][ T8724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.057608][ T1626] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 442.265683][ T3821] usb 1-1: Failed to submit usb control message: -71 [ 442.272995][ T3821] usb 1-1: unable to send the bmi data to the device: -71 [ 442.279105][ T1626] usb 1-1: USB disconnect, device number 9 [ 442.280280][ T3821] usb 1-1: unable to get target info from device [ 442.293880][ T3821] usb 1-1: could not get target info (-71) [ 442.299896][ T3821] usb 1-1: could not probe fw (-71) [ 445.736700][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'. [ 446.462431][ T1626] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 446.666000][ T1626] usb 1-1: Using ep0 maxpacket: 16 [ 446.697237][ T1626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 446.769809][ T1626] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 446.780620][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.789137][ T1626] usb 1-1: Product: syz [ 446.793805][ T1626] usb 1-1: Manufacturer: syz [ 446.798581][ T1626] usb 1-1: SerialNumber: syz [ 446.955223][ T1626] usb 1-1: config 0 descriptor?? [ 446.965415][ T8796] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 447.130288][ T1626] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 447.342202][ T4164] usb 1-1: Failed to submit usb control message: -71 [ 447.349481][ T4164] usb 1-1: unable to send the bmi data to the device: -71 [ 447.357854][ T4164] usb 1-1: unable to get target info from device [ 447.359424][ T1626] usb 1-1: USB disconnect, device number 10 [ 447.364753][ T4164] usb 1-1: could not get target info (-71) [ 447.364879][ T4164] usb 1-1: could not probe fw (-71) [ 447.999012][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 449.596738][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.950'. [ 450.833957][ T1626] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 451.032219][ T1626] usb 4-1: Using ep0 maxpacket: 16 [ 451.057762][ T8872] fuse: Bad value for 'fd' [ 451.074638][ T1626] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 451.133949][ T1626] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 451.143685][ T1626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.152046][ T1626] usb 4-1: Product: syz [ 451.156375][ T1626] usb 4-1: Manufacturer: syz [ 451.161192][ T1626] usb 4-1: SerialNumber: syz [ 451.265424][ T1626] usb 4-1: config 0 descriptor?? [ 451.273701][ T8865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 451.363853][ T1626] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 451.568399][ T5854] usb 4-1: USB disconnect, device number 12 [ 451.576664][ T3821] usb 4-1: Failed to submit usb control message: -71 [ 451.584154][ T3821] usb 4-1: unable to send the bmi data to the device: -71 [ 451.591491][ T3821] usb 4-1: unable to get target info from device [ 451.598136][ T3821] usb 4-1: could not get target info (-71) [ 451.604557][ T3821] usb 4-1: could not probe fw (-71) [ 453.326824][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 453.645273][ T8913] fuse: Bad value for 'fd' [ 454.502953][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.973'. [ 455.129224][ T1626] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 455.352441][ T1626] usb 2-1: Using ep0 maxpacket: 16 [ 455.407136][ T1626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 455.486391][ T1626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 455.496182][ T1626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.504721][ T1626] usb 2-1: Product: syz [ 455.509071][ T1626] usb 2-1: Manufacturer: syz [ 455.516290][ T1626] usb 2-1: SerialNumber: syz [ 455.633564][ T1626] usb 2-1: config 0 descriptor?? [ 455.641008][ T8931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 455.734280][ T1626] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 455.927072][ T4121] usb 2-1: Failed to submit usb control message: -71 [ 455.933194][ T1626] usb 2-1: USB disconnect, device number 11 [ 455.934213][ T4121] usb 2-1: unable to send the bmi data to the device: -71 [ 455.947509][ T4121] usb 2-1: unable to get target info from device [ 455.954248][ T4121] usb 2-1: could not get target info (-71) [ 455.960283][ T4121] usb 2-1: could not probe fw (-71) [ 456.672278][ T8957] fuse: Bad value for 'fd' [ 457.170945][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'. [ 457.313733][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 457.828702][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.988'. [ 459.616071][ T1626] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 459.820222][ T1626] usb 7-1: Using ep0 maxpacket: 16 [ 459.866214][ T1626] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 459.929409][ T1626] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 459.939367][ T1626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.939880][ T9009] tipc: Enabled bearer , priority 0 [ 459.947859][ T1626] usb 7-1: Product: syz [ 459.947967][ T1626] usb 7-1: Manufacturer: syz [ 459.948075][ T1626] usb 7-1: SerialNumber: syz [ 460.040305][ T1626] usb 7-1: config 0 descriptor?? [ 460.049476][ T8999] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 460.087667][ T9011] syzkaller0: entered promiscuous mode [ 460.094119][ T9011] syzkaller0: entered allmulticast mode [ 460.157488][ T9012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1000'. [ 460.190194][ T1626] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 460.219304][ T9009] tipc: Resetting bearer [ 460.264230][ T9008] tipc: Resetting bearer [ 460.316162][ T9008] tipc: Disabling bearer [ 460.379523][ T3731] usb 7-1: Failed to submit usb control message: -71 [ 460.385215][ T1626] usb 7-1: USB disconnect, device number 2 [ 460.387673][ T3731] usb 7-1: unable to send the bmi data to the device: -71 [ 460.400602][ T3731] usb 7-1: unable to get target info from device [ 460.408162][ T3731] usb 7-1: could not get target info (-71) [ 460.415405][ T3731] usb 7-1: could not probe fw (-71) [ 460.951572][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1003'. [ 463.133635][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 463.725577][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 463.822604][ T9062] tipc: Started in network mode [ 463.827911][ T9062] tipc: Node identity 5abf228d4e6f, cluster identity 4711 [ 463.836348][ T9062] tipc: Enabled bearer , priority 0 [ 463.850714][ T9062] syzkaller0: entered promiscuous mode [ 463.856813][ T9062] syzkaller0: entered allmulticast mode [ 463.899338][ T9062] tipc: Resetting bearer [ 463.921356][ T9060] tipc: Resetting bearer [ 463.928813][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 463.945232][ T5857] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 463.994459][ T5857] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 464.004752][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.016096][ T5857] usb 1-1: Product: syz [ 464.020440][ T5857] usb 1-1: Manufacturer: syz [ 464.026024][ T5857] usb 1-1: SerialNumber: syz [ 464.043140][ T9060] tipc: Disabling bearer [ 464.071483][ T5857] usb 1-1: config 0 descriptor?? [ 464.079560][ T9054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 464.102444][ T5857] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 464.302542][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1019'. [ 464.347082][ T4017] usb 1-1: Failed to submit usb control message: -71 [ 464.353517][ T5857] usb 1-1: USB disconnect, device number 11 [ 464.354265][ T4017] usb 1-1: unable to send the bmi data to the device: -71 [ 464.367596][ T4017] usb 1-1: unable to get target info from device [ 464.374266][ T4017] usb 1-1: could not get target info (-71) [ 464.380297][ T4017] usb 1-1: could not probe fw (-71) [ 465.708639][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 466.732224][ T9097] tipc: Started in network mode [ 466.737502][ T9097] tipc: Node identity 9adf6bcb8bbe, cluster identity 4711 [ 466.745846][ T9097] tipc: Enabled bearer , priority 0 [ 466.756072][ T9097] syzkaller0: entered promiscuous mode [ 466.763268][ T9097] syzkaller0: entered allmulticast mode [ 466.845560][ T9097] tipc: Resetting bearer [ 467.061346][ T9095] tipc: Resetting bearer [ 467.112499][ T9095] tipc: Disabling bearer [ 467.792400][ T5854] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 467.873103][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1037'. [ 468.013121][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1040'. [ 468.031952][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 468.061184][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 468.143808][ T5854] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 468.153366][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.161571][ T5854] usb 2-1: Product: syz [ 468.166507][ T5854] usb 2-1: Manufacturer: syz [ 468.171336][ T5854] usb 2-1: SerialNumber: syz [ 468.235493][ T5854] usb 2-1: config 0 descriptor?? [ 468.245504][ T9105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 468.307844][ T5854] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 468.483468][ T4121] usb 2-1: Failed to submit usb control message: -71 [ 468.490539][ T4121] usb 2-1: unable to send the bmi data to the device: -71 [ 468.498501][ T4121] usb 2-1: unable to get target info from device [ 468.506290][ T4121] usb 2-1: could not get target info (-71) [ 468.512532][ T4121] usb 2-1: could not probe fw (-71) [ 468.522611][ T5854] usb 2-1: USB disconnect, device number 12 [ 470.020295][ T9142] tipc: Enabled bearer , priority 0 [ 470.077334][ T9144] syzkaller0: entered promiscuous mode [ 470.083408][ T9144] syzkaller0: entered allmulticast mode [ 470.192925][ T9142] tipc: Resetting bearer [ 470.212700][ T9139] tipc: Resetting bearer [ 470.266167][ T9139] tipc: Disabling bearer [ 470.284460][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.291074][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.157744][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 471.216087][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 472.553962][ T9178] tipc: Enabled bearer , priority 0 [ 472.566896][ T9178] syzkaller0: entered promiscuous mode [ 472.573216][ T9178] syzkaller0: entered allmulticast mode [ 472.632468][ T9178] tipc: Resetting bearer [ 472.650961][ T9176] tipc: Resetting bearer [ 472.676514][ T9176] tipc: Disabling bearer [ 473.733267][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 474.027692][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'. [ 474.945672][ T9213] tipc: Enabled bearer , priority 0 [ 474.990549][ T9213] syzkaller0: entered promiscuous mode [ 474.996952][ T9213] syzkaller0: entered allmulticast mode [ 475.057954][ T9214] tipc: Resetting bearer [ 475.129191][ T9212] tipc: Resetting bearer [ 475.201492][ T9212] tipc: Disabling bearer [ 475.883123][ T9223] fuse: Bad value for 'fd' [ 476.166869][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1084'. [ 476.808025][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1089'. [ 477.299244][ T9245] tipc: Enabled bearer , priority 0 [ 477.353805][ T9245] syzkaller0: entered promiscuous mode [ 477.359830][ T9245] syzkaller0: entered allmulticast mode [ 477.463643][ T9246] tipc: Resetting bearer [ 477.499305][ T9244] tipc: Resetting bearer [ 477.519453][ T9244] tipc: Disabling bearer [ 478.200948][ T9253] fuse: Bad value for 'fd' [ 478.708735][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 479.479495][ T9271] tipc: Enabled bearer , priority 0 [ 479.531956][ T9271] syzkaller0: entered promiscuous mode [ 479.537636][ T9271] syzkaller0: entered allmulticast mode [ 479.634778][ T9271] tipc: Resetting bearer [ 479.640803][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 479.733584][ T9269] tipc: Resetting bearer [ 479.760705][ T9269] tipc: Disabling bearer [ 480.810680][ T9290] fuse: Bad value for 'fd' [ 481.327280][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 482.480977][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1121'. [ 483.823617][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 484.432724][ T9341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 486.077333][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 487.250724][ T9378] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1148'. [ 488.573515][ T9397] tipc: Enabled bearer , priority 0 [ 488.640204][ T9398] syzkaller0: entered promiscuous mode [ 488.647175][ T9398] syzkaller0: entered allmulticast mode [ 488.748888][ T9397] tipc: Resetting bearer [ 488.819615][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1156'. [ 488.845402][ T9396] tipc: Resetting bearer [ 488.890603][ T9396] tipc: Disabling bearer [ 490.373482][ T9422] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 491.858052][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1169'. [ 493.033445][ T9453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.849891][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 496.383664][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 497.856934][ T9520] tipc: Enabled bearer , priority 0 [ 497.893545][ T9520] syzkaller0: entered promiscuous mode [ 497.899222][ T9520] syzkaller0: entered allmulticast mode [ 497.996317][ T9526] tipc: Resetting bearer [ 498.051466][ T9517] tipc: Resetting bearer [ 498.106034][ T9517] tipc: Disabling bearer [ 499.221096][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 501.597094][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 502.717207][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 502.736481][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.760435][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.774563][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.810336][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.830934][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.841035][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 502.973177][ T9585] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1226'. [ 502.996677][ T9585] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 503.785952][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1230'. [ 504.423064][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 504.892053][ T5805] Bluetooth: hci0: command tx timeout [ 506.037280][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.047827][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.055867][ T9578] bridge_slave_0: entered allmulticast mode [ 506.065788][ T9578] bridge_slave_0: entered promiscuous mode [ 506.103377][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 506.147158][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.155205][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.163680][ T9578] bridge_slave_1: entered allmulticast mode [ 506.173594][ T9578] bridge_slave_1: entered promiscuous mode [ 506.734009][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.781520][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.972246][ T5805] Bluetooth: hci0: command tx timeout [ 507.268219][ T9578] team0: Port device team_slave_0 added [ 507.342867][ T9578] team0: Port device team_slave_1 added [ 507.709087][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.716442][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.746535][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.936458][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.946403][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.973481][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.493595][ T9578] hsr_slave_0: entered promiscuous mode [ 508.504231][ T9578] hsr_slave_1: entered promiscuous mode [ 509.058322][ T5805] Bluetooth: hci0: command tx timeout [ 509.553610][ T9662] netlink: 'syz.6.1255': attribute type 10 has an invalid length. [ 509.673837][ T9663] netlink: 'syz.6.1255': attribute type 10 has an invalid length. [ 509.679571][ T9662] team0: Port device dummy0 added [ 509.771434][ T9663] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 509.942571][ T9663] team0: Failed to send options change via netlink (err -105) [ 509.951470][ T9663] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 509.962567][ T9663] team0: Port device dummy0 removed [ 509.985020][ T9663] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 510.283768][ T9578] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.339554][ T9578] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.415084][ T9672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1258'. [ 510.426829][ T9578] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.565478][ T9578] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 511.133805][ T5805] Bluetooth: hci0: command tx timeout [ 511.153227][ T9678] tipc: Enabled bearer , priority 0 [ 511.173339][ T9678] syzkaller0: entered promiscuous mode [ 511.179021][ T9678] syzkaller0: entered allmulticast mode [ 511.280741][ T9677] tipc: Resetting bearer [ 511.386983][ T9677] tipc: Disabling bearer [ 512.186811][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.404675][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.609766][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.617411][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.806434][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.814030][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.225685][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.239193][ T9720] tipc: Enabled bearer , priority 0 [ 515.291096][ T9721] syzkaller0: entered promiscuous mode [ 515.297464][ T9721] syzkaller0: entered allmulticast mode [ 515.407974][ T9719] tipc: Resetting bearer [ 515.515964][ T9719] tipc: Disabling bearer [ 517.946994][ T9578] veth0_vlan: entered promiscuous mode [ 518.094930][ T9578] veth1_vlan: entered promiscuous mode [ 518.692568][ T9578] veth0_macvtap: entered promiscuous mode [ 518.762531][ T9578] veth1_macvtap: entered promiscuous mode [ 518.990294][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.083147][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.201280][ T143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.268856][ T143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.346283][ T143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.398232][ T143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.154796][ T9806] syzkaller0: entered promiscuous mode [ 522.165231][ T9806] syzkaller0: entered allmulticast mode [ 525.169382][ T9846] tipc: Enabled bearer , priority 0 [ 525.235838][ T9849] syzkaller0: entered promiscuous mode [ 525.241529][ T9849] syzkaller0: entered allmulticast mode [ 525.302957][ T9846] tipc: Resetting bearer [ 525.402479][ T9845] tipc: Resetting bearer [ 525.505328][ T9845] tipc: Disabling bearer [ 526.563234][ T4017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.571250][ T4017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.864228][ T4164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.872468][ T4164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.379907][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 529.008488][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1332'. [ 529.133188][ T9891] tipc: Enabled bearer , priority 0 [ 529.228094][ T9894] syzkaller0: entered promiscuous mode [ 529.234041][ T9894] syzkaller0: entered allmulticast mode [ 529.288096][ T9891] tipc: Resetting bearer [ 529.339910][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 529.393554][ T9888] tipc: Resetting bearer [ 529.469111][ T9888] tipc: Disabling bearer [ 529.514890][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 531.721429][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.728379][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.200217][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 532.343946][ T9935] tipc: Started in network mode [ 532.349090][ T9935] tipc: Node identity 3afe44cbe15, cluster identity 4711 [ 532.357992][ T9935] tipc: Enabled bearer , priority 0 [ 532.466636][ T9935] syzkaller0: entered promiscuous mode [ 532.472754][ T9935] syzkaller0: entered allmulticast mode [ 532.574235][ T9935] tipc: Resetting bearer [ 532.754524][ T9933] tipc: Resetting bearer [ 532.816219][ T9933] tipc: Disabling bearer [ 534.559034][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.591354][ T9964] bond0: (slave rose0): Enslaving as an active interface with an up link [ 535.423004][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 535.571978][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1363'. [ 537.419426][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1371'. [ 537.580381][T10007] vlan2: entered promiscuous mode [ 537.585776][T10007] veth0_virt_wifi: entered promiscuous mode [ 537.593049][T10007] vlan2: entered allmulticast mode [ 537.598315][T10007] veth0_virt_wifi: entered allmulticast mode [ 537.648477][T10006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'. [ 537.868013][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1372'. [ 538.177540][ T5854] IPVS: starting estimator thread 0... [ 538.287800][T10019] IPVS: using max 240 ests per chain, 12000 per kthread [ 538.370404][T10007] hsr_slave_1 (unregistering): left promiscuous mode [ 539.076469][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 541.412861][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 541.422986][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 542.539129][T10069] syzkaller1: entered promiscuous mode [ 542.545059][T10069] syzkaller1: entered allmulticast mode [ 545.324105][T10101] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 545.332759][T10101] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 545.341480][T10101] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 545.680503][T10109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.881511][T10109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.099779][T10113] syzkaller1: entered promiscuous mode [ 546.107915][T10113] syzkaller1: entered allmulticast mode [ 546.977990][T10128] netlink: 'syz.1.1406': attribute type 39 has an invalid length. [ 547.089437][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.210067][T10128] bridge_slave_0 (unregistering): left allmulticast mode [ 547.217460][T10128] bridge_slave_0 (unregistering): left promiscuous mode [ 547.225114][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.901615][T10169] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 551.137248][T10169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.469930][T10170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.479312][T10170] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.495821][T10170] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 551.890454][T10172] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 551.989087][T10172] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 555.520885][T10229] syzkaller1: entered promiscuous mode [ 555.526814][T10229] syzkaller1: entered allmulticast mode [ 555.949144][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1435'. [ 557.551592][T10259] bridge_slave_0: left allmulticast mode [ 557.557620][T10259] bridge_slave_0: left promiscuous mode [ 557.564554][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.710757][T10259] bridge_slave_1: left allmulticast mode [ 557.718084][T10259] bridge_slave_1: left promiscuous mode [ 557.725030][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.782684][T10259] bond0: (slave bond_slave_0): Releasing backup interface [ 557.926405][T10259] bond0: (slave bond_slave_1): Releasing backup interface [ 557.998848][T10259] team0: Port device team_slave_0 removed [ 558.057660][T10259] team0: Port device team_slave_1 removed [ 558.069314][T10259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.077153][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.126606][T10259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.134665][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.211120][T10259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.887648][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 561.169065][T10302] bond3 (unregistering): Released all slaves [ 562.766259][T10333] batadv0: entered promiscuous mode [ 562.772035][T10333] vlan2: entered promiscuous mode [ 563.176213][T10339] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1468'. [ 566.020698][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 566.047802][T10382] bridge0: entered promiscuous mode [ 566.073684][T10382] bridge0: left promiscuous mode [ 566.199236][T10386] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1481'. [ 568.632421][ T5857] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 568.812943][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 568.834006][ T5857] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 568.856051][T10426] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1494'. [ 568.881447][ T5857] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 568.891181][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.899596][ T5857] usb 1-1: Product: syz [ 568.904368][ T5857] usb 1-1: Manufacturer: syz [ 568.909136][ T5857] usb 1-1: SerialNumber: syz [ 568.949379][ T5857] usb 1-1: config 0 descriptor?? [ 568.957586][T10420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 569.006448][ T5857] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 569.210549][ T3821] usb 1-1: Failed to submit usb control message: -71 [ 569.211484][ T5857] usb 1-1: USB disconnect, device number 12 [ 569.220451][ T3821] usb 1-1: unable to send the bmi data to the device: -71 [ 569.231483][ T3821] usb 1-1: unable to get target info from device [ 569.238358][ T3821] usb 1-1: could not get target info (-71) [ 569.244553][ T3821] usb 1-1: could not probe fw (-71) [ 571.517148][T10471] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1506'. [ 572.052629][ T5854] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 572.254715][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 572.302700][ T5854] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 572.344446][ T5854] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 572.356327][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.365473][ T5854] usb 7-1: Product: syz [ 572.369830][ T5854] usb 7-1: Manufacturer: syz [ 572.374857][ T5854] usb 7-1: SerialNumber: syz [ 572.490958][ T5854] usb 7-1: config 0 descriptor?? [ 572.500342][T10477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 572.613845][ T5854] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 572.787399][ T3731] usb 7-1: Failed to submit usb control message: -71 [ 572.793068][ T5854] usb 7-1: USB disconnect, device number 3 [ 572.794693][ T3731] usb 7-1: unable to send the bmi data to the device: -71 [ 572.807611][ T3731] usb 7-1: unable to get target info from device [ 572.814386][ T3731] usb 7-1: could not get target info (-71) [ 572.820411][ T3731] usb 7-1: could not probe fw (-71) [ 574.887708][T10512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1520'. [ 577.543197][ T5857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 577.722792][ T5857] usb 8-1: Using ep0 maxpacket: 16 [ 577.768349][ T5857] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 577.835458][ T5857] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 577.847434][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.856024][ T5857] usb 8-1: Product: syz [ 577.860378][ T5857] usb 8-1: Manufacturer: syz [ 577.865990][ T5857] usb 8-1: SerialNumber: syz [ 577.922246][T10551] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1533'. [ 577.947995][ T5857] usb 8-1: config 0 descriptor?? [ 577.956261][T10540] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 578.032684][ T5857] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 578.230959][ T4215] usb 8-1: Failed to submit usb control message: -71 [ 578.240922][ T4215] usb 8-1: unable to send the bmi data to the device: -71 [ 578.241836][ T5854] usb 8-1: USB disconnect, device number 2 [ 578.248449][ T4215] usb 8-1: unable to get target info from device [ 578.260773][ T4215] usb 8-1: could not get target info (-71) [ 578.267636][ T4215] usb 8-1: could not probe fw (-71) [ 579.344739][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1540'. [ 579.354177][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1540'. [ 579.422886][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 579.437087][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 579.472254][T10573] geneve2: entered promiscuous mode [ 579.477683][T10573] geneve2: entered allmulticast mode [ 579.506271][ T3731] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 2048 - 0 [ 579.536592][ T3731] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 2048 - 0 [ 579.565463][ T3821] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 2048 - 0 [ 579.634830][ T3821] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 2048 - 0 [ 579.821089][T10578] sctp: [Deprecated]: syz.1.1542 (pid 10578) Use of int in maxseg socket option. [ 579.821089][T10578] Use struct sctp_assoc_value instead [ 581.705874][ T5854] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 581.880005][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 581.925684][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 581.965463][ T5854] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 581.975391][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.987015][ T5854] usb 2-1: Product: syz [ 581.991369][ T5854] usb 2-1: Manufacturer: syz [ 581.996826][ T5854] usb 2-1: SerialNumber: syz [ 582.095071][ T5854] usb 2-1: config 0 descriptor?? [ 582.106541][T10598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.234907][ T5854] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 582.384203][ T3821] usb 2-1: Failed to submit usb control message: -71 [ 582.394718][ T3821] usb 2-1: unable to send the bmi data to the device: -71 [ 582.395630][ T5854] usb 2-1: USB disconnect, device number 13 [ 582.403453][ T3821] usb 2-1: unable to get target info from device [ 582.414896][ T3821] usb 2-1: could not get target info (-71) [ 582.420902][ T3821] usb 2-1: could not probe fw (-71) [ 584.818368][T10657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1570'. [ 584.824587][T10659] ===================================================== [ 584.827884][T10657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'. [ 584.835001][T10659] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 584.850794][T10659] batadv_get_vid+0x2d0/0x3b0 [ 584.855833][T10659] batadv_interface_tx+0x2e5/0x1e60 [ 584.861233][T10659] dev_hard_start_xmit+0x22f/0xa30 [ 584.866709][T10659] __dev_queue_xmit+0x3c51/0x5e60 [ 584.872155][T10659] __bpf_redirect+0x162d/0x1760 [ 584.877329][T10659] bpf_clone_redirect+0x366/0x530 [ 584.882702][T10659] ___bpf_prog_run+0x1297/0xeba0 [ 584.887791][T10659] __bpf_prog_run512+0xc5/0x100 [ 584.892972][T10659] bpf_test_run+0x496/0xd80 [ 584.897669][T10659] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 584.903446][T10659] bpf_prog_test_run+0x5c2/0xa40 [ 584.908555][T10659] __sys_bpf+0x873/0xeb0 [ 584.913103][T10659] __ia32_sys_bpf+0xa4/0xf0 [ 584.917810][T10659] ia32_sys_call+0xadf/0x4310 [ 584.922868][T10659] __do_fast_syscall_32+0xb0/0x150 [ 584.928252][T10659] do_fast_syscall_32+0x38/0x80 [ 584.933489][T10659] do_SYSENTER_32+0x1f/0x30 [ 584.938211][T10659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.944832][T10659] [ 584.947229][T10659] Uninit was created at: [ 584.951904][T10659] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 584.958065][T10659] kmalloc_reserve+0x13c/0x4b0 [ 584.963202][T10659] pskb_expand_head+0x1fc/0x1610 [ 584.968348][T10659] skb_ensure_writable+0x44e/0x510 [ 584.973821][T10659] bpf_clone_redirect+0x1c1/0x530 [ 584.979069][T10659] ___bpf_prog_run+0x1297/0xeba0 [ 584.984359][T10659] __bpf_prog_run512+0xc5/0x100 [ 584.989372][T10659] bpf_test_run+0x496/0xd80 [ 584.994302][T10659] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 584.999985][T10659] bpf_prog_test_run+0x5c2/0xa40 [ 585.005322][T10659] __sys_bpf+0x873/0xeb0 [ 585.009710][T10659] __ia32_sys_bpf+0xa4/0xf0 [ 585.014585][T10659] ia32_sys_call+0xadf/0x4310 [ 585.019490][T10659] __do_fast_syscall_32+0xb0/0x150 [ 585.025002][T10659] do_fast_syscall_32+0x38/0x80 [ 585.030080][T10659] do_SYSENTER_32+0x1f/0x30 [ 585.035000][T10659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.041524][T10659] [ 585.044158][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.1.1571 Not tainted syzkaller #0 PREEMPT(none) [ 585.053830][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.064205][T10659] ===================================================== [ 585.071236][T10659] Disabling lock debugging due to kernel taint [ 585.077674][T10659] Kernel panic - not syncing: kmsan.panic set ... [ 585.084219][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.1.1571 Tainted: G B syzkaller #0 PREEMPT(none) [ 585.095337][T10659] Tainted: [B]=BAD_PAGE [ 585.099563][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.109737][T10659] Call Trace: [ 585.113102][T10659] [ 585.116109][T10659] __dump_stack+0x26/0x30 [ 585.120615][T10659] dump_stack_lvl+0x53/0x270 [ 585.125355][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.131326][T10659] dump_stack+0x1e/0x25 [ 585.135626][T10659] vpanic+0x435/0xd30 [ 585.139799][T10659] panic+0x15d/0x160 [ 585.143903][T10659] kmsan_report+0x31c/0x320 [ 585.148554][T10659] ? __msan_warning+0x1b/0x30 [ 585.153362][T10659] ? batadv_get_vid+0x2d0/0x3b0 [ 585.158392][T10659] ? batadv_interface_tx+0x2e5/0x1e60 [ 585.163933][T10659] ? dev_hard_start_xmit+0x22f/0xa30 [ 585.169402][T10659] ? __dev_queue_xmit+0x3c51/0x5e60 [ 585.174775][T10659] ? __bpf_redirect+0x162d/0x1760 [ 585.179995][T10659] ? bpf_clone_redirect+0x366/0x530 [ 585.185367][T10659] ? ___bpf_prog_run+0x1297/0xeba0 [ 585.190613][T10659] ? __bpf_prog_run512+0xc5/0x100 [ 585.195772][T10659] ? bpf_test_run+0x496/0xd80 [ 585.200615][T10659] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 585.206416][T10659] ? bpf_prog_test_run+0x5c2/0xa40 [ 585.212016][T10659] ? __sys_bpf+0x873/0xeb0 [ 585.216555][T10659] ? __ia32_sys_bpf+0xa4/0xf0 [ 585.221403][T10659] ? ia32_sys_call+0xadf/0x4310 [ 585.226442][T10659] ? __do_fast_syscall_32+0xb0/0x150 [ 585.231916][T10659] ? do_fast_syscall_32+0x38/0x80 [ 585.237118][T10659] ? do_SYSENTER_32+0x1f/0x30 [ 585.241998][T10659] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.248731][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.254013][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.260004][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.265278][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.271258][T10659] ? batadv_interface_tx+0x21/0x1e60 [ 585.276725][T10659] ? filter_irq_stacks+0x49/0x190 [ 585.281950][T10659] ? stack_depot_save_flags+0x35/0x7b0 [ 585.287567][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.292837][T10659] __msan_warning+0x1b/0x30 [ 585.297473][T10659] batadv_get_vid+0x2d0/0x3b0 [ 585.302323][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.308295][T10659] batadv_interface_tx+0x2e5/0x1e60 [ 585.313662][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.318937][T10659] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 585.325479][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.330735][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.336702][T10659] ? __pfx_batadv_interface_tx+0x10/0x10 [ 585.342530][T10659] dev_hard_start_xmit+0x22f/0xa30 [ 585.347852][T10659] __dev_queue_xmit+0x3c51/0x5e60 [ 585.353059][T10659] ? skb_release_data+0xa12/0xac0 [ 585.358260][T10659] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 585.364731][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.370056][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.376019][T10659] ? __dev_queue_xmit+0x30c/0x5e60 [ 585.381362][T10659] __bpf_redirect+0x162d/0x1760 [ 585.386402][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.391682][T10659] bpf_clone_redirect+0x366/0x530 [ 585.396927][T10659] ___bpf_prog_run+0x1297/0xeba0 [ 585.402068][T10659] __bpf_prog_run512+0xc5/0x100 [ 585.407091][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.413115][T10659] ? stack_depot_save_flags+0x35/0x7b0 [ 585.418760][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.424019][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.430047][T10659] ? ktime_get+0x530/0x590 [ 585.434631][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.439907][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.445170][T10659] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 585.451709][T10659] ? kmsan_get_metadata+0x150/0x160 [ 585.457062][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.463035][T10659] ? __pfx___bpf_prog_run512+0x10/0x10 [ 585.468653][T10659] ? __pfx___bpf_prog_run512+0x10/0x10 [ 585.474260][T10659] bpf_test_run+0x496/0xd80 [ 585.478942][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.484196][T10659] ? kmsan_get_metadata+0xfb/0x160 [ 585.489482][T10659] ? bpf_test_run+0x2f7/0xd80 [ 585.494351][T10659] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.500324][T10659] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 585.506002][T10659] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 585.511994][T10659] bpf_prog_test_run+0x5c2/0xa40 [ 585.517105][T10659] __sys_bpf+0x873/0xeb0 [ 585.521532][T10659] __ia32_sys_bpf+0xa4/0xf0 [ 585.526234][T10659] ia32_sys_call+0xadf/0x4310 [ 585.531098][T10659] __do_fast_syscall_32+0xb0/0x150 [ 585.536409][T10659] do_fast_syscall_32+0x38/0x80 [ 585.541439][T10659] do_SYSENTER_32+0x1f/0x30 [ 585.546118][T10659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.552627][T10659] RIP: 0023:0xf705d539 [ 585.556798][T10659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 585.576555][T10659] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 585.585135][T10659] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 585.593216][T10659] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.601290][T10659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.609356][T10659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 585.617430][T10659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.625535][T10659] [ 585.628805][T10659] Kernel Offset: disabled [ 585.633193][T10659] Rebooting in 86400 seconds..